Returnil and what HIPS?

We all know that Returnil and similar apps are not bulletproof so I want a freeware HIPS which can be configured to target only malware which can bypass virtualisation apps. This means minimum pop-ups, right? I just want to protect mbr, some folders on D and E partiotion for being deleted/encrypted, and also C partition from being bypassed. If I'm well informed most of these malware want direct disk access?

My configuration should look like this:

Returnil Personal
Windows Firewall (or Kerio 2.1.5 or PrivateFirewall 6.1 or "insert here")
HIPS

Someone said that most firewalls slow down web browsing except windows firewall and Kerio 2.1.5 ... If Comodo firewall with Defence + doesn't slow down internet browsing than I can use it with Returnil?

Suggestions are welcome, thank you.

 

I used for a long time Returnil Pro and Comodo Internet Security, all functions enabled, and I never had problems.