QUOTE(Lucian Bara @ 17.06.2008 21:48)

-still the following bug (maybe reproducible with other apps too, i can reproduce it with total commander). take a standard exe and rename it to .sys and then copy it to C:\WINDOWS\system32\drivers\ you should get a suspicious driver installation popup (well this should be kinda ok). however clicking quarantine doesn't do anything, it doesn't prevent the file from successfully being written to that folder and it doesn't terminate any program
-ICQ traffic scan seems to be broken, no interception on trillian (secureIM disabled)
Hi, Lucian
About the first issue, the suspicisou activity is detected by PDM. It detects when the program has done something suspicioius and that is why it doesn't block the copy.
If you choose Quarantine, the Totalcmd.exe will be put to Quarantine. You can find in Detected -> Quarantine and restore this program.
If this is not the situation on your computer, please write me. Thanks.
About the second one, I don't quite get your meaning. Can you give me more details?
Thanks
Rory