well lets go for the main question:
i was testing a malware, so i run that , then i see a pop up message ( Allow the process to modify the windows system object? ) then i click on Block, but the program still was there( was on desktop ) is that normal?
so what do you think about what happened here? this is normal ? should not be quarantine that file after that i click on Block?
or maybe i am in misunederstanding here? that message was for that operation ... changing windows system object and was not related to own malware ?