What is this process used for?

WCharacter / RDTSC-KVM-Handler

my patches for linux kernel to spoof rdtsc and make vm exit undetected

208 stars 28 forks source link

What is this process used for? #20

Open Chocrates opened 4 months ago

Chocrates commented 4 months ago

Sorry for the dumb question but what issue does this fix? I am having trouble understanding why I might need it in the README.

Samuil1337 commented 3 months ago

Some programs running on the guest may check the RDTSC time stamps reported by the virtual CPU for anomalies that only occur in a virtual environment. This patch spoofs it, so the programs can't detect the VM. This is only one of many measures you can take to prevent VM detection, when analyzing malware or trying to circumvent anti-cheat.