Question

windbg cannot load symbols

Asked by: earthware

Hi

Im trying to work out what is causing a random BSOD on my win 7 pc. I have tried using windbg to load the minidump file as follows:

1) Create a c:\symbols dir
2) loaded windbg and set the symbols parth to 1 and the download url to ms symbol server
3) loading the minidump file

I get a couple of "could not load the symbols for #" where # is a chinese character

Its making it imposible to identify the driver at fault and Im not sure what to try next. Ive attached the dump file if that helps

Thanks

This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.

Subscribe now for full access to Experts Exchange and get

Instant Access to this Solution

  • Plus...
  • 30 Day FREE access, no risk, no obligation
  • Collaborate with the world's top tech experts
  • Unlimited access to our exclusive solution database
  • Never be left without tech help again

Subscribe Now

Asked On
2009-09-29 at 15:02:38ID24771818
Tags

windbg

,

drivers

,

symbols

Topics

Debugging Software for Development

,

Microsoft Windows Operating Systems

Participating Experts
2
Points
500
Comments
9

Trusted by hundreds of thousands everyday for fast, accurate and reliable tech support.

  • "The time we save is the biggest benefit of Experts Exchange to Warner Bros. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange." Mike Kapnisakis, Warner Bros.
  • "Our team likes having a resource that is more secure than just using Google and most experts using this service really know their stuff. It's nice to look here first versus using Google." Dayna Sellner, Lockheed Martin
  • "Anytime that I've been stumped with a problem, 9 out of 10 times Experts Exchange has either the accepted solution or an open discussion of the potential solution to the problem." Kenny Red, eBay Inc.

See what Experts Exchange can do for you.

Got a question?

We've got the answer.

Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.

Screenshot of Experts Exchange Knowledgebase

Need individual assistance?

Our experts are ready to help.

If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.

Screenshot of Experts Exchange Knowledgebase

Want to learn from the best?

Read articles from industry experts.

Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.

Screenshot of an Article

Working on a long term project?

Store your work and research.

Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.

Screenshot of Experts Exchange Knowledgebase

Access the answers to your technology questions today.

Subscribe Now

30-day free trial. Register in 60 seconds.

What Makes Experts Exchange Unique?

Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Trusted by the world's most respected brands.

image of each brand's logo

Faithfully serving IT professionals since 1996.

Experts Exchange Logo

Try it out and discover for yourself.

Subscribe Now

30-day free trial. Register in 60 seconds.

Related Solutions

  1. Windbg - how to set up
    I have been having many bsods on my computer and in an effort to figure out what is wrong, I downloaded and installed Windbg. However, I cannot find the symbol table, can anyone help me??
  2. Viewing .dmp files with WinDBG
    I am using WinDBG to try and view the minidumps provided by Windows 2003. It is asking for a symbols path, but I am unsure of where to point it and where to get the symbols.
  3. Memory Dump (WinDbg Provided)
    This is the 1st Dump that I have not been able to figure out, and am also learning how to read them Using the [WinDbg] as well. Could someone please assist me with information on how to analyze these Dumps better? Basically, explain it to me better on what I am looking for? A...
  4. Windows debugging tool ( WINDBG)
    Hi Experts, When i use Windbg tool to debug my Blue screen errors i get to see these can any one help me in finding out what went bad on my server ******************************************************************************* * ...
  5. Interpreting WinDbg Crash Dump output
    Hi, I'd like some hints about reading the output from WinDbg when reading crash dumps. I've found lots of information on the Internet about using WinDbg, setting up the symbols, etc, but they all end there without telling me what the output actually means. Lately I've had se...
  6. URGENT - How to use windbg and symbols
    I'm trying to figure out how to use windbg and symbols, had BSOD on brand new Exchnage (DELL) server and it created kernel dump file which I want to analyze but was not able to find a clear step by step instructions how after I install windbg and extract symbols for W2k3 to c...

Free Tech Articles

  1. WARNING: 5 Reasons why you should NEVER fix a computer for free.
    It is in our nature to love the puzzle. We are obsessed. The lot of us. We love puzzles. We love the challenge. We thrive on finding the answer. We hate disarray. It bothers us deep in our soul. W...
  2. SCCM OSD Basic troubleshooting
    SCCM 2007 OSD is a fantastic way to deploy operating systems, however, like most things SCCM issues can sometimes be difficult to resolve due to the sheer volume of logs to sift through and the dispe...
  3. Migrate Small Business Server 2003 to Exchange 2010 and Windows 2008 R2
    This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Windows 2008 R2 with Exchange 2010. For this migration to work you will need the fo...
  4. Create a Win7 Gadget
    This article shows you how to create a simple "Gadget" -- a sort of mini-application supported by Windows 7 and Vista. Gadgets can be dropped anywhere on the desktop to provide instant information, ...
  5. Outlook continually prompting for username and password
    There have been a lot of questions recently regarding Outlook prompting for a username and password whilst using Exchange 2007. There are a few reasons why this would happen and I will try to cover t...
  6. Backup Exchange 2010 Information Store using Windows Backup
    There seems to be quite a lot of confusion around the ability to backup Exchange 2010 using the built in Windows Backup feature. This stems from the omission of this feature prior to Exchange 2007 s...

Cloud Class Webinars

  1. Avoiding Bugs in Microsoft Access
    Alison Balter takes and in-depth look at avoiding bugs in Access. In this webinar you will learn about using the immediate window to debug your applications, invoking the debugger, using breakpoints to troubleshoot, stepping through code, setting the next statement to execute, ...
  2. Top 10 Best New Features in Visio 2010
    Scott Helmers gives live demonstrations of the top 10 new features in Visio 2010. This webinar will teach you how to create compelling diagrams by adding shapes to the page with a single click, linking the shapes in a diagram to data in Excel (or SQL Server, or SharePoint), ...
  3. IT Consultant Business Secrets Revealed
    Michael Munger, Experts Exchange tech pro and IT consultant, pulls back the curtain on his very successful businesses and answers question on every IT consultant and business owner should know about. He shares secrets on what he did to solve the 5 most common problems in IT, ...
  4. Disaster Recovery and Business Continuity
    Quest CTO, Mike Billon, gives an overview of the steps involved in building a dunamic disaster recovery plan. Through case studies and an examination of software/hardware tooles for monitoring and testing, you'll gain a better understandin of where you are, where you want ...
  5. Organize Your Visio Diagrams with Containers and Lists
    Scott Helmers uses cross functional flowcharts, wireframe diagrams, data graphic legends and seating charts to teach you: how to ustilize all three new structured diagram components in Visio 2010, the best practices for organizeing shapes in previous version of Visio, how to organize ...
  6. How to Us Objects, Properties, Events and Methods in Microsoft Access
    Alison Dalter gives an in-depbth look at objects, properties, events and methods in Microsoft Access. In this webinar you will learn about using the object browser, referring to objects, working with properties and methods, working with object variables, understanding the ...

Join the Community

Give a Little. Get a Lot.

Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.

Join the Community

Answers

 

by: earthwarePosted on 2009-09-29 at 15:13:35ID: 25453947

heres the dump file

 

by: defkamelPosted on 2009-09-29 at 15:30:02ID: 25454045

I downloaded the windows 7 RTM symbol package and tried to debug and got this..

Symbol search path is: SRV*c:\websymbols*http://msdl.microsoft.com/download/symbols
Executable search path is:
Unable to load image Hš, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Hš
*** ERROR: Module load completed but symbols could not be loaded for Hš
Windows 7 Kernel Version 7600 UP Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.x86fre.win7_rtm.090713-1255
Kernel base = 0x82606000 PsLoadedModuleList = 0x8274e810
Debug session time: Tue Sep 29 16:10:44.806 2009 (GMT-5)
System Uptime: 1 days 13:40:38.947
Unable to load image Hš, Win32 error 0n2
*** WARNING: Unable to verify timestamp for Hš
*** ERROR: Module load completed but symbols could not be loaded for Hš
Loading Kernel Symbols
.............................................
Loading User Symbols


So it is not something you are doing wrong.. could just be a bad dump file.  Most common reason for dumps is video card drivers so just make sure you are using the latest video card driver. If it happens again try debugging a newer dump file..

 

by: jcgriff2Posted on 2009-09-30 at 03:59:55ID: 25457188

Hi -

It could be a bad dump file caused by hardware failure; however, I believe that is unlikely based on the "strategic" placement of the Asian characters.

If your system ran fine on the prior OS (if there was one), then I would have to say this is a bad, corrupted WIndows 7 installation, the ISO you used to install the OS is bad or the installation DVD is not a genuine Microsoft copy of WIndows 7.  If you bought the system new... take it back.

What is interesting to note is that the system was up and running for 1.5 days prior to this BSOD.  I did obtain the bugcheck information -  0x19 = bad pool header

BAD_POOL_HEADER  
Arg1: 00000020, a pool block header size is corrupt.
Arg2: 852a6510, The pool entry we were looking for within the page.
Arg3: 852a6538, The next pool entry.

The build information found is not being recognized -


ADDITIONAL_DEBUG_TEXT:  
Use '!findthebuild' command to search for the target build information.
If the build information is available, run '!findthebuild -s ; .reload' to set symbol path and load symbols.
MODULE_NAME: nt
FAULTING_MODULE: 82606000 nt
DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc007
BUGCHECK_STR:  0x19_20
POOL_ADDRESS:  852a6510
DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT
CURRENT_IRQL:  0
LAST_CONTROL_TRANSFER:  from 8bb328db to 827251b6

It is listing NT as the faulting driver, which is common in cases like this.  Interesting is that the timestamp found on NT 4a5bc007   appears to be good as the date it translates to is the date for other WIndows 7 RTM modules -

4a5bc007 = Mon Jul 13 16:15:19 2009

I would suggest that you re-install your OS.  If the same situation occurs, try another OS -- like the 90 trial version of WIndows 7 Enterprise edition.  Installing a new OS will tell you whether this is hardware or software related.

http://technet.microsoft.com/en-us/evalcenter/cc442495.aspx

The info in the code box below shows the Asian text has a pattern to it.

Regards. . .

jcgriff2

LOADED DRIVER LISTING
 
start    end        module name
80b9a000 80ba2000   _________________ nosI-nentxlrrrp.a Mon Jul 13 18:08:58 2009 (4A5BDAAA)
82606000 82a16000   nt       Hš           Mon Jul 13 16:15:19 2009 (4A5BC007)
82a16000 82a4d000   __________________ lp0j0oDGk+7Gdrgb48 Mon Jul 13 16:11:03 2009 (4A5BBF07)
86400000 8640b000   X        X            unavailable (00000000)
8640b000 8641c000   ____________ XÀä€ n û‰>Ê unavailable (00000000)
8641c000 86424000   rvices_LicenseServer_Replacement rvices-LicenseServer-Replacement unavailable (00000000)
86424000 86466000   Unknown_Module_86424000 Unknown_Module_86424000 unavailable (00000000)
86466000 86511000   _____    ¸ v,        unavailable (00000000)
86511000 86582000   ___________a_ pep_3b01134 unavailable (00000000)
86582000 86590000   Unknown_Module_86582000 Unknown_Module_86582000 unavailable (00000000)
86590000 865d8000   ______86590000 ¸ v,@        unavailable (00000000)
865d8000 865e1000   ______________________ KFcmso/q/M02B2IGRVM90I unavailable (00000000)
865e1000 865e9000   ______   lcmn.a       unavailable (00000000)
86622000 8664c000   Unknown_Module_86622000 Unknown_Module_86622000 Mon Jul 13 16:11:16 2009 (4A5BBF14)
8664c000 86657000   LegacySnapIn_Deployment_DL LegacySnapIn-Deployment-DL.mannnè v Mon Jul 13 16:46:19 2009 (4A5BC74B)
86657000 86668000   ______________ txFVW+Ds2O2vTk Mon Jul 13 16:11:35 2009 (4A5BBF27)
86668000 86678000   Unknown_Module_86668000 Unknown_Module_86668000 Mon Jul 13 16:11:25 2009 (4A5BBF1D)
86678000 866c3000   ___________6________ pae_bf62eec6€ n û‰>Ê unavailable (00000000)
866c3000 866ca000   Unknown_Module_866c3000 Unknown_Module_866c3000 Mon Jul 13 16:11:19 2009 (4A5BBF17)
866ca000 866d8000   Unknown_Module_866ca000 Unknown_Module_866ca000 Mon Jul 13 16:11:15 2009 (4A5BBF13)
866d8000 866ee000   _______________866d8000 phFo4S4Cw/4vmM Mon Jul 13 16:11:27 2009 (4A5BBF1F)
866ee000 866f7000   Unknown_Module_866ee000 Unknown_Module_866ee000 Mon Jul 13 16:11:15 2009 (4A5BBF13)
866f7000 8671a000   Unknown_Module_866f7000 Unknown_Module_866f7000 Mon Jul 13 16:11:18 2009 (4A5BBF16)
8671a000 86723000   bletPC_UIHub_Replacement bletPC-UIHub-Replacement.man€ n û‰>Ê Tue May 19 10:57:35 2009 (4A12F30F)
86723000 86757000   ___________________86723000 CN5WPAgxRwwwT78aCg Mon Jul 13 16:11:13 2009 (4A5BBF11)
86757000 86768000   00       00.16385è v  Mon Jul 13 16:21:51 2009 (4A5BC18F)
86800000 8680e000   _______0___ df06a280è v  Mon Jul 13 16:11:10 2009 (4A5BBF0E)
8680e000 86817000   Unknown_Module_8680e000 Unknown_Module_8680e000 unavailable (00000000)
86836000 86965000   Unknown_Module_86836000 Unknown_Module_86836000 Mon Jul 13 16:12:05 2009 (4A5BBF45)
86965000 86990000   nt_86965000 nt.man       unavailable (00000000)
86990000 869a3000   1_7600   1.7600.16385? 8šˆš Mon Jul 13 16:11:56 2009 (4A5BBF3C)
869a3000 86a00000   ___n_____ Rpmn¸ v,    Mon Jul 13 16:32:55 2009 (4A5BC427)
86a1e000 86ad5000   _______________86a1e000 e-iessb423dea7 Mon Jul 13 16:12:24 2009 (4A5BBF58)
86ad5000 86b13000   _______________________86ad5000 I1OpmB+W2om0nJpSUsqRW0 Mon Jul 13 16:12:35 2009 (4A5BBF63)
86b13000 86b38000   Unknown_Module_86b13000 Unknown_Module_86b13000 Mon Jul 13 16:34:00 2009 (4A5BC468)
86b38000 86b48000   Unknown_Module_86b38000 Unknown_Module_86b38000 Mon Jul 13 16:14:14 2009 (4A5BBFC6)
86b48000 86b50000   hwpolicy hwpolicy.sys Mon Jul 13 16:11:01 2009 (4A5BBF05)
86b50000 86b82000   fvevol   fvevol.sys   Mon Jul 13 16:13:01 2009 (4A5BBF7D)
86b82000 86b93000   disk     disk.sys     Mon Jul 13 16:11:28 2009 (4A5BBF20)
86b93000 86bb8000   CLASSPNP CLASSPNP.SYS Mon Jul 13 16:11:20 2009 (4A5BBF18)
86c00000 86c08000   Unknown_Module_86c00000 Unknown_Module_86c00000 Mon May 11 09:13:47 2009 (4A084EBB)
86c08000 86c35000   rdyboost rdyboost.sys Mon Jul 13 16:22:02 2009 (4A5BC19A)
86c37000 86d80000   Unknown_Module_86c37000 Unknown_Module_86c37000 Mon Jul 13 16:13:18 2009 (4A5BBF8E)
86d80000 86db1000   n____    n50        Mon Jul 13 16:12:03 2009 (4A5BBF43)
86db1000 86dba000   Unknown_Module_86db1000 Unknown_Module_86db1000 unavailable (00000000)
86dba000 86df9000   Unknown_Module_86dba000 Unknown_Module_86dba000 Mon Jul 13 16:11:34 2009 (4A5BBF26)

                                              
1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:
42:
43:
44:
45:
46:
47:
48:
49:

Select allOpen in new window

 

by: jcgriff2Posted on 2009-12-01 at 02:18:09ID: 25941356

As ambiguous as this may sound, I believe the problem and solution lay with a wiipe of the hard drive with a product like KillDisk, then re-installing the Windows 7 from the Genuine Microsoft DVD.  If the same symptoms reoccur, then I would say it is safe to assume that a hardware problem exists.

The Asian charachters have too much of a pattern to them to be pure hardware failure in by book.

KillDisk -->  http://www.killdisk.com/downloadfree.htm

ImgBurn to burn the KillDisk ISO to CD-R --> http://www.imgburn.com/index.php?act=download

Regards. . .

jcgriff2

 

by: jcgriff2Posted on 2009-12-10 at 12:03:59ID: 26022143

The OP certainly was provided with enough information by myself, jcgriff2 and defkamel to show that more than likely the OS was corrupted, possibly non-genuine.  You don't get such non-random results from a bad dump - at least not one that I have ever seen in the 100,000's of them that I have processed.  I believe the points should be split evenly here.

Thank you for your consideration.  jcgriff2 (John)

 

by: jcgriff2Posted on 2009-12-12 at 14:48:53ID: 26037037

20120131-EE-VQP-002

3 Ways to Join

30-Day Free Trial

The Experts

98% positive feedback on 31,087 answers since March 2000. angeliii is a Microsoft Most Valuable Professional for his work with MS SQL Server & Develoment.

He has also proven his knowledge of Visual Basic Programming, PHP Scripting and Oracle Databases.

The Experts

97% positive feedback on 10,752 answers since July 2000. lrmoore has more than 18 years experience in the networking industry.

The six-time Mircosoft MVPs specialties include firewalls, virtual private networking, and network management.

Testimonials

"...and excellent source for support... Kind of like having your very own IT dept." Electriciansnet

Testimonials

"I was apprehensive at signing up at first. However... it has already made my life as an IT administrator much easier." JaCrews

Testimonials

"WOW! You guys have great, active, and knowledgeable people on here." moore50

Business Clients

Business Clients

In the Press

"If you’ve got a question... Experts Exchange can supply an answer.”

In the Press

"...an invaluable aid for both IT professionals and those who require tech support."

In the Press

"where IT professionals provide quick answers on just about any topic"

Business Account Plans

Loading Advertisement...