[FixitUP]

CommandLine: C:\masm32\SOURCE\excep.exe
Symbol search path is: srv*C:\WINDOWS\Symbols*http://msdl.microsoft.com/download/symbols.
Executable search path is:
ModLoad: 00400000 00403000 image00400000
0:000> .reload
Reloading current modules
.
0:000> .reload
Reloading current modules
.
ModLoad: 7c900000 7c9b2000 ntdll.dll
ModLoad: 7c800000 7c8f6000 C:\WINDOWS\system32\kernel32.dll
ModLoad: 7e410000 7e4a1000 C:\WINDOWS\system32\user32.dll
ModLoad: 77f10000 77f59000 C:\WINDOWS\system32\GDI32.dll
(b6c.c14): Break instruction exception - code 80000003 (first chance)
eax=00241eb4 ebx=7ffde000 ecx=00000007 edx=00000080 esi=00241f48 edi=00241eb4
eip=7c90120e esp=0012fb20 ebp=0012fc94 iopl=0 nv up ei pl nz na pe nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000202
*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -

[Yzöwl]

Is there a question?

[FixitUP]

How do fix this error ?

*** ERROR: Symbol file could not be found. Defaulted to export symbols for ntdll.dll -

Can some direct me to someone who might be more knowledgeable about Window Debugger ?

Thanks.

[MagicAndre1981]

type !sym noisy and lmvm ntdll and copy the output here.

This post has been edited by MagicAndre1981: 28 December 2012 - 06:42 AM

[FixitUP]

Thanks MagicAndre1981.

Could you give me more details ?

[MagicAndre1981]

you should enter those 2 commands in WinDbg and run them.

First activates logging of symbol request and the second command queries the NTdll.dll data

[FixitUP]

0:000> !sym noisy
noisy mode - symbol prompts on

0:000> lmvm ntdll
start end module name
7c900000 7c9b2000 ntdll (pdb symbols) c:\symbols\ntdll.pdb\CEFC0863B1F84130A11E0F54180CD21A2\ntdll.pdb
Loaded symbol image file: C:\WINDOWS\system32\ntdll.dll
Image path: ntdll.dll
Image name: ntdll.dll
Timestamp: Thu Dec 09 09:15:09 2010 (4D00F27D)
CheckSum: 000AFD30
ImageSize: 000B2000
File version: 5.1.2600.6055
Product version: 5.1.2600.6055
File flags: 0 (Mask 3F)
File OS: 40004 NT Win32
File type: 2.0 Dll
File date: 00000000.00000000
Translations: 0409.04b0
CompanyName: Microsoft Corporation
ProductName: Microsoft® Windows® Operating System
InternalName: ntdll.dll
OriginalFilename: ntdll.dll
ProductVersion: 5.1.2600.6055
FileVersion: 5.1.2600.6055 (xpsp_sp3_gdr.101209-1647)
FileDescription: NT Layer DLL
LegalCopyright: © Microsoft Corporation. All rights reserved.

[MagicAndre1981]

you get the correct symbols. You should not get the message.

[FixitUP]

I was running Windbg when windows went to hiberation.

I could not get out of it until I unplugged the battery and plugged in the line cord.

This may be unrelated but I have a bunch of these in the Event Viewer.

I had a CD in the drive for a while, and I just took it out.


Event Type: Error
Event Source: Cdrom
Event Category: None
Event ID: 11
Date: 12/28/2012
Time: 1:53:41 PM
User: N/A
Computer: BSEKENNEDYCHP
Description:
The driver detected a controller error on \Device\CdRom0.

For more information, see Help and Support Center at http://go.microsoft....ink/events.asp.
Data:
0000: 03 03 68 00 01 00 b8 00 ..h...¸.
0008: 00 00 00 00 0b 00 04 c0 .......À
0010: 01 01 00 00 00 00 00 00 ........
0018: 00 00 00 00 00 00 00 00 ........
0020: 00 08 77 25 00 00 00 00 ..w%....
0028: 8f 14 12 00 00 00 00 00 �.......
0030: ff ff ff ff 02 00 00 00 ÿÿÿÿ....
0038: 40 00 00 c4 02 00 00 00 @..Ä....
0040: ff 20 0a 12 4c 02 00 00 ÿ ..L...
0048: 00 00 00 00 0a 00 00 00 ........
0050: 00 00 fd 86 30 c2 1e 87 ..ý†0Â.‡
0058: 00 00 00 00 08 80 70 87 .....€p‡
0060: 00 00 00 00 e1 ae 04 00 ....á®..
0068: 28 00 00 04 ae e1 00 00 (...®á..
0070: 01 00 00 00 00 00 00 00 ........
0078: 70 00 04 00 00 00 00 0a p.......
0080: 00 00 00 00 3e 02 00 00 ....>...
0088: 00 00 00 00 00 00 00 00 ........

[FixitUP]

I tried download and installing symbols locally but no luck.

How do I have Windbg download all the symbols for me ?

I tried srv*c:\Asm\Symbols*http://msdl.microsoft.com/download/symbols; from a command window.

Thanks.

[MagicAndre1981]

you can use symchk to fetch all symbols for all files on your drive.