Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Steps in making a Virtual Machine secure?

by Mar 23, 2014 8:46AM PDT

So I have a computer running Windows 7 x64, with Avast (free version) on it. On it I have a VM (on Virtualbox) running Windows 7 x86 which I intend to use as my "sandbox" (ex. running shady applications and seeing what they actually do to my computer, etc.)

Whenever I try to access a malicious URL inside of a VM, Avast displays a "Threat Detected" message on my host computer. Also, I have read that viruses can potentially leak through the VM.

Here are my questions:

1) Do viruses that posess such capabilites exist?
2) How would I take precautions to minimize the risk of something bad spreading to the host?
ex.: I know that I should probably disable shared folders between the guest and host, but should I disable the USB feature too? Would running my guest Win 7 inside a Linux guest on my host Win 7 help minimize the risk?

I am seriously considering getting a non-free antivirus at this point; would Kaspersky be a good choice?

Discussion is locked

3 Posts
- Collapse + Expand Details
- Collapse -
Clarification Request
Confused as usual
by itsdigger Mar 23, 2014 9:07AM PDT

Are you running a Win 7 comp with a Linux distro inside a VM with Win 7 inside the Linux VM ? Confused WOW

Digger

- Collapse -
(NT) No, but if it'll make my VM ultra-safe, I'll gladly do it. ;
by ArchKDE Mar 23, 2014 9:16AM PDT
- Collapse -
Answer
Well, you would not do anything risky to start.
by Forum moderator Mar 23, 2014 9:53AM PDT

There are some basic rules about being safe to start. There are a few folk that think that a VM would make unsafe actions safe for the OS. But that's rather foolish so let's let those fools continue down that road.

The only fully secure PC I know of is when the power is out. It's that bad today. I'm sure you did you homework so let's keep it simple. Don't take chances. Even in a VM.
Bob

Back to Spyware, Viruses, & Security forum

CNET Forums

Operating Systems
Software
Electronics & Gadgets
Hardware
Tablets & Mobile Devices
General Help
Brand Forums
Roadshow Autos
Off Topic

Other Forums

Forum Info