Returnil Anti-executable Questions

[Dregg Heda]

Hi,

I have a few questions about the Returnil anti-executable module:

1) Does it recognise all binary executables?

2) Does it function even while protection is off?

Thanks.

[Coldmoon]

Hi Dregg Heda,

1. As long as it is an EXE.

2. In the 2x versions, yes. In 3x the targeted AE type functions require virtualization to be activated.

Mike

[Dregg Heda]

Alright thanks coldmoon!

[SammyJack]

Thanks for the great program.
In the white list of the anti-execute feature some of the entries are
in blue.
What does this mean?
They seem to paied with a duplicate entry in black.

thanks

[Coldmoon]

Hi SammyJack and welcome to the forums :)

Please see this thread and let me know if it helps:

http://www.wilderssecurity.com/showthread.php?t=238007

Mike

[SammyJack]

Thank You Coldmoon.
It is still a nice no overhead added security feature.
Since i turned it on,I would not be without it.