Paranoia: RETURNIL software dangers?

trismegistos · Jan 2, 2011

Paranoia or valid concerns?

To be taken with a grain of salt...

http://2012forum.com/forum/viewtopic.php?f=8&t=18237

...concerns with Returnil is not with the quality of the software for it does do a great job. My problem is the fact that they eventually write sub-systems on your machine that allows them to turn your computer into a bot-net computer if they decide to do so. Normally they do this within the 32 bit format and it is very hard to detect. However since I use layered security blocking Returnil from the Svchost at the third or forth layer I noticed they would eventually write a 16-bit sub-system because they could not get into my system otherwise. It is always aggressive and it is always leads to a private ip address in China. Not a company in China, but to a private address. In the process of reverse engineering the hack it always leads to China. Yes Returnil has offices in China and other countries, but the IP always leads back to a Chinese private ip. Even the ip from China is hard to find and would be impossible for the average computer person, however I know how to dig it out of the memory.

Since Returnil is becoming very popular in many countries this policy of aggressively entering your machine disabling all restore capabilities gives me pause. In fact if you try to restore using your regular restore features of your operating system, your machine once completely hacked you will normally get the blue screen of death. If you do not use layered security Returnil will normally nest its sub routines within the 32 bit format and it will be hard to find. So before trying to remove or alter your Returnil settings I suggest you back up everything of value to you on CD Rom's. My biggest question regarding Returnil is why is only a China IP given once hacked and why is it always private rather than public. If it is a Returnil office in China it should be public. So my only conclusion is that the source code within Returnil has been released to China with Returnil's permission. This is not a China hack of the Returnil software because it would be impossible to breach my system without admin permissions. I would know of the attempted breach, or breaches at the very least. Even when the NSA breaches my computer I know of their attempts and or their successes. But with Returnil it happens without me realizing it until I check for it manually. Hence admin privileges have to come into play here which based on my experience and proven software layers can only mean one thing to me, Returnil has provided the port (back door) for this hacking via China with Returnil's permission. They must be doing write behind install to the real disk, or they are installing a mini logic drive and mini format to the real disk, hidden attributes and possibly encrypted as well. I have tested it eight times with the same result every time. Since it is a virtual disk in virtual machine mode it is very hard to see any malice software being written to your real disk. That is what makes it difficult to detect. Software needs to be developed that can detect what virtual disks are actually doing from the time of the boot of the machine till the end of the session.
Click to expand...

acr1965 · Jan 2, 2011

I'm not sure about Returnil but because of concerns about a company is why I would never use Wondershare Time Freeze.

cm1971 · Jan 2, 2011

I have seen that article before. The main issue I have with it is the fact that it is the only place I have ever seen that. If there was some real issues with Returnil don't you think it would have been exposed and talked about on sites like this? I googled for more info when I first saw that and that was about the only site that came up.

Boost · Jan 2, 2011

Instead of posting this article here,why didnt you post it in the correct forum?

https://www.wilderssecurity.com/forumdisplay.php?f=103

I'm sure Coldmoon could better answer your concerns.

Cudni · Jan 3, 2011

This now has been moved to Returnil forum and not only should it be taken with a grain of salt but a whole bag of salt. So therefore not at all.
Should be filed under what a load of .... heading

aladdin · Jan 3, 2011

Cudni said:

This now has been moved to Returnil forum and not only should it be taken with a grain of salt but a whole bag of salt. So therefore not at all.
Should be filed under what a load of .... heading
Click to expand...

LOL, well said!

The guy who wrote the article is a bigot. According to him, it is OK for USA and Israel to spy on the world and their own citizens in masses, but other countries shouldn't. And, these two countries should take over all the computers in the world.

Not only that, he actively encourages these two countries to do so.

Best regards,

KOR!

P.S. Maybe, he needs to read the Handmaid's Tale by Margaret Atwood, which won award in 1985 or read some of the Wikileaks!

aladdin · Jan 3, 2011

Or maybe, he should read Feed by M. T. (Matthew Tobin) Anderson!

Coldmoon · Jan 3, 2011

Old news and completely discredited:

https://www.wilderssecurity.com/showthread.php?t=277236

Mike

Log in or Sign up

Paranoia: RETURNIL software dangers?

trismegistos Registered Member

acr1965 Registered Member

cm1971 Registered Member

Boost Registered Member

Cudni Global Moderator

aladdin Registered Member

aladdin Registered Member

Coldmoon Returnil Moderator

Log in or Sign up

Paranoia: RETURNIL software dangers?

trismegistos Registered Member

acr1965 Registered Member

cm1971 Registered Member

Boost Registered Member

Cudni Global Moderator

aladdin Registered Member

aladdin Registered Member

Coldmoon Returnil Moderator

Useful Searches