Windbg 无法附加到进程。访问被拒绝。

Windbg could not attach to process. Access was denied.

我尝试使用 windbg 附加到一个进程(属于防病毒软件)。我 运行 windbg 作为管理员,但是当我尝试附加到进程时出现以下错误:

Unable to examine process id 6128. Win32 error 0n5
Cannot debug pid 6128, Win32 error 0n5
Access is denied

有什么我忽略的地方吗?感谢您的帮助

即使您以管理员身份登录,您也可能需要 运行 windbg 作为提升的管理员。尝试右键单击 windbg 图标和 select "Run as administrator"。然后尝试附加到进程。

同样来自 Harry Johnston 上面的评论:

Anti-virus software usually protects its processes from interference, including debugging. There may be an option to turn this off, look for "tamper protection" or similar. If there is no option to disable tamper protection, there is probably no straightforward way to debug the process.