Returnil Anti-executable Questions

Discussion in 'Returnil releases' started by Dregg Heda, Aug 25, 2009.

Thread Status:
Not open for further replies.
  1. Dregg Heda

    Dregg Heda Registered Member

    Joined:
    Dec 13, 2008
    Posts:
    830
    Hi,

    I have a few questions about the Returnil anti-executable module:

    1) Does it recognise all binary executables?

    2) Does it function even while protection is off?

    Thanks.
     
  2. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
    Hi Dregg Heda,

    1. As long as it is an EXE.

    2. In the 2x versions, yes. In 3x the targeted AE type functions require virtualization to be activated.

    Mike
     
  3. Dregg Heda

    Dregg Heda Registered Member

    Joined:
    Dec 13, 2008
    Posts:
    830
    Alright thanks coldmoon!
     
  4. SammyJack

    SammyJack Registered Member

    Joined:
    Aug 19, 2009
    Posts:
    129
    Thanks for the great program.
    In the white list of the anti-execute feature some of the entries are
    in blue.
    What does this mean?
    They seem to paied with a duplicate entry in black.

    thanks
     
  5. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
  6. SammyJack

    SammyJack Registered Member

    Joined:
    Aug 19, 2009
    Posts:
    129
    Thank You Coldmoon.
    It is still a nice no overhead added security feature.
    Since i turned it on,I would not be without it.
     
Thread Status:
Not open for further replies.