Re: Can't attach to services for debugging

No, I get the same result while trying to attach svchost process.

I am trying to attach to a C++ service designed and developed by me. This is
not even a new program, it is deployed at client locations. I retried
attaching to my service program after disabling Microsoft Antispyware and
Macfee Viruscan. No difference at all.

One more thing, I applied Windows 2003 SP1 recently. I don't recall
attaching/debugging the service since then. Frankly I don't know whether
this happened because of spyware attack or SP1 installation.

How can my own code become anti-debug program?

Regards,
Sharath

"Rhett Gong [MSFT]" <v-raygon@xxxxxxxxxxxxxxxxxxxx> wrote in message
news:QHfDdh3WFHA.2184@xxxxxxxxxxxxxxxxxxxxxxxx
> If you are an local admin and add you to Debug Programs, you should be
> able
> to debug. I saw you get a quick flash when calling ntsd -pv -p <pid>, it
> seems like you are debugging an anti-debug program.
>
> Are you able to attach to svchost?
> Does this happen only on this certain service? If yes, could check which
> company made this service program?
> And please turn off all your anti-virus softwares and try again.
>
> Please let me know what result you get.
>
> Thanks,
> Rhett Gong [MSFT]
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
> http://support.microsoft.com/default.aspx?scid=/servicedesks/msdn/nospam.asp
> &SD=msdn
>
> This posting is provided "AS IS" with no warranties and confers no rights.
>


.

Relevant Pages
Loading