Top 3 security tips for client virtual machines!

16 04 2008

How many of us  have Windows Updates automatically configured and Virus Protection installed when using client OS virtual machines for test environments? I hope most of you because unprotected virtual machine in your enterprise environment has the same risk as a physical machine. There is no difference between a virtual or physical installation of Windows XP.

Recently I installed Symantec AntiVirus 10.2 on my Windows XP virtual machine. Hopefully the attach as shown below did protect me against the Adware which was installed on my virtual machine.

image

I was using couple of Internet Explorer sessions and searching for my phpmyadmin issues on one of my virtual machines. I used google and opened top 10 of the results. At some point I’ve got a popup of downloading a exe file when closing all Internet Explorer instances and then my Auto-Protect results came up with threads being found. I definitely did not install anything. After the reboot the “AntiSpyware Master” application was installed without my permission; believe as an IT and Security pro I am not going to install programs which I don’t trust.

Read the rest of this entry »