Method and system to handle files in antivirus actions

A non-transitory computer-readable storage medium that includes a set of instructions which, in response to execution by a processor of a computing device, causes the processor to perform a method to handle a file in an antivirus action, the method comprising:

• in response to receiving a signal indicative of having detected malware associated with the file:
• resetting a first session with a first client device;
• and
• storing metadata associated with the file in a cache;
• and
• after having received the signal and in response to receiving a second request for the file from the first client device to establish a second session:
• retrieving the metadata from the cache;
• maintaining the second session;
• identifying a first part of the file based on the retrieved metadata during the second session;
• and
• performing the antivirus action to the identified first part of the file during the second session.

A device configured to handle a file in an antivirus action, comprising:

• a processor;
• and
• a non-transitory computer-readable storage medium storing executable instructions, which in response to execution by the processor, cause the processor to:
• in response to receiving a signal indicative of having detected malware associated with the file:
• reset a first session with a first client device;
• and
• store metadata associated with the file in a cache;
• and
• after having received the signal and in response to receiving a second request for the file from the first client device to establish a second session:
• retrieve the metadata from the cache;
• maintain the second session;
• identify a first part of the file based on the retrieved metadata during the second session;
• and
• perform the antivirus action to the identified first part of the file during the second session.