W3SVC crashing, I have run iisstate, Now What??? Help :-(

Okay, I'm pretty handy with servers but this is a new problem I have
not dealt with before. I found the blogs with advice on how to collect
data with iisstate and I have now done that. I have captured two
crashes and the logs are below. Can someone please, please analyze
these for me and tell me what to do? I will be very grateful!

FIRST CRASH
************************************************************ **************************
Opened log file 'C:\iisstate\output\IISState-1560.log'

***********************
Starting new log output
IISState version 3.3.1

Thu Sep 13 14:32:07 2007

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 1560

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed:




Thread ID: 17
System Thread ID: 1f64
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0247fed8 00000000 0x2f9f8b5c
Closing open log file C:\iisstate\output\IISState-1560.log
Opened log file 'C:\iisstate\output\IISState-1560.log'

***********************
Starting new log output
IISState version 3.3.1

Thu Sep 13 14:32:08 2007

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 1560

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: b58
Kernel Time: 0:0:0.15
User Time: 0:0:0.109
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c827d0b ntdll!KiFastSystemCallRet
01 0006fc0c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a364662 kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e3f w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af42d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc335 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a27 w3wp!wmain+0x22a
09 0006ffc0 77e6f23b w3wp!wmainCRTStartup+0x12f
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 1f80
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00ccff9c 7c826f4b ntdll!KiFastSystemCallRet
01 00ccffa0 7c83d424 ntdll!NtDelayExecution+0xc
02 00ccffb8 77e64829 ntdll!RtlpTimerThread+0x47
03 00ccffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: 1f80
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00ccff9c 7c826f4b ntdll!KiFastSystemCallRet
01 00ccffa0 7c83d424 ntdll!NtDelayExecution+0xc
02 00ccffb8 77e64829 ntdll!RtlpTimerThread+0x47
03 00ccffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: 1b44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f7ff24 7c8277db ntdll!KiFastSystemCallRet
01 00f7ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00f7ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00f7ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00f7ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00f7ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00f7ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: 188
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fbff24 7c8277db ntdll!KiFastSystemCallRet
01 00fbff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00fbff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00fbff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00fbffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00fbffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00fbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: 1f7c
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ffff24 7c8277db ntdll!KiFastSystemCallRet
01 00ffff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00ffff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00ffff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00ffffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00ffffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00ffffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 5ec
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0104ff24 7c8277db ntdll!KiFastSystemCallRet
01 0104ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0104ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 0104ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 0104ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 0104ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 0104ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: fd8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0110fcec 7c827cfb ntdll!KiFastSystemCallRet
01 0110fcf0 7c83c78e ntdll!NtWaitForMultipleObjects+0xc
02 0110ffb8 77e64829 ntdll!RtlpWaitThread+0x161
03 0110ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: 724
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 01b6fa84 7c827d0b ntdll!KiFastSystemCallRet
01 01b6fa88 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 01b6faf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 01b6fb0c 5a3b820f kernel32!WaitForSingleObject+0x12
04 01b6ffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 01b6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 724
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 01b6fa84 7c827d0b ntdll!KiFastSystemCallRet
01 01b6fa88 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 01b6faf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 01b6fb0c 5a3b820f kernel32!WaitForSingleObject+0x12
04 01b6ffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 01b6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: 1a00
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01beff8c 7c826f4b ntdll!KiFastSystemCallRet
01 01beff90 7c81943a ntdll!NtDelayExecution+0xc
02 01beffb8 77e64829 ntdll!RtlpIOWorkerThread+0x3f
03 01beffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: 1f90
Kernel Time: 0:0:0.0
User Time: 0:0:0.46
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01d2fb68 7c827cfb ntdll!KiFastSystemCallRet
01 01d2fb6c 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 01d2fc14 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 01d2fc30 2fa5523d kernel32!WaitForMultipleObjects+0x18
04 01d2ff60 2fa55d0a CrmIsapi+0x523d
05 01d2ff84 2fa5d04d CrmIsapi+0x5d0a
06 01d2ffb8 77e64829 CrmIsapi+0xd04d
07 01d2ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 1454
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 01d6ff0c 7c8277db ntdll!KiFastSystemCallRet
01 01d6ff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 01d6ff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 01d6ff7c 2fa565c0 CrmIsapi+0x5da4
04 01d6ff84 2fa5d04d CrmIsapi+0x65c0
05 01d6ffb8 77e64829 CrmIsapi+0xd04d
06 01d6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: 118c
Kernel Time: 0:0:0.15
User Time: 0:0:0.46
Thread Type: Other
# ChildEBP RetAddr
00 0231ff0c 7c8277db ntdll!KiFastSystemCallRet
01 0231ff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0231ff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 0231ff7c 2fa565c0 CrmIsapi+0x5da4
04 0231ff84 2fa5d04d CrmIsapi+0x65c0
05 0231ffb8 77e64829 CrmIsapi+0xd04d
06 0231ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: 1e7c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0236ff0c 7c8277db ntdll!KiFastSystemCallRet
01 0236ff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0236ff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 0236ff7c 2fa565c0 CrmIsapi+0x5da4
04 0236ff84 2fa5d04d CrmIsapi+0x65c0
05 0236ffb8 77e64829 CrmIsapi+0xd04d
06 0236ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 1728
Kernel Time: 0:0:0.203
User Time: 0:0:1.140
Thread Type: Other
# ChildEBP RetAddr
00 023bff0c 7c8277db ntdll!KiFastSystemCallRet
01 023bff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 023bff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 023bff7c 2fa565c0 CrmIsapi+0x5da4
04 023bff84 2fa5d04d CrmIsapi+0x65c0
05 023bffb8 77e64829 CrmIsapi+0xd04d
06 023bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 16
System Thread ID: 1620
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0243feb8 7c827cfb ntdll!KiFastSystemCallRet
01 0243febc 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0243ff64 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0243ff80 2fb053f3 kernel32!WaitForMultipleObjects+0x18
WARNING: Frame IP not in any known module. Following frames may be
wrong.
04 0243ffb8 77e64829 0x2fb053f3
05 0243ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 1f64
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0247fed8 00000000 0x2f9f8b5c




Thread ID: 18
System Thread ID: 116c
Kernel Time: 0:0:0.15
User Time: 0:0:0.46
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 024cfdfc 7c827cfb ntdll!KiFastSystemCallRet
01 024cfe00 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 024cfea8 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 024cfec4 2fb88bc8 kernel32!WaitForMultipleObjects+0x18
WARNING: Frame IP not in any known module. Following frames may be
wrong.
04 024cffb8 77e64829 0x2fb88bc8
05 024cffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: 1b6c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0251fdfc 7c827cfb ntdll!KiFastSystemCallRet
01 0251fe00 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0251fea8 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0251fec4 2df01460 kernel32!WaitForMultipleObjects+0x18
WARNING: Frame IP not in any known module. Following frames may be
wrong.
04 0251ffb8 77e64829 0x2df01460
05 0251ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: 1904
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 02aaff88 7c827cfb ntdll!KiFastSystemCallRet
01 02aaff8c 71c51108 ntdll!NtWaitForMultipleObjects+0xc
02 02aaffb8 77e64829 NETAPI32!NetbiosWaiter+0x73
03 02aaffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: 334
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02aefd00 7c827d0b ntdll!KiFastSystemCallRet
01 02aefd04 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 02aefd74 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 02aefd88 4a756c3b kernel32!WaitForSingleObject+0x12
04 02aeffb8 77e64829 comsvcs!PingThread+0xf6
05 02aeffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 22
System Thread ID: 1a8c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0388fec0 7c827cfb ntdll!KiFastSystemCallRet
01 0388fec4 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0388ff6c 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0388ff88 76929e35 kernel32!WaitForMultipleObjects+0x18
04 0388ffb8 77e64829 USERENV!NotificationThread+0x5f
05 0388ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 23
System Thread ID: 1afc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 092eff70 7c8277db ntdll!KiFastSystemCallRet
01 092eff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 092effb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 092effec 00000000 kernel32!BaseThreadStart+0x34

Closing open log file C:\iisstate\output\IISState-1560.log

************************************************************ *********************************
//////////////////////////////////////////////////////////// ////////////////////////////////////////////////////////
************************************************************ *********************************


SECOND CRASH
************************************************************ *********************************
Opened log file 'C:\iisstate\output\IISState-176.log'

***********************
Starting new log output
IISState version 3.3.1

Thu Sep 13 15:47:45 2007

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 176

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed:




Thread ID: 18
System Thread ID: 710
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0247fed8 00000000 0x2f9f8ba3
Closing open log file C:\iisstate\output\IISState-176.log
Opened log file 'C:\iisstate\output\IISState-176.log'

***********************
Starting new log output
IISState version 3.3.1

Thu Sep 13 15:47:45 2007

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 176

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 950
Kernel Time: 0:0:0.31
User Time: 0:0:0.78
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c827d0b ntdll!KiFastSystemCallRet
01 0006fc0c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a364662 kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e3f w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af42d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc335 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a27 w3wp!wmain+0x22a
09 0006ffc0 77e6f23b w3wp!wmainCRTStartup+0x12f
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 1918
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00ccff9c 7c826f4b ntdll!KiFastSystemCallRet
01 00ccffa0 7c83d424 ntdll!NtDelayExecution+0xc
02 00ccffb8 77e64829 ntdll!RtlpTimerThread+0x47
03 00ccffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: b58
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 00d0ff70 7c8277db ntdll!KiFastSystemCallRet
01 00d0ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 00d0ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 00d0ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: 18a4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0063ff70 7c8277db ntdll!KiFastSystemCallRet
01 0063ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 0063ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 0063ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: 1da0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f7ff24 7c8277db ntdll!KiFastSystemCallRet
01 00f7ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00f7ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00f7ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00f7ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00f7ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00f7ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: 1ed4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fbff24 7c8277db ntdll!KiFastSystemCallRet
01 00fbff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00fbff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00fbff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00fbffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00fbffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00fbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 1c2c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ffff24 7c8277db ntdll!KiFastSystemCallRet
01 00ffff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00ffff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00ffff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00ffffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00ffffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00ffffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: 166c
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0104ff24 7c8277db ntdll!KiFastSystemCallRet
01 0104ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0104ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 0104ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 0104ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 0104ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 0104ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: 1734
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0110fcec 7c827cfb ntdll!KiFastSystemCallRet
01 0110fcf0 7c83c78e ntdll!NtWaitForMultipleObjects+0xc
02 0110ffb8 77e64829 ntdll!RtlpWaitThread+0x161
03 0110ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 4d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 01b6fa84 7c827d0b ntdll!KiFastSystemCallRet
01 01b6fa88 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 01b6faf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 01b6fb0c 5a3b820f kernel32!WaitForSingleObject+0x12
04 01b6ffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 01b6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: 4d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 01b6fa84 7c827d0b ntdll!KiFastSystemCallRet
01 01b6fa88 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 01b6faf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 01b6fb0c 5a3b820f kernel32!WaitForSingleObject+0x12
04 01b6ffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 01b6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: f48
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01beff8c 7c826f4b ntdll!KiFastSystemCallRet
01 01beff90 7c81943a ntdll!NtDelayExecution+0xc
02 01beffb8 77e64829 ntdll!RtlpIOWorkerThread+0x3f
03 01beffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 584
Kernel Time: 0:0:0.0
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01d2fb68 7c827cfb ntdll!KiFastSystemCallRet
01 01d2fb6c 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 01d2fc14 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 01d2fc30 2fa5523d kernel32!WaitForMultipleObjects+0x18
04 01d2ff60 2fa55d0a CrmIsapi+0x523d
05 01d2ff84 2fa5d04d CrmIsapi+0x5d0a
06 01d2ffb8 77e64829 CrmIsapi+0xd04d
07 01d2ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: bfc
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 01d6ff0c 7c8277db ntdll!KiFastSystemCallRet
01 01d6ff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 01d6ff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 01d6ff7c 2fa565c0 CrmIsapi+0x5da4
04 01d6ff84 2fa5d04d CrmIsapi+0x65c0
05 01d6ffb8 77e64829 CrmIsapi+0xd04d
06 01d6ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: 1568
Kernel Time: 0:0:0.0
User Time: 0:0:0.31
Thread Type: Other
# ChildEBP RetAddr
00 0231ff0c 7c8277db ntdll!KiFastSystemCallRet
01 0231ff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0231ff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 0231ff7c 2fa565c0 CrmIsapi+0x5da4
04 0231ff84 2fa5d04d CrmIsapi+0x65c0
05 0231ffb8 77e64829 CrmIsapi+0xd04d
06 0231ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 14b0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0236ff0c 7c8277db ntdll!KiFastSystemCallRet
01 0236ff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0236ff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 0236ff7c 2fa565c0 CrmIsapi+0x5da4
04 0236ff84 2fa5d04d CrmIsapi+0x65c0
05 0236ffb8 77e64829 CrmIsapi+0xd04d
06 0236ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 16
System Thread ID: 1f9c
Kernel Time: 0:0:0.125
User Time: 0:0:0.906
Thread Type: Other
# ChildEBP RetAddr
00 023bff0c 7c8277db ntdll!KiFastSystemCallRet
01 023bff10 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 023bff3c 2fa55da4 kernel32!GetQueuedCompletionStatus+0x29
03 023bff7c 2fa565c0 CrmIsapi+0x5da4
04 023bff84 2fa5d04d CrmIsapi+0x65c0
05 023bffb8 77e64829 CrmIsapi+0xd04d
06 023bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 1938
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0243feb8 7c827cfb ntdll!KiFastSystemCallRet
01 0243febc 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0243ff64 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0243ff80 2fb053f3 kernel32!WaitForMultipleObjects+0x18
WARNING: Frame IP not in any known module. Following frames may be
wrong.
04 0243ffb8 77e64829 0x2fb053f3
05 0243ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: 710
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0247fed8 00000000 0x2f9f8ba3




Thread ID: 19
System Thread ID: 1928
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 024cfdfc 7c827cfb ntdll!KiFastSystemCallRet
01 024cfe00 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 024cfea8 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 024cfec4 2fb88bc8 kernel32!WaitForMultipleObjects+0x18
WARNING: Frame IP not in any known module. Following frames may be
wrong.
04 024cffb8 77e64829 0x2fb88bc8
05 024cffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: 1670
Kernel Time: 0:0:0.0
User Time: 0:0:0.46
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0251fdfc 7c827cfb ntdll!KiFastSystemCallRet
01 0251fe00 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0251fea8 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0251fec4 2df01460 kernel32!WaitForMultipleObjects+0x18
WARNING: Frame IP not in any known module. Following frames may be
wrong.
04 0251ffb8 77e64829 0x2df01460
05 0251ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: 1c1c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 02aaff88 7c827cfb ntdll!KiFastSystemCallRet
01 02aaff8c 71c51108 ntdll!NtWaitForMultipleObjects+0xc
02 02aaffb8 77e64829 NETAPI32!NetbiosWaiter+0x73
03 02aaffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 22
System Thread ID: 188c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02aefd00 7c827d0b ntdll!KiFastSystemCallRet
01 02aefd04 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 02aefd74 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 02aefd88 4a756c3b kernel32!WaitForSingleObject+0x12
04 02aeffb8 77e64829 comsvcs!PingThread+0xf6
05 02aeffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 23
System Thread ID: 1f44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0388fec0 7c827cfb ntdll!KiFastSystemCallRet
01 0388fec4 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0388ff6c 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0388ff88 76929e35 kernel32!WaitForMultipleObjects+0x18
04 0388ffb8 77e64829 USERENV!NotificationThread+0x5f
05 0388ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 24
System Thread ID: 1f44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0388fec0 7c827cfb ntdll!KiFastSystemCallRet
01 0388fec4 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0388ff6c 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0388ff88 76929e35 kernel32!WaitForMultipleObjects+0x18
04 0388ffb8 77e64829 USERENV!NotificationThread+0x5f
05 0388ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 25
System Thread ID: 1f44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0388fec0 7c827cfb ntdll!KiFastSystemCallRet
01 0388fec4 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 0388ff6c 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 0388ff88 76929e35 kernel32!WaitForMultipleObjects+0x18
04 0388ffb8 77e64829 USERENV!NotificationThread+0x5f
05 0388ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 26
System Thread ID: 1ce8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0374fe18 7c82783b ntdll!KiFastSystemCallRet
01 0374fe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 0374ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0374ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 0374ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0374ffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 0374ffec 00000000 kernel32!BaseThreadStart+0x34

Closing open log file C:\iisstate\output\IISState-176.log

************************************************************ *********************************
//////////////////////////////////////////////////////////// ////////////////////////////////////////////////////////