This is a tutorial, so no scambaiting here this time. If you want to avoid scammers picking up that you're baiting them with a Virtual Machine, this is how to make it really stealthy.
You'll need the following Registry Point:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum
Search for the following 4 GUIDs:
{4d36e967-e325-11ce-bfc1-08002be10318}
{4d36e968-e325-11ce-bfc1-08002be10318}
{4d36e965-e325-11ce-bfc1-08002be10318}
{4d36e96f-e325-11ce-bfc1-08002be10318}
You can download the VMware Tools stealthy registry files from :
http://s000.tinyupload.com/?file_id=28189572125883244400 (v14+)
OR
https://mega.nz/#F!PlMihRxR!09SdR7r09qSsWFk37HAyXQ (v8-v13)
This will work for Windows 7, 8, 8.1 and 10 with VMware tools 10.10
I'll do a VBOX/WIn7 version soon.
Happy scambaiting!
