search

hzqst / VmwareHardenedLoader

Vmware Hardened VM detection mitigation loader (anti anti-vm)
MIT License
1.74k stars 466 forks source link

Graphics Card DXGI #59

Open sabakingo opened 7 months ago

sabakingo commented 7 months ago

VMware virtual graphic card information could be detected by querying DXGI interface, which could be modified by editing graphic driver files.

How i do that?

I didn't find anything in the Windows logs... Can you help us? Indeed, I opened DXDIAG and the name VMWARE is there on the graphics card.

ViktorVoloshko commented 3 months ago

Did you install VMware Guest Tools?

nxvvvv commented 3 months ago

Well, this happens when you install VMware SVGA 3D driver aka VMware Video drivers through VMware tools, so yea.

But the thing you could do is go to Registry editor, Ctrl+F and then type in whatever name is coming on the graphic card section on dxdiag and search. Now manually rename it to something like NVIDIA RTX 3060 Laptop GPU or something else. do it everywhere you see this so yea it'll be an ultimate pain doing it but yea, after you're done, just re-open dxdiag and voila that's modified.

I wouldn't recommend installing VMware Tools since it creates registry entries which VM detectors like pafish could detect. So yea I'd recommend you run pafish, and understand what all are the stuff which make your VM look like a VM and patch it out.

sabakingo commented 3 months ago

I got a VMware 100% editted, now undetected.