Virtualization question.

Malware authors can easily use code to make their code behave while running under a VM. Please see -> http://www.honeynet.org/papers/bots/botnet-code.html

There is a shorter technique to detect VMWare and Virtual PC but both are as effective.

~interact