3 ms·
Malware will often detect the presence of a VM and refuse to run, requiring you to identify and defeat the VM checks or more insidiously appear to run normally
by goatsi 10y ago
Malware will often detect the presence of a VM and refuse to run, requiring you to identify and defeat the VM checks or more insidiously appear to run normally but modify the actions it takes. [0]
Generally these problems are solved by modifying the VM so it can no longer be detected. [1]
[0] http://malware.dontneedcoffee.com/2016/04/bedepantiVM.html http://malware.dontneedcoffee.com/2016/04/bedepantiVM.html
[1] http://www.kernelmode.info/forum/viewtopic.php?f=11&t=3478 http://www.kernelmode.info/forum/viewtopic.php?f=11&t=3478
- j_s 10y agoMore VM setup discussion: https://byte-atlas.blogspot.com/2017/02/hardening-vbox-win7x64.html https://byte-atlas.blogspot.com/2017/02/hardening-vbox-win7x...