Patent attributes
Disclosed are systems, methods and computer program products for optimizing system memory utilization during execution of an antivirus application. The system provides an antivirus cache in a non-volatile system memory that may be updated with information from an antivirus database. Each update contains different types of data and executable code associated with different types of known malware. During update, the same types of data for each type of malware is collected and stored as data files in corresponding sections of the antivirus cache and executable code sections are converted into platform-specific dynamic libraries and also stored in the antivirus cache. During execution of the antivirus application, the system maps one or more data files of the antivirus cache into the physical memory, so that the memory-mapped data files and dynamic libraries of the antivirus cache may be shared and simultaneously accessed by several malware detection processes.