/*
Check against VMWare blacklisted files
*/
VOID vmware_files()
{
/* Array of strings of blacklisted paths */
TCHAR* szPaths[] = {
_T("system32\\drivers\\vmmouse.sys"),
_T("system32\\drivers\\vmhgfs.sys"),
};
/* Getting Windows Directory */
WORD dwlength = sizeof(szPaths) / sizeof(szPaths[0]);
TCHAR szWinDir[MAX_PATH] = _T("");
TCHAR szPath[MAX_PATH] = _T("");
GetWindowsDirectory(szWinDir, MAX_PATH);
/* Check one by one */
for (int i = 0; i < dwlength; i++)
{
PathCombine(szPath, szWinDir, szPaths[i]);
_tprintf(TEXT("[*] Checking file %s: "), szPath);
if (is_FileExists(szPath))
print_detected();
else
print_not_detected();
}
}
/*
Check against virtualbox blacklisted files
*/
VOID vbox_check_files()
{
/* Array of strings of blacklisted paths */
TCHAR* szPaths[] = {
_T("system32\\drivers\\VBoxMouse.sys"),
_T("system32\\drivers\\VBoxGuest.sys"),
_T("system32\\drivers\\VBoxSF.sys"),
_T("system32\\drivers\\VBoxVideo.sys"),
_T("system32\\vboxdisp.dll"),
_T("system32\\vboxhook.dll"),
_T("system32\\vboxmrxnp.dll"),
_T("system32\\vboxogl.dll"),
_T("system32\\vboxoglarrayspu.dll"),
_T("system32\\vboxoglcrutil.dll"),
_T("system32\\vboxoglerrorspu.dll"),
_T("system32\\vboxoglfeedbackspu.dll"),
_T("system32\\vboxoglpackspu.dll"),
_T("system32\\vboxoglpassthroughspu.dll"),
_T("system32\\vboxservice.exe"),
_T("system32\\vboxtray.exe"),
_T("system32\\VBoxControl.exe"),
};
/* Getting Windows Directory */
WORD dwlength = sizeof(szPaths) / sizeof(szPaths[0]);
TCHAR szWinDir[MAX_PATH] = _T("");
TCHAR szPath[MAX_PATH] = _T("");
GetWindowsDirectory(szWinDir, MAX_PATH);
/* Check one by one */
for (int i = 0; i < dwlength; i++)
{
PathCombine(szPath, szWinDir, szPaths[i]);
_tprintf(TEXT("[*] Checking file %s: "), szPath);
if (is_FileExists(szPath))
print_detected();
else
print_not_detected();
}
}
