Windows 7 virtual machine

alexkensit

Respectable
May 14, 2016
333
0
1,860
Hi,

I am running Windows 10. I am new to Virtualbox, and I would like to create a Windows 7 virtual machine to load with it viruses.

I have some questions and concerns however.

1) Will windows ask for the product key? I have the Windows 7 DVD, but the key is being used for Windows 10 on my "real" PC.

2) Does the virtual hard drive use up any real space?

3) Could the viruses be transferred to my "real" hard drive and PC? I am planning to mostly install adware and of course, the legendary Bonzi Buddy.

4) Will I need to install any drivers? Like WiFi.

Thank you very much.
Alex Kensit
 

Epsilon_0EVP

Honorable
Jun 27, 2012
1,350
1
11,960
1) From my understanding, W10 creates a new key upon installation. So your W7 key should be free. Regardless, since this is just a VM that will install viruses, you can probably just defer activation and nothing will happen.

2) Yes, it uses hard drive space. Even if it's virtual, data needs somewhere to go. You can usually assign it a fixed size, or let the software dynamically expand the storage.

3) I am not entirely sure of this. I assume most kiddie scripts would not be able to figure out it's running in a VM, but some really pervasive stuff might manage to go to lower layers.

4) Drivers are usually not necessary. The VM works with virtual devices, and it gets internet access through a bridge connection to your real machine
 

alexkensit

Respectable
May 14, 2016
333
0
1,860
Well yeah, I have Malwarebytes and Avast on my PC. I've read about Shared Folders. Can I disable these?

Have you ever heard or had any cases of malware escaping? I though virtual machines were effectively sandboxes.
 

Epsilon_0EVP

Honorable
Jun 27, 2012
1,350
1
11,960
They are sandboxes, but there is a small chance a very nasty virus is written to detect when it is running in a VM, use some vulnerability is software, and go directly to firmware on your real machine. It would have to be a pretty nasty piece of software to do that with a very insecure machine, but it is possible.

Shared folders are usually optional. In VirtualBox, I don't remember them being enabled by default. Just check the options on the VM before you get it running. It is under the storage options if I remember correctly.
 

Epsilon_0EVP

Honorable
Jun 27, 2012
1,350
1
11,960
No, once the OS is installed, you shouldn't need to keep the DVD in, just like a real machine. The only issue you might have is that the VM might need some extra configuration to be able to access your disc drive, or otherwise use an ISO file instead.

You could always download the files for all the malware you would want, and then disable networking before running anything. Otherwise, you'd need a pretty advanced network security configuration to try to avoid any malicious software from moving over the bridge to your real machine.
 

USAFRet

Titan
Moderator
1. Yes. A Windows install needs its own individual license. Being in a VM does not matter. Your old WIn 7 license has been consumed in the Win 10 Upgrade.
2.Yes. It uses however much drive space you give it. For instance, I have a couple of Linux VM's. 1 has 30GB dedicated, the other has 70GB.
3. Possible, yes. Some viruses and malware can escape the VM, and infect the host.
4. Depends. You can often passthrough and use the host hardware, LAN or WiFi. See #3.
 

USAFRet

Titan
Moderator
If you only have a single PC, a much better option for this is to obtain a second PC. $150 on craigslist, maybe. Use that, and junk it up all you want.
Unless you do something REALLY dumb, a virus can't jump an airgap.

Create an image, and when needed, wipe and reinstall from that image.
 

Epsilon_0EVP

Honorable
Jun 27, 2012
1,350
1
11,960
Would you really bother getting a license for a virtual machine that will never practically be used or connected online and whose only purpose is to get infected? Technically, it does require a key, but there's plenty of people abusing these regulations much more maliciously. Spending $100 for a license on what is clearly a disposable experiment is just wasteful.

I also would not even bother mentioning passthrough in this case. Why would we even need to pass any devices, anyway? It just introduces more vulnerabilites, and it's overly complicated for an installation that is once again meant to be disposable. The machine will function just fine for the intended purpose without the need to install any further drivers.