[Public Beta] Returnil Virtual System 2010

[Coldmoon]

Notice of update for program year

To Testers and users,
Due to the extended time required for development and testing for version 3.0 and associated Management Console, we are updating the name of the RVS client program to: Returnil Virtual System 2010 Beta. This is a minor change and should not effect your current test/evaluation licensing during the testing phase. The website will be updated as soon as possible to reflect this change.

{QUOTE-> Hello all,
Returnil is proud to announce the availability of the RVS 2009 Beta for public testing:

Version: Returnil Virtual System 2009 Beta
License: Premium Beta (30 days per released build)
Build: 3.0.4602.4833

http://www.returnilvirtualsystem.com/returnil-virtual-system-2009-beta

{QUOTE-> Returnil Virtual System 2009 Beta uses a combination of antivirus and virtualization technologies to protect your system against both malicious software and unwanted changes. Returnil virtualization technology clones your computer’s System Partition and boots the PC into a controlled virtual world rather than native Windows; allowing you to run your applications in a completely isolated and secure environment. All activity is then performed within the virtual environment, ensuring that the operating system itself cannot be compromised by viruses, other malicious software, bad installations, system crashes, or user error. A simple restart is all that is required to return the PC to its original state.

The addition of malware detection in the virtual environment, the all new Returnil Virus Guard, works to ensure that your computing experience is free from known malicious content while working hand-in-hand with our virtual system technology to provide the most effective and seamless malicious content removal available. How often have you been faced with the aftermath of an improper removal or false positive detection? By using Returnil’s native restart-to-restore functionality, removal of malware becomes both trivial and completely safe, while ensuring that false positive detections do not result in unintended disaster! Whether you are working with files located on your computer or files located in the cloud, Returnil Virtual System 2009 Beta will keep both your computer and data secure.

New in RVS 2009 Beta:

• Additional program level protection
• Compatible with most top and secondary level Antivirus solutions
• Dynamic, as needed caching
• Returnil Tools functionality now integrated into the program interface
• Access and browser for real disk and registry
• Quick overview of all settings
• Compatible with Windows XP, Vista (32-bit), and Server 2003/2008
• Windows 7 and 64-bit coming soon! (Stay tuned)
• Desktop Toolbar with right-click menu
• Program hot-key and skins
• Localized installer: English, Chinese-Simplified, German, Japanese and Polish (note: the GUI is still only in English, new languages coming soon)
• All new intuitive and simple User Interface
• Easier to use program registration and licensing
• User's Help Manual
<-QUOTE}

Testers with consistent feedback and participation will be rewarded with free 12 month licensing for the full consumer version when 2009 is released as a final. Those in the private sign up list should check their Beta announcement letters for their information as our thank you for being an early tester.

We thank all those in the private testing group for their feedback and helping us reach this major milestone in the development of the Returnil Virtual System. We further thank all the new public testers in advance for their feedback and suggestions as we go forward.

With kind regards
Everyone here at Returnil :) <-QUOTE}

[Meriadoc]

Returnil has certainly come along way since I first come across it at v1.6 or 1.7 I think it was some years ago now - well done Returnil!

[sirio]

Hello,

I have unistall RVS 2009 Beta4 and I have installed RVS 2009 Beta6, but my subscription has expired.
How can I resolve?

Thanks.

[developers]

read this:
http://www.wilderssecurity.com/showthread.php?t=244121

[subset]

Are there any plans to add the Extended Partition Protection from the Lab version to RVS 2009?

Or at least an additional option for Activate File Protection would be fine, to enable it only if System Safe is activated.
So that the access to other partitions could be blocked while using the virtual protection.
Because blocking access all the time is unpractical and also manually enabling and disabling the File Protection along with System Safe all the time.

The same applies somehow to the File Manager. Define exclusions, forget to hit Safe Files and all are gone on restart.
An option to auto safe the files from the defined list would make things easier.

Cheers

[Coldmoon]

Hi sirio,
Please check your PM and will get you sorted as quickly as possible.

Thanks
Mike

[Coldmoon]

Hi subset,
{QUOTE-> Are there any plans to add the Extended Partition Protection from the Lab version to RVS 2009? <-QUOTE}

Yes, but I can't say exactly when this will be included. There are a few things that need to happen first so it may not be included in the 3.0 series...

{QUOTE-> Or at least an additional option for Activate File Protection would be fine, to enable it only if System Safe is activated.
So that the access to other partitions could be blocked while using the virtual protection.... <-QUOTE}

There is a suggestion posted by another user this weekend that is very similar to this and I have alerted the development team to the request. I can't guarantee this will be added so will get back on this as soon as I get their feedback...

{QUOTE-> The same applies somehow to the File Manager. Define exclusions, forget to hit Safe Files and all are gone on restart.
An option to auto safe the files from the defined list would make things easier. <-QUOTE}

I resist this suggestion on a personal note due to issues of exploit-ability by hackers and malicious content. The easier the process, the more likely it can be exploited just as easily. But I do agree that it can be improved.

What are your suggestions?

Mike

[Coldmoon]

{QUOTE-> read this:
http://www.wilderssecurity.com/showthread.php?t=244121 <-QUOTE}

Hi developers,
This should already be corrected. I would suggest however that you completely uninstall B4 before upgrading to B6. If this is not resolved, please let me know...

Thanks
Mike

[sirio]

{QUOTE-> read this:
http://www.wilderssecurity.com/showthread.php?t=244121 <-QUOTE}

Thank you developers, now I try.

[sirio]

{QUOTE-> Hi sirio,
Please check your PM and will get you sorted as quickly as possible.

Thanks
Mike <-QUOTE}

Thank you Mike :)

I've replied.

[sirio]

{QUOTE-> Hi developers,
This should already be corrected. I would suggest however that you completely uninstall B4 before upgrading to B6. If this is not resolved, please let me know...

Thanks
Mike <-QUOTE}

Resolved :D The procedure works :thumb:

Now my Expiration Date is 2009/08/05

[Coldmoon]

{QUOTE-> Resolved :D The procedure works :thumb:

Now my Expiration Date is 2009/08/05 <-QUOTE}

OK, good :)

There seems to be a glitch in the system when upgrading from an older build so there may be a delay in it updating properly in the client. I have a ticket with the console team to resolve this even though it should only be valid for those upgrading from the earlier private builds (B0 - B5).

Mike

[subset]

{QUOTE->
I resist this suggestion on a personal note due to issues of exploit-ability by hackers and malicious content. The easier the process, the more likely it can be exploited just as easily. But I do agree that it can be improved.

What are your suggestions?
<-QUOTE}
If this is unwanted because of security concerns then the request is canceled. :lurking:

However, I assume that the virtual partition is the favorite place to save files over a restart.
But as the File Manager is there people will most likely use it and some will also most likely loose data with the current implementation.
Either because they forget about it, or because of a system failure, like a BSOD.
There is not much Returnil can we do about a BSOD, but Returnil could do something against the forgetfulness of the users.
Like showing a prompt when the user tries to shutdown his computer - warning, you have defined exclusions, but you did not save these files to your real disk so far.

Cheers

[Coldmoon]

Not a bad idea at its core. Have sent the idea on to development and will let you know...

Thanks
Mike :)

[sirio]

{QUOTE-> OK, good :)

There seems to be a glitch in the system when upgrading from an older build so there may be a delay in it updating properly in the client. I have a ticket with the console team to resolve this even though it should only be valid for those upgrading from the earlier private builds (B0 - B5).

Mike <-QUOTE}

Thanks Mike, however I had unistall completely the B4 and then I have made a clean installation for the B6.

The problems have remained, during the installation the database AV is updated only if the connection is active before beginning the installation... then I have tried to update today but it don't work.
There is a small difference in comparison to the B4: when me click on Update Now a green wheel that turns appears.... but it ends all there, the connection doesn't happen.

Will I make a list of the features that don't work to me, can I post them in the forum here or do I send an email to the support?

Regards :)

[Coldmoon]

{QUOTE-> The problems have remained, during the installation the database AV is updated only if the connection is active before beginning the installation... <-QUOTE}

This is a known issue and a fix is being worked on. For now, the work around is to uninstall and then install with a working connection. As long as the first update is applied properly, future updates will be applied properly.

{QUOTE-> There is a small difference in comparison to the B4: when me click on Update Now a green wheel that turns appears.... but it ends all there, the connection doesn't happen... <-QUOTE}

The wheel is a new display enhancement that provides a visual indication of the update progress (stops when completed). What to expect when doing a manual AV database update:

1. The Update Now link in the interface will appear blue if you have not updated in a while or the automatic update is between scheduled checks

2. When you click the link manually, the wheel will appear and "spin" until the check/update is complete

3. The link will refresh showing Updated to indicate the process was successful

4. After a period of time (built in delay), the link will return to "Update Now" in blue.

The reason it is not working properly for you at the moment is due to issue discussed above. Try it again after following the instructions and it should work. If it does not, please let me know.

{QUOTE-> Will I make a list of the features that don't work to me, can I post them in the forum here or do I send an email to the support? <-QUOTE}

Please send those to the support address with applicable logs (MSINFO32, RVS logs, any further information that will aide the developers in identifying the cause). Be sure to "reset" the client as instructed in the first answer and then retest to be sure the issues are not related to the "first update attempt" issue.

Mike

[Acadia]

Hmmm, appears that I need some education here. Why would an anti-Virus even been needed inside of the virtual world, aren't all viruses wiped out every time that you reboot? Thanks.

Acadia

[Coldmoon]

{QUOTE-> Hmmm, appears that I need some education here. Why would an anti-Virus even been needed inside of the virtual world, aren't all viruses wiped out every time that you reboot? Thanks.

Acadia <-QUOTE}

Yes, but you may or may not have any idea that the virtual system is potentially infected with just a strict virtualization deployment. This is also a valid point when saving content to disk.

The critical issue with malware is time to removal. While RVS virtualization reduces this to the time between the infection and restart, it does nothing to prevent a malware from running. The AV is the next step towards providing the user with warning so this time is even further reduced.

V4 will have more tools to work with here so time to removal will be reduced even more as we go forward.

HTH
Mike

[Acadia]

Thanks, Coldmoon, sounds like your company is not just sitting on an already excellent product! 8) Would this virtual AV run ok with another different AV in the "real world", in other words, in a way you would have two AV on the same pc?

Acadia

[Coldmoon]

{QUOTE-> Thanks, Coldmoon, sounds like your company is not just sitting on an already excellent product! 8) Would this virtual AV run ok with another different AV in the "real world", in other words, in a way you would have two AV on the same pc?

Acadia <-QUOTE}

As mentioned in the beta announcement, we are working to ensure it is as compatible as possible. At the moment, our testing is not showing any new issues outside the one involving McAfee Total Protection where a crash can occur if you activate the RVS cache wipe option. Other than this, the two coexist without issues.

If your testing uncovers an issue, please let us know so it can be investigated and corrected if possible. The goal here is not to replace your existing AV/AM solution per se if you use one, it is more targeted towards securing the virtual system and keeping the real system infection free. As no scanner detects 100%, think of the RVS AV as another set of eyes in the defense; a set of eyes that will not get in the way of your other tools.

Mike

[Coldmoon]

New Build Available

Returnil Virtual System 2010 Beta

Returnil Virtual System 2010 Beta 3.0.4769.4840

Download: http://www.returnilvirtualsystem.com/returnil-virtual-system-2009-beta

Note: Website page title and text will be updated as soon as possible to reflect the change of year in the program title.

Change log:

Notice of update for program year: Changed name of product to reflect extended development and testing time (2009 to 2010)

Updated: GUI localizations added for German and Japanese

Thank you in advance for your feedback and reports

Mike

[pegr]

Apologies if this has been asked before, but I notice that the Protection Scheduler is missing. Has this feature been dropped from Version 3 or is it planned to reintroduce it in a later beta?

[Coldmoon]

Hi pegr,
The scheduler has been dropped in version 3

[pegr]

{QUOTE-> The scheduler has been dropped in version 3 <-QUOTE}
Hi Mike,

Thanks for confirming that.

Regards

[Coldmoon]

Hello all,

New Build Available

The Returnil Virtual System 2010
Build: 3.0.5118

Download: http://majorgeeks.com/download.php?det=5841

Updated:

* RVS now comaptible with 64-bit Windows Vista and Windows 7
* Supported OS's: Windows XP 32-bit, 2003/2008 Server, Windows Vista (32-bit/64-bit), Windows 7 (32-bit/64-bit)
* User's Manual
* Support for behavioral data and malware sample collection
* New GUI languages: Chinese Simplified and Traditional
* New build can now be installed over the previous Beta
* Various stability improvements

Thank you to all who sent in feedback :)

Everyone here at Returnil

Edit: Correcting text for updated localization

[philby]

Hello Mike

Is the AE tool from V2 personal going to be absent from V3 personal?

I've got some time today to tinker with .5118 and, I don't know if it's me :doubt: , but the AE tool is not there...

Thanks

philby

[Coldmoon]

Hi philby,
The AE tool is integrated and vastly simplified into two options in the "Additional protection options while using System Safe" area under the Virus Guard section:

1. Allow programs to run normally
2. Trust programs from real disk only

Mike

[philby]

OK, thanks Mike.

I will miss the AE functionality with system-protection off though, as it provided a degree of mini-hips type control when running in normal mode... :'(

Did other users feed back that it wasn't adding any value, just out of interest?

Anyway, Beta 3 is working fine on 7 RC :thumb:

philby

[Coldmoon]

The AE in 2x was really just a bridge to a better solution as we go forward. In version 3, the Virus Guard feature provides more robust protection as the DB is updated (on average) at least once a day (sometimes more often) whereas the AE was slower to patch when a new ISR circumventing malware was/is discovered.

Additionally, we have begun the march towards 4x with the introduction of behavioral analysis and malware sample data collection in the current 3x that will help get us to 4x that much faster.

Mike

[philby]

Thanks again Mike for your quick responses...

philby

[mata7]

is there a way of turn the AV Off or no installed it?

[Coldmoon]

Yes, in the Virus Guard options, turn off real-time protection and then deactivate the AV updates.

Mike

[mata7]

thanks cold

[Coldmoon]

When the final is released, there will be an option to purchase v3 licensing without AV...

Mike

[wallacejorgensen]

Hello

people who purchased the version "Returnil Virtual System Premium Edition

2.0.1.9002", theses people they might update your version for the new

Returnil??

[Coldmoon]

Hello wallacejorgensen and welcome to the forums :)

Version 3 will be part of the upgrade path for the majority of customers when released as a final.

Mike

[wallacejorgensen]

{QUOTE-> Hello wallacejorgensen and welcome to the forums :)

Version 3 will be part of the upgrade path for the majority of customers when released as a final.

Mike <-QUOTE}

Thank you! :)

[Coldmoon]

Hi All,

New Build Available

The Returnil Virtual System 2010
Build: 3.0.5636.4886

http://www.returnilvirtualsystem.com/returnil-virtual-system-2010-beta

RVS Beta 7a to Beta 8:

Quarantine:
Move malware to Quarantine (See Preferences/Antivirus/Quarantine for the main view: View, Restore, Delete, Undo quarantine items, See action "Move to Quarantine" in message list for reported malware, See action "Move to Quarantine" in message popup) Move malware identified during Quick Scan to the quarantine

Data Collection:
Approve/disapprove items for upload (See Preferences/Antivirus/Upload Queue for the main view)

Licensing:
Corrected displaying of licensing details

Virtualization Registry Browser:
Ability to view/compare/update registry on real and virtual systems (See Tools/File Manager/Access Registry)

Quick Scan:
Properly handle files located on network shares
Log files processed during the Quick Scan

Usability:
GUI: Updated logo, backgrounds, changed links to buttons, increased space for localized string
At least 2 seconds splash screen display during application start
Localization: Added Italian, Polish, Russian, Korean to GUI

Usability:
64-bit Windows fixes for real-time a/v, a/v exclusions, file protection, trust programs from real disk only

Updates:
Enhanced handling of unsuccessful a/v database updates

Messaging:
Corrected rare crashes during displaying of messages

Installer:
Corrected administrative installation with supplying custom parameters (RVSPARAM)

Stability:
Numerous fixes to stability issues detected in GUI, service, and drivers

Detection of unknown malware:
Enhanced report generation by inclusion DLL signatures
Improved memory utilization during suspicious behavior collection
Improved drivers quality for Vista/2008/W7


Thank you to all who sent in feedback.

Mike

[sirio]

Hi Mike :)

today I have tested the malware wversion (MD5: f5c6b935e47b6a8da4c5337f8dc84f76) RVS 2010 beta 8 have protected the system and after the reboot everything has returned as before.
Only after the reboot I have received this message: http://img40.imagefra.me/img/img40/2/9/9/sirio/f_17j3kbanq5xm_5b3dd90.png (http://imagefra.me/)

Thing I do?

Do I send everything to the support?

Thanks.

[Coldmoon]

Hi sirio,
Try the new beta and let us know if the issue remains (see next post)

Mike

[Coldmoon]

Hello all,
New build available

The Returnil Virtual System 2010
Build: 3.0.5913.4905

Download: http://www.returnilvirtualsystem.com/returnil-virtual-system-2010-beta
*
Change Log:

Virtual System:
* Perform wiping of disk cache at startup, not shutdown.
* Now compatible with McAfee Total Protection

Security:
* Virus Guard engine upgraded
* Virus Guard heuristic feature adjusted for proper functioning
* Correction for excessive resource usage by malware data collection process
* Quarantine upgraded to allow inclusion of files from network shares
* Trust programs from real disk option corrected for Windows 7 64-bit

Self-protection:
* 127.0.0.1 signature update loopback vulnerability eliminated

Quick Scan:
* Corrections added for full functionality*in 64-bit Windows
* Corrected issue where files could not be quarantined due to unsupported characters in the filename

Virtual Disk:
* Correction added to address Virtual Disk failures with frequent mounting/dismounting

Usability:
* Report progress during Quick Scan analysis phase
* Show when the Quick Scan was last performed
* Updated localizations for previously included languages
* New localizations: Czech, Finnish, Dutch

Maintenance:
* Default language can be specified before installation, to avoid displaying the language selector (example of fully unattended install: RVS_SETUP_xxx.EXE //LANG=eng /I $$ /passive)*

Stability:
* Fixed hanging on some systems at shutdown using Vista
* Eliminated GUI freezes on some systems using Vista
* Fixed GUI crashes in File/Registry Browser

Thank you to all who sent in feedback.

Mike

[sirio]

No problem with the new beta :)

Regards.

[Coldmoon]

Hi all,
New build available - Today we are proud to announce the availability of the first Release candidate for RVS 2010.

The Returnil Virtual System 2010 RC0
Build: 3.0.6059.4914
Download: http://majorgeeks.com/download.php?det=5841

Stability:
- Corrected Quick Scan on 64-bit Windows
- Fixed GUI crash during mount of Virtual Disk when there are no free drive letters
- Fixed service/GUI crash on exit

Usability:
- Updated help manual
- Localization: added Spanish

Licensing:
- Support for multiple editions in GUI

Note: Though this is the first Release candidate, it is still a beta until the final release is announced...

With kind regards
Mike and everyone here at Returnil