Systems and methods for protecting a computing device against malicious code

A system for vaccination of a computing device against infection by malicious code, comprising:

• a non-transitory memory having stored thereon a code for execution by at least one hardware processor, the code comprising:
• code for obtaining a vaccination profile including a plurality of vaccination artifact system calls indicative of a malicious code attempting to identify another instance of the malicious code executing on the computing device prior to the malicious code infecting the computing device;
• code for monitoring the computing device for an indication of execution of at least one of the plurality of vaccination artifact system calls by the malicious code;
• and
• code for providing a false response to the at least one of the plurality of vaccination artifact system calls for emulating an existing infection of the computing device by another instance of the malicious code according to the indication of execution of at least one of the plurality of vaccination artifact system calls, wherein the emulation of the existing infection prevents infection of the computing device by the malicious code.

A computer program product for vaccination of a computing device against infection by malicious code, comprising:

• a non-transitory memory having stored thereon a code for execution by at least one hardware processor, the code comprising:
• instructions for obtaining a vaccination profile including a plurality of vaccination artifact system calls indicative of a malicious code attempting to identify another instance of the malicious code executing on the computing device prior to the malicious code infecting the computing device;
• instructions for monitoring the computing device for an indication of execution of at least one of the plurality of vaccination artifact system calls by the malicious code;
• and
• instructions for providing a false response to the at least one of the plurality of vaccination artifact system calls for emulating an existing infection of the computing device by another instance of the malicious code according to the indication of execution of at least one of the plurality of vaccination artifact system calls, wherein the emulation of the existing infection prevents infection of the computing device by the malicious code.