What will happen if I enabled Returnil and I hibernate?

[kupo]

Title says it all
EDIT: Another question, what will be the settings of Anti-executable to be able to withstand TDSS/TDL-3 rootkits?

[Coldmoon]

Originally Posted by skudo12

Title says it all
EDIT: Another question, what will be the settings of Anti-executable to be able to withstand TDSS/TDL-3 rootkits?

Hi skudo12 and welcome to the forums

1. Nothing as the virtualization does not effect or interfere with the hibernation or the Windows pagefile.

2. Set the A_E to high if you expect to run across or are doing research on a sample of the RK.

Mike

[kupo]

So when I hibernate (I'm not doing this though) while Virtualization is enabled, when I boot back, I'm still protected with Virtualization of Returnil?
Thanks, last question, does the anti-malware included with returnil be used with Microsoft Security Essentials? Oh and what engine are you using? I've read that it's F-Protect?

[Coldmoon]

So when I hibernate (I'm not doing this though) while Virtualization is enabled, when I boot back, I'm still protected with Virtualization of Returnil?...

Yes

...does the anti-malware included with returnil be used with Microsoft Security Essentials?...

yes, RSS works well with MSE

...Oh and what engine are you using? I've read that it's F-Protect?

Yes, but the Frisk engine is only a part of the Virus Guard component as we include our own engine as well.

Mike

[kupo]

Just installed it and it's running pretty good. The only system impact I noticed is during start-up. But after than that, it's pretty light.