Patent ID: 8806635

Claim:
A method used by malware support server system in a network that includes a plurality of client devices and a plurality of host servers, the malware support server system having a network address, the method comprising: receiving a first portion of a plurality of data packets, each of the plurality of data packets having the network address as a destination address, and each of the plurality of data packets including both an intended destination address and a source address; determining, while engaged in receiving at least some of the plurality of data packets, that the first portion is malware-free; upon determining that the first portion is malware-free, swapping the network address with the intended destination address in the first portion to create a modified first portion of the plurality of data packets; sending the modified first portion; receiving a second portion of plurality of data packets; determining, while engaged in receiving at least some of the plurality of data packets, that the second portion is not malware-free; and at least assisting in terminating delivery of the plurality of data packets.