Blacklist rooksbas.dll in sandboxed processes

content/common/sandbox_win.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/common/sandbox_win.h"
 
 #include <stddef.h>
 
 #include <string>
 
@@ skipping 93 matching lines @@
   L"pctavhook.dll",               // PC Tools Antivirus.
   L"pctgmhk.dll",                 // PC Tools Spyware Doctor.
   L"picrmi32.dll",                // PicRec.
   L"picrmi64.dll",                // PicRec.
   L"prntrack.dll",                // Pharos Systems.
   L"protector.dll",               // Unknown (suspected malware).
   L"radhslib.dll",                // Radiant Naomi Internet Filter.
   L"radprlib.dll",                // Radiant Naomi Internet Filter.
   L"rapportnikko.dll",            // Trustware Rapport.
   L"rlhook.dll",                  // Trustware Bufferzone.
+  L"rooksbas.dll",                // IBM Trusteer Rapport.
+  L"rooksbas_x64.dll"             // IBM Trusteer Rapport.
   L"rooksdol.dll",                // Trustware Rapport.
   L"rndlpepperbrowserrecordhelper.dll", // RealPlayer.
   L"rpchromebrowserrecordhelper.dll",   // RealPlayer.
   L"r3hook.dll",                  // Kaspersky Internet Security.
   L"sahook.dll",                  // McAfee Site Advisor.
   L"sbrige.dll",                  // Unknown.
   L"sc2hook.dll",                 // Supercopier 2.
   L"sdhook32.dll",                // Spybot - Search & Destroy Live Protection.
   L"sguard.dll",                  // Iolo (System Guard).
   L"smum32.dll",                  // Spyware Doctor version 6.
@@ skipping 692 matching lines @@
   }
 
   delegate->PostSpawnTarget(target.process_handle());
 
   CHECK(ResumeThread(target.thread_handle()) != static_cast<DWORD>(-1));
   *process = base::Process(target.TakeProcessHandle());
   return sandbox::SBOX_ALL_OK;
 }
 
 }  // namespace content