Results 1 to 12 of 12

Thread: Unable to Attach to Process

  1. #1
    Anonymous
    Guest

    Unable to Attach to Process

    I'm getting this Olly error when I try to attach to a running process. How does this process keep from being looked at ? Is there a way around this ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  2. #2
    Anonymous
    Guest

    Unable to Attach to Process

    It's probably protected by Armadillo and the like with the "Debug blocker" option set. There's no real way around it as the process itself is already being "debugged" by it's master process, so Ollydbg can't step in and even sniff it, nevermind debug it.

    However, you can debug it's master process, and force the master to stop debugging it, place the child into an infinite loop and allow ollydbg to connect to it.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  3. #3
    Anonymous
    Guest

    Unable to Attach to Process

    So if you run an Armadillo-protected exe that has the 'Debug blocker' option set, you'll actually have TWO executables running???
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  4. #4
    Anonymous
    Guest

    Unable to Attach to Process

    This Armadillo app runs and yes, there are 2 apps running. 1 app specifically for the registration window and the main executable. The app for the reg entry is the one that will not allow attachment. How do you setup the master process to stop debugging it ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  5. #5
    Anonymous
    Guest

    Unable to Attach to Process

    Yes, all kinds of debug blocker actually have two executables running.
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  6. #6
    Anonymous
    Guest

    Unable to Attach to Process

    Is there a "good" PE examiner that is recommended to tell you what packer was used on a particular target ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  7. #7
    Anonymous
    Guest

    Unable to Attach to Process

    yes
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  8. #8
    Anonymous
    Guest

    Unable to Attach to Process

    Which PE examiner would you recommend ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  9. #9
    Anonymous
    Guest

    Unable to Attach to Process

    peid 0.9
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  10. #10
    Anonymous
    Guest

    Unable to Attach to Process

    Will peid 0.9 work on dll files as well ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  11. #11
    Anonymous
    Guest

    Unable to Attach to Process

    yes
    I promise that I have read the FAQ and tried to use the Search to answer my question.

  12. #12
    Anonymous
    Guest

    Unable to Attach to Process

    Are there any good tuts for unpacking and restructuring an Armadillo v2.5-v2.6 target ?
    I promise that I have read the FAQ and tried to use the Search to answer my question.

Similar Threads

  1. Attach to process freezes the debugger
    By LaptoniC in forum The Newbie Forum
    Replies: 8
    Last Post: March 3rd, 2010, 04:47
  2. IDA: Attach to Process -> Menu deactivated
    By Drigo in forum Tools of Our Trade (TOT) Messageboard
    Replies: 1
    Last Post: May 14th, 2009, 00:31
  3. Attach Extended
    By Hero in forum Plugins (General)
    Replies: 12
    Last Post: March 7th, 2009, 11:48
  4. Attach to process WITHOUT stopping
    By w00b in forum OllyDbg Support Forums
    Replies: 6
    Last Post: February 2nd, 2008, 11:38
  5. Attach
    By Anonymous in forum OllyDbg Support Forums
    Replies: 6
    Last Post: February 19th, 2003, 16:24

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •