Question about Malwoc rule