The Computer Oracle

How can I make my OS appear as if it is running virtualized?

--------------------------------------------------
Hire the world's top talent on demand or became one of them at Toptal: https://topt.al/25cXVn
--------------------------------------------------

Music by Eric Matyas
https://www.soundimage.org
Track title: Puzzle Meditation

--

Chapters
00:00 How Can I Make My Os Appear As If It Is Running Virtualized?
00:37 Accepted Answer Score 9
01:23 Answer 2 Score 0
01:42 Answer 3 Score 0
01:59 Answer 4 Score 0
02:07 Thank you

--

Full question
https://superuser.com/questions/13818/ho...

--

Content licensed under CC BY-SA
https://meta.stackexchange.com/help/lice...

--

Tags
#security #vmware #virtualization #antivirus #malwaredetection

#avk47



ACCEPTED ANSWER

Score 9


This is not a good technique. Relying on malware to behave nicely because it might be under the microscope is a bit like relying on cats to stay put because you told them to. It's an interesting idea, but one which is not worth implementing as an anti-malware solution.

That said, as Marc suggested - just actually run your OS in a VM or hypervisor, if you want malware to behave itself as if it is in a virtualized environment. The performance hit is the tiny price you pay for such enhanced peace of mind.

One other item of note is that there are a fair number of legitimate desktop apps which don't work under VMs because their DRM thinks they might be in the process of being reverse engineered. The usability hassle from that would be terrible.




ANSWER 2

Score 0


That is a interesting subject. CodeProject had an article about how to detect whether your program was running inside a vm, here. It looks as if the VMWare approach might be the easiest to fake, since it involves accessing a port to communicate with the host.




ANSWER 3

Score 0


The nature of malware dictates that sooner or later, probably sooner, the malware writers will be able to detect if you are faking a virtualized OS. It's only a matter of time. I would concentrate my efforts elsewhere.




ANSWER 4

Score 0


For Linux there are PERL scripts like virt-what and imvirt. Have a look at the last one at http://micky.ibh.net/~liske/imvirt.html