Exetools

Exetools (https://forum.exetools.com/index.php)
-   General Discussion (https://forum.exetools.com/forumdisplay.php?f=2)
-   -   How to disable VM detection? (https://forum.exetools.com/showthread.php?t=16827)

te$ter 05-13-2015 00:02

How to disable VM detection?
 
Is there any way to disable (pass) Virtual Machine detection?
Code:

This application cannot run in Virtual Machine

Storm Shadow 05-13-2015 00:15

you can try using x64dbg and using yara plugin, to see if the file contains some of the rules for vm detection.
https://github.com/Yara-Rules/rules/blob/master/antidebug.yar#L400

but there proberly are, more easyer and faster boring ways :)

Conquest 05-13-2015 00:54

you didnt mention the protector name or type. usually the vmware backdoor restriction along with a few registry edits should work.A fast google search result yields
hxxp://www.unibia.com/unibianet/systems-networking/bypassing-virtual-machine-detection-vmware-workstation

there is a great thread about it for vbox linked in our forum.
http://forum.exetools.com/showthread.php?t=16681
unfortunately i am not aware of any detection method in type1 hypervisors.

te$ter 05-16-2015 17:06

The solution for VMWare is OK for testing software even without changing HDD name in register.


All times are GMT +8. The time now is 18:09.

Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2026, vBulletin Solutions, Inc.
Always Your Best Friend: Aaron, JMI, ahmadmansoor, ZeNiX