Question What are all the way to know that our O.S. is a vm?

Toggle sidebar Toggle sidebar
WBlueHat

WBlueHat

Nov 26, 2023
22
0
10
What are the commands and all way to know we are running on a vm emulate O.S. by HyperV?
Instead of a regular w11 O.S.
 
Sort by date Sort by votes
I know with Win 10 Pro, running in an Oracle VirtualBox instance, there are multiple references to "VirtualBox" or "VBox" in the Registry.
This is without the VirtualBox software installed in this guest OS.

For instance, in HKEY_LOCAL_MACHINE:

'VirtualBiosVersion'

Oracle VM VirtualBox Version 6.1.30 VGA BIOS
Oracle VM VirtualBox Version 6.1.30 VGA BIOS
Oracle VM VirtualBox Version 6.1.30
Oracle VM VirtualBox Version 6.1.30
 
Upvote 0 Downvote
I am no VM expert, but those look like default settings and are looping back to the host system.

The magic of Google (disable hyper v windows 11) will give several options for disabling this.

You still haven't answered the question of what makes you think you have an infection/problem? What tools/apps have you scanned your system for malware with?

Have you perused any of this sort of info?

techcommunity.microsoft.com

Step-By-Step: Enabling Hyper-V for Use on Windows 11

Want to use Hyper-V on Windows 11? Hyper-V is a virtualization technology that is valuable not only for developers and IT Professionals, but also for college...
techcommunity.microsoft.com techcommunity.microsoft.com
 
Upvote 0 Downvote
COLGeek said:
I am no VM expert, but those look like default settings and are looping back to the host system.

The magic of Google (disable hyper v windows 11) will give several options for disabling this.

You still haven't answered the question of what makes you think you have an infection/problem? What tools/apps have you scanned your system for malware with?

Have you perused any of this sort of info?

techcommunity.microsoft.com

Step-By-Step: Enabling Hyper-V for Use on Windows 11

Want to use Hyper-V on Windows 11? Hyper-V is a virtualization technology that is valuable not only for developers and IT Professionals, but also for college...
techcommunity.microsoft.com techcommunity.microsoft.com
Click to expand...
The file Host is infected.
If you try to add a Firewall rules the system will create automatically an opened rules in Allow App trough Windowd defender firewall,so all rules setted there are useless.
Every AV/firewall software you try to install on the system will be no able to upload itself to latest protections.
Their protections are bypassed,anything is found almost always,except firewall attacks that seems blocked for a while and abuse of svchost.exe and other files that try to change Windows settings etc
Same Health/Defense Windows App are off by default and you cannot change this.neither trough windows registry
Internet connection is closed often,because TCP/IP network drivers began invalid without a reason.
 
Upvote 0 Downvote
Doesn't work.
Tried many times low.level format and flash of the bios.
Last time a professional specialist Web Agency worker tried in his office,with protected router,by 3 clean low level format and in w11 flash of the bios
Anything changed the malware still there
I suspect it's a vm rootkit/bootkit similar to Vitriol or BlackLotus
 
Upvote 0 Downvote
WBlueHat said:
Doesn't work.
Tried many times low.level format and flash of the bios.
Last time a professional specialist Web Agency worker tried in his office,with protected router,by 3 clean low level format and in w11 flash of the bios
Anything changed the malware still there
Click to expand...
That sounds odd. If you had the Windows installation media, directly from Microsoft, and legitimate sources for all of your applications, that would not happen.
 
Upvote 0 Downvote
USAFRet said:
Is this a personal system where you originally installed the OS?

Or is this a system provided by your employer?
Click to expand...
Yes original system.
It was original when buyed as new product at Megastore(Mediaworld).
And also who installed last o.s. w11 told me he used original w11 installation.
I don't see anything on the screen saying me that it's a trial copy.
I have a question.
Since it almost impossibile to remove the malware from the Pc,can a reset system to factory USB from Lenovo maybe fix the problem?
Idk if this kind of reset Usb are immune to rootkit/bootkit.
But if it can do the job I would try.
Founded today on the link u gived to me,I can choose 2 solution downloading it or to buy from them Usb to reset to factory the laptop
 
Upvote 0 Downvote
WBlueHat said:
Yes original system.
It was original when buyed as new product at Megastore(Mediaworld).
And also who installed last o.s. w11 told me he used original w11 installation.
I don't see anything on the screen saying me that it's a trial copy.
I have a question.
Since it almost impossibile to remove the malware from the Pc,can a reset system to factory USB from Lenovo maybe fix the problem?
Idk if this kind of reset Usb are immune to rootkit/bootkit..
Click to expand...
Just do this: https://www.tomshardware.com/how-to/clean-install-windows-11

Use the Media Creation tool. When you get to part to select where to install Windows, delete ALL partitions and then let Windows automatically configure the drive.
 
Upvote 0 Downvote
USAFRet said:
I'm sorry...confused here.

"who" did this Win 11 install?

What are the specs of this system?
Make/model of everything.
Click to expand...
Web Agency that I paid to remouve the malware,that have done 3 low level format and new installation of windows11
But the malware is still there.
I have never connected it to the internet from home yet
 
Upvote 0 Downvote
WBlueHat said:
Web Agency that I paid to remouve the malware,that have done 3 low level format and new installation of windows11
But the malware is still there.
I have never connected it to the internet from home yet
Click to expand...
If they performed proper clean installations of legitimate Windows media, this would be nearly impossible. If you re-installed illegitimate applications afterward, then that likely reintroduced the problem.

Only legit sources should be used.

In addition, you need almost none of the Lenovo bloatware that ships with their products. A clean installation will remove all of that stuff. Then, you can decide what you need and put back.
 
Upvote 0 Downvote
COLGeek said:
If they performed proper clean installations of legitimate Windows media, this would be nearly impossible. If you re-installed illegitimate applications afterward, then that likely reintroduced the problem.

Only legit sources should be used.

In addition, you need almost none of the Lenovo bloatware that ships with their products. A clean installation will remove all of that stuff. Then, you can decide what you need and put back.
Click to expand...
I am not sure what kind of legit source he used.
When I have tried with an original trial copy of w10 downloaded from Microsoft site,the starting kernel was infected already,so i think it must be a bootkit that infect UEFi/bios
U can flash the bios only from Windows on this laptop so it's almost impossible to remouve the malware
 
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom