VMware Communities
esamax
Contributor
Contributor

Viruses

Is it possible to download a PC virus on an Imac which basically lays dormant until Fusion and Windows is installed and then wakes up to effect windows?

0 Kudos
3 Replies
BP9906
Expert
Expert

Theoretically if there was a virus/trojan/whatever made for Fusion that targets VMs, then I wouldn't see why not.

However, if you were to say install Windows on the VM, then of course install a decent End Point Security product, then that product should be able to detect said infection from another machine (ie OSX).

I personally havent seen a virus like this, but do keep in mind that as this world gets more VM-ish it may happen. Thats why its important to protect each OS with appropriate firewalls, AV, IPS, etc.

I personally use Blink for my Windows VMs since it provides generic based protection to detect malicious software, API and Kernel calls, has host-based IPS, and more. At least that gives me a guarantee that my Windows VMs are safe.

0 Kudos
esamax
Contributor
Contributor

I used Norton and a full Norton scan, before and after the virus showed itself, did not detect the virus. I completely uninstalled Fusion and Windows and reinstalled them and the virus returned. The virus is either hiding on the IMac or in one of my few windows programs - all of which had no viruses on my PC.

It is important to know because it is pretty costly to have a virus removed and if you try to get it removed from Windows and it turns out it was on the IMac, you have to pay twice.

0 Kudos
mudaltsov
Expert
Expert

Are you saying you got a virus in a new Windows VM you created with Fusion?

As for your original question: yes, it's possible for a virus to infect Windows executables on another machine and get into your VM when you copy and run the files. So if you had some files that were infected with a virus, and you copied them to your Windows VM, the virus would show up again.

Another possibility is that you have a virus/worm/trojan on your network, or your Mac is directly connected to the internet (and the VM is too). In this case, the Windows VM could have gotten attacked over the network while you didn't have a firewall/antivirus in place. It's very easy to get a Windows machine infected if it doesn't have the latest patches and antivirus software.

There are many free antivirus programs available for Windows. I personally use AVG Free: http://free.grisoft.com/

0 Kudos