1. On a client device, a method for providing security from instant messaging malware, comprising: receiving, from a server, malware configuration information stored on the server; receiving an instant message from an instant message system; and selectively employing a malware scanner to scan the instant message for malware, at least partly based on the malware configuration information.