Windows Debugger (BSOD)

Status
Not open for further replies.

Nestea

Posts: 82   +28
I have troubles to set up the windbg.
Here two snippets.

link_1
link_2

I tried
Code:
SRV*c:\a*http://msdl.microsoft.com/download/symbols
SRV c:\a http://msdl.microsoft.com/download/symbols

but it does not work.

thanks for reading
 
> Hello and welcome to TechSpot!
I am sorry. hi ^_^;

Well I am back again.
The Problem has been or is that the PC does not download the symbols or not entirely. I could download them manually but I am just asking out of curiosity and I want it to make work the usual way.
The OS is Win 2k.

What happens:
setting the Symbol Path to __SRV*c:\a*http://msdl.microsoft.com/download/symbols__ and loading a complete memory dump, this is what comes up:
Code:
Microsoft (R) Windows Debugger  Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINNT\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\a*http://msdl.microsoft.com/download/symbols
Executable search path is: 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntoskrnl.exe - 
Windows 2000 Kernel Version 2195 (Service Pack 4) UP Free x86 compatible
Product: WinNt
Kernel base = 0x80400000 PsLoadedModuleList = 0x8046e1b8
Debug session time: Mon Apr 16 10:46:53.218 2007 (GMT+2)
System Uptime: 0 days 1:15:56.919
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntoskrnl.exe - 
Loading Kernel Symbols
......................................................................................................
Loading User Symbols
..........Unable to read LDR_DATA_TABLE_ENTRY at 00133048 - NTSTATUS 0xC0000147

Loading unloaded module list
..............*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntdll.dll - 

WARNING: .reload failed, module list may be incomplete
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1E, {c0000005, 80461422, 1, 0}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Probably caused by : ntoskrnl.exe ( nt!KeTerminateThread+b74 )

Followup: MachineOwner
---------
what happens if I enter __SRV*c:\a*http://msdl.microsoft.com/download/symbols__ in the prompt?
He is downloading about 11 mib:
Code:
kd> SRV*c:\a*http://msdl.microsoft.com/download/symbols
*** ERROR: Module load completed but symbols could not be loaded for pg2.exe
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for COMCTL32.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for WS2_32.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for RPCRT4.DLL - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for USER32.DLL - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ADVAPI32.dll - 
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for KERNEL32.DLL - 
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for amon.sys
*** ERROR: Module load completed but symbols could not be loaded for Aspi32.SYS
*** ERROR: Module load completed but symbols could not be loaded for vtdisp.dll
*** ERROR: Module load completed but symbols could not be loaded for dump_atapi.sys
*** ERROR: Module load completed but symbols could not be loaded for cmuda.sys
*** ERROR: Module load completed but symbols could not be loaded for vtmini.sys
*** ERROR: Module load completed but symbols could not be loaded for ACPI.sys
*** ERROR: Module load completed but symbols could not be loaded for isapnp.sys
*** ERROR: Module load completed but symbols could not be loaded for serial.sys
*** ERROR: Module load completed but symbols could not be loaded for i8042prt.sys
*** ERROR: Module load completed but symbols could not be loaded for fetnd5b.sys
*** ERROR: Module load completed but symbols could not be loaded for Cdr4_2K.SYS
*** ERROR: Module load completed but symbols could not be loaded for viaagp1.sys
*** WARNING: Unable to verify timestamp for fdc.sys
*** ERROR: Module load completed but symbols could not be loaded for fdc.sys
*** WARNING: Unable to verify timestamp for flpydisk.sys
*** ERROR: Module load completed but symbols could not be loaded for flpydisk.sys
*** ERROR: Module load completed but symbols could not be loaded for Cdralw2k.SYS
*** ERROR: Module load completed but symbols could not be loaded for pgfilter.sys
*** ERROR: Module load completed but symbols could not be loaded for mouhid.sys
*** WARNING: Unable to verify timestamp for dmload.sys
*** ERROR: Module load completed but symbols could not be loaded for dmload.sys
*** ERROR: Module load completed but symbols could not be loaded for viaide.sys
*** WARNING: Unable to verify timestamp for Fs_Rec.SYS
*** ERROR: Module load completed but symbols could not be loaded for Fs_Rec.SYS
*** WARNING: Unable to verify timestamp for ParVdm.SYS
*** ERROR: Module load completed but symbols could not be loaded for ParVdm.SYS
*** ERROR: Module load completed but symbols could not be loaded for PROCEXP100.SYS
*** WARNING: Unable to verify timestamp for Null.SYS
*** ERROR: Module load completed but symbols could not be loaded for Null.SYS
*** ERROR: Module load completed but symbols could not be loaded for AvgAsCln.sys
*** ERROR: Module load completed but symbols could not be loaded for BANTExt.sys
*** ERROR: Module load completed but symbols could not be loaded for guard.sys
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for dump_WMILIB.SYS - 
Couldn't resolve error at 'RV*c:\a*http://msdl.microsoft.com/download/symbols'

the probelm has been solved because trying this on my home pc worked.
But not using the same dump.

thanks for reading
 
That`s your problem right there. Microsoft doesn`t provide symbol support for Windows2000. You would need to download the actual symbol packages. Another way is to follow the advice by CPC2004 in this post HERE.

Regards Howard :)
 
15 minutes after my post Ive downloaded it at
microsoft.com/whdc/devtools/debugging/symbolpkg.mspx
and it works.
with windbg saying ntoskrnl.exe is faulty, was quite little thing.

howard_hopkinso
thank you for the links
cya
 
Status
Not open for further replies.
Back