In one embodiment, incremental backups containing information on modified addressable portions of a data storage device are evaluated for presence of malicious codes (“malwares”). Each modified addressable portion may be individually accessed and scanned for malicious codes. Each modified addressable...http://www.google.com/patents/US7962956?utm_source=gb-gplus-sharePatent US7962956 - Evaluation of incremental backup copies for presence of malicious codes in computer systems