1. AFAIK RSS uses F Prot engine. But upto which part? I mean is the F Prot engine is for only the "Do not use advanced rules analysis"? and the higher two levels are from Returnil's own heuristic engine? 2. Where can I submit FP and possible threats to Returnil? 3. RSS only registers as an AV in Win7 Action Center. Does that means it includes only AV signatures of F Prot? Because F Prot also registers as an AS in Win7.