search

zhaodice / qemu-anti-detection

A patch to hide qemu itself, bypass mhyprot,EAC,nProtect / VMProtect,VProtect, Themida, Enigma Protector,Safegine Shielden
804 stars 117 forks source link

Is it possible to use virtio with this? #21

Closed verifizieren closed 1 year ago

verifizieren commented 1 year ago

Okay so basically I used the latest patch to make a version for the newest qemu version but that issue is also present when applying the patch to v8.0.3. For some reason I am not able to use virtio on the win guest but I don't really know what that is the case. It might be, because of some strings that virtio uses to get the devices? Anyways how could I fix that?

zhaodice commented 1 year ago

virtio has a known device pcie id , and virtio device keyword , which can be detected by others software, the best important reason is it have to install virtio driver , you have to patch the virtio driver to hide itself(event you haven't driver signature for Microshit Windows, disable signature mode is banned by anticheat).. it is too big to finish the project.

zhaodice commented 1 year ago

so, I have banned the virtio, and hide virtio from guest machine, it is the best easy way

verifizieren commented 1 year ago

Ohh okay I understand, I can try looking into that but thanks for letting me know!

fecet commented 1 year ago

How can I try to enable it and test if it's still work for me ? It's possible some anticheat not so strong

zhaodice commented 1 year ago

How can I try to enable it and test if it's still work for me ? It's possible some anticheat not so strong

yes you can, you can remove the VIRTIO DEVICE id from the patch file. it may works fine

fecet commented 1 year ago

Did you mean this part

diff --git a/hw/input/virtio-input-hid.c b/hw/input/virtio-input-hid.c
index a7a244a..bc16b1e 100644
--- a/hw/input/virtio-input-hid.c
+++ b/hw/input/virtio-input-hid.c
@@ -16,9 +16,9 @@

 #include "standard-headers/linux/input.h"

-#define VIRTIO_ID_NAME_KEYBOARD "QEMU Virtio Keyboard"
-#define VIRTIO_ID_NAME_MOUSE    "QEMU Virtio Mouse"
-#define VIRTIO_ID_NAME_TABLET   "QEMU Virtio Tablet"
+#define VIRTIO_ID_NAME_KEYBOARD "ASUS Keyboard"
+#define VIRTIO_ID_NAME_MOUSE    "ASUS Mouse"
+#define VIRTIO_ID_NAME_TABLET   "ASUS Tablet"

That's all I find looks revelant

zhaodice commented 1 year ago

Did you mean this part

diff --git a/hw/input/virtio-input-hid.c b/hw/input/virtio-input-hid.c
index a7a244a..bc16b1e 100644
--- a/hw/input/virtio-input-hid.c
+++ b/hw/input/virtio-input-hid.c
@@ -16,9 +16,9 @@

 #include "standard-headers/linux/input.h"

-#define VIRTIO_ID_NAME_KEYBOARD "QEMU Virtio Keyboard"
-#define VIRTIO_ID_NAME_MOUSE    "QEMU Virtio Mouse"
-#define VIRTIO_ID_NAME_TABLET   "QEMU Virtio Tablet"
+#define VIRTIO_ID_NAME_KEYBOARD "ASUS Keyboard"
+#define VIRTIO_ID_NAME_MOUSE    "ASUS Mouse"
+#define VIRTIO_ID_NAME_TABLET   "ASUS Tablet"

That's all I find looks revelant

yes, you can search keyword "VIRTIO" and remove the patch