Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Error:Symbol File not found in WinDbg

Tags:

windbg

I am doing remote debugging of windows vista using VmWare , but i encounter the

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrpamp.exe " 

also , if i give "!process 0 0 " in windbg , i get

**** NT ACTIVE PROCESS DUMP **** NT symbols are incorrect, please fix symbols

I tried setting _NT_SYMBOL_PATH to "symsrv*symsrv.dll*c:\symbols*http://msdl.microsoft.com/download/symbols" (This was given in http://support.microsoft.com/kb/311503/) , then i changed the symbol file path of windbg to "srv*C:\Symbols\MsSymbols*http://msdl.microsoft.com/download/symbols" , but even after that i get the same errors, when i run symchk.exe to download symbols, i could get a lot of FAILED messages. when i try to reload using .reload after running !sym noisy, i get

Connected to Windows Vista 6000 x86 compatible target at (Sat Jan 28 16:52:23.839 2012 (GMT+5)), ptr64 FALSE
SYMSRV:  The system cannot find the file specified.
SYMSRV:  The system cannot find the file specified.
SYMSRV:  The system cannot find the file specified.
SYMSRV:  c:\symbols\mssymbols\ntkrpamp.pdb\FD50D285751D4684938604B2CC1B41682\ntkrpamp.pdb not found
SYMSRV:  http://msdl.microsoft.com/download/symbols/ntkrpamp.pdb/FD50D285751D4684938604B2CC1B41682/ntkrpamp.pdb not found
DBGHELP: ntkrpamp.pdb - file not found
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntkrpamp.exe - 
DBGHELP: nt - export symbols
Loading Kernel Symbols
...............................................................
................................................................
............
Loading User Symbols

Loading unloaded module list
....

But still when i try to run !process 0 0 , i get an error saying incorrect symbols

Thanks for your help and time in advance..

like image 822
rebeL Avatar asked Jan 28 '12 11:01

rebeL


1 Answers

Your fixed symbol path looks good to me, that first path was entirely incorrect. Can you try the following commands and see if it works?

.symfix c:\websymbols
.reload /o

If that doesn't work, are you running and official version on the target? As in, it's not a Beta release or something, right? You might also want to rule out any networking issues.

like image 105
snoone Avatar answered Oct 20 '22 06:10

snoone