I have the following problem. When I open a sample with ollydbg v2.01, then I get that message here:
Debugged application has modified the debugging registers. Maybe it called ZwContinue() or SetDebugContext(). The modifications are saved to the log.
What does that mean? How can I fix it? I did not change any options such that I use the default configurations.
edit: As I try to describe it in the comments, I can open the same sample in ollydbg v1.10, but not in ollydbg v2.01. I mean, I can open it in v2.01, but it starts at a RETN instruction & process terminated. Now, I have read at http://www.ollydbg.de/version2.html that olly replaces ZwContinue() with the INT3 instruction. I compare the opened sample in v1.10 with the sample in v2.01 and yes, in v1.10 it has a lot of INT3 instructions, but in v2.01 there is INT3. As I also said below, I need v2.01 because of the Debug child process option.