Wilders Security Forums  

Go Back   Wilders Security Forums > Official Returnil Support Forum > Returnil releases
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old July 5th, 2010, 01:30 PM
Boyfriend Boyfriend is offline
Very Frequent Poster
 
Join Date: Jun 2010
Location: Pakistan
Posts: 1,071
Default Two system drives?

Returnil Virtual System 2010 Version 3.1.8774.5254-REL, Windows 7 Ultimate x64 (fresh installation), Returnil Real-time Virus Guard disabled, Virtual System enabled. Two HDD (Seagate 500 GB + WD 320 GB, no RAID, no AHCI).

After reading Virtualization/Rollback software test thread, I decided to try my luck with Returnil with option "Trust programs from real disk only" enabled.

In Virtual System enabled mode --> I ran Mozbackup 1.4.10 Portable to backup Firefox profile. Returnil warned that executable was not on real disk and blocked it....also a similar message appeared in Returnil GUI --> I switched from "Trust programs from real disk only" to "Allow programs to run normally" --> backed up Firefox profile with Mozbackup 1.4.10 Portable without any problem/warning.

Now problem is that whenever I enable option "Trust programs from real disk only", another drive (Z:) is visible in explorer with same size and contents (visually) as of system drive (C: Windows 7).

With option "Allow programs to run normally", no Z: drive appears in explorer.
Reproducible on my system/configuration. Any help to hide/get rid of this clone partition?

http://img809.imageshack.us/img809/5...titions.th.png
  #2  
Old July 5th, 2010, 03:51 PM
Coldmoon's Avatar
Coldmoon Coldmoon is offline
Returnil Moderator
 
Join Date: Sep 2006
Location: North Carolina USA
Posts: 2,750
Default Re: Two system drives?

Hi Boyfriend and welcome to the forums

It is impossible to see the image so need to clarify things. What is the name of the drive (Returnil? or other?)

Mike
__________________
Returnil: The Real Security!
Follow us on Facebook
  #3  
Old July 5th, 2010, 05:50 PM
philby's Avatar
philby philby is offline
Frequent Poster
 
Join Date: Jan 2008
Posts: 922
Default Re: Two system drives?

Boyfriend - I have had the same Z-drive for ages on Win7 64 HP, see here. It's presence in Explorer doesn't seem to be related to the AE settings, however.

philby
__________________
Sandboxie + Macrium on Windows 8 Pro 64
  #4  
Old July 5th, 2010, 07:19 PM
Konata Izumi's Avatar
Konata Izumi Konata Izumi is offline
Very Frequent Poster
 
Join Date: Nov 2008
Posts: 1,521
Default Re: Two system drives?

I have this too.
I formatted this Z: Drive which is named 'Returnil'...

after that I can't boot my PC. :<
__________________
Win7PRO64bit | SUA | SRP | UAC | EMET | SpywareBlaster | MVPSHOST | OpenDNS | SandboxIE | Privoxy | Windows Image Backup .
built-in security + sandboxing fag.
  #5  
Old July 5th, 2010, 08:24 PM
Coldmoon's Avatar
Coldmoon Coldmoon is offline
Returnil Moderator
 
Join Date: Sep 2006
Location: North Carolina USA
Posts: 2,750
Default Re: Two system drives?

Hi Konata Izumi,
If the drive was assigned Z:\ with the name "Returnil", it would be the Virtual Drive and not your real system.

Did you move a system folder to the Virtual Drive?

Mike
__________________
Returnil: The Real Security!
Follow us on Facebook
  #6  
Old July 5th, 2010, 08:58 PM
Konata Izumi's Avatar
Konata Izumi Konata Izumi is offline
Very Frequent Poster
 
Join Date: Nov 2008
Posts: 1,521
Default Re: Two system drives?

Quote:
Originally Posted by Coldmoon
Did you move a system folder to the Virtual Drive?

Mike

I don't know... all I did was grant access to format the Z: drive
and I formatted it.

then I can't boot.
__________________
Win7PRO64bit | SUA | SRP | UAC | EMET | SpywareBlaster | MVPSHOST | OpenDNS | SandboxIE | Privoxy | Windows Image Backup .
built-in security + sandboxing fag.
  #7  
Old July 6th, 2010, 08:21 AM
Boyfriend Boyfriend is offline
Very Frequent Poster
 
Join Date: Jun 2010
Location: Pakistan
Posts: 1,071
Default Re: Two system drives?

@Coldmoon

Thanks for kind reply. Unfortunately, I attached a small snap. The problem is that while Virtual System is enabled, whenever I select option "Trust programs from real disk only" in Virus Guard --> Another drive (Z: drive, which is not part of my HDD, perhaps Returnil related drive) appears in explorer (see snap). When I select option "Allow programs to run normally", then no problem and drive (Z disappears.

It is reproducible across restart. Need some logs, info etc, please ask.

Two System Drives (One is real drive C: other drive Z: is Virtual). Size: 493Kb

Problem is that an innocent user might delete/change contents of C: or Z: and can result in non-bootable system (see comments of Konata Izumi)
  #8  
Old July 6th, 2010, 08:36 AM
philby's Avatar
philby philby is offline
Frequent Poster
 
Join Date: Jan 2008
Posts: 922
Default Re: Two system drives?

Quote:
Problem is that an innocent user might delete/change contents of C: or Z: and can result in non-bootable system (see comments of Konata Izumi)
Exactly!

I've still got mine, which seems to come and go, complete with replicated volume label......
Name:  Capture.PNG
Views: 189
Size:  10.4 KB
__________________
Sandboxie + Macrium on Windows 8 Pro 64
  #9  
Old July 6th, 2010, 09:46 AM
Boyfriend Boyfriend is offline
Very Frequent Poster
 
Join Date: Jun 2010
Location: Pakistan
Posts: 1,071
Default Re: Two system drives?

Why not hide that virtual drive to reduce confusion to end users? Hope a fix will be included in next release build.
  #10  
Old July 6th, 2010, 12:03 PM
Coldmoon's Avatar
Coldmoon Coldmoon is offline
Returnil Moderator
 
Join Date: Sep 2006
Location: North Carolina USA
Posts: 2,750
Default Re: Two system drives?

Quote:
Originally Posted by Boyfriend
Why not hide that virtual drive to reduce confusion to end users? Hope a fix will be included in next release build.

It is a combination of issues that causes this in 64 bit systems and we are working to address it as quickly as possible. Look for an improvement here in the 3.2-3.3 series.

Mike
__________________
Returnil: The Real Security!
Follow us on Facebook
 

Wilders Security Forums > Official Returnil Support Forum > Returnil releases « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 11:13 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums