I found this and it "appears" to me that it, or something based on it or similar, "might" be able in some way/s to be used by malware etc to disable/delete/interefere etc with VM type apps. If so not good :( I'm not skilled enough to look into this properly, that's why i'm posting my idea here so others who are can hopefully look into more deeply etc ;)
See what you think.
Visual Subst - Virtual Drives In Effect
See what you think.
Visual Subst - Virtual Drives In Effect
How It Works
Generally, a virtual drive is just a symbolic link in the Local MS-DOS Device namespace. It is just one more Windows feature added for backward compatibility with old programs.
Virtual drives are therefore objects of the operating system, and Visual Subst can create, enumerate and delete these objects.
http://www.ntwind.com/software/utilitie ... subst.html
Malware = If your names not down, you're Not coming in !