>Now if you had a real firewall, which wouldn't blindly trust anything labeled as system call, you could catch this. This is what I got in 2009, when I still had a 32-bit Windows and the old Sygate firewall (before it was bought and castrated into Zonealarm).

Not sure what you mean by "real firewall".