Whats Best Way to Safeguard Against Viruses in Guest o/s?

  • Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Status
Not open for further replies.
looks like getting Hyper-V on Win10 Home is straight forward.
my only concern would be, because MS never wanted it on Home, what is going to happen, say, each time Windows updates, will it kill your Hyper-V?

since you have Home, personally I'd go for one of the 3rd party software choices, but that's entirely up to you. I've used the usual suspects like Oracle's VirtualBox and VMWare's Workstation and they are both fine. you install the software and then install Windows within the software onto a VHD (virtual hard drive).
and yes, you'll need a license to install Windows even on a VM machine.

as to transferring between the main OS and VM OS, there are a few ways to skin that cat.
the VM can have a shared folder between the two OS'es, or you can set the VM to have access to one of the physical PC's USB drives, or you let the VM directly access the internet.

as said before, it all depends on what level of protection you are happy with. :)

and this is said with no malice intended at all, and this is your data on your PC that, really, only you know what you do, but do you think you may be over-thinking this whole thing?

for example, no-one I know has two PC's setup like this, but hey, it's a good idea, I'm just thinking of the practicalities here. I've had my own PC since 1991 (proper PC, not VIC-20, or C64 or Atari) and have only had one infection, from using my neighbours USB stick.

so while infections are a real threat, your chances of getting one, using safe PC usage principles, is rare.

I just feel you may be dwelling on the potential negatives, that in the real world, may seldom happen.
and now I've said that, I'll get three infections today !!! :)
 
since you have Home, personally I'd go for one of the 3rd party software choices, but that's entirely up to you.

Hey Bruce, Apologies are in order for my last response. Will likely install Hyper-v. But I've read that hyper-v is more efficient than VB. What do you think?

and yes, you'll need a license to install Windows even on a VM machine.

I'll just use an inactivated windows 10 as guest so I'll be using guest o/s for one 1 - 3 programs tops.

as to transferring between the main OS and VM OS, there are a few ways to skin that cat.
the VM can have a shared folder between the two OS'es, or you can set the VM to have access to one of the physical PC's USB drives, or you let the VM directly access the internet.

Very good to know! Think I'll give the guest access to USB drive as long as I feel thats the safest bet.

and this is said with no malice intended at all, and this is your data on your PC that, really, only you know what you do, but do you think you may be over-thinking this whole thing?

Understandably you may think I may be overthinking this but in reality I want to be as safe as possible especially when doing online banking.

In addition to the above I have these questions, please....
1) In know this sounds crazy but would it be sensical to install programs in the host while transferring personal files to the guest? This way the guest is isolated from being sniffed for personal data? My only concern with this is doing online banking where programs might "see" my online banking.

2) Referring to the 1st question above, would installing a sandbox (like sandboxie) for my firefox while doing online banking offer protection from potential infected programs if installed in the host?

3) If I install a program in the host, couldnt I block it in the firewall from accessing the net both inbound and outbound? Will it add another layer of protection?
 
Hyper-V versus other VM software, which is better? - sorry, can't say, simply haven't used them with performance in mind.
whatever VM I have used over the years, all I can add is that they have done exactly what I wanted, given my access to another OS without the need for another physical PC or the palaver of fussing around with dual booting.

non-activated Windows doesn't get updates (from memory) so that may be worth considering.

as to installing software on one PC and your data on another - again, sadly, only you can really answer that.
but logically taking your need of two PC's to the next level, I would say Yes, you want to keep things as isolated as possible.

as to online banking, unless an infection can sniff the data packets going between you and the bank, and decrypt them, you are already extremely safeguarded.
I've worked for 3 banks in my career and all I'll say is their IT departments, and the external bodies they use, spend a lot of money making their systems as secure as they possibly can. they do after-all want you to use them to recoup the development costs used to justify reducing front-line staff.

any sandboxie type of solution will reset that environment back to the default baseline conditions that were setup when the sandbox was initially created.
so that would definitely keep Firefox safe.
but, again, taking that idea to its next step, a program like Deep Freeze will 'sandbox' the entire PC.
every time the PC starts, it's as if the previous session never happened.

it all comes back to;
  • how serious you want to take all this
  • what you think is your potential exposure
  • and the level of annoyance you are happy to live with
and the last question, yes, you can fiddle with the firewall at the program level but I've found it extra maintenance that needs to be kept on top of.
as an example, years ago CCleaner was great, than the buggers were taken over by Avast who added spyware type behaviour to the software (sending telemetry sort of stuff to their servers) so I blocked ccleaner.exe in the firewall. but when they changed their name to ccleaner64.exe, of course the firewall was useless.
 
OP has not revisited forum since the thread was reopened so I`m going to go ahead and close this thread, helpers are here to do just that and not to run around begging for updates.
 
Status
Not open for further replies.