@da_667 You don't - you just #airgap a physical machine if not entire network the same way actual #malware analysis and #Antivirus benchmarkers do.

In fact tools like #imvirt exist that detect #sandboxing and #virtualization and then either suicide the malware or just refuse to run entirely to twart forensics experts to the point that there's no off-the-shelf solution to do so.

@WellsiteGeo @kevbob @dangillmor interestingly, #Malware runs better in #Wine than a #VM since popular tools like #imvirt don't seem to be able.to reliably detect if they run on Wine or #BareMetal #Windows.

Which is actually good.

So no, you can still get Malware in Wine and in theory IF you get some malware there, it can be WORSE depending on the kind and how hard you sandboxed your Wine install...