Questions about Returnil

Hello,
I´m thinking in trying Returnil free, and i´ve a few doubts:

1 - Is it possible to set permanent exclusions (folders, files, etc)?
2- Can the free version be installed without the AV module? (or can this be disabled?)
3 - Is possible to set a exclusion to windows update?
4 - Is it compatible with Windows 7 x64?
5 - Using Returnil (without av) instead of a traditional resident signature based AV will increase system performance? (i know that one doesn´t substitute the other, and that a multilayered defense is the best approach, but i´m mainly interested in performance here)
6 - Can Returnil be used together with Sandboxie? Any known problem?

Thanks!

 

Yes, and no. As you are interested in the free version, it does not allow saving of files to the real system (IOW, the virtualized partition). With that said however, the free version includes the Virtual Drive that can be used to store files/folders/etc when virtualized and the Virtual Mode itself is restricted to the System Partition so you can save content on any non-system disk.

In the paid version, we do not use the exclusion method as it is less secure. In RSS/RVS Pro, the File Manager allows you to list files and folders (sub-folders included) which can be saved to the real disk either manually or automatically (every minute to every 24 hours) as required.

The reason the FM approach is more secure is that the content listed to be saved remains virtualized until the moment Windows needs to save the changes to disk and then once this is completed, the content is again virtualized. In the exclusion approach, that content is simply left non-virtualized and open to "permanent" changes.

No and yes. You cannot install sans the Virus Guard component, but you can deactivate it through the configurations.

No. The major issues with Microsoft/Windows Updates are:

1. RSS/RVS do not yet support selective registry changes. This is partly due to the nature of the beast, but also because it is a more secure environment where registry changes are not allowed to persist or be saved to the real System.

2. It is impossible to say exactly what changes any specific update will make and where those changes will be made before the actual release of the patches themselves.

Yes, all versions of RSS/RVS are compatible with Windows 7 64bit

Well, you are talking about two applications rather than just RSS so your performance will vary due to this. Also, your alternate AV is not designed to work with RSS specifically. We have made this an easier process however by working to ensure RSS plays well with alternate Antivirus/Antimalware/Antispyware so you should do some testing to see how your proposed configuration works for your environment.

Yes, RSS and SBIE are well tested and known to work well together. Some may look at it as overkill, but for some situations where absolute isolation of both application and system are required, the combination has proven to be a winner.

Mike

 

Mike, does this include RVS2008 also or are you referring to the current versions only? Thanks.

 

No, RVS 2008 is not compatible with Windows 64bit OSs. My comments are directed at officially supported versions of the software:

1. RSS Pro/Free 2011
2. RVS Pro 2011
3. RVS Lite 2011

Mike

 

Thanks!