How do I properly check if a program is a virus/trojan in VMware?

Posted by acidzombie24 on Super User See other posts from Super User or by acidzombie24
Published on 2009-11-10T23:20:10Z Indexed on 2011/11/26 17:58 UTC
Read the original article Hit count: 259

How I should check if a program is a virus in VMware? Some programs I do need admin ability to install and it makes sense. But how do I know if it's doing more than I want? Some thoughts are:

  • How many processes open when I launch the application
  • What is added to the startup tab in msconfig
  • If any services are added.

That's pretty much all my ideas. Even if it does something I recognize I wouldn't know if it's necessary or not. What are some rule of thumb?

-Edit- What about registries, can I use that information to help? Maybe have a scanner tell me if the application I just used has messed with sections (like bootup) it shouldn't have?

© Super User or respective owner

Related posts about security

Related posts about virtualization