ASP pages hang. IISstate log attached.

ASP pages hang. IISstate log attached.

am 22.02.2005 18:23:59 von Beachcomp

Hello,

Running a Win2k box.
Every few hours, IIS decides to stop serving asp pages.
The machine has multiple hosts on it and this occurs with ALL asp pages.
Running IISrecycle resolves the issue.

Any ideas?

Thanks

Dave



------------------------------------------------------------ ---------
Opened log file 'C:\iisstate\output\IISState-2580.log'

***********************
Starting new log output
IISState version 3.3.1

Tue Feb 22 01:38:00 2005

OS = Windows 2000
Executable: inetinfo.exe
PID = 2580

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 654
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
06 0006ff70 01002fbf inetinfo!main+0x654
07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: 1fc
Kernel Time: 0:0:0.40
User Time: 0:0:0.90
Thread Type: Other
# ChildEBP RetAddr
00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: aa8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 194
Kernel Time: 0:0:0.10
User Time: 0:0:0.20
Thread Type: Other
# ChildEBP RetAddr
00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 6c0
Kernel Time: 0:0:0.50
User Time: 0:0:0.80
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: 24c
Kernel Time: 0:0:0.410
User Time: 0:0:0.140
Thread Type: Other
# ChildEBP RetAddr
00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: 6a4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 00e9fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 634
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 8
System Thread ID: 804
Kernel Time: 0:0:0.90
User Time: 0:0:0.90
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: 180
Kernel Time: 0:0:0.590
User Time: 0:0:0.670
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: 8d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: 130
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: 9e4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: 9b4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14
System Thread ID: a70
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 15
System Thread ID: 338
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 16
System Thread ID: 3d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
02 0165fe08 750312f5 msafd!WSPSelect+0x24e
03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 17
System Thread ID: 940
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
02 0189ff24 750312f5 msafd!WSPSelect+0x24e
03 0189ff88 6d7075bd WS2_32!select+0xe7
04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 18
System Thread ID: 76c
Kernel Time: 0:0:0.30
User Time: 0:0:0.30
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 19
System Thread ID: a94
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52

Closing open log file C:\iisstate\output\IISState-2580.log

Re: ASP pages hang. IISstate log attached.

am 22.02.2005 19:04:57 von patfilot

No ASP pages were running in inetinfo.exe. You will probably need to dump
the dllhost(s) that are actually servicing the ASP pages. Make sure you do
it when the problem is happening.


Pat



"Beachcomp" wrote in message
news:111mqo5midfhdde@corp.supernews.com...
> Hello,
>
> Running a Win2k box.
> Every few hours, IIS decides to stop serving asp pages.
> The machine has multiple hosts on it and this occurs with ALL asp pages.
> Running IISrecycle resolves the issue.
>
> Any ideas?
>
> Thanks
>
> Dave
>
>
>
> ------------------------------------------------------------ ---------
> Opened log file 'C:\iisstate\output\IISState-2580.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Tue Feb 22 01:38:00 2005
>
> OS = Windows 2000
> Executable: inetinfo.exe
> PID = 2580
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 654
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
> 06 0006ff70 01002fbf inetinfo!main+0x654
> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: 1fc
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.90
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: aa8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: 194
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.20
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 6c0
> Kernel Time: 0:0:0.50
> User Time: 0:0:0.80
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 24c
> Kernel Time: 0:0:0.410
> User Time: 0:0:0.140
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 6a4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00e9fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
> 06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
> 07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
> 08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 634
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 804
> Kernel Time: 0:0:0.90
> User Time: 0:0:0.90
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 180
> Kernel Time: 0:0:0.590
> User Time: 0:0:0.670
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: 8d0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
> 03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: 130
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: 9e4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
> 03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: 9b4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: a70
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 15
> System Thread ID: 338
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 16
> System Thread ID: 3d4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 17
> System Thread ID: 940
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
> 03 0189ff88 6d7075bd WS2_32!select+0xe7
> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 18
> System Thread ID: 76c
> Kernel Time: 0:0:0.30
> User Time: 0:0:0.30
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 19
> System Thread ID: a94
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
> 04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
> Closing open log file C:\iisstate\output\IISState-2580.log
>
>
>

Re: ASP pages hang. IISstate log attached.

am 23.02.2005 00:34:24 von Beachcomp

Pat,

Forgive my ignorance but how do I do that?

Dave
"Pat [MSFT]" wrote in message
news:e%23MhFkQGFHA.1260@TK2MSFTNGP12.phx.gbl...
> No ASP pages were running in inetinfo.exe. You will probably need to dump
> the dllhost(s) that are actually servicing the ASP pages. Make sure you
> do it when the problem is happening.
>
>
> Pat
>
>
>
> "Beachcomp" wrote in message
> news:111mqo5midfhdde@corp.supernews.com...
>> Hello,
>>
>> Running a Win2k box.
>> Every few hours, IIS decides to stop serving asp pages.
>> The machine has multiple hosts on it and this occurs with ALL asp pages.
>> Running IISrecycle resolves the issue.
>>
>> Any ideas?
>>
>> Thanks
>>
>> Dave
>>
>>
>>
>> ------------------------------------------------------------ ---------
>> Opened log file 'C:\iisstate\output\IISState-2580.log'
>>
>> ***********************
>> Starting new log output
>> IISState version 3.3.1
>>
>> Tue Feb 22 01:38:00 2005
>>
>> OS = Windows 2000
>> Executable: inetinfo.exe
>> PID = 2580
>>
>> Note: Thread times are formatted as HH:MM:SS.ms
>>
>> ***********************
>>
>>
>>
>>
>> Thread ID: 0
>> System Thread ID: 654
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
>> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
>> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
>> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
>> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
>> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
>> 06 0006ff70 01002fbf inetinfo!main+0x654
>> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
>> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>
>>
>>
>>
>> Thread ID: 1
>> System Thread ID: 1fc
>> Kernel Time: 0:0:0.40
>> User Time: 0:0:0.90
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
>> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
>> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 2
>> System Thread ID: aa8
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 3
>> System Thread ID: 194
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.20
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 4
>> System Thread ID: 6c0
>> Kernel Time: 0:0:0.50
>> User Time: 0:0:0.80
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 5
>> System Thread ID: 24c
>> Kernel Time: 0:0:0.410
>> User Time: 0:0:0.140
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
>> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 6
>> System Thread ID: 6a4
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>> 04 00e9fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>> 05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
>> 06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>> 07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>> 08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 7
>> System Thread ID: 634
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
>> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 8
>> System Thread ID: 804
>> Kernel Time: 0:0:0.90
>> User Time: 0:0:0.90
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 9
>> System Thread ID: 180
>> Kernel Time: 0:0:0.590
>> User Time: 0:0:0.670
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 10
>> System Thread ID: 8d0
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>> 03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>> 04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>> 05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 11
>> System Thread ID: 130
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 12
>> System Thread ID: 9e4
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
>> 03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
>> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 13
>> System Thread ID: 9b4
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: HTTP Compression Thread
>> # ChildEBP RetAddr
>> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
>> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
>> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 14
>> System Thread ID: a70
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
>> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
>> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 15
>> System Thread ID: 338
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
>> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
>> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 16
>> System Thread ID: 3d4
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
>> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
>> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
>> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 17
>> System Thread ID: 940
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
>> 03 0189ff88 6d7075bd WS2_32!select+0xe7
>> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
>> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
>> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 18
>> System Thread ID: 76c
>> Kernel Time: 0:0:0.30
>> User Time: 0:0:0.30
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 19
>> System Thread ID: a94
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
>> 04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>> Closing open log file C:\iisstate\output\IISState-2580.log
>>
>>
>>
>
>

Re: ASP pages hang. IISstate log attached.

am 23.02.2005 01:05:17 von patfilot

Re-run IISState but use the PID for the DLLHost(s) instead of inetinfo. You
may have to run it multiple times.


Pat
"Beachcomp" wrote in message
news:111ngbfemfsrjb6@corp.supernews.com...
> Pat,
>
> Forgive my ignorance but how do I do that?
>
> Dave
> "Pat [MSFT]" wrote in message
> news:e%23MhFkQGFHA.1260@TK2MSFTNGP12.phx.gbl...
>> No ASP pages were running in inetinfo.exe. You will probably need to
>> dump the dllhost(s) that are actually servicing the ASP pages. Make sure
>> you do it when the problem is happening.
>>
>>
>> Pat
>>
>>
>>
>> "Beachcomp" wrote in message
>> news:111mqo5midfhdde@corp.supernews.com...
>>> Hello,
>>>
>>> Running a Win2k box.
>>> Every few hours, IIS decides to stop serving asp pages.
>>> The machine has multiple hosts on it and this occurs with ALL asp pages.
>>> Running IISrecycle resolves the issue.
>>>
>>> Any ideas?
>>>
>>> Thanks
>>>
>>> Dave
>>>
>>>
>>>
>>> ------------------------------------------------------------ ---------
>>> Opened log file 'C:\iisstate\output\IISState-2580.log'
>>>
>>> ***********************
>>> Starting new log output
>>> IISState version 3.3.1
>>>
>>> Tue Feb 22 01:38:00 2005
>>>
>>> OS = Windows 2000
>>> Executable: inetinfo.exe
>>> PID = 2580
>>>
>>> Note: Thread times are formatted as HH:MM:SS.ms
>>>
>>> ***********************
>>>
>>>
>>>
>>>
>>> Thread ID: 0
>>> System Thread ID: 654
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
>>> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
>>> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
>>> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
>>> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
>>> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
>>> 06 0006ff70 01002fbf inetinfo!main+0x654
>>> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
>>> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>>
>>>
>>>
>>>
>>> Thread ID: 1
>>> System Thread ID: 1fc
>>> Kernel Time: 0:0:0.40
>>> User Time: 0:0:0.90
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
>>> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
>>> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 2
>>> System Thread ID: aa8
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 3
>>> System Thread ID: 194
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.20
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 4
>>> System Thread ID: 6c0
>>> Kernel Time: 0:0:0.50
>>> User Time: 0:0:0.80
>>> Thread Type: Possible ASP page. Possible DCOM activity
>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>> Continuing with other analysis.
>>>
>>> No remote call being made
>>>
>>> # ChildEBP RetAddr
>>> 00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>> 01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>> 02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>>> 03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>> 04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 5
>>> System Thread ID: 24c
>>> Kernel Time: 0:0:0.410
>>> User Time: 0:0:0.140
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
>>> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 6
>>> System Thread ID: 6a4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 00e9fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>> 05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
>>> 06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>> 07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>> 08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 7
>>> System Thread ID: 634
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
>>> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 8
>>> System Thread ID: 804
>>> Kernel Time: 0:0:0.90
>>> User Time: 0:0:0.90
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 9
>>> System Thread ID: 180
>>> Kernel Time: 0:0:0.590
>>> User Time: 0:0:0.670
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 10
>>> System Thread ID: 8d0
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Possible ASP page. Possible DCOM activity
>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>> Continuing with other analysis.
>>>
>>> No remote call being made
>>>
>>> # ChildEBP RetAddr
>>> 00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>>> 03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>>> 04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>>> 05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>> 06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>> 07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 11
>>> System Thread ID: 130
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>>> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>>> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 12
>>> System Thread ID: 9e4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
>>> 03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
>>> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 13
>>> System Thread ID: 9b4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: HTTP Compression Thread
>>> # ChildEBP RetAddr
>>> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
>>> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
>>> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 14
>>> System Thread ID: a70
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
>>> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
>>> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 15
>>> System Thread ID: 338
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
>>> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 16
>>> System Thread ID: 3d4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
>>> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
>>> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
>>> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 17
>>> System Thread ID: 940
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.0
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
>>> 03 0189ff88 6d7075bd WS2_32!select+0xe7
>>> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
>>> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
>>> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 18
>>> System Thread ID: 76c
>>> Kernel Time: 0:0:0.30
>>> User Time: 0:0:0.30
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>> 03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 19
>>> System Thread ID: a94
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Possible ASP page. Possible DCOM activity
>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>> Continuing with other analysis.
>>>
>>> No remote call being made
>>>
>>> # ChildEBP RetAddr
>>> 00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>> 01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>> 02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
>>> 03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
>>> 04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>> 05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>> Closing open log file C:\iisstate\output\IISState-2580.log
>>>
>>>
>>>
>>
>>
>
>

Re: ASP pages hang. IISstate log attached.

am 23.02.2005 01:11:53 von Beachcomp

Actually, I think I managed to get a dump.. reading it... a whole other
story.
Appreciate all suggestions.

Dave
"Beachcomp" wrote in message
news:111ngbfemfsrjb6@corp.supernews.com...
> Pat,
>
> Forgive my ignorance but how do I do that?
>
> Dave
> "Pat [MSFT]" wrote in message
> news:e%23MhFkQGFHA.1260@TK2MSFTNGP12.phx.gbl...
>> No ASP pages were running in inetinfo.exe. You will probably need to
>> dump the dllhost(s) that are actually servicing the ASP pages. Make sure
>> you do it when the problem is happening.
>>
>>
>> Pat
>>
>>
>>
>> "Beachcomp" wrote in message
>> news:111mqo5midfhdde@corp.supernews.com...
>>> Hello,
>>>
>>> Running a Win2k box.
>>> Every few hours, IIS decides to stop serving asp pages.
>>> The machine has multiple hosts on it and this occurs with ALL asp pages.
>>> Running IISrecycle resolves the issue.
>>>
>>> Any ideas?
>>>
>>> Thanks
>>>
>>> Dave
>>>
>>>
>>>
>>> ------------------------------------------------------------ ---------
>>> Opened log file 'C:\iisstate\output\IISState-2580.log'
>>>
>>> ***********************
>>> Starting new log output
>>> IISState version 3.3.1
>>>
>>> Tue Feb 22 01:38:00 2005
>>>
>>> OS = Windows 2000
>>> Executable: inetinfo.exe
>>> PID = 2580
>>>
>>> Note: Thread times are formatted as HH:MM:SS.ms
>>>
>>> ***********************
>>>
>>>
>>>
>>>
>>> Thread ID: 0
>>> System Thread ID: 654
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
>>> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
>>> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
>>> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
>>> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
>>> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
>>> 06 0006ff70 01002fbf inetinfo!main+0x654
>>> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
>>> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>>
>>>
>>>
>>>
>>> Thread ID: 1
>>> System Thread ID: 1fc
>>> Kernel Time: 0:0:0.40
>>> User Time: 0:0:0.90
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
>>> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
>>> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 2
>>> System Thread ID: aa8
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 3
>>> System Thread ID: 194
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.20
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 4
>>> System Thread ID: 6c0
>>> Kernel Time: 0:0:0.50
>>> User Time: 0:0:0.80
>>> Thread Type: Possible ASP page. Possible DCOM activity
>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>> Continuing with other analysis.
>>>
>>> No remote call being made
>>>
>>> # ChildEBP RetAddr
>>> 00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>> 01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>> 02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>>> 03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>> 04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 5
>>> System Thread ID: 24c
>>> Kernel Time: 0:0:0.410
>>> User Time: 0:0:0.140
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
>>> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 6
>>> System Thread ID: 6a4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 00e9fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>> 05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
>>> 06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>> 07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>> 08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 7
>>> System Thread ID: 634
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
>>> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 8
>>> System Thread ID: 804
>>> Kernel Time: 0:0:0.90
>>> User Time: 0:0:0.90
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 9
>>> System Thread ID: 180
>>> Kernel Time: 0:0:0.590
>>> User Time: 0:0:0.670
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 10
>>> System Thread ID: 8d0
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Possible ASP page. Possible DCOM activity
>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>> Continuing with other analysis.
>>>
>>> No remote call being made
>>>
>>> # ChildEBP RetAddr
>>> 00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>>> 03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>>> 04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>>> 05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>> 06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>> 07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 11
>>> System Thread ID: 130
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>>> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>>> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 12
>>> System Thread ID: 9e4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
>>> 03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
>>> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 13
>>> System Thread ID: 9b4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: HTTP Compression Thread
>>> # ChildEBP RetAddr
>>> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
>>> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
>>> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 14
>>> System Thread ID: a70
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
>>> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
>>> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 15
>>> System Thread ID: 338
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
>>> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
>>> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 16
>>> System Thread ID: 3d4
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Other
>>> # ChildEBP RetAddr
>>> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
>>> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
>>> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
>>> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 17
>>> System Thread ID: 940
>>> Kernel Time: 0:0:0.10
>>> User Time: 0:0:0.0
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
>>> 03 0189ff88 6d7075bd WS2_32!select+0xe7
>>> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
>>> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
>>> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 18
>>> System Thread ID: 76c
>>> Kernel Time: 0:0:0.30
>>> User Time: 0:0:0.30
>>> Thread Type: HTTP Listener
>>> # ChildEBP RetAddr
>>> 00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>> 01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>> 02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>> 03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>>
>>>
>>>
>>> Thread ID: 19
>>> System Thread ID: a94
>>> Kernel Time: 0:0:0.0
>>> User Time: 0:0:0.0
>>> Thread Type: Possible ASP page. Possible DCOM activity
>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>> Continuing with other analysis.
>>>
>>> No remote call being made
>>>
>>> # ChildEBP RetAddr
>>> 00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>> 01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>> 02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
>>> 03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
>>> 04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>> 05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>
>>> Closing open log file C:\iisstate\output\IISState-2580.log
>>>
>>>
>>>
>>
>>
>
>

Re: ASP pages hang. IISstate log attached.

am 23.02.2005 18:07:57 von Beachcomp

Ok... I caught it in action and got 1 Inetinfo dump and 2 DLLhosts.
I have attached them. I see some errors but can't make much sense of them.
Mind taking a look?

Thanks

Dave


============================================================ ==========
Opened log file 'C:\iisstate\output\IISState-2516.log'

***********************
Starting new log output
IISState version 3.3.1

Wed Feb 23 11:28:52 2005

OS = Windows 2000
Executable: inetinfo.exe
PID = 2516

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 944
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
06 0006ff70 01002fbf inetinfo!main+0x654
07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: 954
Kernel Time: 0:0:0.40
User Time: 0:0:0.100
Thread Type: Other
# ChildEBP RetAddr
00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: a84
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: a30
Kernel Time: 0:0:0.10
User Time: 0:0:0.30
Thread Type: Other
# ChildEBP RetAddr
00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 8fc
Kernel Time: 0:0:0.370
User Time: 0:0:0.180
Thread Type: Other
# ChildEBP RetAddr
00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: 398
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00e5fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00e5fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00e5fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00e5fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 00e5fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 00e5fd70 01002440 ftpsvc2!ServiceEntry+0xc7
06 00e5ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
07 00e5ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
08 00e5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: 974
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 9d0
Kernel Time: 0:0:0.821
User Time: 0:0:0.861
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 8
System Thread ID: 650
Kernel Time: 0:0:1.361
User Time: 0:0:1.602
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: 928
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0128feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0128fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
02 0128ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
03 0128ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 0128ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
05 0128ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
06 0128ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
07 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: 9a8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: 7d8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: 868
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: 5a8
Kernel Time: 0:0:0.0
User Time: 0:0:0.30
Thread Type: Other
# ChildEBP RetAddr
00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14
System Thread ID: 9ec
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 15
System Thread ID: a90
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
02 0165fe08 750312f5 msafd!WSPSelect+0x24e
03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 16
System Thread ID: 780
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
02 0189ff24 750312f5 msafd!WSPSelect+0x24e
03 0189ff88 6d7075bd WS2_32!select+0xe7
04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 17
System Thread ID: 684
Kernel Time: 0:0:0.90
User Time: 0:0:0.150
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 01fbff74 77d359a3 ntdll!NtDelayExecution+0xb
01 01fbffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 01fbffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 01fbffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 18
System Thread ID: 898
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 028fff74 77d359a3 ntdll!NtDelayExecution+0xb
01 028fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 028fffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 028fffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 19
System Thread ID: 184
Kernel Time: 0:0:0.10
User Time: 0:0:0.20
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0293ff74 77d359a3 ntdll!NtDelayExecution+0xb
01 0293ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 0293ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 0293ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 20
System Thread ID: 5c0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0297ff74 77d359a3 ntdll!NtDelayExecution+0xb
01 0297ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 0297ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 0297ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 21
System Thread ID: 9e8
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 029bff74 77d359a3 ntdll!NtDelayExecution+0xb
01 029bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 029bffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 029bffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 22
System Thread ID: 730
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 029fff74 77d359a3 ntdll!NtDelayExecution+0xb
01 029fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 029fffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 029fffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 23
System Thread ID: 9ac
Kernel Time: 0:0:0.10
User Time: 0:0:0.50
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 02a3ff74 77d359a3 ntdll!NtDelayExecution+0xb
01 02a3ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 02a3ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 02a3ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 24
System Thread ID: 2fc
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 02a7fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 02a7ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 02a7ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 02a7ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
04 02a7ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 02a7ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 25
System Thread ID: 4e0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 02abff74 77d359a3 ntdll!NtDelayExecution+0xb
01 02abffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 02abffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 02abffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 26
System Thread ID: a50
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 02afff74 77d359a3 ntdll!NtDelayExecution+0xb
01 02afffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 02afffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 02afffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 27
System Thread ID: 958
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 02b3ff74 77d359a3 ntdll!NtDelayExecution+0xb
01 02b3ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 02b3ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 02b3ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 28
System Thread ID: 6dc
Kernel Time: 0:0:0.20
User Time: 0:0:0.60
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 02bbfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 02bbff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 02bbff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 02bbffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 02bbffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 02bbffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 29
System Thread ID: 860
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 02bfff74 77d359a3 ntdll!NtDelayExecution+0xb
01 02bfffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
02 02bfffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
03 02bfffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 30
System Thread ID: 3ec
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02daff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 02daff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 02daff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
03 02daffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
04 02daffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 31
System Thread ID: 24c
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

Remote call is either to a MTA object or object not initialized. Also,
possible utility thread.
DCOM call being made to Process ID: 2216
Waiting on thread id: ffffffff

# ChildEBP RetAddr
00 02defb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
01 02defb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
02 02defba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
03 02defbc0 77b26ad2 ole32!ThreadSendReceive+0xef
04 02defbd8 77b23ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
05 02defc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
06 02defc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
07 02defc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
08 02defce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
09 02defcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
0a 02deff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
0b 02deff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
0c 02deff70 787f5818 RPCRT4!ObjectStubless+0xf
0d 02deffb4 7c57b388
COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
0e 02deffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 32
System Thread ID: 6a8
Kernel Time: 0:0:0.220
User Time: 0:0:0.200
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Program Files\Common Files\Microsoft Shared\Web Server
Extensions\50\bin\fp5Autl.dll -
Thread Type: Front Page Authoring.
# ChildEBP RetAddr
00 02f3fdc8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 02f3fe18 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 02f3fe30 32e5dddf KERNEL32!WaitForMultipleObjects+0x17
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 02f3ff78 32e2366c fp5Autl!Ordinal1596+0xe58
04 02f3ffb4 7c57b388 fp5Autl!Ordinal475+0x43b
05 02f3ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 33
System Thread ID: 64c
Kernel Time: 0:0:0.230
User Time: 0:0:0.310
Thread Type: Front Page Authoring.
# ChildEBP RetAddr
00 02fcfdc8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 02fcfe18 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 02fcfe30 32e5dddf KERNEL32!WaitForMultipleObjects+0x17
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 02fcff78 32e2366c fp5Autl!Ordinal1596+0xe58
04 02fcffb4 7c57b388 fp5Autl!Ordinal475+0x43b
05 02fcffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 34
System Thread ID: 81c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Program Files\Common Files\Microsoft Shared\Web Server
Extensions\50\servsupp\fp5amsft.dll -
Thread Type: Front Page Authoring.
# ChildEBP RetAddr
00 030efef8 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 030eff20 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 030eff30 32d48b57 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 030eff70 32db651d fp5amsft!prepareToUnload+0xfc29
04 030effb4 7c57b388 fp5Autl!Ordinal587+0x19
05 030effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 35
System Thread ID: 864
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0330ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0330ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 0330ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 0330ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 36
System Thread ID: 230
Kernel Time: 0:0:0.20
User Time: 0:0:0.10
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0334ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0334ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 0334ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 0334ffec 00000000 KERNEL32!BaseThreadStart+0x52

Closing open log file C:\iisstate\output\IISState-2516.log

============================================================ ==========
Opened log file 'C:\iisstate\output\IISState-2216.log'

***********************
Starting new log output
IISState version 3.3.1

Wed Feb 23 11:29:15 2005

OS = Windows 2000
Executable: dllhost.exe
PID = 2216

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 8a4
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
03 0006fd80 77aaa88c
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x 4f
04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
05 0006ff24 010014c6 dllhost!WinMain+0xb0
06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: 8ac
Kernel Time: 0:0:0.20
User Time: 0:0:0.50
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0087fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0087ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0087ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0087ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 0087ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 0087ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: 8b4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 008fff30 77abc471 USER32!NtUserGetMessage+0xb
01 008fff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
02 008fff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
03 008fff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
04 008fffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
05 008fffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 008fffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 8bc
Kernel Time: 0:0:0.10
User Time: 0:0:0.20
Thread Type: Other
# ChildEBP RetAddr
00 0098fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0098fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
02 0098fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
03 0098ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
04 0098ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 8c8
Kernel Time: 0:0:0.80
User Time: 0:0:0.90
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00a4fee0 7c59a243 ntdll!NtDelayExecution+0xb
01 00a4ff00 7c59a20e KERNEL32!SleepEx+0x32
02 00a4ff0c 787d12aa KERNEL32!Sleep+0xb
03 00a4ff7c 780085bc COMSVCS!PostData+0xf2
04 00a4ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
05 00a4ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: 8cc
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00a8fdd8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00a8fe28 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00a8fe40 78804961 KERNEL32!WaitForMultipleObjects+0x17
03 00a8ff30 78801f8c COMSVCS!CRMRecoveryClerk::RecoveryThread+0x49d
04 00a8ff7c 78008454 COMSVCS!RecoveryThreadFunction+0x8e
05 00a8ffb4 7c57b388 MSVCRT!_endthread+0xc6
06 00a8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: 8b8
Kernel Time: 0:0:0.30
User Time: 0:0:0.60
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00acfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00acff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00acff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00acffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 00acffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 00acffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 8d0
Kernel Time: 0:0:0.10
User Time: 0:0:0.20
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00b0f5f0 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00b0f640 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00b0f658 787f011d KERNEL32!WaitForMultipleObjects+0x17
03 00b0f6a4 77d32355 COMSVCS!CLceDisp::DoWork+0xab
04 00b0f6c0 77d9356d RPCRT4!Invoke+0x30
05 00b0f924 77d93a2c RPCRT4!NdrStubCall2+0x664
06 00b0f988 77b25616 RPCRT4!CStdStubBuffer_Invoke+0xc8
07 00b0f9cc 77b258f1 ole32!SyncStubInvoke+0x61
08 00b0fa14 77ab81ed ole32!StubInvoke+0xa8
09 00b0fa78 77aaa60c ole32!CCtxComChnl::ContextInvoke+0xbb
0a 00b0fa94 77b254fb ole32!MTAInvoke+0x18
0b 00b0fac4 77b25c1f ole32!AppInvoke+0xb5
0c 00b0fb84 77b25969 ole32!ComInvokeWithLockAndIPID+0x297
0d 00b0fba4 77ab45aa ole32!ComInvoke+0x41
0e 00b0fbb4 77b2696d ole32!ThreadDispatch+0x21
0f 00b0fbc8 77b269b7 ole32!DispatchCall+0x24
10 00b0fbe0 77b23ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x34
11 00b0fc20 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
12 00b0fc30 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
13 00b0fc90 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
14 00b0fce8 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
15 00b0fd04 77d9487d RPCRT4!NdrProxySendReceive+0x4c
16 00b0ff4c 77d95136 RPCRT4!NdrClientCall2+0x4f5
17 00b0ff68 77d46e75 RPCRT4!ObjectStublessClient+0x76
18 00b0ff78 787f2251 RPCRT4!ObjectStubless+0xf
19 00b0ffb4 7c57b388 COMSVCS!CEventServer::DispatchEvents+0x83
1a 00b0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 8
System Thread ID: 8d4
Kernel Time: 0:0:0.60
User Time: 0:0:0.70
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00b7fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00b7ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00b7ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00b7ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 00b7ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 00b7ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: 8dc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00bbebe0 77f89ebd ntdll!ZwWaitForMultipleObjects+0xb
01 00bbffb4 7c57b388 ntdll!RtlpWaitThread+0x1b9
02 00bbffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: 8f0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00c0fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00c0fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00c0fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
03 00c0ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
04 00c0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: 8f4
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: Distributed Transaction. Checking for running ASP page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 00c5ff40 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 00c5ff68 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 00c5ff78 6dfd0126 KERNEL32!WaitForSingleObject+0xf
03 00c5ffb0 6dfd003b
MSDTCPRX!CConnectionManager::TimerProcForNonGuardedUser+0xe6
04 00c5ffb4 7c57b388 MSDTCPRX!CConnectionManager::TimerProc+0x1b
05 00c5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: 998
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0126ff28 7c59a243 ntdll!NtDelayExecution+0xb
01 0126ff48 7c59a20e KERNEL32!SleepEx+0x32
02 0126ff54 7c6761dc KERNEL32!Sleep+0xb
03 0126ff6c 7c6672b9 catsrv!RegSrvrPump+0x34
04 0126ff7c 78008454 catsrv!RunService+0x5f
05 0126ffb4 7c57b388 MSVCRT!_endthread+0xc6
06 0126ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: 894
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0133ff9c 77f842c4 ntdll!NtDelayExecution+0xb
01 0133ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
02 0133ffec 00000000 KERNEL32!BaseThreadStart+0x52

Closing open log file C:\iisstate\output\IISState-2216.log

============================================================ ==========
Opened log file 'C:\iisstate\output\IISState-2508.log'

***********************
Starting new log output
IISState version 3.3.1

Wed Feb 23 11:27:53 2005

OS = Windows 2000
Executable: dllhost.exe
PID = 2508

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 718
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
03 0006fd80 77aaa88c
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x 4f
04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
05 0006ff24 010014c6 dllhost!WinMain+0xb0
06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: 824
Kernel Time: 0:0:0.10
User Time: 0:0:0.110
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0088ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 0088ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: 8a0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 008cff5c 7c59a243 ntdll!NtDelayExecution+0xb
01 008cff7c 7c59a20e KERNEL32!SleepEx+0x32
02 008cff88 77ab9967 KERNEL32!Sleep+0xb
03 008cff90 77ab5a5b ole32!CROIDTable::WorkerThreadLoop+0xc
04 008cffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
05 008cffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 008cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 7c0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0090ff30 77abc471 USER32!NtUserGetMessage+0xb
01 0090ff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
02 0090ff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
03 0090ff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
04 0090ffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
05 0090ffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: a34
Kernel Time: 0:0:0.20
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 0099fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0099fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
02 0099fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
03 0099ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: 9b8
Kernel Time: 0:0:0.40
User Time: 0:0:0.80
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 00b5fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00b5ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00b5ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00b5ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 00b5ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 00b5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: 98
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00b9ff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00b9ff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00b9ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
03 00b9ffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
04 00b9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 8d8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

Remote call is either to a MTA object or object not initialized. Also,
possible utility thread.
DCOM call being made to Process ID: 2216
Waiting on thread id: ffffffff

# ChildEBP RetAddr
00 00bdfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
01 00bdfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
02 00bdfba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
03 00bdfbc0 77b26ad2 ole32!ThreadSendReceive+0xef
04 00bdfbd8 77b23ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
05 00bdfc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
06 00bdfc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
07 00bdfc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
08 00bdfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
09 00bdfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
0a 00bdff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
0b 00bdff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
0c 00bdff70 787f5818 RPCRT4!ObjectStubless+0xf
0d 00bdffb4 7c57b388
COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
0e 00bdffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 8
System Thread ID: 814
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00c1fee0 7c59a243 ntdll!NtDelayExecution+0xb
01 00c1ff00 7c59a20e KERNEL32!SleepEx+0x32
02 00c1ff0c 787d12aa KERNEL32!Sleep+0xb
03 00c1ff7c 780085bc COMSVCS!PostData+0xf2
04 00c1ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
05 00c1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: 8e4
Kernel Time: 0:0:0.60
User Time: 0:0:0.50
Thread Type: Other
# ChildEBP RetAddr
00 00e9fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00e9feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00e9ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00e9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00e9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00e9ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: 394
Kernel Time: 0:0:0.30
User Time: 0:0:0.70
Thread Type: Other
# ChildEBP RetAddr
00 00edfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00edfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00edff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00edff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00edff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00edffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 00edffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: 938
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: 154
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fdff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00fdff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 00fdffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 00fdffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: a24
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 0114feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0114fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
02 0114ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
03 0114ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 0114ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
05 0114ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
06 0114ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
07 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14
System Thread ID: 95c
Kernel Time: 0:0:0.30
User Time: 0:0:0.110
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 0120fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0120ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0120ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0120ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 0120ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 15
System Thread ID: 7ec
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 01d2fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01d2fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01d2ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01d2ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
04 01d2ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
05 01d2ffb4 7c57b388 MSVCRT!_endthread+0xc6
06 01d2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 16
System Thread ID: a88
Kernel Time: 0:0:0.30
User Time: 0:0:0.170
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINNT\System32\vbscript.dll -
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01d6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01d6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01d6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01d6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01d6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01d6e914 69babf49 urlmon!CTransaction::Start+0x513
06 01d6e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 01d6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01d6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01d6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01d6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01d6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01d6eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01d6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 17
System Thread ID: 2dc
Kernel Time: 0:0:0.340
User Time: 0:0:0.590
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01dae7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01dae804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01dae860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01dae87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01dae8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01dae914 69babf49 urlmon!CTransaction::Start+0x513
06 01dae958 69bab236 msxml3!CXMLHTTP::send+0x144
07 01dae9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01dae9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01daea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01daea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01daeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01daeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01daeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 18
System Thread ID: 980
Kernel Time: 0:0:0.330
User Time: 0:0:0.751
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01dee7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01dee804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01dee860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01dee87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01dee8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01dee914 69babf49 urlmon!CTransaction::Start+0x513
06 01dee958 69bab236 msxml3!CXMLHTTP::send+0x144
07 01dee9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01dee9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01deea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01deea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01deeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01deeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01deeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 19
System Thread ID: 5f0
Kernel Time: 0:0:0.280
User Time: 0:0:0.570
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01e6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01e6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01e6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01e6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01e6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01e6e914 69babf49 urlmon!CTransaction::Start+0x513
06 01e6e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 01e6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01e6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01e6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01e6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01e6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01e6eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01e6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 20
System Thread ID: a14
Kernel Time: 0:0:0.240
User Time: 0:0:0.741
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01eae7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01eae804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01eae860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01eae87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01eae8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01eae914 69babf49 urlmon!CTransaction::Start+0x513
06 01eae958 69bab236 msxml3!CXMLHTTP::send+0x144
07 01eae9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01eae9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01eaea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01eaea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01eaeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01eaeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01eaeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 21
System Thread ID: 658
Kernel Time: 0:0:0.150
User Time: 0:0:0.560
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01eee7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01eee804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01eee860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01eee87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01eee8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01eee914 69babf49 urlmon!CTransaction::Start+0x513
06 01eee958 69bab236 msxml3!CXMLHTTP::send+0x144
07 01eee9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01eee9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01eeea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01eeea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01eeeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01eeeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01eeeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 22
System Thread ID: 784
Kernel Time: 0:0:0.210
User Time: 0:0:0.380
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01f2e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01f2e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01f2e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01f2e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01f2e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01f2e914 69babf49 urlmon!CTransaction::Start+0x513
06 01f2e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 01f2e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01f2e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01f2ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01f2ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01f2eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01f2eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01f2eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 23
System Thread ID: 72c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01f8ff9c 77f842c4 ntdll!NtDelayExecution+0xb
01 01f8ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
02 01f8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 24
System Thread ID: 6ac
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0210ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
01 0210ffb4 7c57b388 ntdll!RtlpWorkerThread+0x6b
02 0210ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 25
System Thread ID: a00
Kernel Time: 0:0:0.50
User Time: 0:0:0.20
Thread Type: Other
# ChildEBP RetAddr
00 027dfac8 74fd1394 ntdll!ZwWaitForSingleObject+0xb
01 027dfb04 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
02 027dfbf0 750312f5 msafd!WSPSelect+0x24e
03 027dfc54 6302a29d WS2_32!select+0xe7
04 027dffb0 6302a3a0 WININET!ICAsyncThread::SelectThread+0x228
05 027dffb4 7c57b388 WININET!ICAsyncThread::SelectThreadWrapper+0x9
06 027dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 26
System Thread ID: 8f8
Kernel Time: 0:0:2.363
User Time: 0:0:5.217
Thread Type: Other
# ChildEBP RetAddr
00 0281fe58 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0281fea8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0281ff04 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0281ff20 70abb32d USER32!MsgWaitForMultipleObjects+0x1d
04 0281ff74 70abb6b5 SHLWAPI!CThreadPool::RemoveWorkItem+0x77
05 0281ffac 70abb879 SHLWAPI!CThreadPool::Worker+0x2c
06 0281ffb4 7c57b388 SHLWAPI!CThreadPool::WorkerThread+0x30
07 0281ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 27
System Thread ID: 400
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0335ff58 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0335ff80 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0335ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
03 0335ffb4 7c57b388 oledb32!ReleaseResourceThread+0x54
04 0335ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 28
System Thread ID: a2c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0339ff50 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0339ff78 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0339ff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
03 0339ffb4 7c57b388 oledb32!ResetResourceThread+0x84
04 0339ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 29
System Thread ID: fc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 033dfd54 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 033dfd7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 033dfd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
03 033dffb4 7c57b388 COMSVCS!PingThread+0xf5
04 033dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 30
System Thread ID: 5b4
Kernel Time: 0:0:0.60
User Time: 0:0:0.30
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0d8de7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0d8de804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0d8de860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0d8de87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0d8de8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0d8de914 69babf49 urlmon!CTransaction::Start+0x513
06 0d8de958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0d8de9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0d8de9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0d8dea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0d8dea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0d8deac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0d8deaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0d8deb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 31
System Thread ID: 83c
Kernel Time: 0:0:0.20
User Time: 0:0:0.70
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0d95e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0d95e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0d95e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0d95e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0d95e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0d95e914 69babf49 urlmon!CTransaction::Start+0x513
06 0d95e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0d95e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0d95e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0d95ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0d95ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0d95eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0d95eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0d95eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 32
System Thread ID: 870
Kernel Time: 0:0:0.20
User Time: 0:0:0.40
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0da3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0da3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0da3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0da3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0da3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0da3e914 69babf49 urlmon!CTransaction::Start+0x513
06 0da3e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0da3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0da3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0da3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0da3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0da3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0da3eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0da3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 33
System Thread ID: a8c
Kernel Time: 0:0:0.40
User Time: 0:0:0.60
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0da7e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0da7e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0da7e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0da7e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0da7e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0da7e914 69babf49 urlmon!CTransaction::Start+0x513
06 0da7e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0da7e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0da7e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0da7ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0da7ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0da7eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0da7eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0da7eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 34
System Thread ID: 908
Kernel Time: 0:0:0.10
User Time: 0:0:0.70
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0dafe7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0dafe804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0dafe860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0dafe87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0dafe8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0dafe914 69babf49 urlmon!CTransaction::Start+0x513
06 0dafe958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0dafe9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0dafe9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0dafea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0dafea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0dafeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0dafeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0dafeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 35
System Thread ID: 73c
Kernel Time: 0:0:0.60
User Time: 0:0:0.70
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0db3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0db3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0db3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0db3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0db3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0db3e914 69babf49 urlmon!CTransaction::Start+0x513
06 0db3e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0db3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0db3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0db3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0db3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0db3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0db3eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0db3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 36
System Thread ID: a94
Kernel Time: 0:0:0.40
User Time: 0:0:0.90
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0dc3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0dc3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0dc3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0dc3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0dc3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0dc3e914 69babf49 urlmon!CTransaction::Start+0x513
06 0dc3e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0dc3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0dc3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0dc3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0dc3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0dc3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0dc3eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0dc3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 37
System Thread ID: 6a0
Kernel Time: 0:0:0.40
User Time: 0:0:0.50
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0dc7e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0dc7e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0dc7e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0dc7e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0dc7e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0dc7e914 69babf49 urlmon!CTransaction::Start+0x513
06 0dc7e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0dc7e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0dc7e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0dc7ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0dc7ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0dc7eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0dc7eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0dc7eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 38
System Thread ID: 9e4
Kernel Time: 0:0:0.0
User Time: 0:0:0.20
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0ea5e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0ea5e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0ea5e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0ea5e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0ea5e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0ea5e914 69babf49 urlmon!CTransaction::Start+0x513
06 0ea5e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0ea5e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0ea5e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0ea5ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0ea5ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0ea5eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0ea5eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0ea5eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 39
System Thread ID: 32c
Kernel Time: 0:0:0.0
User Time: 0:0:0.20
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0ea9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0ea9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0ea9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0ea9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0ea9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0ea9e914 69babf49 urlmon!CTransaction::Start+0x513
06 0ea9e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0ea9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0ea9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0ea9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0ea9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0ea9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0ea9eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0ea9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 40
System Thread ID: 9a0
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0eade7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0eade804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0eade860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0eade87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0eade8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0eade914 69babf49 urlmon!CTransaction::Start+0x513
06 0eade958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0eade9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0eade9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0eadea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0eadea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0eadeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0eadeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0eadeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 41
System Thread ID: 5f4
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0eb1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0eb1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0eb1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0eb1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0eb1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0eb1e914 69babf49 urlmon!CTransaction::Start+0x513
06 0eb1e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0eb1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0eb1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0eb1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0eb1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0eb1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0eb1eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0eb1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 42
System Thread ID: a58
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0eb9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0eb9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0eb9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0eb9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0eb9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0eb9e914 69babf49 urlmon!CTransaction::Start+0x513
06 0eb9e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0eb9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0eb9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0eb9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0eb9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0eb9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0eb9eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0eb9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 43
System Thread ID: a3c
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0ebde7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0ebde804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0ebde860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0ebde87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0ebde8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0ebde914 69babf49 urlmon!CTransaction::Start+0x513
06 0ebde958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0ebde9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0ebde9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0ebdea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0ebdea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0ebdeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0ebdeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0ebdeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 44
System Thread ID: 94c
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: D:\WEBSPACE\BEACHCOMP\DMOADABWEB\BEACHCOMP.COM\WWW\PLANS.ASP

# ChildEBP RetAddr
00 0ec1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0ec1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0ec1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0ec1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0ec1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0ec1e914 69babf49 urlmon!CTransaction::Start+0x513
06 0ec1e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0ec1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0ec1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0ec1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0ec1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0ec1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0ec1eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0ec1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 45
System Thread ID: 9f0
Kernel Time: 0:0:0.20
User Time: 0:0:0.0
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0ec9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0ec9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0ec9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0ec9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0ec9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0ec9e914 69babf49 urlmon!CTransaction::Start+0x513
06 0ec9e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0ec9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0ec9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0ec9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0ec9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0ec9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0ec9eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0ec9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 46
System Thread ID: 994
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0ecde7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0ecde804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0ecde860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0ecde87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0ecde8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0ecde914 69babf49 urlmon!CTransaction::Start+0x513
06 0ecde958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0ecde9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0ecde9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0ecdea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0ecdea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0ecdeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0ecdeaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0ecdeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 47
System Thread ID: 710
Kernel Time: 0:0:0.0
User Time: 0:0:0.30
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0ed1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 0ed1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0ed1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0ed1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 0ed1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 0ed1e914 69babf49 urlmon!CTransaction::Start+0x513
06 0ed1e958 69bab236 msxml3!CXMLHTTP::send+0x144
07 0ed1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 0ed1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 0ed1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 0ed1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 0ed1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 0ed1eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 0ed1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a

Closing open log file C:\iisstate\output\IISState-2508.log

============================================================ ==========
"Pat [MSFT]" wrote in message
news:%23zgnitTGFHA.2756@TK2MSFTNGP15.phx.gbl...
> Re-run IISState but use the PID for the DLLHost(s) instead of inetinfo.
> You may have to run it multiple times.
>
>
> Pat
> "Beachcomp" wrote in message
> news:111ngbfemfsrjb6@corp.supernews.com...
>> Pat,
>>
>> Forgive my ignorance but how do I do that?
>>
>> Dave
>> "Pat [MSFT]" wrote in message
>> news:e%23MhFkQGFHA.1260@TK2MSFTNGP12.phx.gbl...
>>> No ASP pages were running in inetinfo.exe. You will probably need to
>>> dump the dllhost(s) that are actually servicing the ASP pages. Make
>>> sure you do it when the problem is happening.
>>>
>>>
>>> Pat
>>>
>>>
>>>
>>> "Beachcomp" wrote in message
>>> news:111mqo5midfhdde@corp.supernews.com...
>>>> Hello,
>>>>
>>>> Running a Win2k box.
>>>> Every few hours, IIS decides to stop serving asp pages.
>>>> The machine has multiple hosts on it and this occurs with ALL asp
>>>> pages.
>>>> Running IISrecycle resolves the issue.
>>>>
>>>> Any ideas?
>>>>
>>>> Thanks
>>>>
>>>> Dave
>>>>
>>>>
>>>>
>>>> ------------------------------------------------------------ ---------
>>>> Opened log file 'C:\iisstate\output\IISState-2580.log'
>>>>
>>>> ***********************
>>>> Starting new log output
>>>> IISState version 3.3.1
>>>>
>>>> Tue Feb 22 01:38:00 2005
>>>>
>>>> OS = Windows 2000
>>>> Executable: inetinfo.exe
>>>> PID = 2580
>>>>
>>>> Note: Thread times are formatted as HH:MM:SS.ms
>>>>
>>>> ***********************
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 0
>>>> System Thread ID: 654
>>>> Kernel Time: 0:0:0.10
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
>>>> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
>>>> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
>>>> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
>>>> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
>>>> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
>>>> 06 0006ff70 01002fbf inetinfo!main+0x654
>>>> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
>>>> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 1
>>>> System Thread ID: 1fc
>>>> Kernel Time: 0:0:0.40
>>>> User Time: 0:0:0.90
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>>> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>>> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
>>>> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
>>>> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 2
>>>> System Thread ID: aa8
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>>> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>>> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>>> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 3
>>>> System Thread ID: 194
>>>> Kernel Time: 0:0:0.10
>>>> User Time: 0:0:0.20
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>>> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>>> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>>> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 4
>>>> System Thread ID: 6c0
>>>> Kernel Time: 0:0:0.50
>>>> User Time: 0:0:0.80
>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>> Continuing with other analysis.
>>>>
>>>> No remote call being made
>>>>
>>>> # ChildEBP RetAddr
>>>> 00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>>> 01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>>> 02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>>>> 03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>>> 04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 5
>>>> System Thread ID: 24c
>>>> Kernel Time: 0:0:0.410
>>>> User Time: 0:0:0.140
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>>> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>>> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
>>>> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 6
>>>> System Thread ID: 6a4
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>> 03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>>> 04 00e9fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>>> 05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
>>>> 06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>> 07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>> 08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 7
>>>> System Thread ID: 634
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: HTTP Listener
>>>> # ChildEBP RetAddr
>>>> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
>>>> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
>>>> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 8
>>>> System Thread ID: 804
>>>> Kernel Time: 0:0:0.90
>>>> User Time: 0:0:0.90
>>>> Thread Type: HTTP Listener
>>>> # ChildEBP RetAddr
>>>> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 9
>>>> System Thread ID: 180
>>>> Kernel Time: 0:0:0.590
>>>> User Time: 0:0:0.670
>>>> Thread Type: HTTP Listener
>>>> # ChildEBP RetAddr
>>>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 10
>>>> System Thread ID: 8d0
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>> Continuing with other analysis.
>>>>
>>>> No remote call being made
>>>>
>>>> # ChildEBP RetAddr
>>>> 00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>> 01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>>>> 02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>>>> 03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>>>> 04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>>>> 05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>>> 06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>> 07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 11
>>>> System Thread ID: 130
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>>>> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>>>> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 12
>>>> System Thread ID: 9e4
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
>>>> 03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
>>>> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 13
>>>> System Thread ID: 9b4
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: HTTP Compression Thread
>>>> # ChildEBP RetAddr
>>>> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>>> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>>> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
>>>> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
>>>> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 14
>>>> System Thread ID: a70
>>>> Kernel Time: 0:0:0.10
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
>>>> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
>>>> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
>>>> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 15
>>>> System Thread ID: 338
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
>>>> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
>>>> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 16
>>>> System Thread ID: 3d4
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Other
>>>> # ChildEBP RetAddr
>>>> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>>> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>>> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
>>>> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
>>>> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
>>>> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 17
>>>> System Thread ID: 940
>>>> Kernel Time: 0:0:0.10
>>>> User Time: 0:0:0.0
>>>> Thread Type: HTTP Listener
>>>> # ChildEBP RetAddr
>>>> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>>> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>>> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
>>>> 03 0189ff88 6d7075bd WS2_32!select+0xe7
>>>> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
>>>> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
>>>> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 18
>>>> System Thread ID: 76c
>>>> Kernel Time: 0:0:0.30
>>>> User Time: 0:0:0.30
>>>> Thread Type: HTTP Listener
>>>> # ChildEBP RetAddr
>>>> 00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>> 01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>> 02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>> 03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>>
>>>>
>>>>
>>>> Thread ID: 19
>>>> System Thread ID: a94
>>>> Kernel Time: 0:0:0.0
>>>> User Time: 0:0:0.0
>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>> Continuing with other analysis.
>>>>
>>>> No remote call being made
>>>>
>>>> # ChildEBP RetAddr
>>>> 00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>>> 01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>>> 02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
>>>> 03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
>>>> 04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>> 05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>
>>>> Closing open log file C:\iisstate\output\IISState-2580.log
>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>

Re: ASP pages hang. IISstate log attached.

am 23.02.2005 21:58:55 von patfilot

Here's your problem:

Thread ID: 16
System Thread ID: a88
Kernel Time: 0:0:0.30
User Time: 0:0:0.170
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WINNT\System32\vbscript.dll -
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 01d6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01d6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01d6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01d6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
04 01d6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
05 01d6e914 69babf49 urlmon!CTransaction::Start+0x513
06 01d6e958 69bab236 msxml3!CXMLHTTP::send+0x144 <--That's a no-no. You
are using the client side interface rather than the serbver side interface
07 01d6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
08 01d6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
09 01d6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
0a 01d6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
0b 01d6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
0c 01d6eaf8 6b614279
msxml3!_dispatchEx::Invoke+0x28
WARNING: Stack unwind information not available. Following frames may be
wrong.
0d 01d6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a


Do a search for all of your asp pages where you call CreateObject or
Server.CreateObject on XMLHTTP. You have to use the ServerXmlHttp
interface. You won't need to change the method calls, just the interface.

Basically, when you use the client side version, you are limited to 2
concurrent HTTP calls to a given remote location (this is in-line with the
client side RFC recommendations). The server side does not have this limit.


Pat


"Beachcomp" wrote in message
news:111pe3hqovofia2@corp.supernews.com...
> Ok... I caught it in action and got 1 Inetinfo dump and 2 DLLhosts.
> I have attached them. I see some errors but can't make much sense of them.
> Mind taking a look?
>
> Thanks
>
> Dave
>
>
> ============================================================ ==========
> Opened log file 'C:\iisstate\output\IISState-2516.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Wed Feb 23 11:28:52 2005
>
> OS = Windows 2000
> Executable: inetinfo.exe
> PID = 2516
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 944
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
> 06 0006ff70 01002fbf inetinfo!main+0x654
> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: 954
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.100
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: a84
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: a30
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.30
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 8fc
> Kernel Time: 0:0:0.370
> User Time: 0:0:0.180
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 398
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e5fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00e5fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00e5fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00e5fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00e5fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 00e5fd70 01002440 ftpsvc2!ServiceEntry+0xc7
> 06 00e5ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
> 07 00e5ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
> 08 00e5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 974
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 9d0
> Kernel Time: 0:0:0.821
> User Time: 0:0:0.861
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 650
> Kernel Time: 0:0:1.361
> User Time: 0:0:1.602
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 928
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0128feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0128fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0128ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
> 03 0128ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 0128ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 0128ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 0128ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 07 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: 9a8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: 7d8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
> 03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: 868
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: 5a8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.30
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: 9ec
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 15
> System Thread ID: a90
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 16
> System Thread ID: 780
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
> 03 0189ff88 6d7075bd WS2_32!select+0xe7
> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 17
> System Thread ID: 684
> Kernel Time: 0:0:0.90
> User Time: 0:0:0.150
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 01fbff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 01fbffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 01fbffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 01fbffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 18
> System Thread ID: 898
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.10
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 028fff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 028fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 028fffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 028fffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 19
> System Thread ID: 184
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.20
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0293ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0293ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0293ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 0293ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 20
> System Thread ID: 5c0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0297ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0297ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0297ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 0297ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 21
> System Thread ID: 9e8
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 029bff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 029bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 029bffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 029bffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 22
> System Thread ID: 730
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.10
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 029fff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 029fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 029fffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 029fffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 23
> System Thread ID: 9ac
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.50
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 02a3ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 02a3ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 02a3ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 02a3ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 24
> System Thread ID: 2fc
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.10
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 02a7fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 02a7ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 02a7ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 02a7ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
> 04 02a7ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 02a7ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 25
> System Thread ID: 4e0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 02abff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 02abffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 02abffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 02abffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 26
> System Thread ID: a50
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 02afff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 02afffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 02afffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 02afffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 27
> System Thread ID: 958
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 02b3ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 02b3ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 02b3ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 02b3ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 28
> System Thread ID: 6dc
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.60
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 02bbfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 02bbff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 02bbff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 02bbffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 02bbffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 02bbffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 29
> System Thread ID: 860
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 02bfff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 02bfffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 02bfffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 03 02bfffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 30
> System Thread ID: 3ec
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 02daff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 02daff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 02daff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
> 03 02daffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
> 04 02daffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 31
> System Thread ID: 24c
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> Remote call is either to a MTA object or object not initialized. Also,
> possible utility thread.
> DCOM call being made to Process ID: 2216
> Waiting on thread id: ffffffff
>
> # ChildEBP RetAddr
> 00 02defb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
> 01 02defb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
> 02 02defba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
> 03 02defbc0 77b26ad2 ole32!ThreadSendReceive+0xef
> 04 02defbd8 77b23ab6
> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
> 05 02defc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
> 06 02defc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
> 07 02defc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
> 08 02defce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
> 09 02defcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
> 0a 02deff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
> 0b 02deff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
> 0c 02deff70 787f5818 RPCRT4!ObjectStubless+0xf
> 0d 02deffb4 7c57b388
> COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
> 0e 02deffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 32
> System Thread ID: 6a8
> Kernel Time: 0:0:0.220
> User Time: 0:0:0.200
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\Program Files\Common Files\Microsoft Shared\Web Server
> Extensions\50\bin\fp5Autl.dll -
> Thread Type: Front Page Authoring.
> # ChildEBP RetAddr
> 00 02f3fdc8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 02f3fe18 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 02f3fe30 32e5dddf KERNEL32!WaitForMultipleObjects+0x17
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 02f3ff78 32e2366c fp5Autl!Ordinal1596+0xe58
> 04 02f3ffb4 7c57b388 fp5Autl!Ordinal475+0x43b
> 05 02f3ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 33
> System Thread ID: 64c
> Kernel Time: 0:0:0.230
> User Time: 0:0:0.310
> Thread Type: Front Page Authoring.
> # ChildEBP RetAddr
> 00 02fcfdc8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 02fcfe18 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 02fcfe30 32e5dddf KERNEL32!WaitForMultipleObjects+0x17
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 02fcff78 32e2366c fp5Autl!Ordinal1596+0xe58
> 04 02fcffb4 7c57b388 fp5Autl!Ordinal475+0x43b
> 05 02fcffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 34
> System Thread ID: 81c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\Program Files\Common Files\Microsoft Shared\Web Server
> Extensions\50\servsupp\fp5amsft.dll -
> Thread Type: Front Page Authoring.
> # ChildEBP RetAddr
> 00 030efef8 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 030eff20 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 030eff30 32d48b57 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 030eff70 32db651d fp5amsft!prepareToUnload+0xfc29
> 04 030effb4 7c57b388 fp5Autl!Ordinal587+0x19
> 05 030effec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 35
> System Thread ID: 864
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0330ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0330ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0330ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 0330ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 36
> System Thread ID: 230
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.10
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0334ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0334ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0334ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 0334ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
> Closing open log file C:\iisstate\output\IISState-2516.log
>
> ============================================================ ==========
> Opened log file 'C:\iisstate\output\IISState-2216.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Wed Feb 23 11:29:15 2005
>
> OS = Windows 2000
> Executable: dllhost.exe
> PID = 2216
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 8a4
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
> 03 0006fd80 77aaa88c
> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x 4f
> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
> 06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: 8ac
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.50
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0087fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 0087ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0087ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0087ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0087ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 0087ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: 8b4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 008fff30 77abc471 USER32!NtUserGetMessage+0xb
> 01 008fff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
> 02 008fff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
> 03 008fff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
> 04 008fffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
> 05 008fffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 008fffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: 8bc
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.20
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0098fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0098fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0098fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
> 03 0098ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
> 04 0098ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 8c8
> Kernel Time: 0:0:0.80
> User Time: 0:0:0.90
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00a4fee0 7c59a243 ntdll!NtDelayExecution+0xb
> 01 00a4ff00 7c59a20e KERNEL32!SleepEx+0x32
> 02 00a4ff0c 787d12aa KERNEL32!Sleep+0xb
> 03 00a4ff7c 780085bc COMSVCS!PostData+0xf2
> 04 00a4ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 05 00a4ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 8cc
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00a8fdd8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00a8fe28 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00a8fe40 78804961 KERNEL32!WaitForMultipleObjects+0x17
> 03 00a8ff30 78801f8c COMSVCS!CRMRecoveryClerk::RecoveryThread+0x49d
> 04 00a8ff7c 78008454 COMSVCS!RecoveryThreadFunction+0x8e
> 05 00a8ffb4 7c57b388 MSVCRT!_endthread+0xc6
> 06 00a8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 8b8
> Kernel Time: 0:0:0.30
> User Time: 0:0:0.60
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00acfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 00acff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00acff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00acffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00acffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 00acffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 8d0
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.20
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00b0f5f0 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00b0f640 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00b0f658 787f011d KERNEL32!WaitForMultipleObjects+0x17
> 03 00b0f6a4 77d32355 COMSVCS!CLceDisp::DoWork+0xab
> 04 00b0f6c0 77d9356d RPCRT4!Invoke+0x30
> 05 00b0f924 77d93a2c RPCRT4!NdrStubCall2+0x664
> 06 00b0f988 77b25616 RPCRT4!CStdStubBuffer_Invoke+0xc8
> 07 00b0f9cc 77b258f1 ole32!SyncStubInvoke+0x61
> 08 00b0fa14 77ab81ed ole32!StubInvoke+0xa8
> 09 00b0fa78 77aaa60c ole32!CCtxComChnl::ContextInvoke+0xbb
> 0a 00b0fa94 77b254fb ole32!MTAInvoke+0x18
> 0b 00b0fac4 77b25c1f ole32!AppInvoke+0xb5
> 0c 00b0fb84 77b25969 ole32!ComInvokeWithLockAndIPID+0x297
> 0d 00b0fba4 77ab45aa ole32!ComInvoke+0x41
> 0e 00b0fbb4 77b2696d ole32!ThreadDispatch+0x21
> 0f 00b0fbc8 77b269b7 ole32!DispatchCall+0x24
> 10 00b0fbe0 77b23ab6
> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x34
> 11 00b0fc20 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
> 12 00b0fc30 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
> 13 00b0fc90 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
> 14 00b0fce8 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
> 15 00b0fd04 77d9487d RPCRT4!NdrProxySendReceive+0x4c
> 16 00b0ff4c 77d95136 RPCRT4!NdrClientCall2+0x4f5
> 17 00b0ff68 77d46e75 RPCRT4!ObjectStublessClient+0x76
> 18 00b0ff78 787f2251 RPCRT4!ObjectStubless+0xf
> 19 00b0ffb4 7c57b388 COMSVCS!CEventServer::DispatchEvents+0x83
> 1a 00b0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 8d4
> Kernel Time: 0:0:0.60
> User Time: 0:0:0.70
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00b7fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 00b7ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00b7ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00b7ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00b7ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 00b7ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 8dc
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00bbebe0 77f89ebd ntdll!ZwWaitForMultipleObjects+0xb
> 01 00bbffb4 7c57b388 ntdll!RtlpWaitThread+0x1b9
> 02 00bbffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: 8f0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00c0fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00c0fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00c0fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
> 03 00c0ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
> 04 00c0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: 8f4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.10
> Thread Type: Distributed Transaction. Checking for running ASP page
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 00c5ff40 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 00c5ff68 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 00c5ff78 6dfd0126 KERNEL32!WaitForSingleObject+0xf
> 03 00c5ffb0 6dfd003b
> MSDTCPRX!CConnectionManager::TimerProcForNonGuardedUser+0xe6
> 04 00c5ffb4 7c57b388 MSDTCPRX!CConnectionManager::TimerProc+0x1b
> 05 00c5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: 998
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0126ff28 7c59a243 ntdll!NtDelayExecution+0xb
> 01 0126ff48 7c59a20e KERNEL32!SleepEx+0x32
> 02 0126ff54 7c6761dc KERNEL32!Sleep+0xb
> 03 0126ff6c 7c6672b9 catsrv!RegSrvrPump+0x34
> 04 0126ff7c 78008454 catsrv!RunService+0x5f
> 05 0126ffb4 7c57b388 MSVCRT!_endthread+0xc6
> 06 0126ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: 894
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0133ff9c 77f842c4 ntdll!NtDelayExecution+0xb
> 01 0133ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
> 02 0133ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
> Closing open log file C:\iisstate\output\IISState-2216.log
>
> ============================================================ ==========
> Opened log file 'C:\iisstate\output\IISState-2508.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Wed Feb 23 11:27:53 2005
>
> OS = Windows 2000
> Executable: dllhost.exe
> PID = 2508
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 718
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
> 03 0006fd80 77aaa88c
> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x 4f
> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
> 06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: 824
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.110
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0088ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0088ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: 8a0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 008cff5c 7c59a243 ntdll!NtDelayExecution+0xb
> 01 008cff7c 7c59a20e KERNEL32!SleepEx+0x32
> 02 008cff88 77ab9967 KERNEL32!Sleep+0xb
> 03 008cff90 77ab5a5b ole32!CROIDTable::WorkerThreadLoop+0xc
> 04 008cffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
> 05 008cffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 008cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: 7c0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0090ff30 77abc471 USER32!NtUserGetMessage+0xb
> 01 0090ff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
> 02 0090ff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
> 03 0090ff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
> 04 0090ffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
> 05 0090ffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: a34
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.10
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0099fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0099fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0099fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
> 03 0099ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
> 04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 9b8
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.80
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00b5fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 00b5ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00b5ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00b5ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00b5ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 00b5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 98
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00b9ff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>01 00b9ff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00b9ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
> 03 00b9ffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
> 04 00b9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 8d8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> Remote call is either to a MTA object or object not initialized. Also,
> possible utility thread.
> DCOM call being made to Process ID: 2216
> Waiting on thread id: ffffffff
>
> # ChildEBP RetAddr
> 00 00bdfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
> 01 00bdfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
> 02 00bdfba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
> 03 00bdfbc0 77b26ad2 ole32!ThreadSendReceive+0xef
> 04 00bdfbd8 77b23ab6
> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
> 05 00bdfc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
> 06 00bdfc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
> 07 00bdfc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
> 08 00bdfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
> 09 00bdfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
> 0a 00bdff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
> 0b 00bdff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
> 0c 00bdff70 787f5818 RPCRT4!ObjectStubless+0xf
> 0d 00bdffb4 7c57b388
> COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
> 0e 00bdffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 814
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00c1fee0 7c59a243 ntdll!NtDelayExecution+0xb
> 01 00c1ff00 7c59a20e KERNEL32!SleepEx+0x32
> 02 00c1ff0c 787d12aa KERNEL32!Sleep+0xb
> 03 00c1ff7c 780085bc COMSVCS!PostData+0xf2
> 04 00c1ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 05 00c1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 8e4
> Kernel Time: 0:0:0.60
> User Time: 0:0:0.50
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e9fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00e9feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00e9ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00e9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 00e9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
> 05 00e9ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: 394
> Kernel Time: 0:0:0.30
> User Time: 0:0:0.70
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00edfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00edfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00edff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00edff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 00edff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
> 05 00edffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 00edffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: 938
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: 154
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.10
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00fdff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00fdff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00fdffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 00fdffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: a24
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0114feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0114fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0114ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
> 03 0114ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 0114ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 0114ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 0114ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 07 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: 95c
> Kernel Time: 0:0:0.30
> User Time: 0:0:0.110
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0120fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 0120ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0120ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0120ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0120ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 15
> System Thread ID: 7ec
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 01d2fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01d2fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01d2ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01d2ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01d2ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
> 05 01d2ffb4 7c57b388 MSVCRT!_endthread+0xc6
> 06 01d2ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 16
> System Thread ID: a88
> Kernel Time: 0:0:0.30
> User Time: 0:0:0.170
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\WINNT\System32\vbscript.dll -
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01d6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01d6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01d6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01d6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01d6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01d6e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01d6e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 01d6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01d6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01d6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01d6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01d6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01d6eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01d6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 17
> System Thread ID: 2dc
> Kernel Time: 0:0:0.340
> User Time: 0:0:0.590
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01dae7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01dae804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01dae860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01dae87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01dae8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01dae914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01dae958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 01dae9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01dae9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01daea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01daea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01daeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01daeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01daeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 18
> System Thread ID: 980
> Kernel Time: 0:0:0.330
> User Time: 0:0:0.751
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01dee7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01dee804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01dee860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01dee87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01dee8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01dee914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01dee958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 01dee9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01dee9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01deea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01deea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01deeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01deeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01deeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 19
> System Thread ID: 5f0
> Kernel Time: 0:0:0.280
> User Time: 0:0:0.570
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01e6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01e6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01e6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01e6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01e6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01e6e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01e6e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 01e6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01e6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01e6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01e6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01e6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01e6eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01e6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 20
> System Thread ID: a14
> Kernel Time: 0:0:0.240
> User Time: 0:0:0.741
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01eae7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01eae804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01eae860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01eae87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01eae8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01eae914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01eae958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 01eae9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01eae9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01eaea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01eaea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01eaeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01eaeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01eaeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 21
> System Thread ID: 658
> Kernel Time: 0:0:0.150
> User Time: 0:0:0.560
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01eee7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01eee804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01eee860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01eee87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01eee8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01eee914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01eee958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 01eee9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01eee9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01eeea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01eeea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01eeeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01eeeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01eeeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 22
> System Thread ID: 784
> Kernel Time: 0:0:0.210
> User Time: 0:0:0.380
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01f2e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01f2e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01f2e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01f2e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01f2e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01f2e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01f2e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 01f2e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01f2e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01f2ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01f2ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01f2eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01f2eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01f2eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 23
> System Thread ID: 72c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01f8ff9c 77f842c4 ntdll!NtDelayExecution+0xb
> 01 01f8ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
> 02 01f8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 24
> System Thread ID: 6ac
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0210ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
> 01 0210ffb4 7c57b388 ntdll!RtlpWorkerThread+0x6b
> 02 0210ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 25
> System Thread ID: a00
> Kernel Time: 0:0:0.50
> User Time: 0:0:0.20
> Thread Type: Other
> # ChildEBP RetAddr
> 00 027dfac8 74fd1394 ntdll!ZwWaitForSingleObject+0xb
> 01 027dfb04 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
> 02 027dfbf0 750312f5 msafd!WSPSelect+0x24e
> 03 027dfc54 6302a29d WS2_32!select+0xe7
> 04 027dffb0 6302a3a0 WININET!ICAsyncThread::SelectThread+0x228
> 05 027dffb4 7c57b388 WININET!ICAsyncThread::SelectThreadWrapper+0x9
> 06 027dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 26
> System Thread ID: 8f8
> Kernel Time: 0:0:2.363
> User Time: 0:0:5.217
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0281fe58 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0281fea8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0281ff04 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0281ff20 70abb32d USER32!MsgWaitForMultipleObjects+0x1d
> 04 0281ff74 70abb6b5 SHLWAPI!CThreadPool::RemoveWorkItem+0x77
> 05 0281ffac 70abb879 SHLWAPI!CThreadPool::Worker+0x2c
> 06 0281ffb4 7c57b388 SHLWAPI!CThreadPool::WorkerThread+0x30
> 07 0281ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 27
> System Thread ID: 400
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0335ff58 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0335ff80 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0335ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
> 03 0335ffb4 7c57b388 oledb32!ReleaseResourceThread+0x54
> 04 0335ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 28
> System Thread ID: a2c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0339ff50 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0339ff78 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0339ff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
> 03 0339ffb4 7c57b388 oledb32!ResetResourceThread+0x84
> 04 0339ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 29
> System Thread ID: fc
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 033dfd54 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 033dfd7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 033dfd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
> 03 033dffb4 7c57b388 COMSVCS!PingThread+0xf5
> 04 033dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 30
> System Thread ID: 5b4
> Kernel Time: 0:0:0.60
> User Time: 0:0:0.30
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0d8de7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0d8de804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0d8de860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0d8de87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0d8de8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0d8de914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0d8de958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0d8de9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0d8de9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0d8dea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0d8dea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0d8deac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0d8deaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0d8deb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 31
> System Thread ID: 83c
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.70
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0d95e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0d95e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0d95e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0d95e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0d95e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0d95e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0d95e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0d95e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0d95e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0d95ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0d95ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0d95eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0d95eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0d95eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 32
> System Thread ID: 870
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.40
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0da3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0da3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0da3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0da3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0da3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0da3e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0da3e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0da3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0da3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0da3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0da3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0da3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0da3eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0da3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 33
> System Thread ID: a8c
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.60
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0da7e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0da7e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0da7e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0da7e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0da7e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0da7e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0da7e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0da7e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0da7e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0da7ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0da7ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0da7eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0da7eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0da7eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 34
> System Thread ID: 908
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.70
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0dafe7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0dafe804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0dafe860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0dafe87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0dafe8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0dafe914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0dafe958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0dafe9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0dafe9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0dafea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0dafea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0dafeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0dafeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0dafeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 35
> System Thread ID: 73c
> Kernel Time: 0:0:0.60
> User Time: 0:0:0.70
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0db3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0db3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0db3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0db3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0db3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0db3e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0db3e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0db3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0db3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0db3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0db3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0db3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0db3eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0db3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 36
> System Thread ID: a94
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.90
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0dc3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0dc3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0dc3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0dc3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0dc3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0dc3e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0dc3e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0dc3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0dc3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0dc3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0dc3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0dc3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0dc3eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0dc3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 37
> System Thread ID: 6a0
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.50
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0dc7e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0dc7e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0dc7e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0dc7e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0dc7e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0dc7e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0dc7e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0dc7e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0dc7e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0dc7ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0dc7ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0dc7eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0dc7eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0dc7eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 38
> System Thread ID: 9e4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.20
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0ea5e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ea5e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0ea5e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0ea5e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ea5e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0ea5e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0ea5e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0ea5e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0ea5e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0ea5ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0ea5ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0ea5eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0ea5eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0ea5eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 39
> System Thread ID: 32c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.20
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0ea9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ea9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0ea9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0ea9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ea9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0ea9e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0ea9e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0ea9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0ea9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0ea9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0ea9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0ea9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0ea9eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0ea9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 40
> System Thread ID: 9a0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.10
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0eade7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0eade804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0eade860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0eade87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0eade8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0eade914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0eade958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0eade9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0eade9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0eadea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0eadea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0eadeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0eadeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0eadeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 41
> System Thread ID: 5f4
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.10
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0eb1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0eb1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0eb1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0eb1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0eb1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0eb1e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0eb1e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0eb1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0eb1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0eb1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0eb1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0eb1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0eb1eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0eb1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 42
> System Thread ID: a58
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0eb9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0eb9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0eb9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0eb9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0eb9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0eb9e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0eb9e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0eb9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0eb9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0eb9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0eb9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0eb9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0eb9eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0eb9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 43
> System Thread ID: a3c
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0ebde7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ebde804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0ebde860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0ebde87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ebde8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0ebde914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0ebde958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0ebde9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0ebde9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0ebdea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0ebdea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0ebdeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0ebdeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0ebdeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 44
> System Thread ID: 94c
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page:
> D:\WEBSPACE\BEACHCOMP\DMOADABWEB\BEACHCOMP.COM\WWW\PLANS.ASP
>
> # ChildEBP RetAddr
> 00 0ec1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ec1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0ec1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0ec1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ec1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0ec1e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0ec1e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0ec1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0ec1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0ec1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0ec1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0ec1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0ec1eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0ec1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 45
> System Thread ID: 9f0
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0ec9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ec9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0ec9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0ec9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ec9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0ec9e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0ec9e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0ec9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0ec9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0ec9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0ec9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0ec9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0ec9eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0ec9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 46
> System Thread ID: 994
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.10
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0ecde7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ecde804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0ecde860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0ecde87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ecde8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0ecde914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0ecde958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0ecde9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0ecde9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0ecdea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0ecdea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0ecdeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0ecdeaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0ecdeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 47
> System Thread ID: 710
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.30
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 0ed1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ed1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0ed1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0ed1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ed1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 0ed1e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 0ed1e958 69bab236 msxml3!CXMLHTTP::send+0x144
> 07 0ed1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 0ed1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 0ed1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 0ed1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 0ed1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 0ed1eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 0ed1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
> Closing open log file C:\iisstate\output\IISState-2508.log
>
> ============================================================ ==========
> "Pat [MSFT]" wrote in message
> news:%23zgnitTGFHA.2756@TK2MSFTNGP15.phx.gbl...
>> Re-run IISState but use the PID for the DLLHost(s) instead of inetinfo.
>> You may have to run it multiple times.
>>
>>
>> Pat
>> "Beachcomp" wrote in message
>> news:111ngbfemfsrjb6@corp.supernews.com...
>>> Pat,
>>>
>>> Forgive my ignorance but how do I do that?
>>>
>>> Dave
>>> "Pat [MSFT]" wrote in message
>>> news:e%23MhFkQGFHA.1260@TK2MSFTNGP12.phx.gbl...
>>>> No ASP pages were running in inetinfo.exe. You will probably need to
>>>> dump the dllhost(s) that are actually servicing the ASP pages. Make
>>>> sure you do it when the problem is happening.
>>>>
>>>>
>>>> Pat
>>>>
>>>>
>>>>
>>>> "Beachcomp" wrote in message
>>>> news:111mqo5midfhdde@corp.supernews.com...
>>>>> Hello,
>>>>>
>>>>> Running a Win2k box.
>>>>> Every few hours, IIS decides to stop serving asp pages.
>>>>> The machine has multiple hosts on it and this occurs with ALL asp
>>>>> pages.
>>>>> Running IISrecycle resolves the issue.
>>>>>
>>>>> Any ideas?
>>>>>
>>>>> Thanks
>>>>>
>>>>> Dave
>>>>>
>>>>>
>>>>>
>>>>> ------------------------------------------------------------ ---------
>>>>> Opened log file 'C:\iisstate\output\IISState-2580.log'
>>>>>
>>>>> ***********************
>>>>> Starting new log output
>>>>> IISState version 3.3.1
>>>>>
>>>>> Tue Feb 22 01:38:00 2005
>>>>>
>>>>> OS = Windows 2000
>>>>> Executable: inetinfo.exe
>>>>> PID = 2580
>>>>>
>>>>> Note: Thread times are formatted as HH:MM:SS.ms
>>>>>
>>>>> ***********************
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 0
>>>>> System Thread ID: 654
>>>>> Kernel Time: 0:0:0.10
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
>>>>> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
>>>>> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
>>>>> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
>>>>> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
>>>>> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
>>>>> 06 0006ff70 01002fbf inetinfo!main+0x654
>>>>> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
>>>>> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 1
>>>>> System Thread ID: 1fc
>>>>> Kernel Time: 0:0:0.40
>>>>> User Time: 0:0:0.90
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>>>> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>>>> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
>>>>> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
>>>>> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>>> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>>> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 2
>>>>> System Thread ID: aa8
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>>>> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>>>> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>>>> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 3
>>>>> System Thread ID: 194
>>>>> Kernel Time: 0:0:0.10
>>>>> User Time: 0:0:0.20
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>>>> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>>>> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>>>> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 4
>>>>> System Thread ID: 6c0
>>>>> Kernel Time: 0:0:0.50
>>>>> User Time: 0:0:0.80
>>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>>> Continuing with other analysis.
>>>>>
>>>>> No remote call being made
>>>>>
>>>>> # ChildEBP RetAddr
>>>>> 00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>>>> 01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>>>> 02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>>>>> 03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>>>> 04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>>> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 5
>>>>> System Thread ID: 24c
>>>>> Kernel Time: 0:0:0.410
>>>>> User Time: 0:0:0.140
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>>>> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>>>> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
>>>>> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>>> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>>> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 6
>>>>> System Thread ID: 6a4
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>> 03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>>>> 04 00e9fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>>>> 05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
>>>>> 06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>>> 07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>>> 08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 7
>>>>> System Thread ID: 634
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: HTTP Listener
>>>>> # ChildEBP RetAddr
>>>>> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
>>>>> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
>>>>> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 8
>>>>> System Thread ID: 804
>>>>> Kernel Time: 0:0:0.90
>>>>> User Time: 0:0:0.90
>>>>> Thread Type: HTTP Listener
>>>>> # ChildEBP RetAddr
>>>>> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>>> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 9
>>>>> System Thread ID: 180
>>>>> Kernel Time: 0:0:0.590
>>>>> User Time: 0:0:0.670
>>>>> Thread Type: HTTP Listener
>>>>> # ChildEBP RetAddr
>>>>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 10
>>>>> System Thread ID: 8d0
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>>> Continuing with other analysis.
>>>>>
>>>>> No remote call being made
>>>>>
>>>>> # ChildEBP RetAddr
>>>>> 00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>> 01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>> 02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>>>>> 03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>>>>> 04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>>>>> 05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>>>> 06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>>> 07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 11
>>>>> System Thread ID: 130
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>>>>> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>>>>> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 12
>>>>> System Thread ID: 9e4
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
>>>>> 03 013dffb4 7c57b388
>>>>> ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
>>>>> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 13
>>>>> System Thread ID: 9b4
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: HTTP Compression Thread
>>>>> # ChildEBP RetAddr
>>>>> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>>>> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>>>> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
>>>>> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
>>>>> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 14
>>>>> System Thread ID: a70
>>>>> Kernel Time: 0:0:0.10
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
>>>>> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
>>>>> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
>>>>> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 15
>>>>> System Thread ID: 338
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
>>>>> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
>>>>> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 16
>>>>> System Thread ID: 3d4
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Other
>>>>> # ChildEBP RetAddr
>>>>> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>>>> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>>>> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
>>>>> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
>>>>> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
>>>>> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 17
>>>>> System Thread ID: 940
>>>>> Kernel Time: 0:0:0.10
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: HTTP Listener
>>>>> # ChildEBP RetAddr
>>>>> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>>>> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>>>> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
>>>>> 03 0189ff88 6d7075bd WS2_32!select+0xe7
>>>>> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
>>>>> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
>>>>> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 18
>>>>> System Thread ID: 76c
>>>>> Kernel Time: 0:0:0.30
>>>>> User Time: 0:0:0.30
>>>>> Thread Type: HTTP Listener
>>>>> # ChildEBP RetAddr
>>>>> 00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>> 01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>> 02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>>> 03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>>
>>>>>
>>>>>
>>>>> Thread ID: 19
>>>>> System Thread ID: a94
>>>>> Kernel Time: 0:0:0.0
>>>>> User Time: 0:0:0.0
>>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>>> Continuing with other analysis.
>>>>>
>>>>> No remote call being made
>>>>>
>>>>> # ChildEBP RetAddr
>>>>> 00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>>>> 01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>>>> 02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
>>>>> 03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
>>>>> 04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>>> 05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>
>>>>> Closing open log file C:\iisstate\output\IISState-2580.log
>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>
>
>

Re: ASP pages hang. IISstate log attached.

am 25.02.2005 06:28:51 von Beachcomp

Pat,

Thank you so much for your assistance.
I have stopped a script from running and the server has been running
non-stop for 24+ hours now.
Much appreciated.

Dave
"Pat [MSFT]" wrote in message
news:OQR%238peGFHA.2132@TK2MSFTNGP14.phx.gbl...
> Here's your problem:
>
> Thread ID: 16
> System Thread ID: a88
> Kernel Time: 0:0:0.30
> User Time: 0:0:0.170
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for
> C:\WINNT\System32\vbscript.dll -
> Thread Type: ASP
> Executing Page:
>
> # ChildEBP RetAddr
> 00 01d6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01d6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01d6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01d6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
> 04 01d6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
> 05 01d6e914 69babf49 urlmon!CTransaction::Start+0x513
> 06 01d6e958 69bab236 msxml3!CXMLHTTP::send+0x144 <--That's a no-no. You
> are using the client side interface rather than the serbver side interface
> 07 01d6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
> 08 01d6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
> 09 01d6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
> 0a 01d6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
> 0b 01d6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
> 0c 01d6eaf8 6b614279
> msxml3!_dispatchEx::Invoke+0x28
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 0d 01d6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
> Do a search for all of your asp pages where you call CreateObject or
> Server.CreateObject on XMLHTTP. You have to use the ServerXmlHttp
> interface. You won't need to change the method calls, just the interface.
>
> Basically, when you use the client side version, you are limited to 2
> concurrent HTTP calls to a given remote location (this is in-line with the
> client side RFC recommendations). The server side does not have this
> limit.
>
>
> Pat
>
>
> "Beachcomp" wrote in message
> news:111pe3hqovofia2@corp.supernews.com...
>> Ok... I caught it in action and got 1 Inetinfo dump and 2 DLLhosts.
>> I have attached them. I see some errors but can't make much sense of
>> them.
>> Mind taking a look?
>>
>> Thanks
>>
>> Dave
>>
>>
>> ============================================================ ==========
>> Opened log file 'C:\iisstate\output\IISState-2516.log'
>>
>> ***********************
>> Starting new log output
>> IISState version 3.3.1
>>
>> Wed Feb 23 11:28:52 2005
>>
>> OS = Windows 2000
>> Executable: inetinfo.exe
>> PID = 2516
>>
>> Note: Thread times are formatted as HH:MM:SS.ms
>>
>> ***********************
>>
>>
>>
>>
>> Thread ID: 0
>> System Thread ID: 944
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
>> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
>> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
>> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
>> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
>> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
>> 06 0006ff70 01002fbf inetinfo!main+0x654
>> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
>> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>
>>
>>
>>
>> Thread ID: 1
>> System Thread ID: 954
>> Kernel Time: 0:0:0.40
>> User Time: 0:0:0.100
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
>> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
>> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 2
>> System Thread ID: a84
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 3
>> System Thread ID: a30
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.30
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 4
>> System Thread ID: 8fc
>> Kernel Time: 0:0:0.370
>> User Time: 0:0:0.180
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>> 04 00e1fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
>> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 5
>> System Thread ID: 398
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00e5fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00e5fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00e5fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 00e5fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>> 04 00e5fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>> 05 00e5fd70 01002440 ftpsvc2!ServiceEntry+0xc7
>> 06 00e5ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>> 07 00e5ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>> 08 00e5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 6
>> System Thread ID: 974
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
>> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 7
>> System Thread ID: 9d0
>> Kernel Time: 0:0:0.821
>> User Time: 0:0:0.861
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 8
>> System Thread ID: 650
>> Kernel Time: 0:0:1.361
>> User Time: 0:0:1.602
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 9
>> System Thread ID: 928
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 0128feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0128fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0128ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>> 03 0128ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>> 04 0128ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>> 05 0128ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 06 0128ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 07 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 10
>> System Thread ID: 9a8
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 11
>> System Thread ID: 7d8
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
>> 03 013dffb4 7c57b388 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
>> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 12
>> System Thread ID: 868
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: HTTP Compression Thread
>> # ChildEBP RetAddr
>> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
>> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
>> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 13
>> System Thread ID: 5a8
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.30
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
>> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
>> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 14
>> System Thread ID: 9ec
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
>> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
>> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 15
>> System Thread ID: a90
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
>> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
>> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
>> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 16
>> System Thread ID: 780
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
>> 03 0189ff88 6d7075bd WS2_32!select+0xe7
>> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
>> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
>> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 17
>> System Thread ID: 684
>> Kernel Time: 0:0:0.90
>> User Time: 0:0:0.150
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 01fbff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 01fbffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 01fbffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 01fbffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 18
>> System Thread ID: 898
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.10
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 028fff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 028fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 028fffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 028fffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 19
>> System Thread ID: 184
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.20
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 0293ff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 0293ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 0293ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 0293ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 20
>> System Thread ID: 5c0
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 0297ff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 0297ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 0297ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 0297ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 21
>> System Thread ID: 9e8
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 029bff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 029bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 029bffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 029bffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 22
>> System Thread ID: 730
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.10
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 029fff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 029fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 029fffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 029fffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 23
>> System Thread ID: 9ac
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.50
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 02a3ff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 02a3ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 02a3ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 02a3ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 24
>> System Thread ID: 2fc
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.10
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 02a7fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 02a7ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 02a7ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 02a7ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
>> 04 02a7ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 02a7ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 25
>> System Thread ID: 4e0
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 02abff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 02abffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 02abffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 02abffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 26
>> System Thread ID: a50
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 02afff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 02afffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 02afffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 02afffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 27
>> System Thread ID: 958
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 02b3ff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 02b3ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 02b3ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 02b3ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 28
>> System Thread ID: 6dc
>> Kernel Time: 0:0:0.20
>> User Time: 0:0:0.60
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 02bbfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 02bbff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 02bbff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 02bbffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 02bbffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 02bbffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 29
>> System Thread ID: 860
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 02bfff74 77d359a3 ntdll!NtDelayExecution+0xb
>> 01 02bfffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
>> 02 02bfffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 03 02bfffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 30
>> System Thread ID: 3ec
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Idle ASP thread
>> # ChildEBP RetAddr
>> 00 02daff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 02daff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 02daff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
>> 03 02daffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
>> 04 02daffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 31
>> System Thread ID: 24c
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> Remote call is either to a MTA object or object not initialized. Also,
>> possible utility thread.
>> DCOM call being made to Process ID: 2216
>> Waiting on thread id: ffffffff
>>
>> # ChildEBP RetAddr
>> 00 02defb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
>> 01 02defb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
>> 02 02defba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
>> 03 02defbc0 77b26ad2 ole32!ThreadSendReceive+0xef
>> 04 02defbd8 77b23ab6
>> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
>> 05 02defc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
>> 06 02defc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
>> 07 02defc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
>> 08 02defce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
>> 09 02defcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
>> 0a 02deff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
>> 0b 02deff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
>> 0c 02deff70 787f5818 RPCRT4!ObjectStubless+0xf
>> 0d 02deffb4 7c57b388
>> COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
>> 0e 02deffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 32
>> System Thread ID: 6a8
>> Kernel Time: 0:0:0.220
>> User Time: 0:0:0.200
>> *** ERROR: Symbol file could not be found. Defaulted to export symbols
>> for C:\Program Files\Common Files\Microsoft Shared\Web Server
>> Extensions\50\bin\fp5Autl.dll -
>> Thread Type: Front Page Authoring.
>> # ChildEBP RetAddr
>> 00 02f3fdc8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 02f3fe18 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 02f3fe30 32e5dddf KERNEL32!WaitForMultipleObjects+0x17
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 03 02f3ff78 32e2366c fp5Autl!Ordinal1596+0xe58
>> 04 02f3ffb4 7c57b388 fp5Autl!Ordinal475+0x43b
>> 05 02f3ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 33
>> System Thread ID: 64c
>> Kernel Time: 0:0:0.230
>> User Time: 0:0:0.310
>> Thread Type: Front Page Authoring.
>> # ChildEBP RetAddr
>> 00 02fcfdc8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 02fcfe18 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 02fcfe30 32e5dddf KERNEL32!WaitForMultipleObjects+0x17
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 03 02fcff78 32e2366c fp5Autl!Ordinal1596+0xe58
>> 04 02fcffb4 7c57b388 fp5Autl!Ordinal475+0x43b
>> 05 02fcffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 34
>> System Thread ID: 81c
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> *** ERROR: Symbol file could not be found. Defaulted to export symbols
>> for C:\Program Files\Common Files\Microsoft Shared\Web Server
>> Extensions\50\servsupp\fp5amsft.dll -
>> Thread Type: Front Page Authoring.
>> # ChildEBP RetAddr
>> 00 030efef8 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 030eff20 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 030eff30 32d48b57 KERNEL32!WaitForSingleObject+0xf
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 03 030eff70 32db651d fp5amsft!prepareToUnload+0xfc29
>> 04 030effb4 7c57b388 fp5Autl!Ordinal587+0x19
>> 05 030effec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 35
>> System Thread ID: 864
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 0330ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0330ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0330ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 0330ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 36
>> System Thread ID: 230
>> Kernel Time: 0:0:0.20
>> User Time: 0:0:0.10
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 0334ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0334ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0334ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 0334ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>> Closing open log file C:\iisstate\output\IISState-2516.log
>>
>> ============================================================ ==========
>> Opened log file 'C:\iisstate\output\IISState-2216.log'
>>
>> ***********************
>> Starting new log output
>> IISState version 3.3.1
>>
>> Wed Feb 23 11:29:15 2005
>>
>> OS = Windows 2000
>> Executable: dllhost.exe
>> PID = 2216
>>
>> Note: Thread times are formatted as HH:MM:SS.ms
>>
>> ***********************
>>
>>
>>
>>
>> Thread ID: 0
>> System Thread ID: 8a4
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
>> 03 0006fd80 77aaa88c
>> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x 4f
>> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
>> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
>> 06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
>> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>
>>
>>
>>
>> Thread ID: 1
>> System Thread ID: 8ac
>> Kernel Time: 0:0:0.20
>> User Time: 0:0:0.50
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 0087fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 0087ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 0087ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 0087ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 0087ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 0087ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 2
>> System Thread ID: 8b4
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 008fff30 77abc471 USER32!NtUserGetMessage+0xb
>> 01 008fff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
>> 02 008fff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
>> 03 008fff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
>> 04 008fffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
>> 05 008fffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
>> 06 008fffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 3
>> System Thread ID: 8bc
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.20
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0098fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0098fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0098fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
>> 03 0098ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
>> 04 0098ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 4
>> System Thread ID: 8c8
>> Kernel Time: 0:0:0.80
>> User Time: 0:0:0.90
>> Thread Type: Idle ASP thread
>> # ChildEBP RetAddr
>> 00 00a4fee0 7c59a243 ntdll!NtDelayExecution+0xb
>> 01 00a4ff00 7c59a20e KERNEL32!SleepEx+0x32
>> 02 00a4ff0c 787d12aa KERNEL32!Sleep+0xb
>> 03 00a4ff7c 780085bc COMSVCS!PostData+0xf2
>> 04 00a4ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 05 00a4ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 5
>> System Thread ID: 8cc
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Idle ASP thread
>> # ChildEBP RetAddr
>> 00 00a8fdd8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00a8fe28 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00a8fe40 78804961 KERNEL32!WaitForMultipleObjects+0x17
>> 03 00a8ff30 78801f8c COMSVCS!CRMRecoveryClerk::RecoveryThread+0x49d
>> 04 00a8ff7c 78008454 COMSVCS!RecoveryThreadFunction+0x8e
>> 05 00a8ffb4 7c57b388 MSVCRT!_endthread+0xc6
>> 06 00a8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 6
>> System Thread ID: 8b8
>> Kernel Time: 0:0:0.30
>> User Time: 0:0:0.60
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 00acfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 00acff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 00acff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 00acffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 00acffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 00acffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 7
>> System Thread ID: 8d0
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.20
>> Thread Type: Idle ASP thread
>> # ChildEBP RetAddr
>> 00 00b0f5f0 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00b0f640 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00b0f658 787f011d KERNEL32!WaitForMultipleObjects+0x17
>> 03 00b0f6a4 77d32355 COMSVCS!CLceDisp::DoWork+0xab
>> 04 00b0f6c0 77d9356d RPCRT4!Invoke+0x30
>> 05 00b0f924 77d93a2c RPCRT4!NdrStubCall2+0x664
>> 06 00b0f988 77b25616 RPCRT4!CStdStubBuffer_Invoke+0xc8
>> 07 00b0f9cc 77b258f1 ole32!SyncStubInvoke+0x61
>> 08 00b0fa14 77ab81ed ole32!StubInvoke+0xa8
>> 09 00b0fa78 77aaa60c ole32!CCtxComChnl::ContextInvoke+0xbb
>> 0a 00b0fa94 77b254fb ole32!MTAInvoke+0x18
>> 0b 00b0fac4 77b25c1f ole32!AppInvoke+0xb5
>> 0c 00b0fb84 77b25969 ole32!ComInvokeWithLockAndIPID+0x297
>> 0d 00b0fba4 77ab45aa ole32!ComInvoke+0x41
>> 0e 00b0fbb4 77b2696d ole32!ThreadDispatch+0x21
>> 0f 00b0fbc8 77b269b7 ole32!DispatchCall+0x24
>> 10 00b0fbe0 77b23ab6
>> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x34
>> 11 00b0fc20 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
>> 12 00b0fc30 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
>> 13 00b0fc90 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
>> 14 00b0fce8 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
>> 15 00b0fd04 77d9487d RPCRT4!NdrProxySendReceive+0x4c
>> 16 00b0ff4c 77d95136 RPCRT4!NdrClientCall2+0x4f5
>> 17 00b0ff68 77d46e75 RPCRT4!ObjectStublessClient+0x76
>> 18 00b0ff78 787f2251 RPCRT4!ObjectStubless+0xf
>> 19 00b0ffb4 7c57b388 COMSVCS!CEventServer::DispatchEvents+0x83
>> 1a 00b0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 8
>> System Thread ID: 8d4
>> Kernel Time: 0:0:0.60
>> User Time: 0:0:0.70
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 00b7fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 00b7ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 00b7ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 00b7ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 00b7ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 00b7ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 9
>> System Thread ID: 8dc
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00bbebe0 77f89ebd ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00bbffb4 7c57b388 ntdll!RtlpWaitThread+0x1b9
>> 02 00bbffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 10
>> System Thread ID: 8f0
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00c0fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00c0fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00c0fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>> 03 00c0ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>> 04 00c0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 11
>> System Thread ID: 8f4
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.10
>> Thread Type: Distributed Transaction. Checking for running ASP page
>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>> Continuing with other analysis.
>>
>> # ChildEBP RetAddr
>> 00 00c5ff40 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 00c5ff68 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 00c5ff78 6dfd0126 KERNEL32!WaitForSingleObject+0xf
>> 03 00c5ffb0 6dfd003b
>> MSDTCPRX!CConnectionManager::TimerProcForNonGuardedUser+0xe6
>> 04 00c5ffb4 7c57b388 MSDTCPRX!CConnectionManager::TimerProc+0x1b
>> 05 00c5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 12
>> System Thread ID: 998
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0126ff28 7c59a243 ntdll!NtDelayExecution+0xb
>> 01 0126ff48 7c59a20e KERNEL32!SleepEx+0x32
>> 02 0126ff54 7c6761dc KERNEL32!Sleep+0xb
>> 03 0126ff6c 7c6672b9 catsrv!RegSrvrPump+0x34
>> 04 0126ff7c 78008454 catsrv!RunService+0x5f
>> 05 0126ffb4 7c57b388 MSVCRT!_endthread+0xc6
>> 06 0126ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 13
>> System Thread ID: 894
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0133ff9c 77f842c4 ntdll!NtDelayExecution+0xb
>> 01 0133ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
>> 02 0133ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>> Closing open log file C:\iisstate\output\IISState-2216.log
>>
>> ============================================================ ==========
>> Opened log file 'C:\iisstate\output\IISState-2508.log'
>>
>> ***********************
>> Starting new log output
>> IISState version 3.3.1
>>
>> Wed Feb 23 11:27:53 2005
>>
>> OS = Windows 2000
>> Executable: dllhost.exe
>> PID = 2508
>>
>> Note: Thread times are formatted as HH:MM:SS.ms
>>
>> ***********************
>>
>>
>>
>>
>> Thread ID: 0
>> System Thread ID: 718
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
>> 03 0006fd80 77aaa88c
>> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x 4f
>> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
>> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
>> 06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
>> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>
>>
>>
>>
>> Thread ID: 1
>> System Thread ID: 824
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.110
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: Unable to locate ASP page
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 0088ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 0088ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 2
>> System Thread ID: 8a0
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 008cff5c 7c59a243 ntdll!NtDelayExecution+0xb
>> 01 008cff7c 7c59a20e KERNEL32!SleepEx+0x32
>> 02 008cff88 77ab9967 KERNEL32!Sleep+0xb
>> 03 008cff90 77ab5a5b ole32!CROIDTable::WorkerThreadLoop+0xc
>> 04 008cffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
>> 05 008cffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
>> 06 008cffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 3
>> System Thread ID: 7c0
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0090ff30 77abc471 USER32!NtUserGetMessage+0xb
>> 01 0090ff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
>> 02 0090ff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
>> 03 0090ff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
>> 04 0090ffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
>> 05 0090ffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
>> 06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 4
>> System Thread ID: a34
>> Kernel Time: 0:0:0.20
>> User Time: 0:0:0.10
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0099fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0099fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0099fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
>> 03 0099ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
>> 04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 5
>> System Thread ID: 9b8
>> Kernel Time: 0:0:0.40
>> User Time: 0:0:0.80
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: Unable to locate ASP page
>>
>> No remote call being made
>>
>> # ChildEBP RetAddr
>> 00 00b5fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 00b5ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 00b5ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 00b5ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 00b5ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 00b5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 6
>> System Thread ID: 98
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Idle ASP thread
>> # ChildEBP RetAddr
>> 00 00b9ff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>01 00b9ff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00b9ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
>> 03 00b9ffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
>> 04 00b9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 7
>> System Thread ID: 8d8
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: Unable to locate ASP page
>>
>> Remote call is either to a MTA object or object not initialized. Also,
>> possible utility thread.
>> DCOM call being made to Process ID: 2216
>> Waiting on thread id: ffffffff
>>
>> # ChildEBP RetAddr
>> 00 00bdfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
>> 01 00bdfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
>> 02 00bdfba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
>> 03 00bdfbc0 77b26ad2 ole32!ThreadSendReceive+0xef
>> 04 00bdfbd8 77b23ab6
>> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
>> 05 00bdfc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
>> 06 00bdfc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
>> 07 00bdfc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
>> 08 00bdfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
>> 09 00bdfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
>> 0a 00bdff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
>> 0b 00bdff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
>> 0c 00bdff70 787f5818 RPCRT4!ObjectStubless+0xf
>> 0d 00bdffb4 7c57b388
>> COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
>> 0e 00bdffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 8
>> System Thread ID: 814
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Idle ASP thread
>> # ChildEBP RetAddr
>> 00 00c1fee0 7c59a243 ntdll!NtDelayExecution+0xb
>> 01 00c1ff00 7c59a20e KERNEL32!SleepEx+0x32
>> 02 00c1ff0c 787d12aa KERNEL32!Sleep+0xb
>> 03 00c1ff7c 780085bc COMSVCS!PostData+0xf2
>> 04 00c1ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 05 00c1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 9
>> System Thread ID: 8e4
>> Kernel Time: 0:0:0.60
>> User Time: 0:0:0.50
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00e9fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00e9feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00e9ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 00e9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>> 04 00e9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
>> 05 00e9ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 06 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 10
>> System Thread ID: 394
>> Kernel Time: 0:0:0.30
>> User Time: 0:0:0.70
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 00edfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 00edfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 00edff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 00edff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>> 04 00edff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
>> 05 00edffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>> 06 00edffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 11
>> System Thread ID: 938
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 12
>> System Thread ID: 154
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.10
>> Thread Type: HTTP Listener
>> # ChildEBP RetAddr
>> 00 00fdff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 00fdff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 00fdffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>> 03 00fdffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 13
>> System Thread ID: a24
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: Unable to locate ASP page
>>
>> No remote call being made
>> # ChildEBP RetAddr
>> 00 0114feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0114fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>> 02 0114ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>> 03 0114ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>> 04 0114ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>> 05 0114ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 06 0114ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 07 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 14
>> System Thread ID: 95c
>> Kernel Time: 0:0:0.30
>> User Time: 0:0:0.110
>> Thread Type: Possible ASP page. Possible DCOM activity
>> Executing Page: Unable to locate ASP page
>>
>> No remote call being made
>> # ChildEBP RetAddr
>> 00 0120fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>> 01 0120ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>> 02 0120ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>> 03 0120ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>> 04 0120ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>> 05 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 15
>> System Thread ID: 7ec
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: ASP
>> Executing Page: Unable to locate ASP page
>>
>> # ChildEBP RetAddr
>> 00 01d2fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01d2fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01d2ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01d2ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01d2ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
>> 05 01d2ffb4 7c57b388 MSVCRT!_endthread+0xc6
>> 06 01d2ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 16
>> System Thread ID: a88
>> Kernel Time: 0:0:0.30
>> User Time: 0:0:0.170
>> *** ERROR: Symbol file could not be found. Defaulted to export symbols
>> for C:\WINNT\System32\vbscript.dll -
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 01d6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01d6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01d6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01d6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01d6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 01d6e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 01d6e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 01d6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 01d6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 01d6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 01d6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 01d6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 01d6eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 01d6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 17
>> System Thread ID: 2dc
>> Kernel Time: 0:0:0.340
>> User Time: 0:0:0.590
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 01dae7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01dae804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01dae860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01dae87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01dae8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 01dae914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 01dae958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 01dae9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 01dae9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 01daea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 01daea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 01daeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 01daeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 01daeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 18
>> System Thread ID: 980
>> Kernel Time: 0:0:0.330
>> User Time: 0:0:0.751
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 01dee7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01dee804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01dee860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01dee87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01dee8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 01dee914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 01dee958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 01dee9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 01dee9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 01deea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 01deea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 01deeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 01deeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 01deeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 19
>> System Thread ID: 5f0
>> Kernel Time: 0:0:0.280
>> User Time: 0:0:0.570
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 01e6e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01e6e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01e6e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01e6e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01e6e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 01e6e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 01e6e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 01e6e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 01e6e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 01e6ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 01e6ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 01e6eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 01e6eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 01e6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 20
>> System Thread ID: a14
>> Kernel Time: 0:0:0.240
>> User Time: 0:0:0.741
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 01eae7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01eae804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01eae860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01eae87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01eae8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 01eae914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 01eae958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 01eae9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 01eae9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 01eaea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 01eaea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 01eaeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 01eaeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 01eaeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 21
>> System Thread ID: 658
>> Kernel Time: 0:0:0.150
>> User Time: 0:0:0.560
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 01eee7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01eee804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01eee860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01eee87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01eee8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 01eee914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 01eee958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 01eee9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 01eee9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 01eeea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 01eeea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 01eeeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 01eeeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 01eeeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 22
>> System Thread ID: 784
>> Kernel Time: 0:0:0.210
>> User Time: 0:0:0.380
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 01f2e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 01f2e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 01f2e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 01f2e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 01f2e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 01f2e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 01f2e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 01f2e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 01f2e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 01f2ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 01f2ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 01f2eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 01f2eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 01f2eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 23
>> System Thread ID: 72c
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 01f8ff9c 77f842c4 ntdll!NtDelayExecution+0xb
>> 01 01f8ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
>> 02 01f8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 24
>> System Thread ID: 6ac
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0210ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
>> 01 0210ffb4 7c57b388 ntdll!RtlpWorkerThread+0x6b
>> 02 0210ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 25
>> System Thread ID: a00
>> Kernel Time: 0:0:0.50
>> User Time: 0:0:0.20
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 027dfac8 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>> 01 027dfb04 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>> 02 027dfbf0 750312f5 msafd!WSPSelect+0x24e
>> 03 027dfc54 6302a29d WS2_32!select+0xe7
>> 04 027dffb0 6302a3a0 WININET!ICAsyncThread::SelectThread+0x228
>> 05 027dffb4 7c57b388 WININET!ICAsyncThread::SelectThreadWrapper+0x9
>> 06 027dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 26
>> System Thread ID: 8f8
>> Kernel Time: 0:0:2.363
>> User Time: 0:0:5.217
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0281fe58 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0281fea8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0281ff04 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0281ff20 70abb32d USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0281ff74 70abb6b5 SHLWAPI!CThreadPool::RemoveWorkItem+0x77
>> 05 0281ffac 70abb879 SHLWAPI!CThreadPool::Worker+0x2c
>> 06 0281ffb4 7c57b388 SHLWAPI!CThreadPool::WorkerThread+0x30
>> 07 0281ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 27
>> System Thread ID: 400
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0335ff58 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0335ff80 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0335ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
>> 03 0335ffb4 7c57b388 oledb32!ReleaseResourceThread+0x54
>> 04 0335ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 28
>> System Thread ID: a2c
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Other
>> # ChildEBP RetAddr
>> 00 0339ff50 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 0339ff78 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 0339ff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
>> 03 0339ffb4 7c57b388 oledb32!ResetResourceThread+0x84
>> 04 0339ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 29
>> System Thread ID: fc
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.0
>> Thread Type: Idle ASP thread
>> # ChildEBP RetAddr
>> 00 033dfd54 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>> 01 033dfd7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>> 02 033dfd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
>> 03 033dffb4 7c57b388 COMSVCS!PingThread+0xf5
>> 04 033dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>
>>
>>
>>
>> Thread ID: 30
>> System Thread ID: 5b4
>> Kernel Time: 0:0:0.60
>> User Time: 0:0:0.30
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0d8de7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0d8de804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0d8de860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0d8de87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0d8de8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0d8de914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0d8de958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0d8de9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0d8de9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0d8dea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0d8dea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0d8deac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0d8deaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0d8deb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 31
>> System Thread ID: 83c
>> Kernel Time: 0:0:0.20
>> User Time: 0:0:0.70
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0d95e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0d95e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0d95e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0d95e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0d95e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0d95e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0d95e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0d95e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0d95e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0d95ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0d95ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0d95eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0d95eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0d95eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 32
>> System Thread ID: 870
>> Kernel Time: 0:0:0.20
>> User Time: 0:0:0.40
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0da3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0da3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0da3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0da3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0da3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0da3e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0da3e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0da3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0da3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0da3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0da3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0da3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0da3eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0da3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 33
>> System Thread ID: a8c
>> Kernel Time: 0:0:0.40
>> User Time: 0:0:0.60
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0da7e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0da7e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0da7e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0da7e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0da7e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0da7e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0da7e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0da7e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0da7e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0da7ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0da7ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0da7eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0da7eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0da7eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 34
>> System Thread ID: 908
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.70
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0dafe7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0dafe804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0dafe860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0dafe87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0dafe8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0dafe914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0dafe958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0dafe9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0dafe9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0dafea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0dafea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0dafeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0dafeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0dafeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 35
>> System Thread ID: 73c
>> Kernel Time: 0:0:0.60
>> User Time: 0:0:0.70
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0db3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0db3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0db3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0db3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0db3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0db3e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0db3e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0db3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0db3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0db3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0db3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0db3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0db3eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0db3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 36
>> System Thread ID: a94
>> Kernel Time: 0:0:0.40
>> User Time: 0:0:0.90
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0dc3e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0dc3e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0dc3e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0dc3e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0dc3e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0dc3e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0dc3e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0dc3e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0dc3e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0dc3ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0dc3ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0dc3eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0dc3eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0dc3eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 37
>> System Thread ID: 6a0
>> Kernel Time: 0:0:0.40
>> User Time: 0:0:0.50
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0dc7e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0dc7e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0dc7e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0dc7e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0dc7e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0dc7e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0dc7e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0dc7e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0dc7e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0dc7ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0dc7ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0dc7eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0dc7eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0dc7eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 38
>> System Thread ID: 9e4
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.20
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0ea5e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0ea5e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0ea5e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0ea5e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0ea5e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0ea5e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0ea5e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0ea5e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0ea5e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0ea5ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0ea5ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0ea5eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0ea5eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0ea5eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 39
>> System Thread ID: 32c
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.20
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0ea9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0ea9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0ea9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0ea9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0ea9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0ea9e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0ea9e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0ea9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0ea9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0ea9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0ea9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0ea9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0ea9eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0ea9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 40
>> System Thread ID: 9a0
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.10
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0eade7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0eade804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0eade860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0eade87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0eade8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0eade914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0eade958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0eade9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0eade9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0eadea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0eadea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0eadeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0eadeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0eadeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 41
>> System Thread ID: 5f4
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.10
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0eb1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0eb1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0eb1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0eb1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0eb1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0eb1e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0eb1e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0eb1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0eb1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0eb1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0eb1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0eb1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0eb1eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0eb1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 42
>> System Thread ID: a58
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0eb9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0eb9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0eb9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0eb9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0eb9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0eb9e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0eb9e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0eb9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0eb9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0eb9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0eb9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0eb9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0eb9eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0eb9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 43
>> System Thread ID: a3c
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0ebde7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0ebde804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0ebde860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0ebde87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0ebde8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0ebde914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0ebde958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0ebde9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0ebde9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0ebdea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0ebdea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0ebdeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0ebdeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0ebdeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 44
>> System Thread ID: 94c
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.0
>> Thread Type: ASP
>> Executing Page:
>> D:\WEBSPACE\BEACHCOMP\DMOADABWEB\BEACHCOMP.COM\WWW\PLANS.ASP
>>
>> # ChildEBP RetAddr
>> 00 0ec1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0ec1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0ec1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0ec1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0ec1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0ec1e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0ec1e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0ec1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0ec1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0ec1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0ec1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0ec1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0ec1eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0ec1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 45
>> System Thread ID: 9f0
>> Kernel Time: 0:0:0.20
>> User Time: 0:0:0.0
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0ec9e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0ec9e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0ec9e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0ec9e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0ec9e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0ec9e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0ec9e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0ec9e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0ec9e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0ec9ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0ec9ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0ec9eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0ec9eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0ec9eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 46
>> System Thread ID: 994
>> Kernel Time: 0:0:0.10
>> User Time: 0:0:0.10
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0ecde7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0ecde804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0ecde860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0ecde87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0ecde8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0ecde914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0ecde958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0ecde9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0ecde9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0ecdea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0ecdea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0ecdeac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0ecdeaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0ecdeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>>
>>
>>
>> Thread ID: 47
>> System Thread ID: 710
>> Kernel Time: 0:0:0.0
>> User Time: 0:0:0.30
>> Thread Type: ASP
>> Executing Page:
>>
>> # ChildEBP RetAddr
>> 00 0ed1e7b4 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>> 01 0ed1e804 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>> 02 0ed1e860 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>> 03 0ed1e87c 1a4215ea USER32!MsgWaitForMultipleObjects+0x1d
>> 04 0ed1e8e0 1a40751b urlmon!CTransaction::CompleteOperation+0x13b
>> 05 0ed1e914 69babf49 urlmon!CTransaction::Start+0x513
>> 06 0ed1e958 69bab236 msxml3!CXMLHTTP::send+0x144
>> 07 0ed1e9b0 779d7d5d msxml3!XMLHTTPWrapper::send+0x52
>> 08 0ed1e9d8 77a2310e OLEAUT32!DispCallFunc+0x15d
>> 09 0ed1ea68 69b5485e OLEAUT32!CTypeInfo2::Invoke+0x244
>> 0a 0ed1ea98 69b54965 msxml3!_dispatchImpl::Invoke+0x6a
>> 0b 0ed1eac8 69b640f2 msxml3!__dispatch::Invoke+0x29
>> 0c 0ed1eaf8 6b614279
>> msxml3!_dispatchEx::Invoke+0x28
>> WARNING: Stack unwind information not available. Following frames may be
>> wrong.
>> 0d 0ed1eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
>> 0e 00000000 00000000 vbscript!DllCanUnloadNow+0xd21a
>>
>> Closing open log file C:\iisstate\output\IISState-2508.log
>>
>> ============================================================ ==========
>> "Pat [MSFT]" wrote in message
>> news:%23zgnitTGFHA.2756@TK2MSFTNGP15.phx.gbl...
>>> Re-run IISState but use the PID for the DLLHost(s) instead of inetinfo.
>>> You may have to run it multiple times.
>>>
>>>
>>> Pat
>>> "Beachcomp" wrote in message
>>> news:111ngbfemfsrjb6@corp.supernews.com...
>>>> Pat,
>>>>
>>>> Forgive my ignorance but how do I do that?
>>>>
>>>> Dave
>>>> "Pat [MSFT]" wrote in message
>>>> news:e%23MhFkQGFHA.1260@TK2MSFTNGP12.phx.gbl...
>>>>> No ASP pages were running in inetinfo.exe. You will probably need to
>>>>> dump the dllhost(s) that are actually servicing the ASP pages. Make
>>>>> sure you do it when the problem is happening.
>>>>>
>>>>>
>>>>> Pat
>>>>>
>>>>>
>>>>>
>>>>> "Beachcomp" wrote in message
>>>>> news:111mqo5midfhdde@corp.supernews.com...
>>>>>> Hello,
>>>>>>
>>>>>> Running a Win2k box.
>>>>>> Every few hours, IIS decides to stop serving asp pages.
>>>>>> The machine has multiple hosts on it and this occurs with ALL asp
>>>>>> pages.
>>>>>> Running IISrecycle resolves the issue.
>>>>>>
>>>>>> Any ideas?
>>>>>>
>>>>>> Thanks
>>>>>>
>>>>>> Dave
>>>>>>
>>>>>>
>>>>>>
>>>>>> ------------------------------------------------------------ ---------
>>>>>> Opened log file 'C:\iisstate\output\IISState-2580.log'
>>>>>>
>>>>>> ***********************
>>>>>> Starting new log output
>>>>>> IISState version 3.3.1
>>>>>>
>>>>>> Tue Feb 22 01:38:00 2005
>>>>>>
>>>>>> OS = Windows 2000
>>>>>> Executable: inetinfo.exe
>>>>>> PID = 2580
>>>>>>
>>>>>> Note: Thread times are formatted as HH:MM:SS.ms
>>>>>>
>>>>>> ***********************
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 0
>>>>>> System Thread ID: 654
>>>>>> Kernel Time: 0:0:0.10
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0006f89c 7c5862e9 ntdll!ZwReadFile+0xb
>>>>>> 01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
>>>>>> 02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
>>>>>> 03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
>>>>>> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
>>>>>> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
>>>>>> 06 0006ff70 01002fbf inetinfo!main+0x654
>>>>>> 07 0006ffc0 7c59893d inetinfo!mainCRTStartup+0xff
>>>>>> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 1
>>>>>> System Thread ID: 1fc
>>>>>> Kernel Time: 0:0:0.40
>>>>>> User Time: 0:0:0.90
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0059fd1c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>>>>> 01 0059fd44 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>>>>> 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
>>>>>> 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156
>>>>>> 04 0059ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>>>> 05 0059ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>>>> 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 2
>>>>>> System Thread ID: aa8
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 006dfe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 006dfeac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 006dff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>>> 03 006dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>>>>> 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>>>>> 05 006dffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>>>>> 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 3
>>>>>> System Thread ID: 194
>>>>>> Kernel Time: 0:0:0.10
>>>>>> User Time: 0:0:0.20
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0071fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 0071feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 0071ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>>> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
>>>>>> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
>>>>>> 05 0071ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
>>>>>> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 4
>>>>>> System Thread ID: 6c0
>>>>>> Kernel Time: 0:0:0.50
>>>>>> User Time: 0:0:0.80
>>>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>>>> Continuing with other analysis.
>>>>>>
>>>>>> No remote call being made
>>>>>>
>>>>>> # ChildEBP RetAddr
>>>>>> 00 00b8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>>>>> 01 00b8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>>>>> 02 00b8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
>>>>>> 03 00b8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>>>>> 04 00b8ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>>>> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 5
>>>>>> System Thread ID: 24c
>>>>>> Kernel Time: 0:0:0.410
>>>>>> User Time: 0:0:0.140
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 00e1fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 00e1fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 00e1fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>>> 03 00e1fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>>>>> 04 00e1fd30 65f0cfd8
>>>>>> INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>>>>> 05 00e1fd70 01002440 w3svc!ServiceEntry+0x1b5
>>>>>> 06 00e1ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>>>> 07 00e1ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>>>> 08 00e1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 6
>>>>>> System Thread ID: 6a4
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 00e9fc1c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 00e9fc6c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 00e9fcc8 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>>> 03 00e9fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
>>>>>> 04 00e9fd30 6fc6b2f0
>>>>>> INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
>>>>>> 05 00e9fd70 01002440 ftpsvc2!ServiceEntry+0xc7
>>>>>> 06 00e9ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
>>>>>> 07 00e9ffb4 7c57b388 ADVAPI32!ScSvcctrlThreadW+0xe
>>>>>> 08 00e9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 7
>>>>>> System Thread ID: 634
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: HTTP Listener
>>>>>> # ChildEBP RetAddr
>>>>>> 00 00f1ff5c 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>>> 01 00f1ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
>>>>>> 02 00f1ffb4 7c57b388 ISATQ!I_AtqOplockThreadFunc+0x32
>>>>>> 03 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 8
>>>>>> System Thread ID: 804
>>>>>> Kernel Time: 0:0:0.90
>>>>>> User Time: 0:0:0.90
>>>>>> Thread Type: HTTP Listener
>>>>>> # ChildEBP RetAddr
>>>>>> 00 00f5ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>>> 01 00f5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>>> 02 00f5ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>>>> 03 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 9
>>>>>> System Thread ID: 180
>>>>>> Kernel Time: 0:0:0.590
>>>>>> User Time: 0:0:0.670
>>>>>> Thread Type: HTTP Listener
>>>>>> # ChildEBP RetAddr
>>>>>> 00 00f9ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>>> 01 00f9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>>> 02 00f9ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>>>> 03 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 10
>>>>>> System Thread ID: 8d0
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>>>> Continuing with other analysis.
>>>>>>
>>>>>> No remote call being made
>>>>>>
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0134feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>>> 01 0134fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>>> 02 0134ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
>>>>>> 03 0134ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
>>>>>> 04 0134ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
>>>>>> 05 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
>>>>>> 06 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>>>> 07 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 11
>>>>>> System Thread ID: 130
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0138fd20 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 0138fd70 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 0138fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
>>>>>> 03 0138ffb4 7c57b388 RTUTILS!TraceServerThread+0xde
>>>>>> 04 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 12
>>>>>> System Thread ID: 9e4
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 013dff00 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 013dff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 013dff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
>>>>>> 03 013dffb4 7c57b388
>>>>>> ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39
>>>>>> 04 013dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 13
>>>>>> System Thread ID: 9b4
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: HTTP Compression Thread
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0142ff5c 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
>>>>>> 01 0142ff84 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
>>>>>> 02 0142ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
>>>>>> 03 0142ffb4 7c57b388 compfilt!CompressionThread+0x29
>>>>>> 04 0142ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 14
>>>>>> System Thread ID: a70
>>>>>> Kernel Time: 0:0:0.10
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0159fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 0159fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 0159ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>>> 03 0159ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
>>>>>> 04 0159ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
>>>>>> 05 0159ffb4 7c57b388 MSVCRT!_endthread+0xc6
>>>>>> 06 0159ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 15
>>>>>> System Thread ID: 338
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 015dfea8 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
>>>>>> 01 015dfef8 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
>>>>>> 02 015dff54 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
>>>>>> 03 015dff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
>>>>>> 04 015dffb4 7c57b388 w3svc!OleHackThread+0x88
>>>>>> 05 015dffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 16
>>>>>> System Thread ID: 3d4
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Other
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0165fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>>>>> 01 0165fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>>>>> 02 0165fe08 750312f5 msafd!WSPSelect+0x24e
>>>>>> 03 0165fe6c 6e2b3b6e WS2_32!select+0xe7
>>>>>> 04 0165ffb4 7c57b388 inetsloc!SocketListenThread+0x51
>>>>>> 05 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 17
>>>>>> System Thread ID: 940
>>>>>> Kernel Time: 0:0:0.10
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: HTTP Listener
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0189fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
>>>>>> 01 0189fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
>>>>>> 02 0189ff24 750312f5 msafd!WSPSelect+0x24e
>>>>>> 03 0189ff88 6d7075bd WS2_32!select+0xe7
>>>>>> 04 0189ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
>>>>>> 05 0189ffb4 7c57b388 ISATQ!BmonThreadFunc+0x9
>>>>>> 06 0189ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 18
>>>>>> System Thread ID: 76c
>>>>>> Kernel Time: 0:0:0.30
>>>>>> User Time: 0:0:0.30
>>>>>> Thread Type: HTTP Listener
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0208ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
>>>>>> 01 0208ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
>>>>>> 02 0208ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
>>>>>> 03 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>> Thread ID: 19
>>>>>> System Thread ID: a94
>>>>>> Kernel Time: 0:0:0.0
>>>>>> User Time: 0:0:0.0
>>>>>> Thread Type: Possible ASP page. Possible DCOM activity
>>>>>> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
>>>>>> Continuing with other analysis.
>>>>>>
>>>>>> No remote call being made
>>>>>>
>>>>>> # ChildEBP RetAddr
>>>>>> 00 0277fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
>>>>>> 01 0277ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
>>>>>> 02 0277ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
>>>>>> 03 0277ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
>>>>>> 04 0277ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
>>>>>> 05 0277ffec 00000000 KERNEL32!BaseThreadStart+0x52
>>>>>>
>>>>>> Closing open log file C:\iisstate\output\IISState-2580.log
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>>>
>>>>
>>>>
>>>
>>>
>>
>>
>>
>
>