A method and system for indicating an executable as Trojan Horse, based on the CRC values of the routines of an executable. The method comprising a preliminary stage in which the CRC values of the routines of known Trojan Horses are gathered in a database, and a stage in which indicating an executable...http://www.google.de/patents/US7603614?utm_source=gb-gplus-sharePatent US7603614 - Method and system for indicating an executable as trojan horse