Results 1 to 6 of 6

Thread: Symbol file problem

  1. #1

    Symbol file problem

    I can figure out why it can't find the symbol file.

    Does anyone know how to fix this ?

    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -

    Thanks.

    CommandLine: C:\masm32\SOURCE\excep.exe
    Symbol search path is: srv*C:\WINDOWS\Symbols*http://msdl.microsoft.com/download/symbols.
    Executable search path is:
    ModLoad: 00400000 00403000 image00400000
    0:000> .reload
    Reloading current modules
    .
    0:000> .reload
    Reloading current modules

    *** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -

  2. #2
    The local symbols cache might not be accessible. I'd try running the debugger as admin, or changing C:\Windows\symbols to something readable/writable, such as C:\temp\symbols.

  3. #3

    Different dir did not help

    I already tried putting the symbols in a different dir.

  4. #4
    Super Moderator
    Join Date
    Dec 2004
    Posts
    1,456
    Blog Entries
    15
    the symbol path is there
    is the actual file avilable ?

    Code:
    0:000> .reload
    Reloading current modules
    ............
    0:000> .shell
    Microsoft Windows XP [Version 5.1.2600]
    (C) Copyright 1985-2001 Microsoft Corp.
    
    F:\windbg><.shell waiting 1 second(s) for process>
    <.shell process may need input>cd /d "f:\symbols\ntdll.pdb\6992F4DAF4B144068D78669D6CB5D2072"
    cd /d "f:\symbols\ntdll.pdb\6992F4DAF4B144068D78669D6CB5D2072"
    cd /d "f:\symbols\ntdll.pdb\6992F4DAF4B144068D78669D6CB5D2072"
    
    F:\SYMBOLS\ntdll.pdb\6992F4DAF4B144068D78669D6CB5D2072><.shell waiting 1 second(s) for process>
    <.shell process may need input>dir /b
    dir /b
    dir /b
    ntdll.pdb
    
    F:\SYMBOLS\ntdll.pdb\6992F4DAF4B144068D78669D6CB5D2072><.shell waiting 1 second(s) for process>
    <.shell process may need input>ren ntdll.pdb ntdll.pd_
    ren ntdll.pdb ntdll.pd_
    ren ntdll.pdb ntdll.pd_
    
    F:\SYMBOLS\ntdll.pdb\6992F4DAF4B144068D78669D6CB5D2072><.shell waiting 1 second(s) for process>
    <.shell process may need input>exit
    exit
    exit
    .shell: Process exited
    Press ENTER to continue
    <.shell waiting 1 second(s) for process>
    <.shell process may need input>
    
    0:000> .reload
    Reloading current modules
    ..........*** ERROR: Symbol file could not be found.  Defaulted to export symbols for ntdll.dll -
    Last edited by blabberer; April 14th, 2014 at 14:34.

  5. #5
    <script>alert(0)</script> disavowed's Avatar
    Join Date
    Apr 2002
    Posts
    1,281
    Set the output to verbose, try again, and see what details it gives you. Also helps to run Process Explorer to see what files it's trying to access.

  6. #6

    Ready tutorial on Windbg

    I am reading a tutoral for Windbg.

    It is so much different than Ollydbg.

Similar Threads

  1. problem running unpacked file
    By n00b in forum Malware Analysis and Unpacking Forum
    Replies: 6
    Last Post: May 1st, 2005, 12:24
  2. problem with NTFS file encryption
    By Hero in forum The Newbie Forum
    Replies: 10
    Last Post: October 22nd, 2004, 03:49
  3. NTice.sys Patch for DriverStudio v3.x,fix problem of Symbol Loader not breaking at Wi
    By iceplus in forum Tools of Our Trade (TOT) Messageboard
    Replies: 33
    Last Post: May 26th, 2004, 19:14
  4. Patch for DriverStudio to fix problem of Symbol Loader not breaking at WinMain
    By Kayaker in forum Tools of Our Trade (TOT) Messageboard
    Replies: 33
    Last Post: May 17th, 2003, 07:51
  5. IDA sig file loading problem
    By Thigo in forum Tools of Our Trade (TOT) Messageboard
    Replies: 2
    Last Post: July 1st, 2001, 06:32

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •