IISState Log

Hi,

Our web app reaching 100% CPUin every 3 to 4 hrs after recycling w3wp.exe, I
ran IISState, Can anyone please help me to read this logifile and determine
the problem?

Thanks,
Sudheer

Opened log file 'C:\iisstate\output\IISState-5164.log'

***********************
Starting new log output
IISState version 3.3.1

Wed Nov 14 16:36:12 2007

OS = Windows 2003 Server
Executable: w3wp.exe
PID = 5164

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 12d0
Kernel Time: 0:0:0.31
User Time: 0:0:0.125
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c827d0b ntdll!KiFastSystemCallRet
01 0006fc0c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a364662 kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e3f w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af42d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc335 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a27 w3wp!wmain+0x22a
09 0006ffc0 77e6f23b w3wp!wmainCRTStartup+0x12f
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 944
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00ccff9c 7c826f4b ntdll!KiFastSystemCallRet
01 00ccffa0 7c83d424 ntdll!NtDelayExecution+0xc
02 00ccffb8 77e64829 ntdll!RtlpTimerThread+0x47
03 00ccffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: 654
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00d0ff70 7c8277db ntdll!KiFastSystemCallRet
01 00d0ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 00d0ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 00d0ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: 160
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00dbff08 7c826f4b ntdll!KiFastSystemCallRet
01 00dbff0c 77e41ed1 ntdll!NtDelayExecution+0xc
02 00dbff74 77e424ed kernel32!SleepEx+0x68
03 00dbff84 776bbb0f kernel32!Sleep+0xf
04 00dbff90 776bbab4 ole32!CROIDTable::WorkerThreadLoop+0x14
05 00dbffac 776b1704 ole32!CRpcThread::WorkerLoop+0x26
06 00dbffb8 77e64829 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x20
07 00dbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: 3ec
Kernel Time: 0:0:0.500
User Time: 0:0:0.593
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f7ff24 7c8277db ntdll!KiFastSystemCallRet
01 00f7ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00f7ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00f7ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00f7ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00f7ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00f7ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: a44
Kernel Time: 0:0:0.453
User Time: 0:0:0.375
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fbff24 7c8277db ntdll!KiFastSystemCallRet
01 00fbff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00fbff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00fbff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00fbffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00fbffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00fbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 2ec
Kernel Time: 0:0:0.515
User Time: 0:0:0.312
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ffff24 7c8277db ntdll!KiFastSystemCallRet
01 00ffff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00ffff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00ffff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00ffffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00ffffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00ffffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: 17bc
Kernel Time: 0:0:1.171
User Time: 0:0:0.843
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0104ff24 7c8277db ntdll!KiFastSystemCallRet
01 0104ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0104ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 0104ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 0104ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 0104ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 0104ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: 14c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0110fcec 7c827cfb ntdll!KiFastSystemCallRet
01 0110fcf0 7c83c78e ntdll!NtWaitForMultipleObjects+0xc
02 0110ffb8 77e64829 ntdll!RtlpWaitThread+0x161
03 0110ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: d84
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 01adfa84 7c827d0b ntdll!KiFastSystemCallRet
01 01adfa88 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 01adfaf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 01adfb0c 5a3b820f kernel32!WaitForSingleObject+0x12
04 01adffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 01adffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 10
System Thread ID: 1334
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b5ff8c 7c826f4b ntdll!KiFastSystemCallRet
01 01b5ff90 7c81943a ntdll!NtDelayExecution+0xc
02 01b5ffb8 77e64829 ntdll!RtlpIOWorkerThread+0x3f
03 01b5ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 11
System Thread ID: 1274
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01cffe50 7c826f4b ntdll!KiFastSystemCallRet
01 01cffe54 77e41ed1 ntdll!NtDelayExecution+0xc
02 01cffebc 77e424ed kernel32!SleepEx+0x68
03 01cffecc 791bc166 kernel32!Sleep+0xf
04 01cfffb8 77e64829 mscorsvr!ThreadpoolMgr::GateThreadStart+0x54
05 01cfffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 11b4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01e8fe70 7c827cfb ntdll!KiFastSystemCallRet
01 01e8fe74 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 01e8ff1c 77e62fbe kernel32!WaitForMultipleObjectsEx+0x11a
03 01e8ff38 7922fce6 kernel32!WaitForMultipleObjects+0x18
04 01e8ffa0 7922fc5d mscorsvr!DebuggerRCThread::MainLoop+0x90
05 01e8ffb0 79232154 mscorsvr!DebuggerRCThread::ThreadProc+0x68
06 01e8ffb8 77e64829 mscorsvr!DebuggerRCThread::ThreadProcStatic+0xb
07 01e8ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: 1624
Kernel Time: 0:0:0.218
User Time: 0:0:8.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0211fefc 7c827d0b ntdll!KiFastSystemCallRet
01 0211ff00 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0211ff70 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0211ff84 7920369d kernel32!WaitForSingleObject+0x12
04 0211ffac 79227e07 mscorsvr!gc_heap::gc_thread_function+0x2f
05 0211ffb0 00000000 mscorsvr!SetupUnstartedThread




Thread ID: 14
System Thread ID: 1290
Kernel Time: 0:0:0.125
User Time: 0:0:8.703
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0215fdfc 7c827d0b ntdll!KiFastSystemCallRet
01 0215fe00 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0215fe70 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0215fe84 7920369d kernel32!WaitForSingleObject+0x12
04 0215feac 79227e07 mscorsvr!gc_heap::gc_thread_function+0x2f
05 0215feb0 ffffffff mscorsvr!SetupUnstartedThread
06 0215ffb8 77e64829 0xffffffff
07 0215ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 16cc
Kernel Time: 0:0:0.140
User Time: 0:0:8.546
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0219fcfc 7c827d0b ntdll!KiFastSystemCallRet
01 0219fd00 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0219fd70 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0219fd84 7920369d kernel32!WaitForSingleObject+0x12
04 0219fdac 79227e07 mscorsvr!gc_heap::gc_thread_function+0x2f
05 0219fdb0 00000000 mscorsvr!SetupUnstartedThread




Thread ID: 16
System Thread ID: 15d0
Kernel Time: 0:0:0.156
User Time: 0:0:8.281
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 021dfbfc 7c827d0b ntdll!KiFastSystemCallRet
01 021dfc00 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 021dfc70 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 021dfc84 7920369d kernel32!WaitForSingleObject+0x12
04 021dfcac 79227e07 mscorsvr!gc_heap::gc_thread_function+0x2f
05 021dfcb0 ffffffff mscorsvr!SetupUnstartedThread
06 021dffb8 77e64829 0xffffffff
07 021dffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 17ec
Kernel Time: 0:0:0.187
User Time: 0:0:0.906
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0221fe44 7c827d0b ntdll!KiFastSystemCallRet
01 0221fe48 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0221feb8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0221fecc 7926ed5a kernel32!WaitForSingleObject+0x12
04 0221fee0 792034b2 mscorsvr!WaitForFinalizerEvent+0x2d
05 0221ff24 7922ec3f mscorsvr!GCHeap::FinalizerThreadStart+0x96
06 0221ffb8 77e64829 mscorsvr!Thread::intermediateThreadProc+0x44
07 0221ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: 1144
Kernel Time: 0:0:1.531
User Time: 0:0:8.78
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 164afc78 7c827d0b ntdll!KiFastSystemCallRet
01 164afc7c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 164afcec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 164afd00 791d6134 kernel32!WaitForSingleObject+0x12
04 164afd24 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 164affb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 164affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: 139c
Kernel Time: 0:0:1.93
User Time: 0:0:22.437
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1652fb78 7c827d0b ntdll!KiFastSystemCallRet
01 1652fb7c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 1652fbec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 1652fc00 791d6134 kernel32!WaitForSingleObject+0x12
04 1652fc24 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 1652ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 1652ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 20
System Thread ID: 170c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 1679ff40 7c826f4b ntdll!KiFastSystemCallRet
01 1679ff44 77e41ed1 ntdll!NtDelayExecution+0xc
02 1679ffac 791cfb1a kernel32!SleepEx+0x68
03 1679ffb8 77e64829 mscorsvr!ThreadpoolMgr::TimerThreadStart+0x23
04 1679ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 21
System Thread ID: 15b0
Kernel Time: 0:0:0.968
User Time: 0:0:8.62
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 168efaf8 7c827d0b ntdll!KiFastSystemCallRet
01 168efafc 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 168efb6c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 168efb80 791d6134 kernel32!WaitForSingleObject+0x12
04 168efba4 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 168effb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 168effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 22
System Thread ID: 21c
Kernel Time: 0:0:0.734
User Time: 0:50:40.796
Thread Type: Other
# ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be wrong.
00 16ecf268 17e088fb 0x16854622
01 06606534 065a5778 0x17e088fb
02 06606534 065a5778 0x65a5778
03 1680accc 0000001c 0x65a5778




Thread ID: 23
System Thread ID: 1400
Kernel Time: 0:0:0.421
User Time: 0:0:0.484
Thread Type: Other
# ChildEBP RetAddr
00 16fbff24 7c826f4b ntdll!KiFastSystemCallRet
01 16fbff28 77e41ed1 ntdll!NtDelayExecution+0xc
02 16fbff90 79248c93 kernel32!SleepEx+0x68
03 16fbffb8 77e64829 mscorsvr!ThreadpoolMgr::WaitThreadStart+0x45
04 16fbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 24
System Thread ID: 9d0
Kernel Time: 0:0:1.640
User Time: 0:0:41.906
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1707f6f8 7c827d0b ntdll!KiFastSystemCallRet
01 1707f6fc 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 1707f76c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 1707f780 791d6134 kernel32!WaitForSingleObject+0x12
04 1707f7a4 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 1707ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 1707ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 25
System Thread ID: 17ac
Kernel Time: 0:0:1.140
User Time: 0:0:7.296
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 170bf678 7c827d0b ntdll!KiFastSystemCallRet
01 170bf67c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 170bf6ec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 170bf700 791d6134 kernel32!WaitForSingleObject+0x12
04 170bf724 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 170bffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 170bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 26
System Thread ID: 11c
Kernel Time: 0:0:1.125
User Time: 0:0:9.531
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1723f378 7c827d0b ntdll!KiFastSystemCallRet
01 1723f37c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 1723f3ec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 1723f400 791d6134 kernel32!WaitForSingleObject+0x12
04 1723f424 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 1723ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 1723ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 27
System Thread ID: 1770
Kernel Time: 0:0:22.46
User Time: 0:0:12.468
Thread Type: Other
# ChildEBP RetAddr
00 17b3ff0c 7739c811 ntdll!KiFastSystemCallRet
01 17b3ff2c 7768ffb3 USER32!NtUserGetMessage+0xc
02 17b3ff6c 7768f366 ole32!CDllHost::STAWorkerLoop+0x72
03 17b3ff88 7768f2a2 ole32!CDllHost::WorkerThread+0xc8
04 17b3ff90 776bbab4 ole32!DLLHostThreadEntry+0xd
05 17b3ffac 776b1704 ole32!CRpcThread::WorkerLoop+0x26
06 17b3ffb8 77e64829 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x20
07 17b3ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 28
System Thread ID: 17d8
Kernel Time: 0:0:0.515
User Time: 0:0:0.453
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 1803ff24 7c8277db ntdll!KiFastSystemCallRet
01 1803ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 1803ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 1803ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 1803ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 1803ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 1803ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 29
System Thread ID: 9f0
Kernel Time: 0:0:0.515
User Time: 0:0:2.859
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 16dffa78 7c827d0b ntdll!KiFastSystemCallRet
01 16dffa7c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 16dffaec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 16dffb00 791d6134 kernel32!WaitForSingleObject+0x12
04 16dffb24 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 16dfffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 16dfffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 30
System Thread ID: 17b4
Kernel Time: 0:0:0.593
User Time: 0:0:36.640
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 16fff978 7c827d0b ntdll!KiFastSystemCallRet
01 16fff97c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 16fff9ec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 16fffa00 791d6134 kernel32!WaitForSingleObject+0x12
04 16fffa24 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 16ffffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 16ffffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 31
System Thread ID: 1738
Kernel Time: 0:0:0.390
User Time: 0:0:19.187
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1716f8f8 7c827d0b ntdll!KiFastSystemCallRet
01 1716f8fc 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 1716f96c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 1716f980 791d6134 kernel32!WaitForSingleObject+0x12
04 1716f9a4 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 1716ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 1716ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 32
System Thread ID: 1278
Kernel Time: 0:0:0.640
User Time: 0:0:9.734
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
succeeded
Loaded Son of Strike data table version 5 from
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll"
Thread 32
ESP EIP
171eef70 7c8285ec [FRAME: ECallMethodFrame] [DEFAULT] Boolean
System.Threading.WaitHandle.WaitOneNative(I,UI4,Boolean)
171eef84 16f72d5f [DEFAULT] [hasThis] Boolean
System.Threading.WaitHandle.WaitOne(I4,Boolean)
171eefb8 16f7f5b3 [DEFAULT] [hasThis] Class System.Net.WebResponse
System.Net.HttpWebRequest.GetResponse()
171eefe0 16f7f4b9 [DEFAULT] [hasThis] Class System.Net.WebResponse
System.Web.Services.Protocols.WebClientProtocol.GetWebRespon se(Class
System.Net.WebRequest)
171ef010 16f7f476 [DEFAULT] [hasThis] Class System.Net.WebResponse
System.Web.Services.Protocols.HttpWebClientProtocol.GetWebRe sponse(Class
System.Net.WebRequest)
171ef014 16e4b1c0 [DEFAULT] [hasThis] SZArray Object
System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke( String,SZArray
Object)
171ef05c 16b461b1 [DEFAULT] [hasThis] String
MegabyteSystems.Web.County.IMBSWebServiceservice.Execute(Str ing)
171ef06c 16b4153c [DEFAULT] [hasThis] String
MegabyteSystems.Web.County.Soap.MegabyteSoap.Execute(String, String)
171ef084 16b42195 [DEFAULT] [hasThis] Void
Megabyte.Web.MegabyteCommonSite.County.InquiryCommonControl. LoadHtml()
171ef218 16b4540c [DEFAULT] [hasThis] Void
MegabyteCommonSite.AgencyInquiry.AgencyInquiry.Page_Load(Obj ect,Class
System.EventArgs)
171ef2a8 16e05bbc [DEFAULT] [hasThis] Void
System.Web.UI.Control.OnLoad(Class System.EventArgs)
171ef2b8 16e05b04 [DEFAULT] [hasThis] Void
System.Web.UI.Control.LoadRecursive()
c0000005 Exception in
C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\sos.dll.ClrStac k debugger
extension.
PC: 6028d1b4 VA: 00135000 R/W: 0 Parameter: 0001003f


Begin System Thread Information

# ChildEBP RetAddr
00 171eedc8 7c827cfb ntdll!KiFastSystemCallRet
01 171eedcc 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 171eee74 791e0fa2 kernel32!WaitForMultipleObjectsEx+0x11a
03 171eeea4 791e1044 mscorsvr!Thread::DoAppropriateWaitWorker+0xc1
04 171eeef8 791d72c7 mscorsvr!Thread::DoAppropriateWait+0x46
05 171eef40 165688c0 mscorsvr!WaitHandleNative::CorWaitOneNative+0x6f
WARNING: Frame IP not in any known module. Following frames may be wrong.
06 171eefac 16f7f5b3 0x165688c0
07 171eefd8 16f7f4b9 0x16f7f5b3
08 171ef008 16f7f476 0x16f7f4b9
09 171ef050 16b461b1 0x16f7f476
0a 0a6edbcc 000001c2 0x16b461b1




Thread ID: 33
System Thread ID: 9ac
Kernel Time: 0:0:0.734
User Time: 0:0:40.296
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1727f778 7c827d0b ntdll!KiFastSystemCallRet
01 1727f77c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 1727f7ec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 1727f800 791d6134 kernel32!WaitForSingleObject+0x12
04 1727f824 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 1727ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 1727ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 34
System Thread ID: 1634
Kernel Time: 0:0:0.328
User Time: 0:0:2.125
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1756f578 7c827d0b ntdll!KiFastSystemCallRet
01 1756f57c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 1756f5ec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 1756f600 791d6134 kernel32!WaitForSingleObject+0x12
04 1756f624 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 1756ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 1756ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 35
System Thread ID: 88c
Kernel Time: 0:0:0.546
User Time: 0:0:21.531
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1766f378 7c827d0b ntdll!KiFastSystemCallRet
01 1766f37c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 1766f3ec 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 1766f400 791d6134 kernel32!WaitForSingleObject+0x12
04 1766f424 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 1766ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 1766ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 36
System Thread ID: f0c
Kernel Time: 0:0:0.531
User Time: 0:0:2.515
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 176af2f8 7c827d0b ntdll!KiFastSystemCallRet
01 176af2fc 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 176af36c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 176af380 791d6134 kernel32!WaitForSingleObject+0x12
04 176af3a4 791fe95c mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x3a
05 176affb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
06 176affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 37
System Thread ID: b38
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0240ff24 7c8277db ntdll!KiFastSystemCallRet
01 0240ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0240ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 0240ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 0240ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 0240ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 0240ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 38
System Thread ID: 11dc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 169bfe18 7c82783b ntdll!KiFastSystemCallRet
01 169bfe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 169bff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 169bff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 169bffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 169bffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 169bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 39
System Thread ID: 1048
Kernel Time: 0:0:0.78
User Time: 0:0:0.203
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 1779ff24 7c8277db ntdll!KiFastSystemCallRet
01 1779ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 1779ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 1779ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 1779ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 1779ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 1779ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 40
System Thread ID: bcc
Kernel Time: 0:0:0.125
User Time: 0:0:0.531
Thread Type: Other
# ChildEBP RetAddr
00 01d3f1c0 7c8277db ntdll!KiFastSystemCallRet
01 01d3f1c4 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 01d3f1f0 791fe9b2 kernel32!GetQueuedCompletionStatus+0x29
03 01d3f224 791fe95c mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 01d3ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
05 01d3ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 41
System Thread ID: 144c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 16cbff24 7c8277db ntdll!KiFastSystemCallRet
01 16cbff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 16cbff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 16cbff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 16cbffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 16cbffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 16cbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 42
System Thread ID: 1248
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 01cbfe18 7c82783b ntdll!KiFastSystemCallRet
01 01cbfe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 01cbff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 01cbff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 01cbffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 01cbffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 01cbffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 43
System Thread ID: ea0
Kernel Time: 0:0:0.109
User Time: 0:0:0.281
Thread Type: Other
# ChildEBP RetAddr
00 172befc0 7c8277db ntdll!KiFastSystemCallRet
01 172befc4 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 172beff0 791fe9b2 kernel32!GetQueuedCompletionStatus+0x29
03 172bf024 791fe95c mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 172bffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
05 172bffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 44
System Thread ID: 998
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b1fcc0 7c8277db ntdll!KiFastSystemCallRet
01 01b1fcc4 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 01b1fcf0 791fe9b2 kernel32!GetQueuedCompletionStatus+0x29
03 01b1fd24 791fe95c mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49
04 01b1ffb8 77e64829 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44
05 01b1ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 45
System Thread ID: a10
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 16f4ff70 7c8277db ntdll!KiFastSystemCallRet
01 16f4ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 16f4ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 16f4ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 46
System Thread ID: 1244
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00d7ff70 7c8277db ntdll!KiFastSystemCallRet
01 00d7ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 00d7ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 00d7ffec 00000000 kernel32!BaseThreadStart+0x34

Closing open log file C:\iisstate\output\IISState-5164.log