| VirtualBox 1.6.2: Ubuntu 8.04 Host - WinXP Guest INFECTED |
 |
 |
 |
| Tech Notes - General |
| Written by Rick |
| Wednesday, 16 July 2008 17:52 |
|
As an Ubuntu Linux user, I was under the impression that virtual machines were somehow not as exposed to viruses. Shame on whoever spewed that nonsense, shame on me for hoping it was true. I've got a configuration that's been infected - (K)Ubuntu 8.04 host with a WinXP guest. It's the guest files that are infected, the host is still clean. Now I didn't really believe that a Windows OS was going to be completely safe as a virtual machine. On the contrary, I knew it was just a matter of time before a virus or malware planted itself. As such, I installed ClamWin in the virtual machine with a daily scan and daily updates (this provided my first clue to the infection). Windows Firewall is also active. Fortunately, I only use the VM for Lotus Notes, IE and the occasional odd application that's not readily available on my Linux box. So impact is very low. ClamWin identified 2 files that were infected with PUA.RAT.VNC-15. Both were a result of my activity. I downloaded and installed Real VNC for testing. ClamWin found the installation file and the executable were infected and quarantined them. Unfortunately, ClamWin is a passive scanner and does not scan files as they come into the system. Scanning requires user intervention, a.k.a. you have to launch a scan manually. What can you expect for a free product? When I stopped using MS Windows products as my primary OS I found a new freedom. Fewer computer sentinal duties and no annual fee for Anti Virus products. That's two points for Linux! Without the Windows user's crutch I'm kind of forced to use an on-line AV scanner to check Windows. Panda Antivirus tools have always been good to me, so off to Panda's web site for the free scan. Only 5 cookies infected with Malware. Not bad really, it could have been a lot worse. Moral of the story: Windows machines are always susceptible to viruses and malware. Whether they're virtual or real. |
