Debug Symbols

Can anyone help me? I am trying to debug my memory dumps, but I need the symbols from MS to do it.

However, when I run this command:

symchk /r c:\windows\system32 /s SRV*e:\symbols\*http://msdl.microsoft.com/download/symbols

Every file fails, with the message mismatched version or not found.


What gives?

 

This is as far as I get:



Microsoft (R) Windows Debugger Version 6.3.0005.1
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Documents and Settings\Jeremy\Desktop\Mini012404-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: .sympath SRV*e:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Windows XP Kernel Version 2600 (Service Pack 1) UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Kernel base = 0x804d4000 PsLoadedModuleList = 0x80543530
Debug session time: Sat Jan 24 21:21:15 2004
System Uptime: 0 days 0:11:00.492
Unable to load image ntoskrnl.exe, Win32 error 2
*** WARNING: Unable to verify timestamp for ntoskrnl.exe
*** ERROR: Module load completed but symbols could not be loaded for ntoskrnl.exe
Loading Kernel Symbols
..................................................................................................................
Loading unloaded module list
...........
Loading User Symbols
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 86427532, {1db, 2, 3, b}

***** Kernel symbols are WRONG. Please fix symbols to do analysis.

Unable to load image pavdrv51.sys, Win32 error 2
*** WARNING: Unable to verify timestamp for pavdrv51.sys
*** ERROR: Module load completed but symbols could not be loaded for pavdrv51.sys
Probably caused by : pavdrv51.sys ( pavdrv51+7fc0 )

Followup: MachineOwner
---------

 

Even watching the video and typing exactly what the video on symbols shows gives me this:

C:\Documents and Settings\Jeremy>symchk C:\windpws\system32\kernel32.dll /s srv*
e:\symbols*http://msdl.microsoft.com/downloads/symbols

SYMCHK: FAILED files = 0
SYMCHK: PASSED + IGNORED files = 0

 

An example:


SYMCHK: asr_fmt.exe FAILED - asr_fmt.pdb mismatched or not found
SYMCHK: asr_ldm.exe FAILED - asr_ldm.pdb mismatched or not found
SYMCHK: asr_pfu.exe FAILED - asr_pfu.pdb mismatched or not found
SYMCHK: asycfilt.dll FAILED - asycfilt.pdb mismatched or not found
SYMCHK: at.exe FAILED - at.pdb mismatched or not found
SYMCHK: ATHPRXY.DLL FAILED - athprxy.pdb mismatched or not found
SYMCHK: ati2dvag.dll FAILED - ATI2DVag.pdb mismatched or not found
SYMCHK: ati2edxx.dll FAILED - ati2edxx.pdb mismatched or not found
SYMCHK: ati2evxx.dll FAILED - ati2evld.pdb mismatched or not found
SYMCHK: ati2evxx.exe FAILED - ati2evxx.pdb mismatched or not found
SYMCHK: Ati2mdxx.exe FAILED - Built without debugging information.
SYMCHK: ati2sgag.exe FAILED - ati2sgag.pdb mismatched or not found
SYMCHK: ati3d1ag.dll FAILED - ati3d1ag.pdb mismatched or not found
SYMCHK: ati3d2ag.dll FAILED - ati3d2ag.pdb mismatched or not found
SYMCHK: ati3duag.dll FAILED - ati3duag.pdb mismatched or not found
SYMCHK: ATIDDC.DLL FAILED - atiddc.pdb mismatched or not found
SYMCHK: atiiiexx.dll FAILED - atiiiexx.pdb mismatched or not found
SYMCHK: atioglxx.dll FAILED - atioglxx.pdb mismatched or not found
SYMCHK: atipdlxx.dll FAILED - atipdlxx.pdb mismatched or not found

 

cant really help you out a lot on this one Adryn

but heres an article from the kb explaining how you can verify if the dump file itself is created properly might or might not help you out
http://support.microsoft.com/default.aspx?scid=kb;en-us;315271&Product=winxp

 

They lie!



dumpcheck wants symbols too

 

sorry m8 it specifically said no symbols required

 

have you tried putting the symbols on a different path rather than System 32
might stop the win 32 errors cos that ntoskrnl.exe is the windows boot screen dont know if thats conflicting
or have you tried downloading a different pack of symbols although i notice it does say it shouldnt matter in xp

why do you never come on here with easy questions

 

Well, the symbols are being downloaded to a different directory, the system32 path specified is so that symchk will download symbols for those files.


Re: posting toughies, I don't want to make it too easy on you guys

 

Ahhh, didn't see that. But will it let me really read the memory dump?

I've deleted them since and reinstalled my OS (bleh), but I wanted to know what was causing my errors and fix it.

I got impatient and frustrated with the apparently non-functioning symbols server, however and levelled the OS.

 

I know this is a little late but I just found this article at microsoft, eventhough it is for Win2k3, then the process of troubleshooting a kernel dump with symbol files should be the same:

http://www.microsoft.com/downloads/details.aspx?FamilyID=859637b4-85f1-4215-b7d0-25f32057921c

 

I've since given up on this, but I will take a look at that, thanks snakefoot.

 

Have now been looking through the entire document, and it actually provides some good information about the different BSOD excepetions.