This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(121.6, 77%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EL3%3C/text%3E%3C/svg%3E)
I believe my PC is running inside either a container or is a VM. I don't have much experience with virtualization. I did not install Virtualization software. I do not want nor did I ask for this. Computing has been my hobby for 28 years. Mostly Windows and in the last 6 or so years Linux and FreeBSD. But this has me stomped. Examples of my issue: 1) Using Dmidecode in Linux or Power shell Get-Computerinfo it details a Hyper-visor running. Device Manager View Options has a Device Container listing (Never seen that before) Keyboard is listed as PS/2 (Haven't seen that in years) All sorts of drivers, hardware, files that when i research VM software it matches what I have. I have gone as far as: 1: Disabling Virtualization in the BIOS. 2: Used Windows 10 Startup DVD Diskpart.exe to remove Volumes, Partitions, Clean drive, Format Drive. 3: Install System Image that was from initial startup of PC some 2 years ago. Upon Windows booting I immediately check MMC Event Logs, Services, Device Manager. I find events I've never ran into before. Examples: Kernel-XVD Loaded; Numerous Hyper-V initializations for I/O remapping, Hyper-V CVE mitigations, VBS Registry configs... Considering I used a system image from before the PC was ever hooked into internet and was disconnected from internet when I wiped and restored image it just doesn't make sense to me. It's like I have some sort of BIOS malware or a well hidden cluster on my drive. One last thing. When using a forensics Linux Distro I ran Testdisk. Im not 100% when dealing with hard drive pools, but it listed a Solaris ZFS pool that exceeds my 512GB drive. As in 123,950 TB !!!! And that Linux distro wouldn't boot unless I had Ethernet plugged in and the darn boot logs showed it connecting to 'SHITBOX' (Which is what I named the PC months ago and about 5 reinstalled os's later). Help!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 21%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EHR%3C/text%3E%3C/svg%3E)
Hi Mate,
Were you able to resolve your issue with the Shitbox? I have the same issue and it’s a malware attack and I am certain that am booting into a Hyper-V - VM instead of my physical machine.
its surprising to see no answers or help from the community!!
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 92%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EXM%3C/text%3E%3C/svg%3E)
Hi,
Check system manufacturer by running the command "systeminfo | find /i "system manufacturer".
If the output includes hardware manufacturers like HP, Lenovo, or Dell, it indicates a physical machine.
If "Microsoft" is present in the output, it signifies a Hyper-V virtual machine.
If "VMWare" is present, it indicates a VMWare virtual machine.