All geek questions in one place

Detect when an application is running in a VM environment

Looking for ideas on how to detect when our Windows application is running in one of the following VM environments. In parentheses are some ideas for detection. There may be (many) better detection methods - the starter ideas that I came up with are based on my research on Google.

  • VMWare (finding additional VMware tools is one way)

  • Microsoft Virtual PC ("Virtual HD" is installed for its IDE drives for IDE devices), "MS Virtual SCSI Disk Drive" for its SCSI drives)

  • Citrix Xen

  • Sun Virtual Camera

Thanks Malcolm

+4
source share
2 answers

See BluePill , which the author claimed to be undetectable, prompting a large negative response from the security community, which quickly developed several ways to determine if they are in the virtual machine. The best of them are apparently time-based.

+2
source

This looks promising - it has exe and .c downloads.

0
source

Source: https://habr.com/ru/post/1303060/

More articles:


All Articles