Product manual

triggers the allowed event is added to the trusted list
of its corresponding category in Advanced Events
Monitoring. You can remove the application from the
list. In this case, firewall alert appears when the
application triggers the event next time.
The Advanced Events Monitoring settings consist of
the following categories that provide your computer
with advanced protection:
Monitors the malicious programs
that launch Internet-enabled
programs.
Program Component
Monitors the malicious programs
that attach to safe programs
without being detected.
Program Launch
Monitors the Trojan horses or
malicious programs that launch
trusted applications in hidden
mode through command-line
parameters.
Command Line Execution
Monitors the Trojan horses or
malicious programs that inject
code into an application's
process without triggering
firewall alerts.
Code Injection
Monitors the Trojan horses and
other malicious programs that
manipulate an application's
behavior to connect to the
Internet without triggering
firewall alerts.
Window Messages
Customizing settings
About Firewall settings
538