Solved

VMWare to test if software is malicious?

Posted on 2009-07-02
4
722 Views
Last Modified: 2012-05-07
Basically my question is, if I install VMware on my machine and use it to run a virtual windows machine, could I use this machine to test if software is malicious.

Say I receive an exe file and am concern it might cause catastrophic damage to my system if it is run on my machine, could it run it on the vmware machine safely without causing any damage to the host?
0
Comment
Question by:zzhang2006
4 Comments
 
LVL 23

Assisted Solution

by:ComputerTechie
ComputerTechie earned 50 total points
ID: 24768920
yes we program and test new software all the time this way. we can crash the vm machine with little effect on the host.

CT
0
 
LVL 11

Accepted Solution

by:
xtreminator earned 125 total points
ID: 24770875
Using VMware it is possible to test ur suspicious software in guest OS.

u have to make sure before testing software in giest os

-- remove any foleder/file sharing between guest os and host os.
-- disconnect all mapped drive from guest os.
-- Disable NIC if possible during testing.
0
 
LVL 8

Assisted Solution

by:JT92677
JT92677 earned 75 total points
ID: 24776962
As previously mentioned, VMware is a  great solution to software testing.

Use the "Snapshot" feature to make a snapshot of your virtual machine before installing software you want to test.

In the VMware VM/Settings/Options/Guest Isolation  uncheck both boxes that allow copy/paste between the virtual and host machine.

In VMware client machine, Right Click "My Network Places" select Properties, then Right Click the adapter and "Disable" it -- this is VERY important for viruses that know how to propagate across a network.

To get your program into the VM machine, I use an ISO image creating program, in my case I use "Ultra-ISO" -- this allows me to create an ISO image of the file I want to install.   In VMware setup the CD ROM to use an ISO image, attach the image you created to the VM machine. You can turn it on after your Virtual XP machine is running and install from there.

This keeps the program from having access to any hardware on your host computer, and VMware does an excellent job isolating the virtual machine from your host machine.

When done with testing, you probably have some virus scanning or malware scanning program you can run on the virtual machine to be sure something isn't lurking there.

You can then use the snapshot manager to restore your Virtual "testing" machine back to the state before you installed the software you have questions about.

I realize this is a summary of what others have suggested, but I thought you might want some additional detail about exactly how to do it safely and to use the snapshot manager to keep your testbed Virtual machine in a known state.

Have fun

Jeff
0
 
LVL 1

Author Closing Comment

by:zzhang2006
ID: 31599422
Thank You
0

Featured Post

Promote certifications in your email signature

Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

Join & Write a Comment

HOW TO: Install and Configure VMware vSphere Hypervisor 6.5 (ESXi 6.5), Step by Step Tutorial with screenshots. From Download, Checking Media, to Completed Installation.
HOW TO: Connect to the VMware vSphere Hypervisor 6.5 (ESXi 6.5) using the vSphere (HTML5 Web) Host Client 6.5, and perform a simple configuration task of adding a new VMFS 6 datastore.
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now