Returnil Virtual System

Returnil Virtual System (RVS) is a sandbox application for Microsoft Windows. Its goal is to PReVENT malware and potentially unwanted programs from permanently infecting or modifying a system.

How IT Works

A "session" spans from when the user activates either "System Protection" or "Session Lock" to when the user deactivates those features.

During a session, RVS virtualizes the system partition and all files, folders, partitions, and partitions/disks specified under "File Protection" by storing all writes in a cache. The cache itself can be stored on the hard drive or partially in RAM. Windows and all other programs function normally.

The user has the option of committing the changes stored in the cache to the system partition. A user can selectively commit changes in the paid-for "Premium" version.

RVS offers to create a virtual partition during installation, it serving as a place to store data when under Returnil protection.

Drawbacks

The listed limitations apply only to the current stable release, version 2.0:

  • Malware can still cause stability issues, until the system is restored to its original state. Malware, specifically data miners, can also steal confidential information under RVS protection.
  • RVS only protects the system partition, making infection of other partitions, such as the one created by RVS, possible.
  • The master boot record is locked from changes. This can conflict with certain programs.
  • RVS's cache can run out of space. The user has the option of expanding the cache; however the cache cannot be as big as the system partition itself.
  • RVS is not yet compatible with dynamic partitioning.

Editions

The paid-for "Premium Edition" includes the basic sandboxing ability of the free "Personal Edition", along with the ability to commit certain file or folder changes, or even an entire virtual session to the real system partition rather than discarding changes.

RVS is available in English, Italian, Portuguese, French, Russian, Brazilian Portuguese, Simplified Chinese, Traditional Chinese and Spanish translations.

System requirements

The current stable release of RVS is currently available for 32-bit versions of Microsoft Windows.

Operating System

Windows XP

Windows 2003 Server

Vista

Processor

300 MHz

750 MHz

800 MHz

Memory

128 MB

128 MB

512 MB

Minimal Hard Drive

25 MB

25 MB

25 MB

Beta versions

Version 2.0.1

Notable new features include:

  • Expanded file protection; now allows users to lock partitions and drives, along with files and folders.
  • Anti-executable plug-in; control which drivers and executables run using a white/blacklist.
  • Autorun and registry editing; users can edit the real system's autorun and registry entries from within Returnil protection.
  • Disk cache secure overwrite; ensures data removed from the cache is unrecoverable

Windows 7 compatibility

A separate, Windows 7 compatible release is maintained.

Version 3.0

Currently, RVS does not have the ability to drop changes accumulated from several sessions, limiting its ability as a sandbox to test programs that require a reboot to complete installation. Returnil "will be exploring" such functionalities in the 3x series.

See also

  • Sandbox (computer security)