Question

Locked

Dr Watson crash log: ERROR: Symbol file could not be found.

By marick111 ·
Hello, I am running a game application on my Windows 2003 x64 dedicated server, but it suddenly crashes after some minutes or hours.
I've checked Dr Watson and at some parts it says "ERROR: Symbol file could not be found."
I don't know for sure if this is what is causing the application crash, so I'll be very thankful for any idea!
Here's the full Dr Watson log, in case that someone wants to see:

Application exception occurred:
App: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\TheForgottenServer.exe (pid=680)
When: 12/24/2010 @ 09:40:33.187
Exception number: c0000005 (access violation)

*----> System Information <----*
Computer Name: LIMESTON-0BCBD9
User Name: admin
Terminal Session Id: 1
Number of Processors: 2
Processor Type: EM64T Family 6 Model 15 Stepping 11
Windows Version: 5.2
Current Build: 3790
Service Pack: 2
Current Type: Multiprocessor Free
Registered Organization: Limestone Networks, Inc.
Registered Owner: Systems Administrator

*----> Task List <----*
0 System Process
4 System
336 System
384 System
408 System
456 System
468 System
620 System
712 System
784 System
820 System
836 System
988 System
1020 System
1172 System
1192 FileZilla Server.exe
1232 System
1288 System
1876 System
2184 System
2212 System
2348 System
2500 System
2656 System
2740 RTHDCPL.EXE
2836 System
2**6 ApacheMonitor.exe
3012 ctfmon.exe
3016 FileZilla Server Interface.exe
2872 System
1892 System
2300 System
2108 httpd.exe
2748 System
680 TheForgottenServer.exe
2864 System
2860 TheForgottenServer.exe
3044 System
2824 CryingDamson.exe
2772 System
1904 CryingDamson.exe
2876 iexplore.exe
876 iexplore.exe
2892 httpd.exe
2164 drwtsn32.exe

*----> Module List <----*
0000000000400000 - 0000000000921000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\TheForgottenServer.exe
0000000000be0000 - 0000000000ccf000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libxml2.dll
0000000000cd0000 - 0000000000daa000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\iconv.dll
0000000010000000 - 00000000101ff000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\LIBMYSQL.dll
000000005f270000 - 000000005f2ca000: C:\WINDOWS\system32\hnetcfg.dll
0000000061b80000 - 0000000061b9c000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\zlib1.dll
0000000063080000 - 00000000631a8000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libeay32.dll
0000000066380000 - 00000000664a6000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libsqlite3-0.dll
0000000068000000 - 0000000068035000: C:\WINDOWS\system32\rsaenh.dll
000000006e940000 - 000000006e950000: C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\libgcc_s_dw2-1.dll
0000000071ae0000 - 0000000071ae8000: C:\WINDOWS\System32\wshtcpip.dll
0000000071bb0000 - 0000000071bb9000: C:\WINDOWS\system32\WSOCK32.DLL
0000000071bf0000 - 0000000071bf8000: C:\WINDOWS\system32\WS2HELP.dll
0000000071c00000 - 0000000071c17000: C:\WINDOWS\system32\WS2_32.dll
0000000076b70000 - 0000000076b7b000: C:\WINDOWS\system32\PSAPI.DLL
0000000076ed0000 - 0000000076efa000: C:\WINDOWS\system32\DNSAPI.dll
0000000076f10000 - 0000000076f3e000: C:\WINDOWS\syswow64\WLDAP32.dll
0000000076f70000 - 0000000076f77000: C:\WINDOWS\System32\winrnr.dll
0000000076f80000 - 0000000076f85000: C:\WINDOWS\system32\rasadhlp.dll
0000000077670000 - 00000000777a9000: C:\WINDOWS\syswow64\ole32.dll
0000000077ba0000 - 0000000077bfa000: C:\WINDOWS\syswow64\msvcrt.dll
000000007d1e0000 - 000000007d27c000: C:\WINDOWS\syswow64\ADVAPI32.DLL
000000007d4c0000 - 000000007d5f0000: C:\WINDOWS\syswow64\kernel32.dll
000000007d600000 - 000000007d6f0000: C:\WINDOWS\system32\ntdll.dll
000000007d800000 - 000000007d890000: C:\WINDOWS\syswow64\GDI32.dll
000000007d8d0000 - 000000007d920000: C:\WINDOWS\syswow64\Secur32.dll
000000007d930000 - 000000007da00000: C:\WINDOWS\syswow64\USER32.dll
000000007da20000 - 000000007db00000: C:\WINDOWS\syswow64\RPCRT4.dll
000000007db30000 - 000000007dbb0000: C:\WINDOWS\system32\MSWSOCK.dll
000000007dee0000 - 000000007df40000: C:\WINDOWS\system32\IMM32.DLL

*----> State Dump for Thread Id 0xb28 <----*

eax=00000000 ebx=024f4378 ecx=00000000 edx=00000000 esi=00000001 edi=00000001
eip=7d61c8be esp=00b2fc50 ebp=00b2fc78 iopl=0 nv up ei pl nz na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202

*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
function: ntdll!ZwRemoveIoCompletion
7d61c8** b805000000 mov eax,0x5
7d61c896 b91a000000 mov ecx,0x1a
7d61c89b 8d542404 lea edx,[esp+0x4]
7d61c89f 64ff15c0000000 call dword ptr fs:[000000c0]
7d61c8a6 c22400 ret 0x24
ntdll!ZwRemoveIoCompletion:
7d61c8a9 b806000000 mov eax,0x6
7d61c8ae b91c000000 mov ecx,0x1c
7d61c8b3 8d542404 lea edx,[esp+0x4]
7d61c8b7 64ff15c0000000 call dword ptr fs:[000000c0]
7d61c8be c21400 ret 0x14
ntdll!NtReleaseSemaphore:
7d61c8c1 b807000000 mov eax,0x7
7d61c8c6 b90c000000 mov ecx,0xc
7d61c8cb 8d542404 lea edx,[esp+0x4]
7d61c8cf 64ff15c0000000 call dword ptr fs:[000000c0]
7d61c8d6 c20c00 ret 0xc
ntdll!ZwReplyWaitReceivePort:
7d61c8d9 b808000000 mov eax,0x8
7d61c8de 33c9 xor ecx,ecx
7d61c8e0 8d542404 lea edx,[esp+0x4]

*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Common Files\SpeechEngines\Microsoft\TTS\1034\OT 1\TheForgottenServer.exe -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\syswow64\kernel32.dll -
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
00b2fc78 00635e65 00000328 00b2fcfc 00b2fcf8 ntdll!ZwRemoveIoCompletion+0x15
00b2fd18 0055ed59 024f4378 00000001 00b2fd58 TheForgottenServer!luaopen_base+0x91841
00b2fd88 0051a59c 00b2fde0 007d8800 00000006 TheForgottenServer+0x15ed59
00b2ff48 004010b6 7efdf000 00000000 00b2ffa0 TheForgottenServer+0x11a59c
00b2ffa0 00401148 00000001 00000000 7d61c91b TheForgottenServer+0x10b6
00b2ffc0 7d4e7d42 00000000 00000000 7efdf000 TheForgottenServer+0x1148
00b2fff0 00000000 00401130 00000000 000000aa kernel32!BaseProcessInitPostImport+0x8d

*----> Raw Stack Dump <----*
0000000000b2fc50 f4 66 50 7d 28 03 00 00 - f8 fc b2 00 90 fc b2 00 .fP}(...........
0000000000b2fc60 70 fc b2 00 68 fc b2 00 - c0 b4 b3 ff ff ff ff ff p...h...........
0000000000b2fc70 78 43 4f 02 ff ff ff ff - 18 fd b2 00 65 5e 63 00 xCO.........e^c.
0000000000b2fc80 28 03 00 00 fc fc b2 00 - f8 fc b2 00 f4 fc b2 00 (...............
0000000000b2fc90 f4 01 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
0000000000b2fca0 00 00 00 00 00 00 00 00 - 00 00 00 00 c0 43 4f 02 .............CO.
0000000000b2fcb0 cc 43 4f 02 98 43 4f 02 - a4 43 4f 02 a4 43 4f 02 .CO..CO..CO..CO.
0000000000b2fcc0 00 00 00 00 38 47 7b 01 - a0 43 4f 02 28 0b 00 00 ....8G{..CO.(...
0000000000b2fcd0 a0 43 4f 02 40 4c 7b 01 - 20 a1 07 00 00 00 00 00 .CO.@L{. .......
0000000000b2fce0 80 c3 c9 01 00 00 00 00 - 64 48 ** 26 a4 43 4f 02 ........dH.&.CO.
0000000000b2fcf0 01 48 ** 26 00 00 00 00 - 00 00 00 00 00 00 00 00 .H.&............
0000000000b2fd00 a0 5e 7b 00 6e 00 00 00 - 00 00 00 00 78 43 4f 02 .^{.n.......xCO.
0000000000b2fd10 58 fd b2 00 7d c6 00 00 - 88 fd b2 00 59 ed 55 00 X...}.......Y.U.
0000000000b2fd20 78 43 4f 02 01 00 00 00 - 58 fd b2 00 20 5a 7b 00 xCO.....X... Z{.
0000000000b2fd30 24 5a 7b 00 06 00 00 00 - 00 00 00 00 e6 e7 74 0a $Z{...........t.
0000000000b2fd40 a0 5e 7b 00 78 43 4f 02 - 00 00 00 00 20 5a 7b 00 .^{.xCO..... Z{.
0000000000b2fd50 00 1f 0a fa ff ff ff ff - 00 00 00 00 a8 8b 8d 00 ................
0000000000b2fd60 a0 5e 7b 00 b4 fd b2 00 - 88 fd b2 00 ac 34 75 00 .^{..........4u.
0000000000b2fd70 20 5a 7b 00 0a 00 00 00 - 0f 00 00 00 04 3e 8d 00 Z{..........>..
0000000000b2fd80 30 ff b2 00 b4 fd b2 00 - 48 ff b2 00 9c a5 51 00 0.......H.....Q.

*----> State Dump for Thread Id 0xae4 <----*

eax=28200020 ebx=199e2b60 ecx=111e22a4 edx=2820002c esi=2692c000 edi=351494c0
eip=006fa6b5 esp=02bbfb7c ebp=02bbfba4 iopl=0 nv up ei pl nz na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00010202

function: TheForgottenServer!luaopen_base
006fa6a3 5e pop esi
006fa6a4 5f pop edi
006fa6a5 c9 leave
006fa6a6 c3 ret
006fa6a7 90 nop
006fa6a8 8d730c lea esi,[ebx+0xc]
006fa6ab 8d500c lea edx,[eax+0xc]
006fa6ae 83f901 cmp ecx,0x1
006fa6b1 7409 jz TheForgottenServer!luaopen_base+0x156098 (006fa6bc)
006fa6b3 89d7 mov edi,edx
FAULT ->006fa6b5 f3a4 rep movsb ds:2692c000=?? es:351494c0=00
006fa6b7 8b0b mov ecx,[ebx]
006fa6b9 ebd5 jmp TheForgottenServer!luaopen_base+0x15606c (006fa690)
006fa6bb 90 nop
006fa6bc 8a4b0c mov cl,[ebx+0xc]
006fa6bf 88480c mov [eax+0xc],cl
006fa6c2 8b0b mov ecx,[ebx]
006fa6c4 ebca jmp TheForgottenServer!luaopen_base+0x15606c (006fa690)
006fa6c6 90 nop
006fa6c7 90 nop
006fa6c8 55 push ebp

*----> Stack Back Trace <----*
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\syswow64\msvcrt.dll -
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
02bbfba4 006fbb3f 199e2b60 02bbfbcb 00000000 TheForgottenServer!luaopen_base+0x1560**
02bbfbd4 00567e3f 02bbfc2c 2583872c 02bbfca4 TheForgottenServer!luaopen_base+0x15751b
02bbfc84 0046d330 1231f820 1205d010 2583872c TheForgottenServer+0x167e3f
02bbfd34 0064259f 008d4120 1000266f 00000000 TheForgottenServer+0x6d330
02bbfd84 00620def 2627afcc 7d61f218 7d61f610 TheForgottenServer!luaopen_base+0x9df7b
02bbfde4 00453ca8 2627afb8 02bbfe84 02bbff1c TheForgottenServer!luaopen_base+0x7c7cb
02bbff44 0063d4d6 007b5de0 00000000 024f4aa0 TheForgottenServer+0x53ca8
02bbff64 005b14b7 002d6738 002d6738 02bbffa8 TheForgottenServer!luaopen_base+0x98eb2
02bbff84 77bcb530 002d6738 00000000 00000000 TheForgottenServer!luaopen_base+0xce93
02bbffb8 7d4dfe37 024f4a08 00000000 00000000 msvcrt!endthreadex+0xa3
02bbffec 00000000 77bcb4bc 024f4a08 00000000 kernel32!FlsSetValue+0x13c

*----> Raw Stack Dump <----*
0000000002bbfb7c 38 b7 12 1e 0a 00 00 00 - cb fb bb 02 00 3f 6d 00 8............?m.
0000000002bbfb8c 70 fb bb 02 22 00 00 20 - a8 ff bb 02 60 2b 9e 19 p...".. ....`+..
0000000002bbfb9c 10 d0 05 12 20 41 8d 00 - d4 fb bb 02 3f bb 6f 00 .... A......?.o.
0000000002bbfbac 60 2b 9e 19 cb fb bb 02 - 00 00 00 00 01 00 00 00 `+..............
0000000002bbfbbc 8c 98 42 00 00 00 00 00 - 08 b0 90 13 ff ff ff ff ..B.............
0000000002bbfbcc 90 86 c7 02 2c fc bb 02 - 84 fc bb 02 3f 7e 56 00 ....,.......?~V.
0000000002bbfbdc 2c fc bb 02 2c 87 83 25 - a4 fc bb 02 7e 00 fe ff ,...,..%....~...
0000000002bbfbec 58 23 63 12 00 00 00 00 - 01 4e e2 11 00 6b 2d 12 X#c......N...k-.
0000000002bbfbfc 0c fc bb 02 01 00 00 00 - 65 f6 61 7d ff ff ff ff ........e.a}....
0000000002bbfc0c b0 57 7b 00 3c 48 09 1b - b0 57 7b 00 6c 2b 9e 19 .W{.<H...W{.l+..
0000000002bbfc1c 44 b7 12 1e 6c 2b 9e 19 - 00 00 00 00 c2 28 4e 7d D...l+.......(N}
0000000002bbfc2c 01 00 00 00 01 00 00 00 - 44 b7 12 1e 3c 48 09 1b ........D...<H..
0000000002bbfc3c 01 00 00 00 78 47 8d 00 - 64 fc bb 02 24 16 74 00 ....xG..d...$.t.
0000000002bbfc4c 74 47 8d 00 08 3b d1 18 - 78 47 8d 00 90 fc bb 02 tG...;..xG......
0000000002bbfc5c 10 87 83 25 00 00 00 00 - 84 fc bb 02 40 5f 45 00 ...%........@_E.
0000000002bbfc6c 10 d0 05 12 90 fc bb 02 - ff ff ff ff 10 d0 05 12 ................
0000000002bbfc7c 01 00 00 00 20 41 8d 00 - 34 fd bb 02 30 d3 46 00 .... A..4...0.F.
0000000002bbfc8c 20 f8 31 12 10 d0 05 12 - 2c 87 83 25 2c 87 83 25 .1.....,..%,..%
0000000002bbfc9c 00 00 00 00 e0 fc bb 02 - d4 fc bb 02 a8 ff bb 02 ................
0000000002bbfcac bc fc bb 02 10 d0 05 12 - 65 f6 61 7d 00 00 00 00 ........e.a}....

*----> State Dump for Thread Id 0x880 <----*

eax=00000000 ebx=0afffc7c ecx=00000000 edx=00000000 esi=0afffc84 edi=7efde000
eip=7d61d06f esp=0afffc34 ebp=0afffcd8 iopl=0 nv up ei pl nz na pe nc
cs=0023 ss=002b ds=002b es=002b fs=0053 gs=002b efl=00000202

function: ntdll!NtWaitForMultipleObjects
7d61d042 b857000000 mov eax,0x57
7d61d047 b918000000 mov ecx,0x18
7d61d04c 8d542404 lea edx,[esp+0x4]
7d61d050 64ff15c0000000 call dword ptr fs:[000000c0]
7d61d057 c20400 ret 0x4
ntdll!NtWaitForMultipleObjects:
7d61d05a b858000000 mov eax,0x58
7d61d05f b91d000000 mov ecx,0x1d
7d61d064 8d542404 lea edx,[esp+0x4]
7d61d068 64ff15c0000000 call dword ptr fs:[000000c0]
7d61d06f c21400 ret 0x14
ntdll!ZwSetInformationObject:
7d61d072 b859000000 mov eax,0x59
7d61d077 33c9 xor ecx,ecx
7d61d079 8d542404 lea edx,[esp+0x4]
7d61d07d 64ff15c0000000 call dword ptr fs:[000000c0]
7d61d084 c21000 ret 0x10
7d61d087 8d4900 lea ecx,[ecx]
ntdll!NtCancelIoFile:
7d61d08a b85a000000 mov eax,0x5a
7d61d08f 33c9 xor ecx,ecx

*----> Stack Back Trace <----*
ChildEBP RetAddr Args to Child
WARNING: Stack unwind information not available. Following frames may be wrong.
0afffcd8 7d4e3ea6 00000003 0afffda0 00000000 ntdll!NtWaitForMultipleObjects+0x15
0afffcf4 005b017a 00000003 0afffda0 00000000 kernel32!WaitForMultipleObjects+0x18
0afffe04 0055b6d2 00000214 035330d8 00000000 TheForgottenServer!luaopen_base+0xbb56
0affff44 0063d4d6 007b6460 00000000 13725f70 TheForgottenServer+0x15b6d2
0affff64 005b14b7 002dad90 002dad90 0affffa8 TheForgottenServer!luaopen_base+0x98eb2
0affff84 77bcb530 002dad90 00000000 00000000 TheForgottenServer!luaopen_base+0xce93
0affffb8 7d4dfe37 13674c10 00000000 00000000 msvcrt!endthreadex+0xa3
0affffec 00000000 77bcb4bc 13674c10 00000000 kernel32!FlsSetValue+0x13c

*----> Raw Stack Dump <----*
000000000afffc34 84 28 4e 7d 03 00 00 00 - 7c fc ff 0a 01 00 00 00 .(N}....|.......
000000000afffc44 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000afffc54 03 00 00 00 24 00 00 00 - 01 00 00 00 00 00 00 00 ....$...........
000000000afffc64 00 00 00 00 00 00 00 00 - 00 00 00 00 00 00 00 00 ................
000000000afffc74 00 00 00 00 00 00 00 00 - 14 02 00 00 70 02 00 00 ............p...
000000000afffc84 68 01 00 00 c4 0b 00 00 - 10 27 00 00 17 00 00 00 h........'......
000000000afffc94 ed 48 02 00 cc fc ff 0a - a5 7e 62 7d ed 48 02 00 .H.......~b}.H..
000000000afffca4 00 e0 fd 7e ec fc ff 0a - 00 00 00 00 7c fc ff 0a ...~........|...
000000000afffcb4 00 00 00 00 64 68 1a 25 - 03 00 00 00 4c fc ff 0a ....dh.%....L...
000000000afffcc4 aa 38 53 7d a8 ff ff 0a - e0 89 4d 7d 80 29 4e 7d .8S}......M}.)N}
000000000afffcd4 00 00 00 00 f4 fc ff 0a - a6 3e 4e 7d 03 00 00 00 .........>N}....
000000000afffce4 a0 fd ff 0a 00 00 00 00 - ff ff ff ff 00 00 00 00 ................
000000000afffcf4 04 fe ff 0a 7a 01 5b 00 - 03 00 00 00 a0 fd ff 0a ....z.[.........
000000000afffd04 00 00 00 00 ff ff ff ff - 00 00 00 00 00 00 00 00 ................
000000000afffd14 a4 fd ff 0a 62 d8 63 00 - 80 4a e5 f4 80 a3 cb 01 ....b.c..J......
000000000afffd24 90 fd ff 0a a0 fd ff 0a - ff ff ff ff 00 c0 51 12 ..............Q.
000000000afffd34 01 00 00 00 00 00 00 00 - 03 00 00 01 02 00 00 00 ................
000000000afffd44 00 00 00 00 5c 01 4f 02 - d8 30 53 03 00 00 00 00 ....\.O..0S.....
000000000afffd54 00 00 00 00 00 00 00 00 - 00 00 4f 02 00 00 00 00 ..........O.....
000000000afffd64 64 88 a0 53 67 be f1 02 - 88 64 7b 00 00 00 00 80 d..Sg....d{.....

Thank you all!

This conversation is currently closed to new comments.

1 total post (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

Was this working properly at one time, or is this a new install?

by robo_dev In reply to Dr Watson crash log: ERRO ...

In general, symbol file errors are simply that the debugger is not happy, not an indication about the program itself.

The fault shown in the above file is the 'access violation', which is a generic way to say that a program is trying to write to a memory area which is off-limits.

http://www.symantec.com/connect/downloads/memory-dump-and-analysis

In order to gain a little more info about the DR Watson file, the Micorosft Debugging Tools can help:
http://www.microsoft.com/whdc/devtools/debugging/default.mspx

At a high level, it could be many things:

- malware or virus that has modified a DLL or changed where it's loaded in memory. If there is a function of the program that is called only every x number of minutes or hours, it may crash the app

- a program memory leak that is eating up the free stack memory; a program that crashes after a certain period of time is the classic case of a memory leak.

Sometimes memory leaks are observable because you see system resources declining, yet no new processes are being spawned.

Often you can just 'work around' memory leaks by killing processes you don't need and by doing everything to free up resources. Kinda like dumping excess weight to keep the plane flying.

For example, in your DR Watson file, it appears that two instances of IE are running, as well as an instance of the FileZilla server, and what appears to be Apache web server. Close all that stuff, and see if your app is happier. if it's got a nasty memory leak, it will run longer with more free memory.

Back to Windows Forum
1 total post (Page 1 of 1)  

Related Discussions

Related Forums