hzqst/vmwarehardenedloader

Vmware Hardened VM detection mitigation loader (anti anti-vm)

vmwarehardenedloader's Issues

what is vmware guest?

Graphic driver

After i setup graphic driver loader doesnt work is there a way to setup graphic driver use same time loader ?

Trojan detected Occamy.C61

vmloader.sys has been detected as Occamy.C61 Trojan..

UNEXPECTED_KERNEL_MODE_TRAP / KMODE_EXCEPTION_NOT_HANDLED BSOD

Tried loading it with https://github.com/TheCruZ/kdmapper

Doesn't actually work. Code looks good though.

<?xml>�<BP>
<INSTANCE CLASSNAME="BLUESCREEN">
<PROPERTY NAME="STOPCODE" TYPE="string"><VALUE>"0x7F"</VALUE></PROPERTY><machine-info>
<name>BT-FS-FORD</name>
<guid>c713bb5e-5d42-4658-8bdd-88fd58d217ae</guid>
<processor-architecture>AMD64</processor-architecture>
<os-version>10.0</os-version>
<os-build-number>19041</os-build-number>
<os-product>Windows 10</os-product>
<os-service-pack>None</os-service-pack>
</machine-info>

</INSTANCE>
</BP>�

!SAC>
Your device ran into a problem and needs to restart.
If you call a support person, give them this info:
UNEXPECTED_KERNEL_MODE_TRAP


0x0000000000000008
0xFFFF8180E4C8DE50
0xFFFFFE0C4FF40FD0
0xFFFFF8016160B390


�[0K
We're just collecting some error info, and then we'll restart for you. 0% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 0% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 0% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 0% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 0% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 22% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 22% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 22% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 22% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 22% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 22% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 42% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 42% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 42% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 42% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 42% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 42% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 63% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 63% complete
�[0K
We're just collecting some error info, and then we'll restart for you. 100% complete

求屌丝版签名的证书如何获取

发现在win10最新版都能过，求路子。

处理虚拟机不够完全

大表哥好 看了下处理的的handler，发现处理不够完全。
VMP3.x他是这么来检测的
1.CPUID
2.EnumSystemFirmwareTables GetSystemFirmwareTable
然后搜索里面3个字符串。 1. VMware 2. VirtualBox 3.Parallels

要把 这3个字符串全处理掉

More anti-anti-vm suggestions

• Change network adapter type to bridged
  VM can be detected by checking for "localdomain" in DNS suffix

• Add 'disk.EnableUUID = "true"' to VMX
  VMware usually has empty disk serial numbers on SCSI. It can be detected by running "wmic diskdrive get SerialNumber"

No disk serials:

With disk serials:

• Extra: Change disk size to >60 gb
  A program could detect small disk sizes which usually means a VM. Its not widely used to use this a precautious method

Example: https://github.com/LordNoteworthy/al-khaser/blob/6e66d448eaf25dd67a06f23ce256fa2674d68444/al-khaser/AntiVM/Generic.cpp#L274

Win 10 x64 dxdiag system resolved as vmware

Instaled the compiled file, service running, but dxdiag on system page shows it is a vmware and of course vm-protected sw does not work.

No VM tools installed.

Any idea what should I check?

"\\vmware-host" is not accissible anymore!

After installing the loader, \\vmware-host is no longer accessible anymore!

VMProtect err

I did everything as it is written does not work with vmprotect 3.3.2 - 3.3.1 you can tell me what to do with it I did not install vmtools did everything according to the instructions but still vmprotect writes that it cannot work on the virtual machine

vmloader.sys is missing

What should i do, did all the steps but got this error:
its asking to download vmloader.sys before starts the game

EAC and the game: new world

cf进入游戏没问题，但运行一会就报错，不是检测到虚拟机，就是环境异常，要不就是缺少什么什么dll、sys

Build Issue

I get MSB8020 issue when I try to build as Release/x64. Do you have any Idea on how to solve this issue? I have already downloaded WDK 10.

Building issue - LNK2019, LNK2001, LNK1120

Hello,

I hope you are still here, im trying to build the loader but im getting the errors from below.

https://imgur.com/dLrdyHX

Any idea why im getting this errors and eventually how to fix it?

I've downloaded around of 200gb libraries compiliers, everything what could be missing.

Doing it on VMware ESxi 6.7 and win 10 x64

btw capstone_static_winkernel builiding itself without any issues.

Looking forward to your answer, thanks in advance.

Best regards
Luke

Vm 2020

Please help me not to pack this file because I have never used Visual Studio 2015/2017 and Windows Driver Kit 10 please give me a complete file thank you very much.

Error Compiling VmLoader

I am getting error C1083 Cannot open include file: 'capstone.h': No such file or directory. Does anybody have a fix for that?

graphic driver files

"vmware virtual graphic card information could be detected by querying DXGI interface, which could be modified by editing graphic driver files."

1. Where are the graphic driver files located? In %windir%system32\drivers\etc?
2. How can I find out which file needs to be modified?
3. Do I need to search for VMWare and edit it in hexeditor?

Thank you!

Hello, can you support x86

Hello, can I support x86? I failed to load in x86 system.

Spectre-mitigation libraries required for this project.

What is the required Spectre library for this project? There are tons and there is nothing mentioned in the README so I am stuck. Would love for anyone to help me, thank you.

Help !

how to make it work after install install then it turns off can anybody guide me

VM Super slow without vmtools

I have a Windows machine setup according to the README guide.
It works and themida does not recognize its a VM!
But without vmtools the machine runs very slow and laggy.
Once I install vmtools the lags are gone but machine obviously gets recognized as a VM.
Any way to have the performance of a machine with vmtools but without actually installing vmtools?
Is it a drivers problem or something?

driver compilation error

LDR: Cannot inject monitor code & Unknown configuration value '/DsdtFilePath' found in the configuration of acpi instance #0 (VERR_CFGM_CONFIG_UNKNOWN_VALUE).

Is there any reason why this is not working anymore? It used to work fine, but now when I try to start VirtualBox, these errors pop up.

win7 x64 帮忙看看什么问题

vmware：v14.1.3
OS：win7 x64 sp1

虚拟机开启VT，按你的教程来，出现了截图的错误，帮忙看看什么原因。

Vmx file is corrupted after modifying it

Hi,
I'm trying to install following the steps.
At first step i modified the vmxf file but when trying to run the vm it says that the file is corrupted.

This is how i modified the file.
For the last line I tried both TRUE and FALSE but no results

device driver does not install on any devices, use primitive driver if this is intended.

I get this error from the VMLoader.inf file.

building error

When trying to build with VS 2019 I get the following build errors:
\capstone\cs.c(65,10): error C1083: Cannot open include file: 'arch/X86/X86Module.h': No such file or directory
2>LINK : fatal error LNK1181: cannot open input file 'capstone_static_winkernel.lib'

help me please with compilation !?!?!))

I can not put together a project in Visual Studio 2019 community... Error : LNK2019 reference to an unresolved external character _invoke_watson в функции "protected: virtual void __cdecl stdext::bad_alloc::_Doraise(void)const " (?_Doraise@bad_alloc@stdext@@MEBAXXZ) VmLoader D:\tmp\vm\VmwareHardenedLoader-master\VmLoader\main.obj 1

Thank you

China number one

yes

How to work Gepard Shield 3.0

Hi , I have a question to ask .
i use " hyper -v " want to play game (Ragnarok online - private server) ,
but always blocked when i play 10seconds later ,
How can i use these c++ ,
Please guide me which videos should I learn from .
Can you tell me where to go, if I shouldn’t post it here?

i donwload “Gepard Bypass” >> GitHub - Hypercall/Gepard: Full Gepard bypass

thank you so much.

VMware ESXI vmx problem

I'm attempting to modify the configuration of a virtual machine through the VMX file to alter system information. I've tried several adjustments within the VMX file on an ESXi environment, including settings like:

hypervisor.cpuid.v0 = "FALSE"
board-id.reflectHost = "TRUE"
hw.model.reflectHost = "TRUE"
serialNumber.reflectHost = "TRUE"
smbios.reflectHost = "TRUE"
SMBIOS.noOEMStrings = "TRUE"
However, none of these changes seem to take effect. Additionally, I attempted to rename the scsi0:0 device using:

scsi0:0.productID = "blablaSSD"
scsi0:0.vendorID = "blabla"
Unfortunately, these adjustments didn't yield the expected outcomes either. I've explored configuring the virtual machine both before installation via the GUI in VM Options and directly through modifications of the VMX file by downloading, editing, and re-uploading it.

I am uncertain whether specific "reflect" codes will function as intended. I am considering manually altering these details, but without visibility into the results, I'm unsure of the next steps to take.

I attempted to resolve the issue by unregistering the virtual machine, making the necessary changes to the VMX file, and then re-registering the machine on ESXi. Despite this effort, the changes did not take effect as expected.

Gepard Shield 3.0 Bypass Code 7

hi

https://media.discordapp.net/attachments/469615764920467458/706875588731994172/unknown.png?width=586&height=253

Before .vmx changes i got Gepard Shield 3.0 Bypass Code 2, after changes and loaded kernel driver i get Gepard Shield 3.0 Bypass Code 7.
maybe somebody know how to bypass?

how to use

Hi
I am curious to know how to use this program.

I completed 1st, 2nd step

1. Does this program work only on Windows 10? my computer win7
2. Windows Driver Kit 10
   Not installed on Windows 7?
3. 3rd step, I don't know where install.bat

I am a beginner
Can you give me a little more detail on how to use the program?

显卡驱动修改 inf 文件好像不能更改芯片类型

dxdiag 里芯片类型是 VMware Virtual SVGA 3D Graphics Adapter，请问大佬哪里能改这个信息

vmloader.sys

Hello,

vmloader.sys is marked infected 20/65 in virustotal trojan/malware. False positive? Any prove? How can i check manually? Thank you.

Compiling Problem

Hello, I have tried compiling with VS 15/17/19 but couldn't, I followed all the instructions given. The errors vary from not finding header files(even if included) to "use primitive driver" / "specify PnpLockdown=1" and more.

I am willing to pay you if you provide me with a working release of this software that I can use on my VMs, for personal use.

I am looking forward to your response. Cheers!

build help (spectre-mitigated libraries required )

i tried to look for individual components to download but, they are too many of them
i dont know which one the correct file to download

can't bypass valorant detected

qspectre is missing ?

Hi, im using visualstudio 2019 and installed wdk & sdk, when i try to build VS said: qspectre is missing ?
any idea ?

Device driver does not install on any devices, use primitive driver if this is intended

vmware svga

Hello everyone.
Need help.
There is one game in which the anti-cheat detects the virtual machine by the driver (or by the dev pid) of the video card, there is one anti-detection on the Internet called patreon, there is a substitution of the video card, but the virtualbox does not work correctly, therefore need vmvare.
I changed the name of the video card, as indicated in one of the topics in this topic, it did not help.
Need help changing the graphics adapter settings.

Feeling failed !

I need a release who can help me because I don't know how to use it, thank you very much

有计划支援hyper-v吗?

大佬有时间看下hyper-v呗,毕竟windows自带了,连win10 2004沙盒都是这个内核.

I tried hard but still failed.

Can you provide video tutorial so I followed the readme but it doesn't work please thank you...

.vcxproj file missing Error while loading SLN/Projects

Hey im very new in this visual studio things.

I tried to follow your steps but when i start vmloader.sln its giving error messages.

that hidden.vcxproj
Hiddentest.vcxproj
HiddenLib.vcxproj
capstone_static_winkernel.vcxproj
is missing.

Ive checkted the paths and theyre really missing. I wanted to that bypass for Vmware Detections
to start a game which is very good protected by THEMIDA and an AntiCheat.

Could you may help me in this case. Im very new ive just some beginner experiences with coding on Python nothing else.

Games started with errors after added VmwareHardenedLoader

Hi All/Author,

The reason I needed the VMwareHardenedLoader is because I am trying to play Maplestory inside my VM Windows 10 Pro,
but after I did all the required steps, the Games show either

Initialization error
or

video driver

hi, sry for stupid qst. how i can install video driver with HardenedLoader?

how do i install graphic card drivers?

sorry for stupid question but the instruction tells me not to install vm tools
and as far as i know vm tools is the only way to install graphic cards driver
so how do i install graphic drivers?

hello

hello
I was trying to make my VM stealthy and ended up here

I downloaded VS2017, mdk10
and when i tried to build vmloader

this error occurs

I have never used visual studio before...
sorry

EAC Bypass

Does it bypasses the EAC detection too ? Been trying to use it on a game that uses EAC.