[vbox-dev] [PATCH] Make identifier strings in MPS table configurable

Eckardt, Hendrik hendrik.eckardt at gdata-adan.de
Fri Sep 22 08:56:56 GMT 2023


Hi,

I've created a patch that makes the OEM ID and Product ID strings in the MPS table (PCMP) configurable. Some malware binaries check these strings and refuse to run if VirtualBox is detected, and there was no way to change the strings without recompiling VirtualBox (or patching the VBoxDD binary).

Two new configuration options MpsOEMId and MpsProductId are added to pcbios/efi in a similar fashion that Dmi is already configurable. If the options are not set, there should be no observable difference to previous builds.

The patch is provided to you under the MIT license, please feel free to tweak it as you see fit.

Best regards,
Hendrik

--
Hendrik Eckardt
Security Engineer
M: hendrik.eckardt at gdata-adan.de

G DATA Advanced Analytics GmbH
G DATA Campus . Königsallee 178

D-44799 Bochum, Germany . https://www.gdata.de/business

HRB Bochum 15802 . USt-ID-Nr.: DE303701188

Geschäftsführer: Michael Zimmer

G DATA | ADVANCED ANALYTICS


-------------- next part --------------
A non-text attachment was scrubbed...
Name: configurable-mps-strings.patch
Type: application/octet-stream
Size: 6453 bytes
Desc: configurable-mps-strings.patch
URL: <http://www.virtualbox.org/pipermail/vbox-dev/attachments/20230922/58f96def/attachment.obj>


More information about the vbox-dev mailing list