Worms and Trojans have been known to detect for Virtual environments such as VMware. If the product detects a Virtual environment it will not display any suspicious activity. The purpose of this is to throw off security researchers.
See complete list of properties
