Attaching debugger to process IDA Pro privilege problem

Question

I am trying to attach the WinDBG to particular process but I constantly get the error below :
I am using win 7 x64 and am trying to debug x64 application. I run the IDA Pro with admin privileges. I have run the application both with admin privilege and the user one. I even tried to run it on different windows user account with admin privilege but I still get the same error.

The target process may have anti-attach protection. See this post. — 0xec, Aug 29 '15 at 16:59
@ExtremeCoders The problem is I can easily attach to the process in x64_DBG. This issue occurs only in IDA Pro — FreeMind, Aug 29 '15 at 17:14

score 3 · Accepted Answer · answered Aug 29 '15 at 18:12

3

AFAIK you cannot debug a 64 bit application locally with IDA Pro.
You need to use remote debugging.

See this page: https://www.hex-rays.com/products/ida/debugger/#details
and this: https://www.hex-rays.com/products/ida/debugger/cross-win-linux/win32towin64.shtml

answered Aug 29 '15 at 18:12

0xec

6,090
3
23
33

I am win7 x64 - Should I run the IDA on VMware x86 OS and then make remote debugging on my x64 application through VMware? What would the scenario for my situation? – FreeMind Aug 29 '15 at 18:17
@FreeMind You can copy the debugging server win64_remotex64.exe to the target machine(x64). Now in the other VM(32/64), run IDA 64, and use attach to remote win64 to debug. – 0xec Aug 29 '15 at 18:23
Where is win64_remotex64.exe located at? I have checked C:\Program Files\Windows Kits\8.1\Debuggers\x64 but there is no file over there. – FreeMind Aug 29 '15 at 18:27
1

@FreeMind win64_remotex64.exe is a part of IDA. Check within your IDA installation directory. – 0xec Aug 29 '15 at 18:29

Attaching debugger to process IDA Pro privilege problem

1 Answers1