>>Now if you had a real firewall, which wouldn't blindly trust anything labeled as system call, you could catch this. This is what I got in 2009, when I still had a 32-bit Windows and the old Sygate firewall (before it was bought and castrated into Zonealarm).
>
>Not sure what you mean by "real firewall".
One which would catch things like the one on the shot I sent. With the option to block ALL outgoing traffic unless I allow it. I tried several, and none did. There's mostly no option to block so-called system calls, or if there is (as in Comodo) I couldn't get it to work. They all keep treating that kind of traffic as nonexistent or a priori trusted.