zhaodice / qemu-anti-detection

A patch to hide qemu itself, bypass mhyprot,EAC,nProtect / VMProtect,VProtect, Themida, Enigma Protector,Safegine Shielden
746 stars 113 forks source link

ssdt #8

Closed AndreyRz closed 1 year ago

AndreyRz commented 1 year ago
<qemu:arg value="file=/passthough/ssdt1.dat"/>

Can you please share this file? As I understand it has additional adjustments for acpi tables.

zhaodice commented 1 year ago

https://lantian.pub/usr/uploads/202007/ssdt1.dat

AndreyRz commented 1 year ago

Do you know how to get rid of the acpi\qemu0002 device that is hidden in the windows device manager and leaves notes about itself in the registry?

zhaodice commented 1 year ago

use HEX editor, example GHEX, open this ssdt file and replace all of qemu string with asus

AndreyRz commented 1 year ago

I am not familiar with such files, what exactly do I need to change in it?

zhaodice commented 1 year ago

I am not familiar with such files, what exactly do I need to change in it?

assume you are in X11 environment: sudo apt install ghex ghex ssdt1.dat

will open window, edit this file and save is ok

AndreyRz commented 1 year ago

https://prnt.sc/QPSP8-_wqIe7 what specific lines should be edited?

zhaodice commented 1 year ago

https://prnt.sc/QPSP8-_wqIe7 what specific lines should be edited?

or you can use this file which has been edited by me: https://github.com/zhaodice/qemu-anti-detection/blob/main/ssdt1.dat?raw=true

AndreyRz commented 1 year ago

Thank you

zhaodice commented 1 year ago

Screenshot_20230404_041054 this is my registry, did you patch your qemu by this project?

AndreyRz commented 1 year ago

yes

zhaodice commented 1 year ago

I will go sleep, you can leave your question if you encountered again.

AndreyRz commented 1 year ago

https://prnt.sc/za7QwD6FsK7E this with patched qemu without ssdt

zhaodice commented 1 year ago

ok,It is a problem, I am trying to find it

zhaodice commented 1 year ago

NEWPATCH: https://github.com/zhaodice/qemu-anti-detection/blob/main/qemu7.0.0.patch

zhaodice commented 1 year ago

after your installing,you can remove this qemu registry manually

nhamhuynh79 commented 11 months ago

Screenshot from 2023-10-19 06-10-24 How to fix that?

zhaodice commented 11 months ago

Screenshot from 2023-10-19 06-10-24 How to fix that?

cd ~/Downloads/ chmod 777 ssdt1.dat

nhamhuynh79 commented 11 months ago

Screenshot from 2023-10-19 06-10-24 How to fix that?

cd ~/Downloads/ chmod 777 ssdt1.dat Still permission denied

zhaodice commented 11 months ago

@nhamhuynh79

cd ~/Downloads/work
chmod 777 ssdt1.dat

please show :

ls -l