确定在虚拟机中运行的时间 [英] Determine when running in a virtual machine

问题描述

是否有一个应用程序的官方方式来确定它是在VMWare还是Virtual PC上运行？（或者现在微软正在调用它）？我看到的代码通常是在特定版本的VMWare或虚拟PC中利用了一些奇怪的行为副作用的黑客。

Is there an official way for an application to determine if it is running in VMWare or Virtual PC (or whatever Microsoft is calling it now)? The code I have seen is usually a hack that took advantage of some odd behavioral side effect in a specific version of VMWare or Virtual PC.

理想的Delphi代码，但如果您可以链接到官方解释，那么我确信我可以转换它。

Ideally Delphi code, but if you can link to an official explanation then I am sure I can convert it.

推荐答案

我在去年写了一系列的文章，源代码。 VMware和Wine检测是 here 。虚拟PC是 here 。所有这三个都具有相当的铁包检测，因为有管理程序的记录回调（在Wine的情况下，是标准DLL的扩展）。我在评论部分中提出了一个未经测试的VirtualBox检测器（没有安装测试）。可能使用回调也可以检测到Parallels，但是我没有安装。文档的链接（由于来自安全研究人员的重点是漏洞），但位于这里，如果您已经安装并感兴趣。还有一个有关检测Sandbox，Bochs和Xen的信息的PPT here 。不是很多代码，但如果你必须检测到这些代码，它可能会给你一个起点。

I wrote a series of articles last year on this, with source code. VMware and Wine detection are here. Virtual PC is here. All three of these have pretty iron-clad detection because there are documented callbacks to the hypervisor (in the case of Wine, an extension to a standard DLL). I put up an untested VirtualBox detector (don't have it installed to test with) in the comment section. Parallels might be detectable using a callback also but I don't have it installed. The link for the documentation (which is poor since it's from a security researcher focusing on exploits) but located here if you have it installed and are interested. There's also a PPT here that has some information on detecting Sandbox, Bochs, and Xen. Not a lot of code in it but it might give you a starting point if you have to detect those.

这篇关于确定在虚拟机中运行的时间的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！