Patent ID: 8850569

Claim:
A method of preventing transmission of malware-created instant messages comprising: detecting that an active instant messaging (IM) window, specifically for entering text, has been opened on a computing device; detecting a first text being typed into the active IM window by a human being using a keyboard; copying the first text or a first timestamp associated with said first text into a data storage area on said computing device, said data storage area including a stored text or a stored timestamp of all instant messages typed into an active IM window on said computing device; intercepting an IM packet before the IM packet is transmitted from the computing device onto a network; parsing the IM packet to obtain a second text or a second timestamp; determining whether the second text or the second timestamp matches respectively with a text or a timestamp stored in the data storage area; and blocking transmission of the IM packet from said computing device when the second text is determined not to match or when the second timestamp is determined not to match.