Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   How can I detect whether a 'Virtual machine' is currently running? (https://forum.exetools.com/showthread.php?t=4443)

me0007 06-14-2004 03:27

How can I detect whether a 'Virtual machine' is currently running?
 
Is there any way to detect whether an app is running in a virtual machine (like in vmware or Virtual PC)?

Thanks for any ideas.

doug 06-14-2004 03:35

Yes, check http://z0mbie.host.sk for VMWare detection and http://www.woodmann.net/forum/showthread.php?t=5991 for VirtualPC

redbull 06-14-2004 20:02

Im trying to work out BOCHS detection.......

archphase 06-15-2004 05:14

yes as doug already said you can use z0mbies article and also in 29A#7 there was article @ http://29a.host.sk/29a-7/Articles/29A-7.029

Shub-Nigurrath 06-15-2004 17:49

note that Z0mbies method doesn't work on VirtualPC 2004.

There's a simpler way to check it. Look at below script, taken from elsewhere

PHP Code:

Debug Off
Break On
Dim $iRC
,$Msg,$Kix
$iRC
=SetOption('Explicit','On')
$iRC=SetOption('NoVarsInStrings','On')
Dim $VMWUser,$VMWPath,$VMWVer,$VMWToolsVer,$HKLMSCCS,$HKLMSMWCV,$CVMVer,$CVMMapper,$CVMMapperVer
$Kix          
SubStr(@KIX,1,4)
If 
$Kix "4.22"  
   
$Msg MessageBox('This Script requires at least KiXtart 4.22 ','Version Check',4112)  
   
Quit()
EndIf

$HKLMSCCS     'HKLM\SYSTEM\CurrentControlSet'
$HKLMSMWCV    'HKLM\Software\Microsoft\Windows\CurrentVersion'
$VMWUser      Trim(ReadValue($HKLMSMWCV '\Run','VMware User Process'))
$VMWPath      ReadValue($HKLMSMWCV '\App Paths\vmware.exe','Path')
$VMWVer       GetFileVersion($VMWPath +'\vmware.exe','ProductVersion')
$VMWToolsVer  GetFileVersion(ReadValue($HKLMSCCS '\Services\VMware Tools Service','ImagePath'),'ProductVersion')
$CVMVer       GetFileVersion(Left(ReadValue('HKLM\SOFTWARE\Classes\Virtual.PC.Floppy\DefaultIcon',""),-5),'ProductVersion')
$CVMMapper    ReadValue($HKLMSCCS '\Services\VPCMap','DisplayName')
$CVMMapperVer GetFileVersion(ReadValue($HKLMSCCS '\Services\VPCMap','ImagePath'),'ProductVersion')
'VMWare Running: ' $VMWToolsVer
'VMWare Installed: ' $VMWVer
'Connectix Running: ' $CVMMapperVer
'Connectix Installed: ' $CVMVer 

it's for a particular scripting lang, but it can be easily understood to see which reg keys it is checking.
It works on VPC 2004 also.

I think that the VPCMap.exe file is always present into a VirtualPC

huanxifo 06-16-2004 17:44

Crackproof Your Software.pdf
 
There is a book in this forum's ftp /share/e-books/
Pavol Cerven - Crackproof Your Software
The book describe some methods to detect softice,virtual pc yet.


All times are GMT +8. The time now is 13:05.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX