Log in

View Full Version : How ollydbg enumerates process in attach viewer?


suddenLy
October 5th, 2005, 22:53
Hi guys,

I am trying with some target.

I can view the process in task manager,

and get the PID by using EnumProcess func in PSAPI.DLL.

But when I try to attach the target,

Ollydbg's attach viewer doesn't show the target process.

So I wonder how this situation happens.

Any ideas?

Lord_Looser
October 6th, 2005, 02:43
Make OllyDbg just-in-time debugger (OllyDbg menu - Options).
Now you can select debug target direcly within task manager's process view (task manager - processes - mouse right click on target).
If OllyDbg appears and cannot debug target, perhaps process is created suspended for example.

blabberer
October 6th, 2005, 11:17
well if you can find the pid
open cmd.exe navigate to the ollydbg directory
and then
type ollydbg -p pid to make ollydbg attach to that process by pid

|hOwner = 002901DE ('OllyDbg',class='OLLYDBG')
|Text = "OllyDbg is unable to attach to process 0000007B as a "just-in-time" debugger."
|Title = "Error"
\Style = MB_OK|MB_ICONHAND|MB_TASKMODAL



well tip courtesy wtbw

suddenLy
October 9th, 2005, 05:23
yep it works!

thanx a lot Lord_Looser and oh me anon.