Checking raw ThermalZoneInfo performance counters with WMI

al-khaser/Al-khaser.cpp

@@ -214,6 +214,7 @@ int main(int argc, char* argv[])
 		exec_check(&registry_services_disk_enum, TEXT("Checking Services\\Disk\\Enum entries for VM strings "));
 		exec_check(&registry_disk_enum, TEXT("Checking Enum\\IDE and Enum\\SCSI entries for VM strings "));
 		exec_check(&number_SMBIOS_tables, TEXT("Checking SMBIOS tables  "));
+		exec_check(&perf_raw_data_counters_thermalzoneinfo_wmi, TEXT("Checking raw ThermalZoneInfo performance counters with WMI "));
 	}
 
 	/* VirtualBox Detection */

al-khaser/AntiVM/Generic.cpp

@@ -2011,4 +2011,17 @@ BOOL number_SMBIOS_tables()
 		free(smbios);
 	}
 	return result;
+}
+
+/*
+Check Win32_PerfRawData_Counters_ThermalZoneInformation for entries
+*/
+BOOL perf_raw_data_counters_thermalzoneinfo_wmi()
+{
+	int count = wmi_query_count(_T("SELECT * FROM Win32_PerfRawData_Counters_ThermalZoneInformation"));
+	if (count == 0)
+	{
+		return TRUE;
+	}
+	return FALSE;
 }

al-khaser/AntiVM/Generic.h

@@ -49,4 +49,5 @@ BOOL cim_voltagesensor_wmi();
 BOOL pirated_windows();
 BOOL registry_services_disk_enum();
 BOOL registry_disk_enum();
-BOOL number_SMBIOS_tables();
+BOOL number_SMBIOS_tables();
+BOOL perf_raw_data_counters_thermalzoneinfo_wmi();