We all know that Returnil and similar apps are not bulletproof so I want a freeware HIPS which can be configured to target only malware which can bypass virtualisation apps. This means minimum pop-ups, right? I just want to protect mbr, some folders on D and E partiotion for being deleted/encrypted, and also C partition from being bypassed. If I'm well informed most of these malware want direct disk access? My configuration should look like this: Returnil Personal Windows Firewall (or Kerio 2.1.5 or PrivateFirewall 6.1 or "insert here") HIPS Someone said that most firewalls slow down web browsing except windows firewall and Kerio 2.1.5 ... If Comodo firewall with Defence + doesn't slow down internet browsing than I can use it with Returnil? Suggestions are welcome, thank you.