虚拟机壳子检测简单来说就是SE,VMP,TMD,VP等一些常见的虚拟机基础检测,通常是一些私服小游戏会包含这些虚拟机检测
过这些检测分为屏蔽代码+驱动过和直接修改虚拟机底层文件过,这里先介绍屏蔽代码+驱动过的方法
屏蔽代码加到虚拟机VMX后缀的文件中,代码如下:
SMBIOS.reflecthost = "TRUE"
SMBIOS.noOEMStrings = "TRUE"
SMBIOS.addHostVendor = "TRUE"
hw.model.reflectHost = "TRUE"
serialNumber.reflectHost = "TRUE"
board-id.reflectHost = "TRUE"
monitor_control.restrict_backdoor = "TRUE"
monitor_control.virtual_rdtsc = "false"
monitor_control.disable_directexec = "true"
isolation.tools.getPtrLocation.disable = "true"
isolation.tools.setPtrLocation.disable = "true"
isolation.tools.setVersion.disable = "true"
isolation.tools.getVersion.disable = "true"
isolation.tools.hgfs.disable = "TRUE"
cpuid.1.ecx = "0--------------0----------------"
cpuid.1.edx = "-----------0---------0----------"
其中VMP检测用我提供的过检测工具运行一下即可
工具免费提供,可以私聊我或者进群下载即可