Page 1 of 1
antivirus protections
Posted: 7. May 2013, 03:06
by macro
Are there any specialized AV/Rootkit protection systems for looking at the files used by VBox? I was wondering whether a program exists to examine the program files making up Oracle VirtualBox for, say, changes from their standard data? I am wondering whether any kind of procedure exists for comparing its current files with a known set of good files used for installation?
Re: antivirus protections
Posted: 7. May 2013, 11:57
by mpack
Which "standard data" are you referring to? A rootkit infects an operating system, not an application like VirtualBox. If you want to know whether any VBox files have been "infected" then you can easily compare them with another installation of the same version or with the contents of the installer bundle. If you want to check a guest OS for rootkits then you run the same tools inside the VM that you would run on any other PC.
A specialist external tool for VirtualBox is not within the VBox remit because the disk image could contain any OS, any filesystem, or none, whereas I assume you are really only interested in Windows guests (despite posting in the "Windows Hosts" forum).