Force windbg do not load symbol

I am doing a failure analysis on some kind of software, and I am sure that there is no pdb file that I can get for sth.exe, but when sth.exe crashes, every time windbg will look for a lot of server.Even paths and characters when I disconnected the vm network connection, it was still riveting for some time to looking for the sth.exe pdb file. And this leads to a crash in my autoanalysis. Is there a way to tell windbg sth.exe does not have pdb, please do not waste time searching?

+4
source share
1 answer

create a file called symsrv.ini
in the folder where the windbg is installed
directory in this examplee:\ewdk\program files\windows kits\10\Debuggers\x86


pdb
symsrv

:\>ls -l symsrv.ini
-rw-rw-rw-  1 HP 0 259 2016-08-18 17:43 symsrv.ini

:\>file symsrv.ini
symsrv.ini; ASCII text, with CRLF line terminators

:\>cat symsrv.ini
[exclusions]
livekdD.sys
vmm.pdb
livekdD.pdb
vmci.pdb
vsock.pdb
clwvd.pdb
spldr.pdb
vmkbd.pdb
vmnetsrv.pdb
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

:\>livekd

LiveKd v5.40 - Execute kd/windbg on a live system
Sysinternals - www.sysinternals.com

!sym noisy
noisy mode - symbol prompts off

kd> .reload /f

SYMSRV:  vmci.pdb is in the file exclusion list
DBGHELP: d:\build\ob\bora-1141980\bora-vmsoft\build\release\crosstalk\windows\wi
n2k\i386\vmci.pdb - file not found
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for vmci.sys -
DBGHELP: vmci - export symbols

SYMSRV:  vsock.pdb is in the file exclusion list
DBGHELP: d:\build\ob\bora-1253991\bora-vmsoft\build\release\vsock\windows\win2k\
i386\vsock.pdb - file not found
*** ERROR: Symbol file could not be found.  Defaulted to export symbols for vsock.sys -
DBGHELP: vsock - export symbols

SYMSRV:  vmm.pdb is in the file exclusion list
DBGHELP: m:\src\built\vs2005.sp2\vssp2\usa\ent_volume\i386\sym\sys\vmm.pdb - fil
e not found
*** ERROR: Module load completed but symbols could not be loaded for vmm.sys
DBGHELP: vmm - no symbols loaded

************* Symbol Loading Error Summary **************
Module name            Error
vmci                   The system cannot find the file specified : srv*e:\symbols*
                       http://msdl.microsoft.com/download/symbols The SYMSRV client 
                       failed to find a file in the UNC store, or there is an invalid
                       UNC store (an invalid path or thepingme.txt file is not present
                       in the root directory), or the fileis present 
                       in the symbol server exclusion list.

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

windbg

( symproxy % windowsdir\system32\inetsrv\" symsrv.dll( )

https://msdn.microsoft.com/en-us/library/windows/hardware/ff556870(v=vs.85).aspx

procmon NameNotFound fastio windbg
windbg
, , , .

enter image description here, jason shay (MSFT) osr windbg, , windbg 6.4.4 beta​​p >

http://www.osronline.com/showthread.cfm?link=68916

,

+4

Source: https://habr.com/ru/post/1651648/


All Articles