Who is going to pay someone to look for problems months down the road? Ultimately if malware doesn't think it's a VM, then test taking software isn't going to

Who is going to pay someone to look for problems months down the road? Ultimately if malware doesn't think it's a VM, then test taking software isn't going to either. Malware is trying to resist analysis by trained professionals. Test taking software is just trying to sell to the next test; the sale is made by the company that takes the testing committee to the best sportsball game, not by how well they detect being in a VM. (Interesting corollary; you should probably ALWAYS run inside a VM. There is so much malware that tries to detect it that it actually helps you; the malware will just shut itself off out of fear of being analyzed by a security researcher.)