Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Whilst pondering about security, and setting up different VM for certain online activities deemed more risky or requiring extra security (banking, or visiting untrusted websites, etc), I came to think about how such a setup (different VMs for different uses) would defend me against a keylogger.

So, two questions then:

1: If a keylogger has been installed inside a VM, can it capture data outside its own VM?

2: The opposite, does a keylogger in a host capture strokes typed within a VM residing in that host?

My bet would be No and Yes respectively, but I really have no idea. Anyone else does?

share|improve this question
up vote 2 down vote accepted
  1. No

  2. Yes

A keylogger runs as software or driver within the machine, it will be limited to the virtual machine it is on.

If the keylogger is installed on a host, it will capture all data on the host. It is possible that some virtualisation software has its own hook that overwrites the keylogger, but I doubt it.

share|improve this answer
Thanks, that makes sense and it's what I thought it would happen. – paranoid Sep 24 '10 at 11:50

There is always a chance that there are vulnerabilities in the virtualization software. This in turn could allow malicious software to "escape" into the host OS:

So the answer would then be: 1. Possible 2. Yes

share|improve this answer
Nice finding =S, good to know – HappyDeveloper May 27 '12 at 1:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.