I am trying to attach the WinDBG to particular process but I constantly get the error below :
I am using win 7 x64 and am trying to debug x64 application.
I run the IDA Pro with admin privileges. I have run the application both with admin privilege and the user one. I even tried to run it on different windows user account with admin privilege but I still get the same error.
-
The target process may have anti-attach protection. See this post.– 0xecAug 29, 2015 at 16:59
-
@ExtremeCoders The problem is I can easily attach to the process in x64_DBG. This issue occurs only in IDA Pro– FreeMindAug 29, 2015 at 17:14
-
Are you using IDA x64?– revAug 29, 2015 at 17:15
-
@AcidShout Yes I am using IDA x64– FreeMindAug 29, 2015 at 17:15
Add a comment
|
1 Answer
AFAIK you cannot debug a 64 bit application locally with IDA Pro.
You need to use remote debugging.
See this page: https://www.hex-rays.com/products/ida/debugger/#details
and this: https://www.hex-rays.com/products/ida/debugger/cross-win-linux/win32towin64.shtml
-
I am win7 x64 - Should I run the IDA on VMware x86 OS and then make remote debugging on my x64 application through VMware? What would the scenario for my situation?– FreeMindAug 29, 2015 at 18:17
-
@FreeMind You can copy the debugging server
win64_remotex64.exeto the target machine(x64). Now in the other VM(32/64), run IDA 64, and useattach to remote win64to debug.– 0xecAug 29, 2015 at 18:23 -
Where is
win64_remotex64.exelocated at? I have checkedC:\Program Files\Windows Kits\8.1\Debuggers\x64but there is no file over there.– FreeMindAug 29, 2015 at 18:27 -
1@FreeMind
win64_remotex64.exeis a part of IDA. Check within your IDA installation directory.– 0xecAug 29, 2015 at 18:29