Enigma Protector

Hello,

I am running Windows 10 and the latest release of Enigma Protector (X86) 5.30. I protected my .net exe and used the checkup / Virtualization tools and checked off all the virtual machines. I put a check in the box that says use checkup of Virtualization tools and made sure the Terminate execution box was checked.

After I protected my exe Enigma failed to detect Oracle Virtual Box and is allowing my exe to run.

The Oracle Virtual Box version is the newest version.....5.0.20 r 106931

The virtualized Operating System running in Oracle Virtual box is Windows 10 PRO 64 bit. Exe is coreflagged to be a 32 bit process.

Hi, can you please let me know if you've installed vbox's guest addon in Win10?

I have not.

I hope that it is not true that the only way Enigma can detect if it is being run under Oracle Virtual Box is if you installed the guest addon. That would be too easy to circumvent.

I agree, we are looking for a solution.

From what I can see where you can do the checks.....

Virtual Box has a regkey at "HARDWARE\Description\System" with a value of "SystemBiosVersion" and data of "VBOX"

Again, there's a second key stored at "SOFTWARE\Oracle\VirtualBox Guest Additions". This key is only there if the user installed the Guest Additions.

There's a third too! It's located at key "HARDWARE\Description\System" with value of "VideoBiosVersion" and data of "VIRTUALBOX"! It's for the video drivers.


Hopefully you guys figured it out by now.

Now I'm trying to write a plugin.
Oracle Virtual Box detection without addons now is done

http://forum.enigmaprotector.com/viewto ... 64&p=17892
DO NOT USE IT ON RETAIL PRODUCTS!!! ONLY TEST IT!

Thank you very much!