Please help me to analyse the IIS dump report

Please help me to analyse the IIS dump report

am 29.10.2007 12:55:20 von gobinathan

Hello
Here is my server's dump analyse report i couldnt exactly figure out what is
causing my IIS to hang and throwing user errors for their search pages..
attaching the dump report please some one help me to identify the root cause
of the issue.. This dump was taken when the server was in hung state..

--------------------------------------DUMP Report-----------------------------
--------

Analysis Summary
Type Description Recommendation
Information
DebugDiag did not detect any known problems in the following dump files:

IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp

IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
Application__PID__364__55__Manual Dump.dmp

IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
exe__PID__3652__540__Manual Dump.dmp

IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC Event
Provider__PID__3692__243__Manual Dump.dmp








Analysis Details



Your browser settings are currently prohibiting this report's scripts from
running.

This is preventing some features of this analysis report from displaying
properly. To enable scripts to run, right-click the security warning above
and choose "Allow Blocked Content..." or enable the "Allow active content to
run in files on My Computer*" setting on the Advanced tab of your "Internet
Options" dialog to avoid being prompted in the future





Table Of Contents
IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp

Top 5 threads by CPU time

Thread report

HTTP Report



IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
Application__PID__364__55__Manual Dump.dmp

Top 5 threads by CPU time

Thread report

Well-Known COM STA Threads Report



IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
exe__PID__3652__540__Manual Dump.dmp

Top 5 threads by CPU time

Thread report



IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC Event
Provider__PID__3692__243__Manual Dump.dmp

Top 5 threads by CPU time

Thread report

Well-Known COM STA Threads Report



Report for IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp




Report for IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp
Type of Analysis Performed Hang Analysis
Machine Name
Operating System Windows Server 2003 Service Pack 1
Number Of Processors 4
Process ID 3648
Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time 36 day(s) 07:39:35
Process Up-Time 03:46:26



Top 5 Threads by CPU time
Note - Times include both user mode and kernel mode for each thread Thread ID:
27 Total CPU Time: 00:04:31.874 Entry Point for Thread: mscorsvr!
ThreadpoolMgr::intermediateThreadProc
Thread ID: 22 Total CPU Time: 00:04:01.921 Entry Point for Thread:
mscorsvr!gc_heap::gc_thread_stub
Thread ID: 19 Total CPU Time: 00:03:57.655 Entry Point for Thread:
mscorsvr!ThreadpoolMgr::intermediateThreadProc
Thread ID: 24 Total CPU Time: 00:03:56.593 Entry Point for Thread:
mscorsvr!gc_heap::gc_thread_stub
Thread ID: 21 Total CPU Time: 00:03:52.015 Entry Point for Thread:
mscorsvr!gc_heap::gc_thread_stub





Thread report

Thread 0 - System ID 3076
Entry point w3wp!wmainCRTStartup
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.078
Time spent in kernel mode 0 Days 00:00:00.046




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
w3dt!WP_CONTEXT::RunMainThreadLoop+10
w3dt!UlAtqStartListen+2d
w3core!W3_SERVER::StartListen+bd
w3core!UlW3Start+26e
w3wp!wmain+22a
w3wp!wmainCRTStartup+12b
kernel32!BaseProcessStart+23




Back to Top


Thread 1 - System ID 2676
Entry point ntdll!RtlpTimerThread
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
ntdll!RtlpTimerThread+47
kernel32!BaseThreadStart+34




Back to Top


Thread 2 - System ID 336
Entry point rpcrt4!ThreadStartRoutine
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
rpcrt4!COMMON_ProcessCalls+a1
rpcrt4!LOADABLE_TRANSPORT::ProcessIOEvents+117
rpcrt4!ProcessIOEventsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 3 - System ID 2888
Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:03.093
Time spent in kernel mode 0 Days 00:00:01.359




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
w3tp!THREAD_MANAGER::ThreadManagerThread+39
kernel32!BaseThreadStart+34




Back to Top


Thread 4 - System ID 2736
Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:01.281
Time spent in kernel mode 0 Days 00:00:00.703




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
w3tp!THREAD_MANAGER::ThreadManagerThread+39
kernel32!BaseThreadStart+34




Back to Top


Thread 5 - System ID 528
Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.875
Time spent in kernel mode 0 Days 00:00:00.296




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
w3tp!THREAD_MANAGER::ThreadManagerThread+39
kernel32!BaseThreadStart+34




Back to Top


Thread 6 - System ID 4044
Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:02.671
Time spent in kernel mode 0 Days 00:00:01.218




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
w3tp!THREAD_MANAGER::ThreadManagerThread+39
kernel32!BaseThreadStart+34




Back to Top


Thread 7 - System ID 2740
Entry point ntdll!RtlpWaitThread
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.281
Time spent in kernel mode 0 Days 00:00:00.875




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
ntdll!RtlpWaitThread+161
kernel32!BaseThreadStart+34




Back to Top


Thread 8 - System ID 1832
Entry point msvcrt!_endthreadex+2f
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:01.453
Time spent in kernel mode 0 Days 00:00:04.984




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
user32!RealMsgWaitForMultipleObjectsEx+141
user32!MsgWaitForMultipleObjects+1f
acsrtl!RemoveWorkItem+27b
msvcrt!free+c8
kernel32!BaseThreadStart+34




Back to Top


Thread 9 - System ID 3124
Entry point msvcrt!_endthreadex+2f
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
user32!RealMsgWaitForMultipleObjectsEx+141
user32!MsgWaitForMultipleObjects+1f
acsrtl!RemoveWorkItem+27b
kernel32!BaseThreadStart+34




Back to Top


Thread 10 - System ID 3904
Entry point msvcrt!_endthreadex+2f
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
user32!RealMsgWaitForMultipleObjectsEx+141
user32!MsgWaitForMultipleObjects+1f
acsrtl!RemoveWorkItem+27b
kernel32!BaseThreadStart+34




Back to Top


Thread 11 - System ID 1364
Entry point msvcrt!_endthreadex+2f
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
user32!RealMsgWaitForMultipleObjectsEx+141
user32!MsgWaitForMultipleObjects+1f
acsrtl!RemoveWorkItem+27b
kernel32!BaseThreadStart+34




Back to Top


Thread 12 - System ID 3104
Entry point msatq!AtqInitialize+1354
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
msatq!AtqInitialize+1392
kernel32!BaseThreadStart+34




Back to Top


Thread 13 - System ID 3676
Entry point wmisink!CWMIEventSinkWrapper::SetupSubscription+30b
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.00




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
wmisink!CWMIEventSinkWrapper::SetupSubscription+48e




Back to Top


Thread 14 - System ID 1620
Entry point RfFilExt!CMBData::~CMBData+c2
Create time 10/26/2007 1:05:15 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




This thread is calling an ISAPI Filter RfFilExt



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
RfFilExt!CMBData::~CMBData+f6




Back to Top


Thread 15 - System ID 3100
Entry point w3core!HTTP_COMPRESSION::CompressionThread
Create time 10/26/2007 1:05:16 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
w3core!HTTP_COMPRESSION::CompressionThread+126
kernel32!BaseThreadStart+34




Back to Top


Thread 16 - System ID 3300
Entry point ntdll!RtlpIOWorkerThread
Create time 10/26/2007 1:05:16 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
ntdll!RtlpIOWorkerThread+3f
kernel32!BaseThreadStart+34




Back to Top


Thread 17 - System ID 2064
Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:00:00.203
Time spent in kernel mode 0 Days 00:00:00.031




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+49
mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
kernel32!BaseThreadStart+34




Back to Top


Thread 18 - System ID 2300
Entry point mscorsvr!ThreadpoolMgr::GateThreadStart
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
kernel32!SleepEx+68
kernel32!Sleep+f
mscorsvr!ThreadpoolMgr::GateThreadStart+54
kernel32!BaseThreadStart+34




Back to Top


Thread 19 - System ID 3972
Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:03:44.140
Time spent in kernel mode 0 Days 00:00:13.515




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
kernel32!BaseThreadStart+34




Back to Top


Thread 20 - System ID 3232
Entry point mscorsvr!DebuggerRCThread::ThreadProcStatic
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
mscorsvr!DebuggerRCThread::MainLoop+90
mscorsvr!DebuggerRCThread::ThreadProc+68
mscorsvr!DebuggerRCThread::ThreadProcStatic+b
kernel32!BaseThreadStart+34




Back to Top


Thread 21 - System ID 244
Entry point mscorsvr!gc_heap::gc_thread_stub
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:03:48.906
Time spent in kernel mode 0 Days 00:00:03.109




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!gc_heap::gc_thread_function+2f
mscorsvr!gc_heap::gc_thread_stub+1e
kernel32!BaseThreadStart+34




Back to Top


Thread 22 - System ID 3108
Entry point mscorsvr!gc_heap::gc_thread_stub
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:04:00.312
Time spent in kernel mode 0 Days 00:00:01.609




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!gc_heap::gc_thread_function+2f
mscorsvr!gc_heap::gc_thread_stub+1e
kernel32!BaseThreadStart+34




Back to Top


Thread 23 - System ID 3204
Entry point mscorsvr!gc_heap::gc_thread_stub
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:03:23.046
Time spent in kernel mode 0 Days 00:00:02.171




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!gc_heap::gc_thread_function+2f
mscorsvr!gc_heap::gc_thread_stub+1e
kernel32!BaseThreadStart+34




Back to Top


Thread 24 - System ID 3336
Entry point mscorsvr!gc_heap::gc_thread_stub
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:03:55.062
Time spent in kernel mode 0 Days 00:00:01.531




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!gc_heap::gc_thread_function+2f
mscorsvr!gc_heap::gc_thread_stub+1e
kernel32!BaseThreadStart+34




Back to Top


Thread 25 - System ID 2592
Entry point mscorsvr!Thread::intermediateThreadProc
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:00:01.562
Time spent in kernel mode 0 Days 00:00:00.062




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
mscorsvr!WaitForFinalizerEvent+5a
mscorsvr!GCHeap::FinalizerThreadStart+96
mscorsvr!Thread::intermediateThreadProc+44
kernel32!BaseThreadStart+34




Back to Top


Thread 26 - System ID 2812
Entry point mscorsvr!ThreadpoolMgr::TimerThreadStart
Create time 10/26/2007 1:05:18 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.015




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
kernel32!SleepEx+68
mscorsvr!ThreadpoolMgr::TimerThreadStart+30
kernel32!BaseThreadStart+34




Back to Top


Thread 27 - System ID 976
Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
Create time 10/26/2007 1:05:19 PM
Time spent in user mode 0 Days 00:04:16.078
Time spent in kernel mode 0 Days 00:00:15.796




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
kernel32!BaseThreadStart+34




Back to Top


Thread 28 - System ID 3132
Create time 12:00:00 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 29 - System ID 3616
Entry point mscorsvr!ThreadpoolMgr::WaitThreadStart
Create time 10/26/2007 1:05:35 PM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.046




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
kernel32!SleepEx+68
mscorsvr!ThreadpoolMgr::WaitThreadStart+45
kernel32!BaseThreadStart+34




Back to Top


Thread 30 - System ID 3428
Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
Create time 10/26/2007 1:32:00 PM
Time spent in user mode 0 Days 00:03:26.968
Time spent in kernel mode 0 Days 00:00:12.156




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
kernel32!BaseThreadStart+34




Back to Top


Thread 31 - System ID 144
Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
Create time 10/26/2007 2:06:29 PM
Time spent in user mode 0 Days 00:02:46.859
Time spent in kernel mode 0 Days 00:00:11.156




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
kernel32!BaseThreadStart+34




Back to Top


Thread 32 - System ID 3080
Entry point userenv!NotificationThread
Create time 10/26/2007 2:23:52 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
userenv!NotificationThread+5f
kernel32!BaseThreadStart+34




Back to Top


Thread 33 - System ID 3480
Create time 12:00:00 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 34 - System ID 3340
Create time 12:00:00 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 35 - System ID 4012
Entry point ntdll!RtlpWorkerThread
Create time 10/26/2007 4:45:42 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.031




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 36 - System ID 320
Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
Create time 10/26/2007 4:50:00 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+49
mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
kernel32!BaseThreadStart+34




Back to Top


Thread 37 - System ID 2392
Entry point ntdll!RtlpWorkerThread
Create time 10/26/2007 4:50:42 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top

HTTP report
IIS ATQ worker thread count 4 Thread(s)
Available ATQ worker thread count 4 Thread(s)
Active client connections 31 client connection(s)



Client Connections
Client connection from 75.20.255.174:61901 to 172.16.12.71:80
Host Header network.construction.com:80
GET request for /CNSearchPage.aspx
HTTP Version HTTP/1.1
SSL Request False
Time alive 00:00:09
QueryString
Request mapped to
HTTP Request State HTR_READING_CLIENT_REQUEST
Native Request State NREQ_STATE_PROCESS




30 connection(s) waiting for the next request.
Report for IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
Application__PID__364__55__Manual Dump.dmp




Report for IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
Application__PID__364__55__Manual Dump.dmp
Type of Analysis Performed Hang Analysis
Machine Name
Operating System Windows Server 2003 Service Pack 1
Number Of Processors 4
Process ID 364
Process Image C:\WINDOWS\system32\dllhost.exe
System Up-Time 36 day(s) 07:39:31
Process Up-Time 36 day(s) 07:39:13



Top 5 Threads by CPU time
Note - Times include both user mode and kernel mode for each thread Thread ID:
7 Total CPU Time: 00:00:00.656 Entry Point for Thread: comsvcs!
CEventServer::DispatchEvents
Thread ID: 4 Total CPU Time: 00:00:00.031 Entry Point for Thread:
ntdll!RtlpWorkerThread
Thread ID: 6 Total CPU Time: 00:00:00.031 Entry Point for Thread:
msvcrt!_endthreadex+2f
Thread ID: 14 Total CPU Time: 00:00:00.030 Entry Point for Thread:
rpcrt4!ThreadStartRoutine
Thread ID: 5 Total CPU Time: 00:00:00.015 Entry Point for Thread:
msvcrt!_endthread+3b





Thread report

Thread 0 - System ID 368
Entry point dllhost!WinMainCRTStartup
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+51
ole32!CoRegisterSurrogateEx+1a6
dllhost!WinMain+da
dllhost!WinMainCRTStartup+182
kernel32!BaseProcessStart+23




Back to Top


Thread 1 - System ID 412
Entry point ole32!CSurrogateProcessActivator::StartNTService
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtReadFile+c
kernel32!ReadFile+16c
advapi32!ScGetPipeInput+2a
advapi32!ScDispatcherLoop+51
advapi32!StartServiceCtrlDispatcherW+e3
ole32!CSurrogateProcessActivator::StartNTService+2d
kernel32!BaseThreadStart+34




Back to Top


Thread 2 - System ID 572
Entry point ole32!CRpcThreadCache::RpcWorkerThreadEntry
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
user32!NtUserGetMessage+c
ole32!CDllHost::STAWorkerLoop+72
ole32!CDllHost::WorkerThread+c8
ole32!DLLHostThreadEntry+d
ole32!CRpcThread::WorkerLoop+1e
ole32!CRpcThreadCache::RpcWorkerThreadEntry+20
kernel32!BaseThreadStart+34




Back to Top


Thread 3 - System ID 648
Entry point ntdll!RtlpTimerThread
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
ntdll!RtlpTimerThread+47
kernel32!BaseThreadStart+34




Back to Top


Thread 4 - System ID 696
Entry point ntdll!RtlpWorkerThread
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.031
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 5 - System ID 876
Entry point msvcrt!_endthread+3b
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.015




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
comsvcs!CRMRecoveryClerk::RecoveryThread+277
comsvcs!RecoveryThreadFunction+ec
msvcrt!_endthread+ab
kernel32!BaseThreadStart+34




Back to Top


Thread 6 - System ID 908
Entry point msvcrt!_endthreadex+2f
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.031
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
comsvcs!WORK_QUEUE::WorkerLoop+66
comsvcs!WORK_QUEUE::ThreadLoop+19
msvcrt!_endthreadex+a3
kernel32!BaseThreadStart+34




Back to Top


Thread 7 - System ID 1976
Entry point comsvcs!CEventServer::DispatchEvents
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.375
Time spent in kernel mode 0 Days 00:00:00.281




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
comsvcs!CLceDisp::DoWork+a5
comsvcs!CEventServer::DispatchEvents+7c
kernel32!BaseThreadStart+34




Back to Top


Thread 8 - System ID 2116
Entry point msvcrt!_endthread+3b
Create time 9/20/2007 9:12:27 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
comsvcs!CRecoveryClerk2::RecoveryThread+57d
comsvcs!RecoveryThreadFunction+ec
msvcrt!_endthread+ab
kernel32!BaseThreadStart+34




Back to Top


Thread 9 - System ID 2396
Entry point ntdll!RtlpWaitThread
Create time 9/20/2007 9:12:28 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
ntdll!RtlpWaitThread+161
kernel32!BaseThreadStart+34




Back to Top


Thread 10 - System ID 2400
Entry point comsvcs!PostData
Create time 9/20/2007 9:12:28 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
comsvcs!PostData+176
kernel32!BaseThreadStart+34




Back to Top


Thread 11 - System ID 3240
Entry point msdtcprx!CConnectionManager::TimerProc
Create time 9/20/2007 9:13:22 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
msdtcprx!CConnectionManager::TimerProcForNonGuardedUser+b3
msdtcprx!CConnectionManager::TimerProc+1e
kernel32!BaseThreadStart+34




Back to Top


Thread 12 - System ID 1892
Entry point msvcrt!_endthreadex+2f
Create time 9/20/2007 9:13:24 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
catsrv!RegSrvrPump+4d
catsrv!RunService+4f
msvcrt!_endthreadex+a3
kernel32!BaseThreadStart+34




Back to Top


Thread 13 - System ID 3792
Entry point rpcrt4!ThreadStartRoutine
Create time 9/20/2007 9:27:40 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 14 - System ID 3612
Entry point rpcrt4!ThreadStartRoutine
Create time 10/17/2007 3:26:25 PM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.015




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 15 - System ID 312
Entry point rpcrt4!ThreadStartRoutine
Create time 10/26/2007 4:44:17 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.015




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top

COM+ Component Statistics Report
Component Instances 1
Components InCall 0





Well-Known COM STA Threads Report
STA Name Thread ID Thread Status Call Status

Main STA 2 Idle (N/A)
Apartment-threaded host for MTA clients 2 Idle (N/A)



Report for IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
exe__PID__3652__540__Manual Dump.dmp




Report for IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
exe__PID__3652__540__Manual Dump.dmp
Type of Analysis Performed Hang Analysis
Machine Name
Operating System Windows Server 2003 Service Pack 1
Number Of Processors 4
Process ID 3652
Process Image C:\WINDOWS\system32\inetsrv\inetinfo.exe
System Up-Time 36 day(s) 07:39:37
Process Up-Time 29 day(s) 02:52:53



Top 5 Threads by CPU time
Note - Times include both user mode and kernel mode for each thread Thread ID:
4 Total CPU Time: 00:00:22.999 Entry Point for Thread: coadmin!
NOTIFY_CONTEXT::NotifyThreadProc
Thread ID: 9 Total CPU Time: 00:00:06.827 Entry Point for Thread:
ntdll!RtlpWaitThread
Thread ID: 7 Total CPU Time: 00:00:03.656 Entry Point for Thread:
isatq!AtqPoolThread
Thread ID: 8 Total CPU Time: 00:00:03.187 Entry Point for Thread:
isatq!AtqPoolThread
Thread ID: 13 Total CPU Time: 00:00:01.249 Entry Point for Thread:
fcachdll!CScheduleThread::ScheduleThread





Thread report

Thread 0 - System ID 4020
Entry point inetinfo!mainCRTStartup
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtReadFile+c
kernel32!ReadFile+16c
advapi32!ScGetPipeInput+2a
advapi32!ScDispatcherLoop+51
advapi32!StartServiceCtrlDispatcherA+93
inetinfo!StartDispatchTable+277
inetinfo!main+117
inetinfo!mainCRTStartup+12f
kernel32!BaseProcessStart+23




Back to Top


Thread 1 - System ID 2196
Entry point inetinfo!W3SVCThreadEntry
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
inetinfo!W3SVCThreadEntry+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 2 - System ID 3036
Entry point advapi32!ScSvcctrlThreadW
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.171
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
iisadmin!ServiceEntry+28a
inetinfo!InetinfoStartService+2cc
advapi32!ScSvcctrlThreadA+21
kernel32!BaseThreadStart+34




Back to Top


Thread 3 - System ID 2120
Entry point ntdll!RtlpTimerThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.046
Time spent in kernel mode 0 Days 00:00:00.187




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
ntdll!RtlpTimerThread+47
kernel32!BaseThreadStart+34




Back to Top


Thread 4 - System ID 2040
Entry point coadmin!NOTIFY_CONTEXT::NotifyThreadProc
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:19.578
Time spent in kernel mode 0 Days 00:00:03.421




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
coadmin!NOTIFY_CONTEXT::GetNextContext+67
coadmin!NOTIFY_CONTEXT::NotifyThreadProc+5f
kernel32!BaseThreadStart+34




Back to Top


Thread 5 - System ID 1768
Entry point advapi32!ScSvcctrlThreadW
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.187
Time spent in kernel mode 0 Days 00:00:00.062




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
user32!RealMsgWaitForMultipleObjectsEx+141
user32!MsgWaitForMultipleObjects+1f
infocomm!IIS_SERVICE::StartServiceOperation+231
smtpsvc!ServiceEntry+12b
inetinfo!InetinfoStartService+2cc
advapi32!ScSvcctrlThreadA+21
kernel32!BaseThreadStart+34




Back to Top


Thread 6 - System ID 2376
Entry point advapi32!ScSvcctrlThreadW
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




This thread is not fully resolved and may or may not be a problem. Further
analysis of these threads may be required.



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
user32!RealMsgWaitForMultipleObjectsEx+141
user32!MsgWaitForMultipleObjects+1f
infocomm!IIS_SERVICE::StartServiceOperation+231
ftpsvc2!ServiceEntry+ae
inetinfo!InetinfoStartService+2cc
advapi32!ScSvcctrlThreadA+21
kernel32!BaseThreadStart+34




Back to Top


Thread 7 - System ID 804
Entry point isatq!AtqPoolThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.578
Time spent in kernel mode 0 Days 00:00:03.078




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
isatq!AtqPoolThread+40
kernel32!BaseThreadStart+34




Back to Top


Thread 8 - System ID 3920
Entry point isatq!AtqPoolThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.375
Time spent in kernel mode 0 Days 00:00:02.812




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
isatq!AtqPoolThread+40
kernel32!BaseThreadStart+34




Back to Top


Thread 9 - System ID 1252
Entry point ntdll!RtlpWaitThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:01.031
Time spent in kernel mode 0 Days 00:00:05.796




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
ntdll!RtlpWaitThread+161
kernel32!BaseThreadStart+34




Back to Top


Thread 10 - System ID 1792
Create time 12:00:00 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 11 - System ID 1808
Entry point exstrace!RegNotifyThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
exstrace!RegNotifyThread+6a
kernel32!BaseThreadStart+34




Back to Top


Thread 12 - System ID 2224
Entry point exstrace!WriteTraceThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
exstrace!WriteTraceThread+31
kernel32!BaseThreadStart+34




Back to Top


Thread 13 - System ID 564
Entry point fcachdll!CScheduleThread::ScheduleThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:01.078
Time spent in kernel mode 0 Days 00:00:00.171




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
fcachdll!CScheduleThread::ScheduleThread+61
kernel32!BaseThreadStart+34




Back to Top


Thread 14 - System ID 280
Entry point ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.046
Time spent in kernel mode 0 Days 00:00:00.031




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+33
kernel32!BaseThreadStart+34




Back to Top


Thread 15 - System ID 1956
Entry point smtpsvc!TcpRegNotifyThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.046




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
smtpsvc!TcpRegNotifyThread+de
kernel32!BaseThreadStart+34




Back to Top


Thread 16 - System ID 3976
Entry point smtpsvc!FreeLibThread
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
smtpsvc!FreeLibThread+2e
kernel32!BaseThreadStart+34




Back to Top


Thread 17 - System ID 1788
Entry point isatq!BmonThreadFunc
Create time 9/27/2007 1:58:53 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




This thread is waiting on data to be returned from another server via WinSock.




The call to WinSock originated from isatq!ATQ_BMON_SET::BmonThreadFunc+22



Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
mswsock!SockWaitForSingleObject+19d
mswsock!WSPSelect+380
ws2_32!select+b9
isatq!ATQ_BMON_SET::BmonThreadFunc+22
isatq!BmonThreadFunc+9
kernel32!BaseThreadStart+34
0x80000000`00000000






Back to Top


Thread 18 - System ID 2156
Entry point aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine
Create time 9/27/2007 1:58:54 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+bd
kernel32!BaseThreadStart+34




Back to Top


Thread 19 - System ID 1828
Entry point smtpsvc!PERSIST_QUEUE::QueueThreadRoutine
Create time 9/27/2007 1:58:54 PM
Time spent in user mode 0 Days 00:00:00.281
Time spent in kernel mode 0 Days 00:00:00.359




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
aqueue!CConnMgr::GetNextConnection+1c4
smtpsvc!PERSIST_QUEUE::QueueThreadRoutine+23
kernel32!BaseThreadStart+34




Back to Top


Thread 20 - System ID 2264
Entry point rpcrt4!ThreadStartRoutine
Create time 10/25/2007 2:41:23 PM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 21 - System ID 2080
Entry point rpcrt4!ThreadStartRoutine
Create time 10/25/2007 2:41:23 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 22 - System ID 3728
Create time 12:00:00 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 23 - System ID 2956
Create time 12:00:00 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 24 - System ID 3136
Entry point rpcrt4!ThreadStartRoutine
Create time 10/26/2007 1:56:02 PM
Time spent in user mode 0 Days 00:00:00.046
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
rpcrt4!COMMON_ProcessCalls+a1
rpcrt4!LOADABLE_TRANSPORT::ProcessIOEvents+117
rpcrt4!ProcessIOEventsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 25 - System ID 2848
Entry point ntdll!RtlpWorkerThread
Create time 10/26/2007 4:49:23 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 26 - System ID 1160
Entry point ntdll!RtlpWorkerThread
Create time 10/26/2007 4:50:23 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 27 - System ID 2652
Entry point ntdll!RtlpWorkerThread
Create time 10/26/2007 4:51:23 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 28 - System ID 3044
Entry point ntdll!RtlpWorkerThread
Create time 10/26/2007 4:51:23 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 29 - System ID 2216
Entry point ntdll!RtlpWorkerThread
Create time 10/26/2007 4:51:23 PM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top

COM+ Component Statistics Report
Component Instances 1
Components InCall 0





Report for IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC
Event Provider__PID__3692__243__Manual Dump.dmp




Report for IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC Event
Provider__PID__3692__243__Manual Dump.dmp
Type of Analysis Performed Hang Analysis
Machine Name
Operating System Windows Server 2003 Service Pack 1
Number Of Processors 4
Process ID 3692
Process Image C:\WINDOWS\system32\dllhost.exe
System Up-Time 36 day(s) 07:39:37
Process Up-Time 36 day(s) 07:38:15



Top 5 Threads by CPU time
Note - Times include both user mode and kernel mode for each thread Thread ID:
6 Total CPU Time: 00:00:35.843 Entry Point for Thread: rpcrt4!
ThreadStartRoutine
Thread ID: 7 Total CPU Time: 00:00:26.936 Entry Point for Thread:
rpcrt4!ThreadStartRoutine
Thread ID: 1 Total CPU Time: 00:00:00.030 Entry Point for Thread:
ole32!CRpcThreadCache::RpcWorkerThreadEntry
Thread ID: 3 Total CPU Time: 00:00:00.015 Entry Point for Thread:
ntdll!RtlpWorkerThread
Thread ID: 9 Total CPU Time: 00:00:00.015 Entry Point for Thread:
rpcrt4!ThreadStartRoutine





Thread report

Thread 0 - System ID 3696
Entry point dllhost!WinMainCRTStartup
Create time 9/20/2007 9:13:32 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForSingleObject+c
kernel32!WaitForSingleObjectEx+ac
kernel32!WaitForSingleObject+12
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+51
ole32!CoRegisterSurrogateEx+1a6
dllhost!WinMain+da
dllhost!WinMainCRTStartup+182
kernel32!BaseProcessStart+23




Back to Top


Thread 1 - System ID 3708
Entry point ole32!CRpcThreadCache::RpcWorkerThreadEntry
Create time 9/20/2007 9:13:32 AM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.015




Function Source
ntdll!KiFastSystemCallRet
user32!NtUserGetMessage+c
ole32!CDllHost::STAWorkerLoop+72
ole32!CDllHost::WorkerThread+c8
ole32!DLLHostThreadEntry+d
ole32!CRpcThread::WorkerLoop+1e
ole32!CRpcThreadCache::RpcWorkerThreadEntry+20
kernel32!BaseThreadStart+34




Back to Top


Thread 2 - System ID 2204
Entry point ntdll!RtlpTimerThread
Create time 9/20/2007 9:13:32 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtDelayExecution+c
ntdll!RtlpTimerThread+47
kernel32!BaseThreadStart+34




Back to Top


Thread 3 - System ID 2200
Entry point ntdll!RtlpWorkerThread
Create time 9/20/2007 9:13:32 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.015




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
ntdll!RtlpWorkerThread+3d
kernel32!BaseThreadStart+34




Back to Top


Thread 4 - System ID 2160
Entry point msvcrt!_endthreadex+2f
Create time 9/20/2007 9:13:32 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
comsvcs!WORK_QUEUE::WorkerLoop+66
comsvcs!WORK_QUEUE::ThreadLoop+19
msvcrt!_endthreadex+a3
kernel32!BaseThreadStart+34




Back to Top


Thread 5 - System ID 2240
Entry point comsvcs!PostData
Create time 9/20/2007 9:13:32 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtWaitForMultipleObjects+c
kernel32!WaitForMultipleObjectsEx+11a
kernel32!WaitForMultipleObjects+18
comsvcs!PostData+176
kernel32!BaseThreadStart+34




Back to Top


Thread 6 - System ID 2336
Entry point rpcrt4!ThreadStartRoutine
Create time 9/20/2007 9:13:32 AM
Time spent in user mode 0 Days 00:00:26.781
Time spent in kernel mode 0 Days 00:00:09.062




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 7 - System ID 3788
Entry point rpcrt4!ThreadStartRoutine
Create time 9/27/2007 9:28:55 AM
Time spent in user mode 0 Days 00:00:21.296
Time spent in kernel mode 0 Days 00:00:05.640




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 8 - System ID 616
Create time 12:00:00 AM
Time spent in user mode 0 Days 00:00:00.00
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!ZwReplyWaitReceivePortEx+c
rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
rpcrt4!RecvLotsaCallsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top


Thread 9 - System ID 660
Entry point rpcrt4!ThreadStartRoutine
Create time 10/26/2007 4:48:31 PM
Time spent in user mode 0 Days 00:00:00.015
Time spent in kernel mode 0 Days 00:00:00.00




Function Source
ntdll!KiFastSystemCallRet
ntdll!NtRemoveIoCompletion+c
kernel32!GetQueuedCompletionStatus+29
rpcrt4!COMMON_ProcessCalls+a1
rpcrt4!LOADABLE_TRANSPORT::ProcessIOEvents+117
rpcrt4!ProcessIOEventsWrapper+d
rpcrt4!BaseCachedThreadRoutine+9d
rpcrt4!ThreadStartRoutine+1b
kernel32!BaseThreadStart+34




Back to Top

COM+ Component Statistics Report
Component Instances 14
Components InCall 0





Well-Known COM STA Threads Report
STA Name Thread ID Thread Status Call Status

Main STA 1 Idle (N/A)
Apartment-threaded host for MTA clients 1 Idle (N/A)







Script Summary
Script Name Status Error Code Error Source Error Description Source Line
CrashHangAnalysis.asp Completed

--
Message posted via WinServerKB.com
http://www.winserverkb.com/Uwe/Forums.aspx/iis-general/20071 0/1

Re: Please help me to analyse the IIS dump report

am 29.10.2007 18:24:12 von patfilot

This looks like an idle process - there are no hung requests.


Pat

"Gobi" wrote in message news:7a62cf9f21c3c@uwe...
> Hello
> Here is my server's dump analyse report i couldnt exactly figure out what
> is
> causing my IIS to hang and throwing user errors for their search pages..
> attaching the dump report please some one help me to identify the root
> cause
> of the issue.. This dump was taken when the server was in hung state..
>
> --------------------------------------DUMP
> Report-----------------------------
> --------
>
> Analysis Summary
> Type Description Recommendation
> Information
> DebugDiag did not detect any known problems in the following dump files:
>
> IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
> exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp
>
> IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
> Application__PID__364__55__Manual Dump.dmp
>
> IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
> exe__PID__3652__540__Manual Dump.dmp
>
> IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC Event
> Provider__PID__3692__243__Manual Dump.dmp
>
>
>
>
>
>
>
>
> Analysis Details
>
>
>
> Your browser settings are currently prohibiting this report's scripts from
> running.
>
> This is preventing some features of this analysis report from displaying
> properly. To enable scripts to run, right-click the security warning above
> and choose "Allow Blocked Content..." or enable the "Allow active content
> to
> run in files on My Computer*" setting on the Advanced tab of your
> "Internet
> Options" dialog to avoid being prompted in the future
>
>
>
>
>
> Table Of Contents
> IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
> exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp
>
> Top 5 threads by CPU time
>
> Thread report
>
> HTTP Report
>
>
>
> IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
> Application__PID__364__55__Manual Dump.dmp
>
> Top 5 threads by CPU time
>
> Thread report
>
> Well-Known COM STA Threads Report
>
>
>
> IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
> exe__PID__3652__540__Manual Dump.dmp
>
> Top 5 threads by CPU time
>
> Thread report
>
>
>
> IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC Event
> Provider__PID__3692__243__Manual Dump.dmp
>
> Top 5 threads by CPU time
>
> Thread report
>
> Well-Known COM STA Threads Report
>
>
>
> Report for IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
> exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp
>
>
>
>
> Report for IIS_COM+__Date__10_26_2007__Time_04_51_40PM__w3wp.
> exe__DefaultAppPool__PID__3648__899__Manual Dump.dmp
> Type of Analysis Performed Hang Analysis
> Machine Name
> Operating System Windows Server 2003 Service Pack 1
> Number Of Processors 4
> Process ID 3648
> Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe
> System Up-Time 36 day(s) 07:39:35
> Process Up-Time 03:46:26
>
>
>
> Top 5 Threads by CPU time
> Note - Times include both user mode and kernel mode for each thread Thread
> ID:
> 27 Total CPU Time: 00:04:31.874 Entry Point for Thread: mscorsvr!
> ThreadpoolMgr::intermediateThreadProc
> Thread ID: 22 Total CPU Time: 00:04:01.921 Entry Point for Thread:
> mscorsvr!gc_heap::gc_thread_stub
> Thread ID: 19 Total CPU Time: 00:03:57.655 Entry Point for Thread:
> mscorsvr!ThreadpoolMgr::intermediateThreadProc
> Thread ID: 24 Total CPU Time: 00:03:56.593 Entry Point for Thread:
> mscorsvr!gc_heap::gc_thread_stub
> Thread ID: 21 Total CPU Time: 00:03:52.015 Entry Point for Thread:
> mscorsvr!gc_heap::gc_thread_stub
>
>
>
>
>
> Thread report
>
> Thread 0 - System ID 3076
> Entry point w3wp!wmainCRTStartup
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.078
> Time spent in kernel mode 0 Days 00:00:00.046
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> w3dt!WP_CONTEXT::RunMainThreadLoop+10
> w3dt!UlAtqStartListen+2d
> w3core!W3_SERVER::StartListen+bd
> w3core!UlW3Start+26e
> w3wp!wmain+22a
> w3wp!wmainCRTStartup+12b
> kernel32!BaseProcessStart+23
>
>
>
>
> Back to Top
>
>
> Thread 1 - System ID 2676
> Entry point ntdll!RtlpTimerThread
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> ntdll!RtlpTimerThread+47
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 2 - System ID 336
> Entry point rpcrt4!ThreadStartRoutine
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> rpcrt4!COMMON_ProcessCalls+a1
> rpcrt4!LOADABLE_TRANSPORT::ProcessIOEvents+117
> rpcrt4!ProcessIOEventsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 3 - System ID 2888
> Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:03.093
> Time spent in kernel mode 0 Days 00:00:01.359
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
> w3tp!THREAD_MANAGER::ThreadManagerThread+39
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 4 - System ID 2736
> Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:01.281
> Time spent in kernel mode 0 Days 00:00:00.703
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
> w3tp!THREAD_MANAGER::ThreadManagerThread+39
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 5 - System ID 528
> Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.875
> Time spent in kernel mode 0 Days 00:00:00.296
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
> w3tp!THREAD_MANAGER::ThreadManagerThread+39
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 6 - System ID 4044
> Entry point w3tp!THREAD_MANAGER::ThreadManagerThread
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:02.671
> Time spent in kernel mode 0 Days 00:00:01.218
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+33
> w3tp!THREAD_POOL_DATA::ThreadPoolThread+24
> w3tp!THREAD_MANAGER::ThreadManagerThread+39
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 7 - System ID 2740
> Entry point ntdll!RtlpWaitThread
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.281
> Time spent in kernel mode 0 Days 00:00:00.875
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> ntdll!RtlpWaitThread+161
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 8 - System ID 1832
> Entry point msvcrt!_endthreadex+2f
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:01.453
> Time spent in kernel mode 0 Days 00:00:04.984
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> user32!RealMsgWaitForMultipleObjectsEx+141
> user32!MsgWaitForMultipleObjects+1f
> acsrtl!RemoveWorkItem+27b
> msvcrt!free+c8
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 9 - System ID 3124
> Entry point msvcrt!_endthreadex+2f
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> user32!RealMsgWaitForMultipleObjectsEx+141
> user32!MsgWaitForMultipleObjects+1f
> acsrtl!RemoveWorkItem+27b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 10 - System ID 3904
> Entry point msvcrt!_endthreadex+2f
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> user32!RealMsgWaitForMultipleObjectsEx+141
> user32!MsgWaitForMultipleObjects+1f
> acsrtl!RemoveWorkItem+27b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 11 - System ID 1364
> Entry point msvcrt!_endthreadex+2f
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> user32!RealMsgWaitForMultipleObjectsEx+141
> user32!MsgWaitForMultipleObjects+1f
> acsrtl!RemoveWorkItem+27b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 12 - System ID 3104
> Entry point msatq!AtqInitialize+1354
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> msatq!AtqInitialize+1392
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 13 - System ID 3676
> Entry point wmisink!CWMIEventSinkWrapper::SetupSubscription+30b
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> wmisink!CWMIEventSinkWrapper::SetupSubscription+48e
>
>
>
>
> Back to Top
>
>
> Thread 14 - System ID 1620
> Entry point RfFilExt!CMBData::~CMBData+c2
> Create time 10/26/2007 1:05:15 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is calling an ISAPI Filter RfFilExt
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> RfFilExt!CMBData::~CMBData+f6
>
>
>
>
> Back to Top
>
>
> Thread 15 - System ID 3100
> Entry point w3core!HTTP_COMPRESSION::CompressionThread
> Create time 10/26/2007 1:05:16 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> w3core!HTTP_COMPRESSION::CompressionThread+126
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 16 - System ID 3300
> Entry point ntdll!RtlpIOWorkerThread
> Create time 10/26/2007 1:05:16 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> ntdll!RtlpIOWorkerThread+3f
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 17 - System ID 2064
> Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:00:00.203
> Time spent in kernel mode 0 Days 00:00:00.031
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+49
> mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 18 - System ID 2300
> Entry point mscorsvr!ThreadpoolMgr::GateThreadStart
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> kernel32!SleepEx+68
> kernel32!Sleep+f
> mscorsvr!ThreadpoolMgr::GateThreadStart+54
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 19 - System ID 3972
> Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:03:44.140
> Time spent in kernel mode 0 Days 00:00:13.515
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
> mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 20 - System ID 3232
> Entry point mscorsvr!DebuggerRCThread::ThreadProcStatic
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> mscorsvr!DebuggerRCThread::MainLoop+90
> mscorsvr!DebuggerRCThread::ThreadProc+68
> mscorsvr!DebuggerRCThread::ThreadProcStatic+b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 21 - System ID 244
> Entry point mscorsvr!gc_heap::gc_thread_stub
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:03:48.906
> Time spent in kernel mode 0 Days 00:00:03.109
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!gc_heap::gc_thread_function+2f
> mscorsvr!gc_heap::gc_thread_stub+1e
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 22 - System ID 3108
> Entry point mscorsvr!gc_heap::gc_thread_stub
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:04:00.312
> Time spent in kernel mode 0 Days 00:00:01.609
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!gc_heap::gc_thread_function+2f
> mscorsvr!gc_heap::gc_thread_stub+1e
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 23 - System ID 3204
> Entry point mscorsvr!gc_heap::gc_thread_stub
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:03:23.046
> Time spent in kernel mode 0 Days 00:00:02.171
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!gc_heap::gc_thread_function+2f
> mscorsvr!gc_heap::gc_thread_stub+1e
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 24 - System ID 3336
> Entry point mscorsvr!gc_heap::gc_thread_stub
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:03:55.062
> Time spent in kernel mode 0 Days 00:00:01.531
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!gc_heap::gc_thread_function+2f
> mscorsvr!gc_heap::gc_thread_stub+1e
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 25 - System ID 2592
> Entry point mscorsvr!Thread::intermediateThreadProc
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:00:01.562
> Time spent in kernel mode 0 Days 00:00:00.062
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> mscorsvr!WaitForFinalizerEvent+5a
> mscorsvr!GCHeap::FinalizerThreadStart+96
> mscorsvr!Thread::intermediateThreadProc+44
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 26 - System ID 2812
> Entry point mscorsvr!ThreadpoolMgr::TimerThreadStart
> Create time 10/26/2007 1:05:18 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.015
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> kernel32!SleepEx+68
> mscorsvr!ThreadpoolMgr::TimerThreadStart+30
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 27 - System ID 976
> Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
> Create time 10/26/2007 1:05:19 PM
> Time spent in user mode 0 Days 00:04:16.078
> Time spent in kernel mode 0 Days 00:00:15.796
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
> mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 28 - System ID 3132
> Create time 12:00:00 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 29 - System ID 3616
> Entry point mscorsvr!ThreadpoolMgr::WaitThreadStart
> Create time 10/26/2007 1:05:35 PM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.046
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> kernel32!SleepEx+68
> mscorsvr!ThreadpoolMgr::WaitThreadStart+45
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 30 - System ID 3428
> Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
> Create time 10/26/2007 1:32:00 PM
> Time spent in user mode 0 Days 00:03:26.968
> Time spent in kernel mode 0 Days 00:00:12.156
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
> mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 31 - System ID 144
> Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
> Create time 10/26/2007 2:06:29 PM
> Time spent in user mode 0 Days 00:02:46.859
> Time spent in kernel mode 0 Days 00:00:11.156
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> mscorsvr!ThreadpoolMgr::WorkerThreadStart+3a
> mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 32 - System ID 3080
> Entry point userenv!NotificationThread
> Create time 10/26/2007 2:23:52 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> userenv!NotificationThread+5f
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 33 - System ID 3480
> Create time 12:00:00 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 34 - System ID 3340
> Create time 12:00:00 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 35 - System ID 4012
> Entry point ntdll!RtlpWorkerThread
> Create time 10/26/2007 4:45:42 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.031
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 36 - System ID 320
> Entry point mscorsvr!ThreadpoolMgr::intermediateThreadProc
> Create time 10/26/2007 4:50:00 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+49
> mscorsvr!ThreadpoolMgr::intermediateThreadProc+44
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 37 - System ID 2392
> Entry point ntdll!RtlpWorkerThread
> Create time 10/26/2007 4:50:42 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
> HTTP report
> IIS ATQ worker thread count 4 Thread(s)
> Available ATQ worker thread count 4 Thread(s)
> Active client connections 31 client connection(s)
>
>
>
> Client Connections
> Client connection from 75.20.255.174:61901 to 172.16.12.71:80
> Host Header network.construction.com:80
> GET request for /CNSearchPage.aspx
> HTTP Version HTTP/1.1
> SSL Request False
> Time alive 00:00:09
> QueryString
> Request mapped to
> HTTP Request State HTR_READING_CLIENT_REQUEST
> Native Request State NREQ_STATE_PROCESS
>
>
>
>
> 30 connection(s) waiting for the next request.
> Report for
> IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
> Application__PID__364__55__Manual Dump.dmp
>
>
>
>
> Report for
> IIS_COM+__Date__10_26_2007__Time_04_51_40PM__dllhost.exe__Sy stem
> Application__PID__364__55__Manual Dump.dmp
> Type of Analysis Performed Hang Analysis
> Machine Name
> Operating System Windows Server 2003 Service Pack 1
> Number Of Processors 4
> Process ID 364
> Process Image C:\WINDOWS\system32\dllhost.exe
> System Up-Time 36 day(s) 07:39:31
> Process Up-Time 36 day(s) 07:39:13
>
>
>
> Top 5 Threads by CPU time
> Note - Times include both user mode and kernel mode for each thread Thread
> ID:
> 7 Total CPU Time: 00:00:00.656 Entry Point for Thread: comsvcs!
> CEventServer::DispatchEvents
> Thread ID: 4 Total CPU Time: 00:00:00.031 Entry Point for Thread:
> ntdll!RtlpWorkerThread
> Thread ID: 6 Total CPU Time: 00:00:00.031 Entry Point for Thread:
> msvcrt!_endthreadex+2f
> Thread ID: 14 Total CPU Time: 00:00:00.030 Entry Point for Thread:
> rpcrt4!ThreadStartRoutine
> Thread ID: 5 Total CPU Time: 00:00:00.015 Entry Point for Thread:
> msvcrt!_endthread+3b
>
>
>
>
>
> Thread report
>
> Thread 0 - System ID 368
> Entry point dllhost!WinMainCRTStartup
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+51
> ole32!CoRegisterSurrogateEx+1a6
> dllhost!WinMain+da
> dllhost!WinMainCRTStartup+182
> kernel32!BaseProcessStart+23
>
>
>
>
> Back to Top
>
>
> Thread 1 - System ID 412
> Entry point ole32!CSurrogateProcessActivator::StartNTService
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtReadFile+c
> kernel32!ReadFile+16c
> advapi32!ScGetPipeInput+2a
> advapi32!ScDispatcherLoop+51
> advapi32!StartServiceCtrlDispatcherW+e3
> ole32!CSurrogateProcessActivator::StartNTService+2d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 2 - System ID 572
> Entry point ole32!CRpcThreadCache::RpcWorkerThreadEntry
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> user32!NtUserGetMessage+c
> ole32!CDllHost::STAWorkerLoop+72
> ole32!CDllHost::WorkerThread+c8
> ole32!DLLHostThreadEntry+d
> ole32!CRpcThread::WorkerLoop+1e
> ole32!CRpcThreadCache::RpcWorkerThreadEntry+20
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 3 - System ID 648
> Entry point ntdll!RtlpTimerThread
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> ntdll!RtlpTimerThread+47
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 4 - System ID 696
> Entry point ntdll!RtlpWorkerThread
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.031
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 5 - System ID 876
> Entry point msvcrt!_endthread+3b
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.015
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> comsvcs!CRMRecoveryClerk::RecoveryThread+277
> comsvcs!RecoveryThreadFunction+ec
> msvcrt!_endthread+ab
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 6 - System ID 908
> Entry point msvcrt!_endthreadex+2f
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.031
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> comsvcs!WORK_QUEUE::WorkerLoop+66
> comsvcs!WORK_QUEUE::ThreadLoop+19
> msvcrt!_endthreadex+a3
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 7 - System ID 1976
> Entry point comsvcs!CEventServer::DispatchEvents
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.375
> Time spent in kernel mode 0 Days 00:00:00.281
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> comsvcs!CLceDisp::DoWork+a5
> comsvcs!CEventServer::DispatchEvents+7c
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 8 - System ID 2116
> Entry point msvcrt!_endthread+3b
> Create time 9/20/2007 9:12:27 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> comsvcs!CRecoveryClerk2::RecoveryThread+57d
> comsvcs!RecoveryThreadFunction+ec
> msvcrt!_endthread+ab
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 9 - System ID 2396
> Entry point ntdll!RtlpWaitThread
> Create time 9/20/2007 9:12:28 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> ntdll!RtlpWaitThread+161
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 10 - System ID 2400
> Entry point comsvcs!PostData
> Create time 9/20/2007 9:12:28 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> comsvcs!PostData+176
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 11 - System ID 3240
> Entry point msdtcprx!CConnectionManager::TimerProc
> Create time 9/20/2007 9:13:22 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> msdtcprx!CConnectionManager::TimerProcForNonGuardedUser+b3
> msdtcprx!CConnectionManager::TimerProc+1e
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 12 - System ID 1892
> Entry point msvcrt!_endthreadex+2f
> Create time 9/20/2007 9:13:24 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> catsrv!RegSrvrPump+4d
> catsrv!RunService+4f
> msvcrt!_endthreadex+a3
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 13 - System ID 3792
> Entry point rpcrt4!ThreadStartRoutine
> Create time 9/20/2007 9:27:40 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 14 - System ID 3612
> Entry point rpcrt4!ThreadStartRoutine
> Create time 10/17/2007 3:26:25 PM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.015
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 15 - System ID 312
> Entry point rpcrt4!ThreadStartRoutine
> Create time 10/26/2007 4:44:17 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.015
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
> COM+ Component Statistics Report
> Component Instances 1
> Components InCall 0
>
>
>
>
>
> Well-Known COM STA Threads Report
> STA Name Thread ID Thread Status Call Status
>
> Main STA 2 Idle (N/A)
> Apartment-threaded host for MTA clients 2 Idle (N/A)
>
>
>
> Report for IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
> exe__PID__3652__540__Manual Dump.dmp
>
>
>
>
> Report for IIS_COM+__Date__10_26_2007__Time_04_51_45PM__inetinfo.
> exe__PID__3652__540__Manual Dump.dmp
> Type of Analysis Performed Hang Analysis
> Machine Name
> Operating System Windows Server 2003 Service Pack 1
> Number Of Processors 4
> Process ID 3652
> Process Image C:\WINDOWS\system32\inetsrv\inetinfo.exe
> System Up-Time 36 day(s) 07:39:37
> Process Up-Time 29 day(s) 02:52:53
>
>
>
> Top 5 Threads by CPU time
> Note - Times include both user mode and kernel mode for each thread Thread
> ID:
> 4 Total CPU Time: 00:00:22.999 Entry Point for Thread: coadmin!
> NOTIFY_CONTEXT::NotifyThreadProc
> Thread ID: 9 Total CPU Time: 00:00:06.827 Entry Point for Thread:
> ntdll!RtlpWaitThread
> Thread ID: 7 Total CPU Time: 00:00:03.656 Entry Point for Thread:
> isatq!AtqPoolThread
> Thread ID: 8 Total CPU Time: 00:00:03.187 Entry Point for Thread:
> isatq!AtqPoolThread
> Thread ID: 13 Total CPU Time: 00:00:01.249 Entry Point for Thread:
> fcachdll!CScheduleThread::ScheduleThread
>
>
>
>
>
> Thread report
>
> Thread 0 - System ID 4020
> Entry point inetinfo!mainCRTStartup
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtReadFile+c
> kernel32!ReadFile+16c
> advapi32!ScGetPipeInput+2a
> advapi32!ScDispatcherLoop+51
> advapi32!StartServiceCtrlDispatcherA+93
> inetinfo!StartDispatchTable+277
> inetinfo!main+117
> inetinfo!mainCRTStartup+12f
> kernel32!BaseProcessStart+23
>
>
>
>
> Back to Top
>
>
> Thread 1 - System ID 2196
> Entry point inetinfo!W3SVCThreadEntry
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> inetinfo!W3SVCThreadEntry+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 2 - System ID 3036
> Entry point advapi32!ScSvcctrlThreadW
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.171
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> iisadmin!ServiceEntry+28a
> inetinfo!InetinfoStartService+2cc
> advapi32!ScSvcctrlThreadA+21
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 3 - System ID 2120
> Entry point ntdll!RtlpTimerThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.046
> Time spent in kernel mode 0 Days 00:00:00.187
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> ntdll!RtlpTimerThread+47
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 4 - System ID 2040
> Entry point coadmin!NOTIFY_CONTEXT::NotifyThreadProc
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:19.578
> Time spent in kernel mode 0 Days 00:00:03.421
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> coadmin!NOTIFY_CONTEXT::GetNextContext+67
> coadmin!NOTIFY_CONTEXT::NotifyThreadProc+5f
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 5 - System ID 1768
> Entry point advapi32!ScSvcctrlThreadW
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.187
> Time spent in kernel mode 0 Days 00:00:00.062
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> user32!RealMsgWaitForMultipleObjectsEx+141
> user32!MsgWaitForMultipleObjects+1f
> infocomm!IIS_SERVICE::StartServiceOperation+231
> smtpsvc!ServiceEntry+12b
> inetinfo!InetinfoStartService+2cc
> advapi32!ScSvcctrlThreadA+21
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 6 - System ID 2376
> Entry point advapi32!ScSvcctrlThreadW
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is not fully resolved and may or may not be a problem. Further
> analysis of these threads may be required.
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> user32!RealMsgWaitForMultipleObjectsEx+141
> user32!MsgWaitForMultipleObjects+1f
> infocomm!IIS_SERVICE::StartServiceOperation+231
> ftpsvc2!ServiceEntry+ae
> inetinfo!InetinfoStartService+2cc
> advapi32!ScSvcctrlThreadA+21
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 7 - System ID 804
> Entry point isatq!AtqPoolThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.578
> Time spent in kernel mode 0 Days 00:00:03.078
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> isatq!AtqPoolThread+40
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 8 - System ID 3920
> Entry point isatq!AtqPoolThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.375
> Time spent in kernel mode 0 Days 00:00:02.812
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> isatq!AtqPoolThread+40
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 9 - System ID 1252
> Entry point ntdll!RtlpWaitThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:01.031
> Time spent in kernel mode 0 Days 00:00:05.796
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> ntdll!RtlpWaitThread+161
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 10 - System ID 1792
> Create time 12:00:00 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 11 - System ID 1808
> Entry point exstrace!RegNotifyThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> exstrace!RegNotifyThread+6a
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 12 - System ID 2224
> Entry point exstrace!WriteTraceThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> exstrace!WriteTraceThread+31
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 13 - System ID 564
> Entry point fcachdll!CScheduleThread::ScheduleThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:01.078
> Time spent in kernel mode 0 Days 00:00:00.171
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> fcachdll!CScheduleThread::ScheduleThread+61
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 14 - System ID 280
> Entry point ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.046
> Time spent in kernel mode 0 Days 00:00:00.031
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+33
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 15 - System ID 1956
> Entry point smtpsvc!TcpRegNotifyThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.046
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> smtpsvc!TcpRegNotifyThread+de
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 16 - System ID 3976
> Entry point smtpsvc!FreeLibThread
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> smtpsvc!FreeLibThread+2e
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 17 - System ID 1788
> Entry point isatq!BmonThreadFunc
> Create time 9/27/2007 1:58:53 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> This thread is waiting on data to be returned from another server via
> WinSock.
>
>
>
>
> The call to WinSock originated from isatq!ATQ_BMON_SET::BmonThreadFunc+22
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> mswsock!SockWaitForSingleObject+19d
> mswsock!WSPSelect+380
> ws2_32!select+b9
> isatq!ATQ_BMON_SET::BmonThreadFunc+22
> isatq!BmonThreadFunc+9
> kernel32!BaseThreadStart+34
> 0x80000000`00000000
>
>
>
>
>
>
> Back to Top
>
>
> Thread 18 - System ID 2156
> Entry point aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine
> Create time 9/27/2007 1:58:54 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+bd
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 19 - System ID 1828
> Entry point smtpsvc!PERSIST_QUEUE::QueueThreadRoutine
> Create time 9/27/2007 1:58:54 PM
> Time spent in user mode 0 Days 00:00:00.281
> Time spent in kernel mode 0 Days 00:00:00.359
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> aqueue!CConnMgr::GetNextConnection+1c4
> smtpsvc!PERSIST_QUEUE::QueueThreadRoutine+23
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 20 - System ID 2264
> Entry point rpcrt4!ThreadStartRoutine
> Create time 10/25/2007 2:41:23 PM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 21 - System ID 2080
> Entry point rpcrt4!ThreadStartRoutine
> Create time 10/25/2007 2:41:23 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 22 - System ID 3728
> Create time 12:00:00 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 23 - System ID 2956
> Create time 12:00:00 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 24 - System ID 3136
> Entry point rpcrt4!ThreadStartRoutine
> Create time 10/26/2007 1:56:02 PM
> Time spent in user mode 0 Days 00:00:00.046
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> rpcrt4!COMMON_ProcessCalls+a1
> rpcrt4!LOADABLE_TRANSPORT::ProcessIOEvents+117
> rpcrt4!ProcessIOEventsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 25 - System ID 2848
> Entry point ntdll!RtlpWorkerThread
> Create time 10/26/2007 4:49:23 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 26 - System ID 1160
> Entry point ntdll!RtlpWorkerThread
> Create time 10/26/2007 4:50:23 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 27 - System ID 2652
> Entry point ntdll!RtlpWorkerThread
> Create time 10/26/2007 4:51:23 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 28 - System ID 3044
> Entry point ntdll!RtlpWorkerThread
> Create time 10/26/2007 4:51:23 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 29 - System ID 2216
> Entry point ntdll!RtlpWorkerThread
> Create time 10/26/2007 4:51:23 PM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
> COM+ Component Statistics Report
> Component Instances 1
> Components InCall 0
>
>
>
>
>
> Report for IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC
> Event Provider__PID__3692__243__Manual Dump.dmp
>
>
>
>
> Report for IIS_COM+__Date__10_26_2007__Time_04_51_47PM__dllhost.exe__AC
> Event
> Provider__PID__3692__243__Manual Dump.dmp
> Type of Analysis Performed Hang Analysis
> Machine Name
> Operating System Windows Server 2003 Service Pack 1
> Number Of Processors 4
> Process ID 3692
> Process Image C:\WINDOWS\system32\dllhost.exe
> System Up-Time 36 day(s) 07:39:37
> Process Up-Time 36 day(s) 07:38:15
>
>
>
> Top 5 Threads by CPU time
> Note - Times include both user mode and kernel mode for each thread Thread
> ID:
> 6 Total CPU Time: 00:00:35.843 Entry Point for Thread: rpcrt4!
> ThreadStartRoutine
> Thread ID: 7 Total CPU Time: 00:00:26.936 Entry Point for Thread:
> rpcrt4!ThreadStartRoutine
> Thread ID: 1 Total CPU Time: 00:00:00.030 Entry Point for Thread:
> ole32!CRpcThreadCache::RpcWorkerThreadEntry
> Thread ID: 3 Total CPU Time: 00:00:00.015 Entry Point for Thread:
> ntdll!RtlpWorkerThread
> Thread ID: 9 Total CPU Time: 00:00:00.015 Entry Point for Thread:
> rpcrt4!ThreadStartRoutine
>
>
>
>
>
> Thread report
>
> Thread 0 - System ID 3696
> Entry point dllhost!WinMainCRTStartup
> Create time 9/20/2007 9:13:32 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForSingleObject+c
> kernel32!WaitForSingleObjectEx+ac
> kernel32!WaitForSingleObject+12
> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+51
> ole32!CoRegisterSurrogateEx+1a6
> dllhost!WinMain+da
> dllhost!WinMainCRTStartup+182
> kernel32!BaseProcessStart+23
>
>
>
>
> Back to Top
>
>
> Thread 1 - System ID 3708
> Entry point ole32!CRpcThreadCache::RpcWorkerThreadEntry
> Create time 9/20/2007 9:13:32 AM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.015
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> user32!NtUserGetMessage+c
> ole32!CDllHost::STAWorkerLoop+72
> ole32!CDllHost::WorkerThread+c8
> ole32!DLLHostThreadEntry+d
> ole32!CRpcThread::WorkerLoop+1e
> ole32!CRpcThreadCache::RpcWorkerThreadEntry+20
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 2 - System ID 2204
> Entry point ntdll!RtlpTimerThread
> Create time 9/20/2007 9:13:32 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtDelayExecution+c
> ntdll!RtlpTimerThread+47
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 3 - System ID 2200
> Entry point ntdll!RtlpWorkerThread
> Create time 9/20/2007 9:13:32 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.015
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> ntdll!RtlpWorkerThread+3d
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 4 - System ID 2160
> Entry point msvcrt!_endthreadex+2f
> Create time 9/20/2007 9:13:32 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> comsvcs!WORK_QUEUE::WorkerLoop+66
> comsvcs!WORK_QUEUE::ThreadLoop+19
> msvcrt!_endthreadex+a3
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 5 - System ID 2240
> Entry point comsvcs!PostData
> Create time 9/20/2007 9:13:32 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtWaitForMultipleObjects+c
> kernel32!WaitForMultipleObjectsEx+11a
> kernel32!WaitForMultipleObjects+18
> comsvcs!PostData+176
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 6 - System ID 2336
> Entry point rpcrt4!ThreadStartRoutine
> Create time 9/20/2007 9:13:32 AM
> Time spent in user mode 0 Days 00:00:26.781
> Time spent in kernel mode 0 Days 00:00:09.062
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 7 - System ID 3788
> Entry point rpcrt4!ThreadStartRoutine
> Create time 9/27/2007 9:28:55 AM
> Time spent in user mode 0 Days 00:00:21.296
> Time spent in kernel mode 0 Days 00:00:05.640
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 8 - System ID 616
> Create time 12:00:00 AM
> Time spent in user mode 0 Days 00:00:00.00
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!ZwReplyWaitReceivePortEx+c
> rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198
> rpcrt4!RecvLotsaCallsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
>
> Thread 9 - System ID 660
> Entry point rpcrt4!ThreadStartRoutine
> Create time 10/26/2007 4:48:31 PM
> Time spent in user mode 0 Days 00:00:00.015
> Time spent in kernel mode 0 Days 00:00:00.00
>
>
>
>
> Function Source
> ntdll!KiFastSystemCallRet
> ntdll!NtRemoveIoCompletion+c
> kernel32!GetQueuedCompletionStatus+29
> rpcrt4!COMMON_ProcessCalls+a1
> rpcrt4!LOADABLE_TRANSPORT::ProcessIOEvents+117
> rpcrt4!ProcessIOEventsWrapper+d
> rpcrt4!BaseCachedThreadRoutine+9d
> rpcrt4!ThreadStartRoutine+1b
> kernel32!BaseThreadStart+34
>
>
>
>
> Back to Top
>
> COM+ Component Statistics Report
> Component Instances 14
> Components InCall 0
>
>
>
>
>
> Well-Known COM STA Threads Report
> STA Name Thread ID Thread Status Call Status
>
> Main STA 1 Idle (N/A)
> Apartment-threaded host for MTA clients 1 Idle (N/A)
>
>
>
>
>
>
>
> Script Summary
> Script Name Status Error Code Error Source Error Description Source Line
> CrashHangAnalysis.asp Completed
>
> --
> Message posted via WinServerKB.com
> http://www.winserverkb.com/Uwe/Forums.aspx/iis-general/20071 0/1
>