Honeypots mailing list archives

VirtualPC detection?


From: Maximillian Dornseif <dornseif () informatik rwth-aachen de>
Date: Tue, 8 Feb 2005 22:02:25 +0100

Hi,

last fall the list had some fun with vmware detection: how to do it and what it means to malware analysis / honeypots.

Now I wonder if anybody is aware of specialized code for detection full scale processor emulations like VirtualPC for Mac, bochs and qemu. Any pointers?

Regards

Max Dornseif

--
Maximillian Dornseif, Dipl. Jur.
Laboratory for Dependable Distributed Systems, RWTH Aachen University
Tel. +49 241 80-21431 - http://md.hudora.de/




Current thread: