Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   How can I detect whether a 'Virtual machine' is currently running? (https://forum.exetools.com/showthread.php?t=4443)

me0007 06-14-2004 03:27

How can I detect whether a 'Virtual machine' is currently running?
 
Is there any way to detect whether an app is running in a virtual machine (like in vmware or Virtual PC)?

Thanks for any ideas.

doug 06-14-2004 03:35

Yes, check http://z0mbie.host.sk for VMWare detection and http://www.woodmann.net/forum/showthread.php?t=5991 for VirtualPC

redbull 06-14-2004 20:02

Im trying to work out BOCHS detection.......

archphase 06-15-2004 05:14

yes as doug already said you can use z0mbies article and also in 29A#7 there was article @ http://29a.host.sk/29a-7/Articles/29A-7.029

Shub-Nigurrath 06-15-2004 17:49

note that Z0mbies method doesn't work on VirtualPC 2004.

There's a simpler way to check it. Look at below script, taken from elsewhere

PHP Code:

Debug Off
Break On
Dim $iRC
,$Msg,$Kix
$iRC
=SetOption('Explicit','On')
$iRC=SetOption('NoVarsInStrings','On')
Dim $VMWUser,$VMWPath,$VMWVer,$VMWToolsVer,$HKLMSCCS,$HKLMSMWCV,$CVMVer,$CVMMapper,$CVMMapperVer
$Kix          
= SubStr(@KIX,1,4)
If 
$Kix < "4.22"  
   
$Msg = MessageBox('This Script requires at least KiXtart 4.22 ','Version Check',4112)  
   
Quit()
EndIf

$HKLMSCCS     = 'HKLM\SYSTEM\CurrentControlSet'
$HKLMSMWCV    = 'HKLM\Software\Microsoft\Windows\CurrentVersion'
$VMWUser      = Trim(ReadValue($HKLMSMWCV + '\Run','VMware User Process'))
$VMWPath      = ReadValue($HKLMSMWCV + '\App Paths\vmware.exe','Path')
$VMWVer       = GetFileVersion($VMWPath +'\vmware.exe','ProductVersion')
$VMWToolsVer  = GetFileVersion(ReadValue($HKLMSCCS + '\Services\VMware Tools Service','ImagePath'),'ProductVersion')
$CVMVer       = GetFileVersion(Left(ReadValue('HKLM\SOFTWARE\Classes\Virtual.PC.Floppy\DefaultIcon',""),-5),'ProductVersion')
$CVMMapper    = ReadValue($HKLMSCCS + '\Services\VPCMap','DisplayName')
$CVMMapperVer = GetFileVersion(ReadValue($HKLMSCCS + '\Services\VPCMap','ImagePath'),'ProductVersion')
? 
'VMWare Running: ' + $VMWToolsVer
? 'VMWare Installed: ' + $VMWVer
? 'Connectix Running: ' + $CVMMapperVer
? 'Connectix Installed: ' + $CVMVer 

it's for a particular scripting lang, but it can be easily understood to see which reg keys it is checking.
It works on VPC 2004 also.

I think that the VPCMap.exe file is always present into a VirtualPC

huanxifo 06-16-2004 17:44

Crackproof Your Software.pdf
 
There is a book in this forum's ftp /share/e-books/
Pavol Cerven - Crackproof Your Software
The book describe some methods to detect softice,virtual pc yet.


All times are GMT +8. The time now is 15:25.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX