8

I am running windows 8.1 and OllyDBG 2.0. When I attach to a process and view the executable modules, I want to open one. However, when I double click on one of the modules, it won't open in the main OllyDBG window, which it should. Has anyone else had a similar issue or have a solution? I run OllyDBG as administrator and I even tried running it in compatibility mode for XP. I can provide more information if it is needed to fully answer my question.

Chris Altig
  • 181
  • 1
  • 3
  • Press Alt+L to open the Log window. What does the log say? – Jason Geffner Dec 28 '13 at 01:33
  • The log is saying: "Different PE headers in file and in memory (System update is pending?)" – Chris Altig Dec 28 '13 at 02:41
  • Strangely enough though, it works just fine in OllyDBG 1.1 – Chris Altig Dec 28 '13 at 04:48
  • Most probably it is due to antivirus . Are you running Avast ? Also try to use the most recent version of ollydbg, version 2.01 released on september 2013 – 0xec Dec 28 '13 at 18:17
  • 1
    Well the error happens due to the fact that certain (overcautious) antivirus hook/modify the system dlls in memory and this causes a mismatch of the dll between disk and memory. – 0xec Dec 28 '13 at 18:31
  • Would malwarebytes do this? How would I prevent it from interfering? – Chris Altig Dec 28 '13 at 23:35
  • @ChrisAltig Disable the AV and see, also make sure you are running the latest version of Olly. However the best solution is to run your reversing session in a separate isolate VM. You may try VMWare. – 0xec Dec 29 '13 at 17:27

1 Answers1

1

This has been lying unanswered for year now
hit enter or right click and follow code in cpu if double clicking doesnt work

enter image description here

blabb
  • 16,376
  • 1
  • 15
  • 30