Log in

View Full Version : Help: Problem with BreakPoints


xcracx
April 27th, 2005, 18:13
CrackMe:
http://biw.rult.at/crackmes/ad_cm2.zip
("http://biw.rult.at/crackmes/ad_cm2.zip
")

i've been cracking this crack me by this tut: http://biw.rult.at/tuts/chainie_adcm2.htm
("http://biw.rult.at/tuts/chainie_adcm2.htm
")
not patching... keygen hack and when im setting the 3break points..
(every refrence) press F9 then click on the check button

ollydbg is not responding how can i soluve this problem it happens to me almost with all break points

OS: xp pro SP2

Ricardo Narvaja
April 28th, 2005, 06:37
with all breakpoints in any program? or fail the breakpoints in this crackme only?

Ricardo Narvaja

xcracx
April 28th, 2005, 11:22
well some programs works fine i think (memory and hardware on hex dump window) but normal (on CPU window) breakpoints by F2 making ollydbg not responding

just gave the crackme + tut for you to check if its my olly problem or the crackme's problem
xcracx

joe
April 28th, 2005, 15:32
Try to delete OllyDbg and unpack Olly from zip archive or if it don't help You, try download some of other version of Olly.
If there are still problem You must control Your OS (are there problem with other program's?).

xcracx
April 29th, 2005, 13:01
what you mean by controling my os? i've tried re unpack and olly 1.08
same problem... yes normal breakpoints give me that problem

i'll test it with a friend and post here if its only me

Ricardo Narvaja
April 29th, 2005, 16:55
i donīt hear in all years a OLLY user with BP problem you are the first in many years.
For this reason users recommend you see your OS (maybe a service interfering with OLLYDBG, maybe antivirus is very strange) you have softice instaled?
Ricardo

joe
April 30th, 2005, 01:53
Yes, Ricardo has a good idea. Try to disable antivirus check and firewalls ... (only when you test Olly). See WindowsTaskManager -> Performance -> CPU Usage (once I had problem with two firewals 100% CPU Usage). Then see Processes CPU. And try step by step switch off applications.

joe
April 30th, 2005, 01:58
Which OS You are usinig. And some information about Your computer: CPU frequency, memory ?

xcracx
April 30th, 2005, 03:31
Win Xp Pro...
my CPU is like 7%-18% normaly..

my firewall is only Winxp Firewall (network connection firewall)
my antivirus is norton antivirus 2000
with legal serial installed ...

Ricardo thats why i gave that tut to check if its the exe please check if theres a problem with that crackme meh

a. Ctrl + N
b. BreakPoint on every refrence (GetDlgItemTextA)
c. F9
d. entering an username + serail then click on Check

here is the problem.. olly is not pop up it just stays the same when i try to make olly the active window it is not respoinding

joe
April 30th, 2005, 05:08
I tested this Crackme too (under WinXP Pro & Win98). Its works fine and don't have any antidebug tricks. Your CPU usage is good, there isn't problem. Turn off norton antivirus (only for testing Olly): still don't responding?

Ricardo Narvaja
April 30th, 2005, 05:44
you check the same points he make in the post joe?

a b c d points

a. Ctrl + N
b. BreakPoint on every refrence (GetDlgItemTextA)
c. F9
d. entering an username + serail then click on Check

maybe the crackme check the initial value of the apis and crash OLLY.

you use hidedebugger 1.22 for hide olly, maybe olly is detected and crashed by the program.

Ricardo Narvaja

xcracx
April 30th, 2005, 09:08
i've tried to disable antivirus still no use...

i know there is no debug protect but its not responding even if i use hidedebug plug

man i really don't know what to do now.. it stucking me.. so badly..
if you can upload your olly on zip (options and stuff) i'll be thankful

xcracx

Ricardo Narvaja
April 30th, 2005, 09:45
you use hidebug 1.22 or old version?

Ricardo Narvaja

joe
April 30th, 2005, 10:56
I have Olly v. 1.0.10.0 and can send it, but i disbelieve from problem's description, that it can help You. Did You use only one version Olly (from one link)?
I don't understand why only Olly makes You the troubles. I think, that if only Olly is problematic, than this is solution, else...
My address is jancich@centrum.sk

joe
April 30th, 2005, 11:44
I had seen problem with xp SP2 in the forum. I don't have SP2! There may be problems (some programs don't works correctly with SP2). Try newest version of Olly!!! I don't known, if is running version 1.0.10.0 of Olly under SP2, by try!

sigint33
April 30th, 2005, 12:13
I'm running SP2 here and have no problem with Olly and the crackme in the initial post - it almost has to be something you recently installed, or some other change made recently.

SiGiNT

xcracx
May 1st, 2005, 17:14
i think i need to install some C++ runtimes and stuff like that

i've tried anything that you offered here.. im using the newest version of olly from this website
well i really dont know now but i have to find a solution soon.. may one of you come to my house check it out for 20$? ;P

Ricardo Narvaja
May 2nd, 2005, 05:47
i think in a service (securom, hasp etc than corrupt the work of olly) and is running

Ricardo

Ricardo Narvaja
May 2nd, 2005, 06:16
go to control panel -herramientas administrativas-services (in spanish)

and look the services are running in your computer, maybe you install a application with a antidebugging service (hasp securom, etc there are so much services than corrupt the work of the debuggers)


Ricardo Narvaja

xcracx
May 2nd, 2005, 17:20
ok tnx i'll search for an antidebugging services list

cuz im lost with that one tnx for the help (btw im not spanish lol)

xcracx
May 2nd, 2005, 17:25
ohhh

does ProcessGuard 3.100 has any effect on that?
i'll try to remove it then try again tnx for the help so far

xcracx

Ricardo Narvaja
May 3rd, 2005, 06:14
try an look?

Ricardo

xcracx
May 4th, 2005, 11:48
nothing works i dunno what to do... i can't format it /: to many important things
damiit its realllly important to me i tried disable antivirus and tried to close Process Guard while setting that breakpoint :\

here is a list of my Processes running(hope it will help)

myie.exe > internet explorer
MSGSYS.exe
WMIPRVSE.exe
ALG.exe
SVCHOST.exe
SMAgent.exe
SLEE91.exe
RTVSCAN.exe
DEFWATCH.EXE
DCSUserProt.exe > part of Process guard
ICQ.exe > chatting program
GigAlarm.exe > soft for alams.. like Rest at 2:00
QuickTV > tv watching soft for my computer tv
CFTMON.EXE
MSNMSGR.exe > messenger
Babylon > ver 5
ATIPTAXX.EXE > Ati radon graphic card supporter
pgaccount.exe > Another part Of Proccess Guard
VPTRAY.EXE > Norton AntiVirus 2000
EXPLORER.EXE
Ati2evxx.exe > another thing that connects to My radon
SPOOLSV.EXE
SVCHOST.EXE x5
Ati2evxx.exe > again
LSASS.EXE
SERVICES.EXE
WINLOGON.EXE
CSRSS.EXE
SMSS.EXE
WDFMGR.EXE
System
System Idle Process

haggar
May 4th, 2005, 15:24
This crackme was one of my first that I solved and I can tell you that there are no tricks in it. Simple small ASM crackme. Problem is either in your system, programs installed or olly.

blabberer
May 5th, 2005, 02:06
what is slee91 ( a brief google shows no hits on that name as an exe however there is a a jsr (java specification request )
JAINTM Service Logic Execution Environment API Specification
do you know this slee91 ??

btw if you think you have some problems in your installations (these boards might help resolve your problem though mostly they cater to
malware spyware issues and unwanted popups and such

bleepingcomputer.com --> grinler has some excellent tutorials on his site
forums.spywareinfo.com
tomcoyote.org
subratam.org
castlecops.com
gladiator-antivirus.com

all of them also hosts online chat applets where some of thier board members tend to be present almost in all time zones
you would be asked to run hijack-this (merijns) and post a log
and one of the the members will take over from there
hope you get your problem resolved

hosiminh
May 6th, 2005, 04:17
You didn't disabled rtvscan.exe

http://www.liutilities.com/products/wintaskspro/processlibrary/rtvscan / ("http://www.liutilities.com/products/wintaskspro/processlibrary/rtvscan/")

blabberer
May 6th, 2005, 05:53
nope rtvscan is part of norton
realtimevirus scan it doesnt interferE with ollydbg operation i ve been using norton corporate for more than a year now along with ollydbg

i just looked at your link what do you mean disable it HOSIMINH liutil also says it is norton and recommends not to terminate did you read your link contents ??


Description:
rtvscan.exe is an executable of the Symantec Internet Security Suite. It is responsible for the execution of real-time virus-scanning in order to detect virus infected files as they enter your system. This program is important for the stable and secure running of your computer and should not be terminated.

Ricardo Narvaja
May 6th, 2005, 09:40
but you close process guard GUI but you are sure the service is stopped? I only trust if a service is stopped when go to services list and change to disabled.

This services can let corrupt the IDT and make the olly fail, and you can close the services and the IDT remains corrupt, closing the services the IDT remain bad

UNISTALL this program, disable service and restart and try
Ricardo

MANiAC
May 6th, 2005, 10:33
Phear my leet keygen:

http://rapidshare.de/files/1607300/k3gen.rar.html ("http://rapidshare.de/files/1607300/k3gen.rar.html")

Beta
August 5th, 2005, 12:24
Had the same problem as you.Turns out there was ghostkeylogger
and i just have to terminate process SyncAgent.i know it isn't in your process list but makbe you have a similar program?try terminating all non system processes one by one