2

I am trying to attach the WinDBG to particular process but I constantly get the error below : enter image description here
I am using win 7 x64 and am trying to debug x64 application. I run the IDA Pro with admin privileges. I have run the application both with admin privilege and the user one. I even tried to run it on different windows user account with admin privilege but I still get the same error.

4
  • The target process may have anti-attach protection. See this post.
    – 0xec
    Aug 29, 2015 at 16:59
  • @ExtremeCoders The problem is I can easily attach to the process in x64_DBG. This issue occurs only in IDA Pro
    – FreeMind
    Aug 29, 2015 at 17:14
  • Are you using IDA x64?
    – rev
    Aug 29, 2015 at 17:15
  • @AcidShout Yes I am using IDA x64
    – FreeMind
    Aug 29, 2015 at 17:15

1 Answer 1

3

AFAIK you cannot debug a 64 bit application locally with IDA Pro.
You need to use remote debugging.

See this page: https://www.hex-rays.com/products/ida/debugger/#details
and this: https://www.hex-rays.com/products/ida/debugger/cross-win-linux/win32towin64.shtml

4
  • I am win7 x64 - Should I run the IDA on VMware x86 OS and then make remote debugging on my x64 application through VMware? What would the scenario for my situation?
    – FreeMind
    Aug 29, 2015 at 18:17
  • @FreeMind You can copy the debugging server win64_remotex64.exe to the target machine(x64). Now in the other VM(32/64), run IDA 64, and use attach to remote win64 to debug.
    – 0xec
    Aug 29, 2015 at 18:23
  • Where is win64_remotex64.exe located at? I have checked C:\Program Files\Windows Kits\8.1\Debuggers\x64 but there is no file over there.
    – FreeMind
    Aug 29, 2015 at 18:27
  • 1
    @FreeMind win64_remotex64.exe is a part of IDA. Check within your IDA installation directory.
    – 0xec
    Aug 29, 2015 at 18:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.