Shoutbox

Viruses and Virtual PC - Printable Version

-Shoutbox (https://shoutbox.menthix.net)
+-- Forum: MsgHelp Archive (/forumdisplay.php?fid=58)
+--- Forum: Skype & Technology (/forumdisplay.php?fid=9)
+---- Forum: Tech Talk (/forumdisplay.php?fid=17)
+----- Thread: Viruses and Virtual PC (/showthread.php?tid=84629)

Viruses and Virtual PC by alegator on 07-02-2008 at 03:47 AM

Say I have a virtual OS running in my host WinXP Pro PC, and that I run an infected file in the virtual OS, will my host PC be also infected or just the virtual OS?


RE: Viruses and Virtual PC by Lou on 07-02-2008 at 04:06 AM

What would the point of a virtual pc be if changes made to it affected the host pc?


RE: Viruses and Virtual PC by Th3rmal on 07-02-2008 at 04:10 AM

No. Thats the beauty of virtual machines. Wreck it, and you can just start a new one, all without affecting the host PC


RE: Viruses and Virtual PC by andrewdodd13 on 07-02-2008 at 05:43 AM

No. Well.. it's very unlikely. There have been some cases in the past where you can use things like buffer overflows in the VM to affect the services you install (VMWare calls them VMWare Tools, I cant mind what MS calls them) which communicate between the VM and the host.

But as I say, unlikely.


RE: RE: Viruses and Virtual PC by segosa on 07-02-2008 at 07:06 AM

quote:
Originally posted by andrewdodd13
No. Well.. it's very unlikely. There have been some cases in the past where you can use things like buffer overflows in the VM to affect the services you install (VMWare calls them VMWare Tools, I cant mind what MS calls them) which communicate between the VM and the host.

But as I say, unlikely.

Virus writers have better things to do than ensure that their viruses exploit common VM vulnerabilities just so they can have a few extra infected PCs.
RE: Viruses and Virtual PC by Mike on 07-02-2008 at 07:18 AM

Actually, a virus could look through your shared files and replace any exe it found with an infected one, so next time you run that exe your real computer also gets infected.

But I don't know any virus that does this :P


RE: RE: Viruses and Virtual PC by alegator on 07-02-2008 at 09:05 AM

quote:
Originally posted by andrewdodd13
No. Well.. it's very unlikely. There have been some cases in the past where you can use things like buffer overflows in the VM to affect the services you install (VMWare calls them VMWare Tools, I cant mind what MS calls them) which communicate between the VM and the host.

But as I say, unlikely.

I'm currently using VMWare. So, is it safer NOT to install the VMWare Tools? (I already did :(, is there a way to unninstall them?)
RE: Viruses and Virtual PC by Menthix on 07-02-2008 at 09:11 AM

Leave VMWare tools installed. The tools highly improve the performance, and a virus affecting it is highly unlikely. There's a big difference between buffer overflows being reported and actual viruses in the wild abusing this. As far as i know there are no viruses targetting VMWare, and i assume the buffer overflows Andrew talks about are already fixed by now.

No need to worry :).


RE: Viruses and Virtual PC by andrewdodd13 on 07-02-2008 at 05:39 PM

MenthiX is correct, as far as I can tell.

I would imagine though that it's not 100% perfect in extreme-data-sensitive situations - I know that at work we use VMWare to train people to use Business Objects sometimes, and our information is very secretive so the VM is isolated as much as possible.

But if you were to deliberately run something like Win32.* virus inside a VM, it will be fine.


RE: Viruses and Virtual PC by alegator on 07-02-2008 at 06:44 PM

Well, from all the replies I must conclude then that VMWare is as safe as an AV Quarantine when it comes to isolating viruses from the host.


RE: RE: Viruses and Virtual PC by segosa on 07-02-2008 at 06:54 PM

quote:
Originally posted by alegator
Well, from all the replies I must conclude then that VMWare is as safe as an AV Quarantine when it comes to isolating viruses from the host.

It's safer.