I have some questions about the paid product

1) Can it detect/warn of  image/executable changes? Otherwise any malware can replace an allowed process and send your information out!

2) Can Firewall detect a blocked application from starting browser and sending your information out in a link with coded information?

3) can firewall detect DLL injection in a allowed process that will permit malware send information through this process?

4) can firewall stop a malware or a program that I never allowed from connecting internet without my consent?