Returnil Anti-executable Questions

Hi,

I have a few questions about the Returnil anti-executable module:

1) Does it recognise all binary executables?

2) Does it function even while protection is off?

Thanks.

 

Hi Dregg Heda,

1. As long as it is an EXE.

2. In the 2x versions, yes. In 3x the targeted AE type functions require virtualization to be activated.

Mike

 

Alright thanks coldmoon!

 

Thanks for the great program.
In the white list of the anti-execute feature some of the entries are
in blue.
What does this mean?
They seem to paied with a duplicate entry in black.

thanks

 

Hi SammyJack and welcome to the forums

Please see this thread and let me know if it helps:

https://www.wilderssecurity.com/showthread.php?t=238007

Mike

 

Thank You Coldmoon.
It is still a nice no overhead added security feature.
Since i turned it on,I would not be without it.