Daemon Kernel Debugger issue

[misterious75]

Hey all,
I was trying to play The Guild 2, after some days to understand how to update and make it playable someone told me i had to use Daemon tools 4.06, securom V.7. I did it, finally began to play (after i've disconnected manually my cd-rom/dvd recorder/reader). At the end of the game i switched off my pc. When i boot it a bad surprise was there. My pc was freezed on the windows screen, no actions were permitted!
After that i replaced my windows by cd.
Now, the problem is:
1)i had to eliminate manually severals files (SPDT has been installed by daemon tools and it gives a conflict with KERNEL DEBUGGER) in the registry editor because i couldn't use DAEMON TOOLS or ALCOHOL (both install that damned SPDT).
2)Anyone has a suggestion how to install DAEMON OR ALCOHOL without having a KERNEL DEBUGGER conflict and then play The GUILD 2?

Waiting a help, THX:(

[Grumpy]

Firstly, you have posted in the wrong forum and since your problem can fit into many catagories I am moving your thread to the 'Chit Chat' forum.

I dont know why people insist on going to the effort of disconnecting their drives just to avoid using the original discs!!!??
Surely it is more work. hassle, and far more dangerous to always disconnect drives rather than just playing with the original disc?

Their are many things which can cause your problem.
It possibly started because you had images still mounted in the virtual drives when you manually removed files?
I know the game is protected with Securom but believe me 'Starforce' drivers can also contribute to this!
Also do you have itunes installed? Apparently it has a bug in it that occurs when installing Virtual drive low level drivers.

Lastly Fileforums is not really the place for your problem!
You would be better to go to the Daemon and or Alcohol forums.
Here (http://www.daemon-tools.cc/dtcc/t9327-p-sptdsys-and-other-sys-problem.html) is thread from the Daemon forums containing users with the same problem.
If that fails search google (SPDT+Alcohol) or (SPDT+Daemon), there are quite a few threads concerning your problem.

But I do think the only fix for you is to reinstall XP!! Even then it is not guaranteed to allow you to reinstall Alcohol or Daemon.
If you do get the opportunity to reinstall then I suggerst you do an Expert install and chage the name of the system.drivers during the install.

Good luck but I dont like your chances of an 'easy' fix!

[misterious75]

Wait! Perhaps i didn't explain me well. I already erased the sptd files manually. I've no itunes. Starforce??? None has mentioned that protection anywhere! How is it possible it's inside and nobody mentions?
My pc is now ok, i could install daemon or alcohol again, but i won't because in this way i install again sptd files giving me the same freezing issue.
So, how can i install (or use something alternative) daemon/alcohol with sptd without causing kernel debugger conflict?

Thank u very much for your help.


Their are many things which can cause your problem.
It possibly started because you had images still mounted in the virtual drives when you manually removed files?
I know the game is protected with Securom but believe me 'Starforce' drivers can also contribute to this!
Also do you have itunes installed? Apparently it has a bug in it that occurs when installing Virtual drive low level drivers.

Lastly Fileforums is not really the place for your problem!
You would be better to go to the Daemon and or Alcohol forums.
Here (http://www.daemon-tools.cc/dtcc/t9327-p-sptdsys-and-other-sys-problem.html) is thread from the Daemon forums containing users with the same problem.
If that fails search google (SPDT+Alcohol) or (SPDT+Daemon), there are quite a few threads concerning your problem.

But I do think the only fix for you is to reinstall XP!! Even then it is not guaranteed to allow you to reinstall Alcohol or Daemon.
If you do get the opportunity to reinstall then I suggerst you do an Expert install and chage the name of the system.drivers during the install.

Good luck but I dont like your chances of an 'easy' fix![/QUOTE]

[Grumpy]

My pc is now ok, i could install daemon or alcohol again, but i won't because in this way i install again sptd files giving me the same freezing issue.
So, how can i install (or use something alternative) daemon/alcohol with sptd without causing kernel debugger conflict?

Well I am glad your problems are sort of temporarily fixed.
But now you need to contact the Alcohol and Daemon forums for help to install their products.

Starforce??? None has mentioned that protection anywhere! How is it possible it's inside and nobody mentions?
Hehehehe, thats the problem, they dont tell you they are installing starforce!!
Starforce is a very intrusive game protection which is now used on a lot of the popular games.
Read here (http://www.glop.org/starforce/) about what it 'could' do to your system.

[TippeX]

its simple, dont use your kernel debugger (presumably softice) if you want to use daemon tools 4.x (or higher) or alcohol 120% 1.9.5.x or alcohol 52% (latest) as they all use the sptd interface, which has anti debug built into it and doesn't like kernel debuggers..

if you want to use a kernel debugger and play games from mounted images, then use daemon 3.47, its WELL documented on their forums.

secondly dont try and preach about starforce here, most people here are well aware of it.. and starforce also does not like kernel debuggers either..

so your statements somewhat contradict each other..

[Grumpy]

its simple, dont use your kernel debugger
Hehehe, ive been using Daemon 3.47 since it was released and since I only use it to keep my Battlefield 2 Mini Image permantly mounted I have never had the need to install the newer versions.
I did however realize about the newer versions not likeing Softice etc when I installed Daemon 4.03 on my sons computer, only tonight, so he too can have the BF2 mini image permantly mounted. ;)

So yes after realizing this I guess 'misterious75' problems wont be so hard to fix after all. :)

Also I failed to see where he was preaching about Starforce, or have I missed somthing?

[TippeX]

starforce preach was ur post.. soz grumpy :), but yeh..

if you want to use a kernel debugger (windbg in kernel mode, softice, syser? etc..) then you simply cant use alc/daemon tools latest versions (due to a 'conflict' from sptd.sys.. not really a conflict.. just the sptd coders dont want you to see what they're doing.. although their anti debug is 'bypassable' if you know what you're doing)..

ring 3 (ie not driver based) debuggers like olly etc can be used (though they do have a little anti-debug in the daemon tools / alc exe program... and a vm) :)

[Grumpy]

@TippeX
starforce preach was ur post.. soz grumpy , but yeh..
Did you not realize it was me or something?? :confused: Have you been on the Amber Fluids again? :p
I am still confused that you thought I was preaching starforce. :confused:

But you did say 'most' people are aware of it, that doesnt mean all. And I am aware of most people here. ;)

[ByteMare]

Basically, SF is shit and everybody knows it..their latest move to "kill" DT is more lame...why improve a protection that everybody hates? Like the costumer wanted "improvements"...

Release
crappy game
protection issues
consumer pissed off
excuses
bla bla
more bla bla
patch
fix
excuses
consumer pissed 2 the max
bla bla
protection removed

weee,,,,

[TippeX]

you forgot 'issues when service packs of operating systems were released, which rendered the game unplayable until the sf people released patches' and 'system stability compromised'

[misterious75]

The problem is that Daemon tools, i won't reinstall it.
Now when i was playing The Guild 2 1.0 version i used the image mounted on Daemon 3.47 and everything was ok. Then i upgraded to 1.16 version because lots of bugs denied my enjoy. Tried to use Starforce 7.26 and mounting the image on Daemon 3.47 but i can't play, protection detected (i presume)

Can anyone tell me how to deactivate the bastard kernel debugger or solve this Starforce issue?


its simple, dont use your kernel debugger (presumably softice) if you want to use daemon tools 4.x (or higher) or alcohol 120% 1.9.5.x or alcohol 52% (latest) as they all use the sptd interface, which has anti debug built into it and doesn't like kernel debuggers..

if you want to use a kernel debugger and play games from mounted images, then use daemon 3.47, its WELL documented on their forums.

secondly dont try and preach about starforce here, most people here are well aware of it.. and starforce also does not like kernel debuggers either..

so your statements somewhat contradict each other..

[Grumpy]

Your problem really doesnt belong to these forums!
Ive noticed you have posted on the Daemon Tools forums, and that is where you should be posting.

@TippeX
Looking at all the posts on the Daemon tools forums about SPDT and Kernel Debuggers makes me believe this problem couldnt be 'just' from programs like Softice etc? There seems to be more to it than that?

[TippeX]

totally more to it.. its prevention to stop people reversing their code, 'rootkit' technology kinda.. mark thingie from sysinternals did a report on it.. on the old dt.. now 4.06 is doing a LOT more than it did before.. it filters a lot more data than it 'should' do..

[Muji-FightR]

I'm not totally sure what is being discussed here, SF, Daemon, kernel mode Dbgers ala TRW or Syser (erm lol), SICE whatever

However, I've always had problems getting SICE to run x(
This might be a possible solution for my problem but atm I'm so used to working with ODbg, it doesnt matter anymore switching to SICE...
Development stopped so why bother, I'll just wait for Olly2, hopefully it will come (will it ?), by the time it will come I will not yet be reversing games tho

[TippeX]

yeh but will olly2 be able to debug ring 0... thats the main question... softice is damned handy for seeing 'below the hood' in that respect

and for softice you sometimes need to have to get the osinfo.dat file from the compuware site etc.. and configure some things, once you have it working then you'll need to modify it a little so its 'hidden'

trw is a bit outdated now isn't it.. syser i found pretty decent.. like softice with lipstick (cuter interface)

[Muji-FightR]

I know this is rather annoying for you I guess but would you mind sending me a few links to sites or patches for hiding SICE properly, I'm not the king at such stuff.
It was hard enough for me to get Olly half way hidden from RLP, Execryptor still won't run...
Would be very kewl of you, however, there's no need :)