virtualbox.org

Hello.

I read on the page that, "Virtual USB Controllers. VirtualBox implements a virtual USB controller and allows you to connect arbitrary USB devices to your virtual machines without having to install device specific drivers on the host. "

Does this mean that I can put a USB in my computer and it will run on Virtualbox instead of running on my personal computer? I was thinking to do this to see if the USB is infected.


Regards

In theory yes. Keep in mind that the drivers that VBox uses are actually run from the host. It really depends on the infection.
I would proceed with caution but if it is a must then I would use the guest as you are suggestion. The guest must be running before you insert the device and (this is just a guess, I have not checked thoroughly) I would have a blank filter setup in the USB section.

Suggestion: try it first with one that is not infected to prove your theory.

lollol wrote:I was thinking to do this to see if the USB is infected.

Sounds risky to me. If VBox doesn't pick up the device then the host will.

Why not just use TweakUI to disable autoplay on the host? Then it doesn't matter if the USB stick is infected or not.

Perryg wrote:In theory yes. Keep in mind that the drivers that VBox uses are actually run from the host. It really depends on the infection.
I would proceed with caution but if it is a must then I would use the guest as you are suggestion. The guest must be running before you insert the device and (this is just a guess, I have not checked thoroughly) I would have a blank filter setup in the USB section.

Suggestion: try it first with one that is not infected to prove your theory.

Thanks for your help. I will try giving it a try with a non-infected one.

mpack wrote:

lollol wrote:I was thinking to do this to see if the USB is infected.

Sounds risky to me. If VBox doesn't pick up the device then the host will.

Why not just use TweakUI to disable autoplay on the host? Then it doesn't matter if the USB stick is infected or not.

Yeah. It is risky. I have already done lots of things, like disabling autoplay, having antiviruses etc etc but I am still kinda paranoid and worried

lollol wrote:I have already done lots of things, like disabling autoplay, having antiviruses etc etc but I am still kinda paranoid and worried

Then SandBoxie is the answer for you.

jorgensen wrote:

lollol wrote:I have already done lots of things, like disabling autoplay, having antiviruses etc etc but I am still kinda paranoid and worried

Then SandBoxie is the answer for you.

Check out AppGuard as well for USB malware prevention.

Sandboxie I looked up and the idea was good but I think the USB thingy part costs so you have to buy pro which I find useless for just a one time!

I am looking up AppGuard, but is it trusted?

I am wondering if there is any other way!

Perryg wrote:Keep in mind that the drivers that VBox uses are actually run from the host.

Forgive my bumping of an ancient post, but I wanted to know what the danger of this is.

Is the Host OS is able to parse the partition table first before VirtualBox gets control over the peripheral, or interact with it in any way?

IMHO there are so many variables involved it is better to lean on the side of caution. Auto-run comes to mind and the fact that the USB (EHCI) is a passthrough, adds to the possibility the host could become infected. It all depends on the virus.