Closed jorjik closed 2 years ago
It looks like either antivirus or Windows itself blocks the call of SetThreadContext
.
Could you paste the text from About/SysInfo?
ConEmu 210912 [32] Startup Info
OsVer: 6.1.7601.x64, Product: workstation, SP: 1.0, Suite: 0x100
Build: Service Pack 1, ReactOS: 0, Rsrv: 0, WINE: 0, PE: 0, R2: 0
DBCS: 0, IMM: 1, Remote: 0, ACP: 1251, OEMCP: 866, Admin: 1
StartTime: 2021-10-05 11:10:26.214
AppID: 8af3b6289586f4029d7fa55f51cda26e::169
Desktop: Winsta0\Default
, SessionId: 1, ConsoleSessionId: 1, Theming: 1, DWM: 1
Title: C:\Users\User\Desktop\ConEmu.lnk
Size: {0,0},{0,0}
Flags: 0x00000C01, ShowWindow: 1, ConHWnd: 0x00000000
char: 1, short: 2, int: 4, long: 4, u64: 8
Handles: 0x00000000, 0x00010001, 0x00000000
StdFlags: In=x0 (Mode=-1) Out=x0 (Mode=-1) Err=x0 (Mode=-1)
Current PID: 24320, TID: 26860
Active HKL: 0x04090409
GetKeyboardLayoutList: 0x04190419 0x04090409
CmdLine: "D:\OpenServer\modules\conemu\ConEmu.exe"
ExecMod: D:\OpenServer\modules\conemu\ConEmu.exe
WorkDir: D:\OpenServer\modules\conemu
PathEnv: C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files\Git\cmd;C:\Program Files (x86)\Yarn\bin\;C:\Users\User\AppData\Local\Programs\Python\Python38-32\Scripts\;C:\Users\User\AppData\Local\Programs\Python\Python38-32\;C:\Users\User\AppData\Local\Programs\Microsoft VS Code\bin;C:\Users\User\AppData\Local\GitHubDesktop\bin;C:\Users\User\AppData\Local\Yarn\bin
ConFont: 0 Lucida Console 00 Consolas
CMD's AutoRuns: {not defined}
Foreground: x0023115E {379,310}-{1323,986} 'VirtualConsoleClass' - powershell (Admin)
MouseCursor: {1406,951} MouseMonitor: 00010001 StartMonitor: 00010001
Display: bpp=32, planes=1, align=1, vrefr=60, shade=x00000000, rast=x00007E99, dpi=120x120, per-mon-dpi=0
Monitors (dpi: WholeDesktop, Effective, Angular, RAW):
00010001: {0,0}-{1920,1080} (1920x1080), Working: {0,0}-{1846,1080} (1846x1080), dpi: {120,120};{120,120};{120,120};{120,120} \\.\DISPLAY1
<<== Primary
Modules:
00C60000-00ED1FFF 272000 D:\OpenServer\modules\conemu\ConEmu.exe
77B80000-77CFFFFF 180000 C:\Windows\SysWOW64\ntdll.dll
77670000-7777FFFF 110000 C:\Windows\syswow64\kernel32.dll
75B00000-75B46FFF 47000 C:\Windows\syswow64\KERNELBASE.dll
72060000-721FDFFF 19E000 C:\Windows\WinSxS\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.24483_none_2b200f664577e14b\COMCTL32.dll
75BF0000-75C9BFFF AC000 C:\Windows\syswow64\msvcrt.dll
775E0000-7766FFFF 90000 C:\Windows\syswow64\GDI32.dll
77190000-7728FFFF 100000 C:\Windows\syswow64\USER32.dll
759E0000-75A80FFF A1000 C:\Windows\syswow64\ADVAPI32.dll
758F0000-75908FFF 19000 C:\Windows\SysWOW64\sechost.dll
773F0000-774DFFFF F0000 C:\Windows\syswow64\RPCRT4.dll
752A0000-752FFFFF 60000 C:\Windows\syswow64\SspiCli.dll
75290000-7529BFFF C000 C:\Windows\syswow64\CRYPTBASE.dll
77040000-77049FFF A000 C:\Windows\syswow64\LPK.dll
75B50000-75BECFFF 9D000 C:\Windows\syswow64\USP10.dll
77060000-770B6FFF 57000 C:\Windows\syswow64\SHLWAPI.dll
74FA0000-74FA8FFF 9000 C:\Windows\system32\VERSION.dll
74FB0000-74FE1FFF 32000 C:\Windows\system32\WINMM.dll
748A0000-748B0FFF 11000 C:\Windows\system32\NETAPI32.dll
74890000-74898FFF 9000 C:\Windows\system32\netutils.dll
72560000-72578FFF 19000 C:\Windows\system32\srvcli.dll
74880000-7488EFFF F000 C:\Windows\system32\wkscli.dll
72440000-7244EFFF F000 C:\Windows\system32\SAMCLI.DLL
75920000-7599AFFF 7B000 C:\Windows\syswow64\COMDLG32.dll
75CA0000-768EBFFF C4C000 C:\Windows\syswow64\SHELL32.dll
77290000-773EEFFF 15F000 C:\Windows\syswow64\ole32.dll
769C0000-76A51FFF 92000 C:\Windows\syswow64\OLEAUT32.dll
770E0000-7713FFFF 60000 C:\Windows\system32\IMM32.DLL
77510000-775DDFFF CE000 C:\Windows\syswow64\MSCTF.dll
74E50000-74E52FFF 3000 C:\Windows\system32\api-ms-win-core-synch-l1-2-0.DLL
6F950000-6F9CFFFF 80000 C:\Windows\system32\uxtheme.dll
6F930000-6F942FFF 13000 C:\Windows\system32\dwmapi.dll
77780000-7778AFFF B000 C:\Windows\syswow64\profapi.dll
6FB10000-6FCA3FFF 194000 C:\Program Files (x86)\360\Total Security\safemon\safemon.dll
759C0000-759C4FFF 5000 C:\Windows\syswow64\PSAPI.DLL
6FAD0000-6FB0BFFF 3C000 C:\Windows\system32\OLEACC.dll
75490000-755DEFFF 14F000 C:\Windows\syswow64\urlmon.dll
770D0000-770D3FFF 4000 C:\Windows\syswow64\api-ms-win-downlevel-ole32-l1-1-0.dll
77140000-77143FFF 4000 C:\Windows\syswow64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
76980000-76984FFF 5000 C:\Windows\syswow64\api-ms-win-downlevel-advapi32-l1-1-0.dll
75910000-75913FFF 4000 C:\Windows\syswow64\api-ms-win-downlevel-user32-l1-1-0.dll
759D0000-759D3FFF 4000 C:\Windows\syswow64\api-ms-win-downlevel-version-l1-1-0.dll
77050000-77052FFF 3000 C:\Windows\syswow64\api-ms-win-downlevel-normaliz-l1-1-0.dll
770C0000-770C2FFF 3000 C:\Windows\syswow64\normaliz.DLL
756B0000-758E7FFF 238000 C:\Windows\syswow64\iertutil.dll
76A60000-76E96FFF 437000 C:\Windows\syswow64\WININET.dll
75AE0000-75AF8FFF 19000 C:\Windows\syswow64\USERENV.dll
75670000-756A4FFF 35000 C:\Windows\syswow64\WS2_32.dll
77790000-77795FFF 6000 C:\Windows\syswow64\NSI.dll
737B0000-737CCFFF 1D000 C:\Program Files (x86)\Yandex\Punto Switcher\pshook.dll
6F780000-6F84CFFF CD000 D:\OpenServer\modules\conemu\ConEmu\ConEmuCD.dll
755E0000-75662FFF 83000 C:\Windows\syswow64\CLBCatQ.DLL
50590000-506FFFFF 170000 C:\Windows\system32\explorerframe.dll
50560000-5058EFFF 2F000 C:\Windows\system32\DUser.dll
504A0000-50551FFF B2000 C:\Windows\system32\DUI70.dll
6C4A0000-6C5D0FFF 131000 C:\Windows\system32\WindowsCodecs.dll
70F10000-70F5BFFF 4C000 C:\Windows\system32\apphelp.dll
71E10000-71F04FFF F5000 C:\Windows\system32\PROPSYS.dll
C:\Program Files (x86)\360\Total Security\safemon\safemon.dll
Looks like total security blocks ConEmu injections. I can not do anything from my side. Please ask their support for help. Probably you need to configure some exclusions.
Versions
ConEmu build: 210912 OS version: Windows 7 x64 Used shell version - cmd
Problem description
look
https://i.imgur.com/oZwtq8g.png