Effective and efficient malware detection at the end host