Virus Examination & Testing question

[Matt]

Since VMware Workstation is a virtual machine, you could safely test
viruses(seeing how they work,anti-virus purposes, etc.). Right? The
Machines are completely isolated from the host machine. So if you know
the answer to this question. Answer. :)

[Jim Henderson]

Post by Matt
Right?

Right.

[Nicholas Sherlock]

Post by Matt
Since VMware Workstation is a virtual machine, you could safely test
viruses(seeing how they work,anti-virus purposes, etc.). Right?

Yes. VMWare is an excellent tool for this purpose. Take a snapshot,
introduce your virus, then when you're done, just restore from snapshot.

Cheers,
Nicholas Sherlock

[Slawomir Piotrowski]

Hello, Matt!
You wrote on Fri, 24 Dec 2004 14:55:01 -0600:

M> Since VMware Workstation is a virtual machine, you could safely test
M> viruses(seeing how they work,anti-virus purposes, etc.). Right?

Yes, but keep in mind that it *is* possible to detect that one is being run
inside virtual machine. It is possible for virus to check this and behave
differently in VM and differently in real machine.

Also there is no guarantee that there's no possibility to break out of VM.
Although I'm not aware of any successful attacks.

With best regards, Slawomir Piotrowski.

[Murtuza Vasowalla]

Things to note and understand:

VMs can be networked to the host in a multitude of ways. Make sure that any
potential networking between host and guest is secure.

Shared Folders are also a form of link between the VM and the host. Best to
disable.

If you are using a CD to load (virus?) files into the VM - note that the CD
can also be read by the host.

In short - you better have a very good reason why you want to even try this
and risk your host machine to a virus.

- Murtuza

Post by Slawomir Piotrowski
Hello, Matt!
M> Since VMware Workstation is a virtual machine, you could safely test
M> viruses(seeing how they work,anti-virus purposes, etc.). Right?
Yes, but keep in mind that it *is* possible to detect that one is being run
inside virtual machine. It is possible for virus to check this and behave
differently in VM and differently in real machine.
Also there is no guarantee that there's no possibility to break out of VM.
Although I'm not aware of any successful attacks.
With best regards, Slawomir Piotrowski.

[Nephi]

If you are loading the viruses through a windows host, make sure you disable
auto-run or hold down shift to temp turn it off

-- Nephi

Post by Murtuza Vasowalla
VMs can be networked to the host in a multitude of ways. Make sure that any
potential networking between host and guest is secure.
Shared Folders are also a form of link between the VM and the host. Best to
disable.
If you are using a CD to load (virus?) files into the VM - note that the CD
can also be read by the host.
In short - you better have a very good reason why you want to even try this
and risk your host machine to a virus.
- Murtuza

Post by Slawomir Piotrowski
Hello, Matt!
M> Since VMware Workstation is a virtual machine, you could safely test
M> viruses(seeing how they work,anti-virus purposes, etc.). Right?
Yes, but keep in mind that it *is* possible to detect that one is being

run

Post by Slawomir Piotrowski
inside virtual machine. It is possible for virus to check this and behave
differently in VM and differently in real machine.
Also there is no guarantee that there's no possibility to break out of VM.
Although I'm not aware of any successful attacks.
With best regards, Slawomir Piotrowski.