Skip to content

Echeq/VM_Detection-Module

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

4 Commits
 
 
 
 
 
 

Repository files navigation

Simple Program to Explain How to Detect Virtual Machines in C

I created a simple C program to demonstrate how Virtual Machine (VM) detection works by checking for registry keys commonly found in virtualized environments (like VirtualBox).

How It Works:

  • The code checks for the registry key SYSTEM\CurrentControlSet\Services\VBoxGuest (a default VirtualBox entry).
  • If the key exists, it assumes the system is a VM and shows an alert.
  • If not, it assumes a physical machine (though this isn't 100% reliable).

Key Features:

  • βœ… Uses Windows API (RegOpenKeyExA) for registry access.
  • βœ… Lightweight and easy to modify for other VM providers (VMware, Hyper-V, etc.).
  • βœ… Displays a pop-up alert (MessageBox) with the result.

Why It's Useful:

  • Great for learning Windows API/registry interactions.
  • Demonstrates basic anti-VM techniques (useful in security testing).
  • Can be expanded with more checks (CPUID, disk drivers, etc.).

Extra Info:

ALTERNATIVE PATHS FOR VM DETECTION:

  • VBoxGuest
  • VBoxMouse
  • VBoxService
  • VBoxSF
  • VBoxWddm

About

Simple program to explain how a virtual machine detector would be implemented in C.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages