Board index » Web Programming » IIS 6.0

Web Programming248
Hello guys,



We since a while problem with our new IIS 6.0 server host on w2k3. This

server host ASP website inherited from a former windows NT server. The last

days the IIS services is crashing more than one time per day. When I run

Iisstate I get the outpout below. Would u like to advice?

Thanks







Opened log file 'C:\iisstate\output\IISState-5948.log'



***********************

Starting new log output

IISState version 3.3.1



Fri Apr 08 17:04:13 2005



OS = Windows 2003 Server

Executable: inetinfo.exe

PID = 5948



Note: Thread times are formatted as HH:MM:SS.ms



***********************









Thread ID: 0

System Thread ID: 1520

Kernel Time: 0:0:0.31

User Time: 0:0:0.15

Thread Type: Other

# ChildEBP RetAddr

00 0006f9a8 77f4303b SharedUserData!SystemCallStub+0x4

01 0006f9ac 77e4905d ntdll!NtReadFile+0xc

02 0006fa14 77db51f1 kernel32!ReadFile+0x16c

03 0006fa40 77db5297 ADVAPI32!ScGetPipeInput+0x28

04 0006fab0 77dfa7f1 ADVAPI32!ScDispatcherLoop+0x4c

05 0006fcec 01002655 ADVAPI32!StartServiceCtrlDispatcherA+0x91

06 0006fe1c 010027ea inetinfo!StartDispatchTable+0x214

07 0006ff44 01003160 inetinfo!main+0x104

08 0006ffc0 77e4f38c inetinfo!mainCRTStartup+0x12f

09 0006fff0 00000000 kernel32!BaseProcessStart+0x23









Thread ID: 1

System Thread ID: 1c8

Kernel Time: 0:0:0.15

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00acfe18 77f43741 SharedUserData!SystemCallStub+0x4

01 00acfe1c 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 00acfe8c 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 00acfe9c 01002cf9 kernel32!WaitForSingleObject+0xf

04 00acffb8 77e4a990 inetinfo!W3SVCThreadEntry+0x3b

05 00acffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 2

System Thread ID: 174c

Kernel Time: 0:0:0.0

User Time: 0:0:0.62

Thread Type: Other

# ChildEBP RetAddr

00 00b0fcc4 77f43741 SharedUserData!SystemCallStub+0x4

01 00b0fcc8 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 00b0fd38 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 00b0fd48 649f24ac kernel32!WaitForSingleObject+0xf

04 00b0fd70 010023b6 iisadmin!ServiceEntry+0x214

05 00b0ffa8 77db571b inetinfo!InetinfoStartService+0x2a6

06 00b0ffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe

07 00b0ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 3

System Thread ID: 274

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00d0ff9c 77f4262b SharedUserData!SystemCallStub+0x4

01 00d0ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc

02 00d0ffb8 77e4a990 ntdll!RtlpTimerThread+0x45

03 00d0ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 4

System Thread ID: 5f4

Kernel Time: 0:0:0.15

User Time: 0:0:0.31

Thread Type: Other

# ChildEBP RetAddr

00 00d4ff70 77f430c7 SharedUserData!SystemCallStub+0x4

01 00d4ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

02 00d4ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

03 00d4ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 5

System Thread ID: 6c4

Kernel Time: 0:0:0.15

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Other

# ChildEBP RetAddr

00 00e1feb0 77f4372d SharedUserData!SystemCallStub+0x4

01 00e1feb4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 00e1ff5c 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a

03 00e1ff74 6e0b377a kernel32!WaitForMultipleObjects+0x17

04 00e1ffa0 6e0b6012 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x68

05 00e1ffb8 77e4a990 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x62

06 00e1ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 6

System Thread ID: 150

Kernel Time: 0:0:0.15

User Time: 0:0:0.15

Thread Status: Thread is in a WAIT state.

Thread Type: Other

# ChildEBP RetAddr

00 0184fcec 77f4372d SharedUserData!SystemCallStub+0x4

01 0184fcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc

02 0184ffb8 77e4a990 ntdll!RtlpWaitThread+0x158

03 0184ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 7

System Thread ID: 12d8

Kernel Time: 0:0:0.187

User Time: 0:0:0.265

Thread Type: Possible ASP page. Possible DCOM activity

Executing Page: ASP.dll symbols not found. Unable to locate ASP page.

Continuing with other analysis.



No remote call being made



# ChildEBP RetAddr

00 017cfe20 77f4313f SharedUserData!SystemCallStub+0x4

01 017cfe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

02 017cff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

03 017cff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

04 017cffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

05 017cffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

06 017cffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 8

System Thread ID: c20

Kernel Time: 0:0:0.62

User Time: 0:0:0.15

Thread Type: Possible ASP page. Possible DCOM activity

Executing Page: ASP.dll symbols not found. Unable to locate ASP page.

Continuing with other analysis.



No remote call being made



# ChildEBP RetAddr

00 0188fe20 77f4313f SharedUserData!SystemCallStub+0x4

01 0188fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

02 0188ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

03 0188ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

04 0188ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

05 0188ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

06 0188ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 9

System Thread ID: f60

Kernel Time: 0:0:0.15

User Time: 0:0:0.15

Thread Type: Possible ASP page. Possible DCOM activity

Executing Page: ASP.dll symbols not found. Unable to locate ASP page.

Continuing with other analysis.



No remote call being made



# ChildEBP RetAddr

00 0195fe20 77f4313f SharedUserData!SystemCallStub+0x4

01 0195fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

02 0195ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

03 0195ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

04 0195ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

05 0195ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

06 0195ffec 00000000 kernel32!BaseThreadStart+0x34



*****



Dump name is formatted as: PID-Timestamp.dmp



Creating C:\iisstate\output\5948-1112972653.dmp - mini user dump



*****



Closing open log file C:\iisstate\output\IISState-5948.log


-

Is IIS crashing? Or your website?



If IIS is crashing then run IISState against inetinfo.exe. If your website

is crashing, then run IISState against w3wp.exe



Use the -sc or -hc switch for IISState to wait for a crash before producing

a log. The log below is idle as far as I can tell



Cheers

Ken



--

Blog: www.adopenstatic.com/cs/blogs/ken/

Web: www.adopenstatic.com





"Jay" <Jay@discussions.microsoft.com>wrote in message

: Hello guys,

:

: We since a while problem with our new IIS 6.0 server host on w2k3. This

: server host ASP website inherited from a former windows NT server. The

last

: days the IIS services is crashing more than one time per day. When I run

: Iisstate I get the outpout below. Would u like to advice?

: Thanks

:

:

:

: Opened log file 'C:\iisstate\output\IISState-5948.log'

:

: ***********************

: Starting new log output

: IISState version 3.3.1

:

: Fri Apr 08 17:04:13 2005

:

: OS = Windows 2003 Server

: Executable: inetinfo.exe

: PID = 5948

:

: Note: Thread times are formatted as HH:MM:SS.ms

:

: ***********************

:

:

:

:

: Thread ID: 0

: System Thread ID: 1520

: Kernel Time: 0:0:0.31

: User Time: 0:0:0.15

: Thread Type: Other

: # ChildEBP RetAddr

: 00 0006f9a8 77f4303b SharedUserData!SystemCallStub+0x4

: 01 0006f9ac 77e4905d ntdll!NtReadFile+0xc

: 02 0006fa14 77db51f1 kernel32!ReadFile+0x16c

: 03 0006fa40 77db5297 ADVAPI32!ScGetPipeInput+0x28

: 04 0006fab0 77dfa7f1 ADVAPI32!ScDispatcherLoop+0x4c

: 05 0006fcec 01002655 ADVAPI32!StartServiceCtrlDispatcherA+0x91

: 06 0006fe1c 010027ea inetinfo!StartDispatchTable+0x214

: 07 0006ff44 01003160 inetinfo!main+0x104

: 08 0006ffc0 77e4f38c inetinfo!mainCRTStartup+0x12f

: 09 0006fff0 00000000 kernel32!BaseProcessStart+0x23

:

:

:

:

: Thread ID: 1

: System Thread ID: 1c8

: Kernel Time: 0:0:0.15

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00acfe18 77f43741 SharedUserData!SystemCallStub+0x4

: 01 00acfe1c 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 00acfe8c 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 00acfe9c 01002cf9 kernel32!WaitForSingleObject+0xf

: 04 00acffb8 77e4a990 inetinfo!W3SVCThreadEntry+0x3b

: 05 00acffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 2

: System Thread ID: 174c

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.62

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00b0fcc4 77f43741 SharedUserData!SystemCallStub+0x4

: 01 00b0fcc8 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 00b0fd38 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 00b0fd48 649f24ac kernel32!WaitForSingleObject+0xf

: 04 00b0fd70 010023b6 iisadmin!ServiceEntry+0x214

: 05 00b0ffa8 77db571b inetinfo!InetinfoStartService+0x2a6

: 06 00b0ffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe

: 07 00b0ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 3

: System Thread ID: 274

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00d0ff9c 77f4262b SharedUserData!SystemCallStub+0x4

: 01 00d0ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc

: 02 00d0ffb8 77e4a990 ntdll!RtlpTimerThread+0x45

: 03 00d0ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 4

: System Thread ID: 5f4

: Kernel Time: 0:0:0.15

: User Time: 0:0:0.31

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00d4ff70 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 00d4ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

: 02 00d4ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

: 03 00d4ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 5

: System Thread ID: 6c4

: Kernel Time: 0:0:0.15

: User Time: 0:0:0.0

: Thread Status: Thread is in a WAIT state.

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00e1feb0 77f4372d SharedUserData!SystemCallStub+0x4

: 01 00e1feb4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

: 02 00e1ff5c 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a

: 03 00e1ff74 6e0b377a kernel32!WaitForMultipleObjects+0x17

: 04 00e1ffa0 6e0b6012 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x68

: 05 00e1ffb8 77e4a990 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x62

: 06 00e1ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 6

: System Thread ID: 150

: Kernel Time: 0:0:0.15

: User Time: 0:0:0.15

: Thread Status: Thread is in a WAIT state.

: Thread Type: Other

: # ChildEBP RetAddr

: 00 0184fcec 77f4372d SharedUserData!SystemCallStub+0x4

: 01 0184fcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc

: 02 0184ffb8 77e4a990 ntdll!RtlpWaitThread+0x158

: 03 0184ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 7

: System Thread ID: 12d8

: Kernel Time: 0:0:0.187

: User Time: 0:0:0.265

: Thread Type: Possible ASP page. Possible DCOM activity

: Executing Page: ASP.dll symbols not found. Unable to locate ASP page.

: Continuing with other analysis.

:

: No remote call being made

:

: # ChildEBP RetAddr

: 00 017cfe20 77f4313f SharedUserData!SystemCallStub+0x4

: 01 017cfe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

: 02 017cff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

: 03 017cff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

: 04 017cffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

: 05 017cffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

: 06 017cffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 8

: System Thread ID: c20

: Kernel Time: 0:0:0.62

: User Time: 0:0:0.15

: Thread Type: Possible ASP page. Possible DCOM activity

: Executing Page: ASP.dll symbols not found. Unable to locate ASP page.

: Continuing with other analysis.

:

: No remote call being made

:

: # ChildEBP RetAddr

: 00 0188fe20 77f4313f SharedUserData!SystemCallStub+0x4

: 01 0188fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

: 02 0188ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

: 03 0188ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

: 04 0188ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

: 05 0188ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

: 06 0188ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 9

: System Thread ID: f60

: Kernel Time: 0:0:0.15

: User Time: 0:0:0.15

: Thread Type: Possible ASP page. Possible DCOM activity

: Executing Page: ASP.dll symbols not found. Unable to locate ASP page.

: Continuing with other analysis.

:

: No remote call being made

:

: # ChildEBP RetAddr

: 00 0195fe20 77f4313f SharedUserData!SystemCallStub+0x4

: 01 0195fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

: 02 0195ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

: 03 0195ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

: 04 0195ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

: 05 0195ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

: 06 0195ffec 00000000 kernel32!BaseThreadStart+0x34

:

: *****

:

: Dump name is formatted as: PID-Timestamp.dmp

:

: Creating C:\iisstate\output\5948-1112972653.dmp - mini user dump

:

: *****

:

: Closing open log file C:\iisstate\output\IISState-5948.log

:





-

Thanks Ken for the attention,



ISS did crash in the past for a couple of times. We suspected a program

install on the same box called GMS sender. I had suspiscion on this program

that it was instantiating a MAPI object and then caused the service to fail.

I install a hotfix from microsoft that intended to solve SMTP

protocol/service etc...The last times I get this message in the event viewer

log:



A process serving application pool 'DefaultAppPool' terminated unexpectedly.

The process id was '812'. The process exit code was '0xc0000354'.





I run the iisstate againt the w3wp.exe then I get the output below:



Opened log file 'C:\iisstate\output\IISState-2820.log'



***********************

Starting new log output

IISState version 3.3.1



Tue Apr 12 14:38:09 2005



OS = Windows 2003 Server

Executable: w3wp.exe

PID = 2820



Note: Thread times are formatted as HH:MM:SS.ms



***********************









Thread ID: 0

System Thread ID: 173c

Kernel Time: 0:0:0.0

User Time: 0:0:0.78

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

c:\winnt\system32\inetsrv\w3dt.dll -

Thread Type: Other

# ChildEBP RetAddr

00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4

01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf

WARNING: Stack unwind information not available. Following frames may be

wrong.

04 0006feec 5a364d7d w3dt!IPM_MESSAGE_PIPE::operator=+0xdde

05 00000000 00000000 w3dt!UlAtqStartListen+0x2d









Thread ID: 1

System Thread ID: 1160

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Other

# ChildEBP RetAddr

00 00c4fea0 77f4372d SharedUserData!SystemCallStub+0x4

01 00c4fea4 77f6c86c ntdll!NtWaitForMultipleObjects+0xc

02 00c4ff48 77f6d7f5 ntdll!EtwpWaitForMultipleObjectsEx+0xf7

03 00c4ffb8 77e4a990 ntdll!EtwpEventPump+0x27d

04 00c4ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 2

System Thread ID: a28

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00c8ff9c 77f4262b SharedUserData!SystemCallStub+0x4

01 00c8ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc

02 00c8ffb8 77e4a990 ntdll!RtlpTimerThread+0x45

03 00c8ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 3

System Thread ID: f20

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00ccff70 77f430c7 SharedUserData!SystemCallStub+0x4

01 00ccff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

02 00ccffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

03 00ccffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 4

System Thread ID: 9fc

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Possible ASP page. Possible DCOM activity

Executing Page: Unable to locate ASP page



No remote call being made



# ChildEBP RetAddr

00 00d3fe20 77f4313f SharedUserData!SystemCallStub+0x4

01 00d3fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

02 00d3ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

03 00d3ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

04 00d3ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

05 00d3ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

06 00d3ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 5

System Thread ID: 14ec

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00efff10 77f4262b SharedUserData!SystemCallStub+0x4

01 00efff14 77e418ea ntdll!NtDelayExecution+0xc

02 00efff7c 77e416ee kernel32!SleepEx+0x68

03 00efff88 771623a1 kernel32!Sleep+0xb

04 00efff94 7716248a ole32!CROIDTable::WorkerThreadLoop+0x12

05 00efff9c 77160000 ole32!CRpcThread::WorkerLoop+0x1e

06 00efffac 771624f3 ole32!_imp__InstallApplication <PERF>(ole32+0x0)

07 00efffb8 77e4a990 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1f

08 00efffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 6

System Thread ID: 11d8

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

c:\winnt\system32\inetsrv\W3TP.dll -

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00f3ff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00f3ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00f3ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00f3ff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00f3ffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 7

System Thread ID: 1050

Kernel Time: 0:0:0.0

User Time: 0:0:0.15

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00f7ff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00f7ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00f7ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00f7ff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00f7ffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 8

System Thread ID: 129c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00fbff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00fbff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00fbff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00fbff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00fbffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 9

System Thread ID: 7a8

Kernel Time: 0:0:0.0

User Time: 0:0:0.15

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00ffff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00ffff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00ffff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00ffff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00ffffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 10

System Thread ID: f68

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Other

# ChildEBP RetAddr

00 010cfcec 77f4372d SharedUserData!SystemCallStub+0x4

01 010cfcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc

02 010cffb8 77e4a990 ntdll!RtlpWaitThread+0x158

03 010cffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 11

System Thread ID: 115c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: HTTP Compression Thread

# ChildEBP RetAddr

00 0192ff14 77f43741 SharedUserData!SystemCallStub+0x4

01 0192ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0192ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0192ff98 5a3a51f7 kernel32!WaitForSingleObject+0xf

04 0192ffb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85

05 0192ffc4 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 12

System Thread ID: 1410

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Possible ASP page. Possible DCOM activity

Executing Page: Unable to locate ASP page



No remote call being made



# ChildEBP RetAddr

00 0197fe20 77f4313f SharedUserData!SystemCallStub+0x4

01 0197fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

02 0197ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

03 0197ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

04 0197ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

05 0197ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

06 0197ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 13

System Thread ID: 1348

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 019bff8c 77f4262b SharedUserData!SystemCallStub+0x4

01 019bff90 77f6f0fc ntdll!NtDelayExecution+0xc

02 019bffb8 77e4a990 ntdll!RtlpIOWorkerThread+0x3d

03 019bffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 14

System Thread ID: c2c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: ASP

Executing Page: Unable to locate ASP page



# ChildEBP RetAddr

00 025bff14 77f43741 SharedUserData!SystemCallStub+0x4

01 025bff18 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 025bff88 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 025bff98 70a05c99 kernel32!WaitForSingleObject+0xf

04 025bffb4 70a0625a asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x19

05 025bffb8 77e4a990 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa

06 025bffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 15

System Thread ID: 1740

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

C:\WINNT\system32\USER32.dll -

Thread Status: Thread is in a WAIT state.

Thread Type: ASP

Executing Page: Unable to locate ASP page



# ChildEBP RetAddr

00 026ffe1c 77f4372d SharedUserData!SystemCallStub+0x4

01 026ffe20 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 026ffec8 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 026fff24 77d037f0 USER32!VkKeyScanW+0xd2

04 026fff40 70a183cc USER32!MsgWaitForMultipleObjects+0x1d

05 026fff80 77bbb9c3 asp!CMTACallbackThread::Thread+0x4c

06 026fff8c 00000000 msvcrt!free+0xc8









Thread ID: 16

System Thread ID: 1344

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: ASP

Executing Page: Unable to locate ASP page



# ChildEBP RetAddr

00 0273fefc 77f43741 SharedUserData!SystemCallStub+0x4

01 0273ff00 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0273ff70 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0273ff80 709f4800 kernel32!WaitForSingleObject+0xf

04 0273ffb4 77f5cd6b asp!CViperReqManager::WatchThread+0x65









Thread ID: 17

System Thread ID: 1078

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0279fef0 77f43741 SharedUserData!SystemCallStub+0x4

01 0279fef4 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0279ff64 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0279ff74 75611e06 kernel32!WaitForSingleObject+0xf

04 0279ff84 77bc91ed comsvcs!CSTAThreadPool::LoadBalanceThreadControlLoop+0x25

05 0279ffb8 77e4a990 msvcrt!_endthreadex+0x95

06 0279ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 18

System Thread ID: 13cc

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 027dfee8 77f43741 SharedUserData!SystemCallStub+0x4

01 027dfeec 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 027dff5c 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 027dff6c 75611999 kernel32!WaitForSingleObject+0xf

04 027dff84 77bc91ed comsvcs!CSTAThreadPool::KillThreadControlLoop+0x21

05 027dffb8 77e4a990 msvcrt!_endthreadex+0x95

06 027dffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 19

System Thread ID: 1528

Kernel Time: 0:0:0.62

User Time: 0:0:0.31

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0281fdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 0281fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 0281fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 0281fed4 77d037f0 USER32!VkKeyScanW+0xd2

04 0281fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 0281ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 0281ffb8 77e4a990 msvcrt!_endthreadex+0x95

07 0281ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 20

System Thread ID: 1318

Kernel Time: 0:0:0.0

User Time: 0:0:0.15

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0285fdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 0285fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 0285fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 0285fed4 77d037f0 USER32!VkKeyScanW+0xd2

04 0285fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 0285ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 0285ffb8 77e4a990 msvcrt!_endthreadex+0x95

07 0285ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 21

System Thread ID: 570

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0289fdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 0289fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 0289fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 0289fed4 77d037f0 USER32!VkKeyScanW+0xd2

04 0289fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 0289ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 0289ffb8 77e4a990 msvcrt!_endthreadex+0x95

07 0289ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 22

System Thread ID: 238

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 028dfdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 028dfdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 028dfe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 028dfed4 77d037f0 USER32!VkKeyScanW+0xd2

04 028dfef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 028dff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 028dffb8 77e4a990 msvcrt!_endthreadex+0x95

07 028dffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 23

System Thread ID: e3c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 0309ff10 77f43741 SharedUserData!SystemCallStub+0x4

01 0309ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0309ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0309ff94 02d538a9 kernel32!WaitForSingleObject+0xf

04 0309ffb8 77e4a990 oledb32!ReleaseResourceThread+0x54

05 0309ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 24

System Thread ID: 1388

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 030dff08 77f43741 SharedUserData!SystemCallStub+0x4

01 030dff0c 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 030dff7c 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 030dff8c 02d538b9 kernel32!WaitForSingleObject+0xf

04 030dffb8 77e4a990 oledb32!ResetResourceThread+0x84

05 030dffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 25

System Thread ID: 15c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0311fd04 77f43741 SharedUserData!SystemCallStub+0x4

01 0311fd08 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0311fd78 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0311fd88 755f4fbf kernel32!WaitForSingleObject+0xf

04 0311ffb8 77e4a990 comsvcs!PingThread+0xea

05 0311ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 26

System Thread ID: ee8

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 03efff70 77f430c7 SharedUserData!SystemCallStub+0x4

01 03efff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

02 03efffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

03 03efffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 27

System Thread ID: 274

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 07f3ff70 77f430c7 SharedUserData!SystemCallStub+0x4

01 07f3ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

02 07f3ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

03 07f3ffec 00000000 kernel32!BaseThreadStart+0x34



*****



Dump name is formatted as: PID-Timestamp.dmp



Creating C:\iisstate\output\2820-1113310987.dmp - mini user dump



*****



Closing open log file C:\iisstate\output\IISState-2820.log









"Ken Schaefer" wrote:

You need to use the -sc or -hc switch so that IISState will produce a log

*when the process is crashing*. At the moment the process is running fine

(seems to be mostly idle).



Cheers

Ken



--

Blog: www.adopenstatic.com/cs/blogs/ken/

Web: www.adopenstatic.com





"Jay" <Jay@discussions.microsoft.com>wrote in message

: Thanks Ken for the attention,

:

: ISS did crash in the past for a couple of times. We suspected a program

: install on the same box called GMS sender. I had suspiscion on this

program

: that it was instantiating a MAPI object and then caused the service to

fail.

: I install a hotfix from microsoft that intended to solve SMTP

: protocol/service etc...The last times I get this message in the event

viewer

: log:

:

: A process serving application pool 'DefaultAppPool' terminated

unexpectedly.

: The process id was '812'. The process exit code was '0xc0000354'.

:

:

: I run the iisstate againt the w3wp.exe then I get the output below:

:

: Opened log file 'C:\iisstate\output\IISState-2820.log'

:

: ***********************

: Starting new log output

: IISState version 3.3.1

:

: Tue Apr 12 14:38:09 2005

:

: OS = Windows 2003 Server

: Executable: w3wp.exe

: PID = 2820

:

: Note: Thread times are formatted as HH:MM:SS.ms

:

: ***********************

:

:

:

:

: Thread ID: 0

: System Thread ID: 173c

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.78

: *** ERROR: Symbol file could not be found. Defaulted to export symbols

for

: c:\winnt\system32\inetsrv\w3dt.dll -

: Thread Type: Other

: # ChildEBP RetAddr

: 00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4

: 01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 04 0006feec 5a364d7d w3dt!IPM_MESSAGE_PIPE::operator=+0xdde

: 05 00000000 00000000 w3dt!UlAtqStartListen+0x2d

:

:

:

:

: Thread ID: 1

: System Thread ID: 1160

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Status: Thread is in a WAIT state.

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00c4fea0 77f4372d SharedUserData!SystemCallStub+0x4

: 01 00c4fea4 77f6c86c ntdll!NtWaitForMultipleObjects+0xc

: 02 00c4ff48 77f6d7f5 ntdll!EtwpWaitForMultipleObjectsEx+0xf7

: 03 00c4ffb8 77e4a990 ntdll!EtwpEventPump+0x27d

: 04 00c4ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 2

: System Thread ID: a28

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00c8ff9c 77f4262b SharedUserData!SystemCallStub+0x4

: 01 00c8ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc

: 02 00c8ffb8 77e4a990 ntdll!RtlpTimerThread+0x45

: 03 00c8ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 3

: System Thread ID: f20

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00ccff70 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 00ccff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

: 02 00ccffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

: 03 00ccffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 4

: System Thread ID: 9fc

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Possible ASP page. Possible DCOM activity

: Executing Page: Unable to locate ASP page

:

: No remote call being made

:

: # ChildEBP RetAddr

: 00 00d3fe20 77f4313f SharedUserData!SystemCallStub+0x4

: 01 00d3fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

: 02 00d3ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

: 03 00d3ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

: 04 00d3ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

: 05 00d3ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

: 06 00d3ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 5

: System Thread ID: 14ec

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 00efff10 77f4262b SharedUserData!SystemCallStub+0x4

: 01 00efff14 77e418ea ntdll!NtDelayExecution+0xc

: 02 00efff7c 77e416ee kernel32!SleepEx+0x68

: 03 00efff88 771623a1 kernel32!Sleep+0xb

: 04 00efff94 7716248a ole32!CROIDTable::WorkerThreadLoop+0x12

: 05 00efff9c 77160000 ole32!CRpcThread::WorkerLoop+0x1e

: 06 00efffac 771624f3 ole32!_imp__InstallApplication <PERF>(ole32+0x0)

: 07 00efffb8 77e4a990 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1f

: 08 00efffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 6

: System Thread ID: 11d8

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: *** ERROR: Symbol file could not be found. Defaulted to export symbols

for

: c:\winnt\system32\inetsrv\W3TP.dll -

: Thread Type: HTTP Listener

: # ChildEBP RetAddr

: 00 00f3ff28 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 00f3ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

: 02 00f3ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 00f3ff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

: 04 00f3ffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c

:

:

:

:

: Thread ID: 7

: System Thread ID: 1050

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.15

: Thread Type: HTTP Listener

: # ChildEBP RetAddr

: 00 00f7ff28 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 00f7ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

: 02 00f7ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 00f7ff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

: 04 00f7ffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c

:

:

:

:

: Thread ID: 8

: System Thread ID: 129c

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: HTTP Listener

: # ChildEBP RetAddr

: 00 00fbff28 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 00fbff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

: 02 00fbff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 00fbff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

: 04 00fbffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c

:

:

:

:

: Thread ID: 9

: System Thread ID: 7a8

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.15

: Thread Type: HTTP Listener

: # ChildEBP RetAddr

: 00 00ffff28 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 00ffff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

: 02 00ffff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 00ffff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

: 04 00ffffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c

:

:

:

:

: Thread ID: 10

: System Thread ID: f68

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Status: Thread is in a WAIT state.

: Thread Type: Other

: # ChildEBP RetAddr

: 00 010cfcec 77f4372d SharedUserData!SystemCallStub+0x4

: 01 010cfcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc

: 02 010cffb8 77e4a990 ntdll!RtlpWaitThread+0x158

: 03 010cffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 11

: System Thread ID: 115c

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: HTTP Compression Thread

: # ChildEBP RetAddr

: 00 0192ff14 77f43741 SharedUserData!SystemCallStub+0x4

: 01 0192ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 0192ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 0192ff98 5a3a51f7 kernel32!WaitForSingleObject+0xf

: 04 0192ffb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85

: 05 0192ffc4 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 12

: System Thread ID: 1410

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Possible ASP page. Possible DCOM activity

: Executing Page: Unable to locate ASP page

:

: No remote call being made

:

: # ChildEBP RetAddr

: 00 0197fe20 77f4313f SharedUserData!SystemCallStub+0x4

: 01 0197fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

: 02 0197ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

: 03 0197ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

: 04 0197ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

: 05 0197ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

: 06 0197ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 13

: System Thread ID: 1348

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 019bff8c 77f4262b SharedUserData!SystemCallStub+0x4

: 01 019bff90 77f6f0fc ntdll!NtDelayExecution+0xc

: 02 019bffb8 77e4a990 ntdll!RtlpIOWorkerThread+0x3d

: 03 019bffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 14

: System Thread ID: c2c

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: ASP

: Executing Page: Unable to locate ASP page

:

: # ChildEBP RetAddr

: 00 025bff14 77f43741 SharedUserData!SystemCallStub+0x4

: 01 025bff18 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 025bff88 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 025bff98 70a05c99 kernel32!WaitForSingleObject+0xf

: 04 025bffb4 70a0625a asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x19

: 05 025bffb8 77e4a990 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa

: 06 025bffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 15

: System Thread ID: 1740

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: *** ERROR: Symbol file could not be found. Defaulted to export symbols

for

: C:\WINNT\system32\USER32.dll -

: Thread Status: Thread is in a WAIT state.

: Thread Type: ASP

: Executing Page: Unable to locate ASP page

:

: # ChildEBP RetAddr

: 00 026ffe1c 77f4372d SharedUserData!SystemCallStub+0x4

: 01 026ffe20 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

: 02 026ffec8 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 026fff24 77d037f0 USER32!VkKeyScanW+0xd2

: 04 026fff40 70a183cc USER32!MsgWaitForMultipleObjects+0x1d

: 05 026fff80 77bbb9c3 asp!CMTACallbackThread::Thread+0x4c

: 06 026fff8c 00000000 msvcrt!free+0xc8

:

:

:

:

: Thread ID: 16

: System Thread ID: 1344

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: ASP

: Executing Page: Unable to locate ASP page

:

: # ChildEBP RetAddr

: 00 0273fefc 77f43741 SharedUserData!SystemCallStub+0x4

: 01 0273ff00 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 0273ff70 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 0273ff80 709f4800 kernel32!WaitForSingleObject+0xf

: 04 0273ffb4 77f5cd6b asp!CViperReqManager::WatchThread+0x65

:

:

:

:

: Thread ID: 17

: System Thread ID: 1078

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Idle ASP thread

: # ChildEBP RetAddr

: 00 0279fef0 77f43741 SharedUserData!SystemCallStub+0x4

: 01 0279fef4 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 0279ff64 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 0279ff74 75611e06 kernel32!WaitForSingleObject+0xf

: 04 0279ff84 77bc91ed

comsvcs!CSTAThreadPool::LoadBalanceThreadControlLoop+0x25

: 05 0279ffb8 77e4a990 msvcrt!_endthreadex+0x95

: 06 0279ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 18

: System Thread ID: 13cc

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Idle ASP thread

: # ChildEBP RetAddr

: 00 027dfee8 77f43741 SharedUserData!SystemCallStub+0x4

: 01 027dfeec 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 027dff5c 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 027dff6c 75611999 kernel32!WaitForSingleObject+0xf

: 04 027dff84 77bc91ed comsvcs!CSTAThreadPool::KillThreadControlLoop+0x21

: 05 027dffb8 77e4a990 msvcrt!_endthreadex+0x95

: 06 027dffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 19

: System Thread ID: 1528

: Kernel Time: 0:0:0.62

: User Time: 0:0:0.31

: Thread Status: Thread is in a WAIT state.

: Thread Type: Idle ASP thread

: # ChildEBP RetAddr

: 00 0281fdcc 77f4372d SharedUserData!SystemCallStub+0x4

: 01 0281fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

: 02 0281fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 0281fed4 77d037f0 USER32!VkKeyScanW+0xd2

: 04 0281fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

: 05 0281ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

: 06 0281ffb8 77e4a990 msvcrt!_endthreadex+0x95

: 07 0281ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 20

: System Thread ID: 1318

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.15

: Thread Status: Thread is in a WAIT state.

: Thread Type: Idle ASP thread

: # ChildEBP RetAddr

: 00 0285fdcc 77f4372d SharedUserData!SystemCallStub+0x4

: 01 0285fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

: 02 0285fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 0285fed4 77d037f0 USER32!VkKeyScanW+0xd2

: 04 0285fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

: 05 0285ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

: 06 0285ffb8 77e4a990 msvcrt!_endthreadex+0x95

: 07 0285ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 21

: System Thread ID: 570

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Status: Thread is in a WAIT state.

: Thread Type: Idle ASP thread

: # ChildEBP RetAddr

: 00 0289fdcc 77f4372d SharedUserData!SystemCallStub+0x4

: 01 0289fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

: 02 0289fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 0289fed4 77d037f0 USER32!VkKeyScanW+0xd2

: 04 0289fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

: 05 0289ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

: 06 0289ffb8 77e4a990 msvcrt!_endthreadex+0x95

: 07 0289ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 22

: System Thread ID: 238

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Status: Thread is in a WAIT state.

: Thread Type: Idle ASP thread

: # ChildEBP RetAddr

: 00 028dfdcc 77f4372d SharedUserData!SystemCallStub+0x4

: 01 028dfdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

: 02 028dfe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

: WARNING: Stack unwind information not available. Following frames may be

: wrong.

: 03 028dfed4 77d037f0 USER32!VkKeyScanW+0xd2

: 04 028dfef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

: 05 028dff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

: 06 028dffb8 77e4a990 msvcrt!_endthreadex+0x95

: 07 028dffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 23

: System Thread ID: e3c

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 0309ff10 77f43741 SharedUserData!SystemCallStub+0x4

: 01 0309ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 0309ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 0309ff94 02d538a9 kernel32!WaitForSingleObject+0xf

: 04 0309ffb8 77e4a990 oledb32!ReleaseResourceThread+0x54

: 05 0309ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 24

: System Thread ID: 1388

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 030dff08 77f43741 SharedUserData!SystemCallStub+0x4

: 01 030dff0c 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 030dff7c 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 030dff8c 02d538b9 kernel32!WaitForSingleObject+0xf

: 04 030dffb8 77e4a990 oledb32!ResetResourceThread+0x84

: 05 030dffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 25

: System Thread ID: 15c

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Idle ASP thread

: # ChildEBP RetAddr

: 00 0311fd04 77f43741 SharedUserData!SystemCallStub+0x4

: 01 0311fd08 77e41817 ntdll!ZwWaitForSingleObject+0xc

: 02 0311fd78 77e4168f kernel32!WaitForSingleObjectEx+0xac

: 03 0311fd88 755f4fbf kernel32!WaitForSingleObject+0xf

: 04 0311ffb8 77e4a990 comsvcs!PingThread+0xea

: 05 0311ffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 26

: System Thread ID: ee8

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 03efff70 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 03efff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

: 02 03efffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

: 03 03efffec 00000000 kernel32!BaseThreadStart+0x34

:

:

:

:

: Thread ID: 27

: System Thread ID: 274

: Kernel Time: 0:0:0.0

: User Time: 0:0:0.0

: Thread Type: Other

: # ChildEBP RetAddr

: 00 07f3ff70 77f430c7 SharedUserData!SystemCallStub+0x4

: 01 07f3ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

: 02 07f3ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

: 03 07f3ffec 00000000 kernel32!BaseThreadStart+0x34

:

: *****

:

: Dump name is formatted as: PID-Timestamp.dmp

:

: Creating C:\iisstate\output\2820-1113310987.dmp - mini user dump

:>





-

You need to have IIS State running and waiting to catch the crash *before*

it happens.



By the time you see an event viewer message, it is too late. The crash has

already happened, the w3wp.exe already terminated, and that termination

generated the event log entry.



--

//David

IIS

blogs.msdn.com/David.Wang">blogs.msdn.com/David.Wang

This posting is provided "AS IS" with no warranties, and confers no rights.

//

"Jay" <Jay@discussions.microsoft.com>wrote in message

Thanks Ken for the attention,



ISS did crash in the past for a couple of times. We suspected a program

install on the same box called GMS sender. I had suspiscion on this program

that it was instantiating a MAPI object and then caused the service to fail.

I install a hotfix from microsoft that intended to solve SMTP

protocol/service etc...The last times I get this message in the event viewer

log:



A process serving application pool 'DefaultAppPool' terminated unexpectedly.

The process id was '812'. The process exit code was '0xc0000354'.





I run the iisstate againt the w3wp.exe then I get the output below:



Opened log file 'C:\iisstate\output\IISState-2820.log'



***********************

Starting new log output

IISState version 3.3.1



Tue Apr 12 14:38:09 2005



OS = Windows 2003 Server

Executable: w3wp.exe

PID = 2820



Note: Thread times are formatted as HH:MM:SS.ms



***********************









Thread ID: 0

System Thread ID: 173c

Kernel Time: 0:0:0.0

User Time: 0:0:0.78

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

c:\winnt\system32\inetsrv\w3dt.dll -

Thread Type: Other

# ChildEBP RetAddr

00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4

01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf

WARNING: Stack unwind information not available. Following frames may be

wrong.

04 0006feec 5a364d7d w3dt!IPM_MESSAGE_PIPE::operator=+0xdde

05 00000000 00000000 w3dt!UlAtqStartListen+0x2d









Thread ID: 1

System Thread ID: 1160

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Other

# ChildEBP RetAddr

00 00c4fea0 77f4372d SharedUserData!SystemCallStub+0x4

01 00c4fea4 77f6c86c ntdll!NtWaitForMultipleObjects+0xc

02 00c4ff48 77f6d7f5 ntdll!EtwpWaitForMultipleObjectsEx+0xf7

03 00c4ffb8 77e4a990 ntdll!EtwpEventPump+0x27d

04 00c4ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 2

System Thread ID: a28

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00c8ff9c 77f4262b SharedUserData!SystemCallStub+0x4

01 00c8ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc

02 00c8ffb8 77e4a990 ntdll!RtlpTimerThread+0x45

03 00c8ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 3

System Thread ID: f20

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00ccff70 77f430c7 SharedUserData!SystemCallStub+0x4

01 00ccff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

02 00ccffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

03 00ccffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 4

System Thread ID: 9fc

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Possible ASP page. Possible DCOM activity

Executing Page: Unable to locate ASP page



No remote call being made



# ChildEBP RetAddr

00 00d3fe20 77f4313f SharedUserData!SystemCallStub+0x4

01 00d3fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

02 00d3ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

03 00d3ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

04 00d3ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

05 00d3ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

06 00d3ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 5

System Thread ID: 14ec

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 00efff10 77f4262b SharedUserData!SystemCallStub+0x4

01 00efff14 77e418ea ntdll!NtDelayExecution+0xc

02 00efff7c 77e416ee kernel32!SleepEx+0x68

03 00efff88 771623a1 kernel32!Sleep+0xb

04 00efff94 7716248a ole32!CROIDTable::WorkerThreadLoop+0x12

05 00efff9c 77160000 ole32!CRpcThread::WorkerLoop+0x1e

06 00efffac 771624f3 ole32!_imp__InstallApplication <PERF>(ole32+0x0)

07 00efffb8 77e4a990 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1f

08 00efffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 6

System Thread ID: 11d8

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

c:\winnt\system32\inetsrv\W3TP.dll -

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00f3ff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00f3ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00f3ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00f3ff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00f3ffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 7

System Thread ID: 1050

Kernel Time: 0:0:0.0

User Time: 0:0:0.15

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00f7ff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00f7ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00f7ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00f7ff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00f7ffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 8

System Thread ID: 129c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00fbff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00fbff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00fbff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00fbff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00fbffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 9

System Thread ID: 7a8

Kernel Time: 0:0:0.0

User Time: 0:0:0.15

Thread Type: HTTP Listener

# ChildEBP RetAddr

00 00ffff28 77f430c7 SharedUserData!SystemCallStub+0x4

01 00ffff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc

02 00ffff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 00ffff90 5a302531 W3TP!THREAD_POOL::PostCompletion+0x78

04 00ffffec 00000000 W3TP!THREAD_POOL::~THREAD_POOL+0x11c









Thread ID: 10

System Thread ID: f68

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Other

# ChildEBP RetAddr

00 010cfcec 77f4372d SharedUserData!SystemCallStub+0x4

01 010cfcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc

02 010cffb8 77e4a990 ntdll!RtlpWaitThread+0x158

03 010cffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 11

System Thread ID: 115c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: HTTP Compression Thread

# ChildEBP RetAddr

00 0192ff14 77f43741 SharedUserData!SystemCallStub+0x4

01 0192ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0192ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0192ff98 5a3a51f7 kernel32!WaitForSingleObject+0xf

04 0192ffb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85

05 0192ffc4 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 12

System Thread ID: 1410

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Possible ASP page. Possible DCOM activity

Executing Page: Unable to locate ASP page



No remote call being made



# ChildEBP RetAddr

00 0197fe20 77f4313f SharedUserData!SystemCallStub+0x4

01 0197fe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc

02 0197ff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193

03 0197ff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9

04 0197ffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c

05 0197ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17

06 0197ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 13

System Thread ID: 1348

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 019bff8c 77f4262b SharedUserData!SystemCallStub+0x4

01 019bff90 77f6f0fc ntdll!NtDelayExecution+0xc

02 019bffb8 77e4a990 ntdll!RtlpIOWorkerThread+0x3d

03 019bffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 14

System Thread ID: c2c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: ASP

Executing Page: Unable to locate ASP page



# ChildEBP RetAddr

00 025bff14 77f43741 SharedUserData!SystemCallStub+0x4

01 025bff18 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 025bff88 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 025bff98 70a05c99 kernel32!WaitForSingleObject+0xf

04 025bffb4 70a0625a asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x19

05 025bffb8 77e4a990 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa

06 025bffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 15

System Thread ID: 1740

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

*** ERROR: Symbol file could not be found. Defaulted to export symbols for

C:\WINNT\system32\USER32.dll -

Thread Status: Thread is in a WAIT state.

Thread Type: ASP

Executing Page: Unable to locate ASP page



# ChildEBP RetAddr

00 026ffe1c 77f4372d SharedUserData!SystemCallStub+0x4

01 026ffe20 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 026ffec8 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 026fff24 77d037f0 USER32!VkKeyScanW+0xd2

04 026fff40 70a183cc USER32!MsgWaitForMultipleObjects+0x1d

05 026fff80 77bbb9c3 asp!CMTACallbackThread::Thread+0x4c

06 026fff8c 00000000 msvcrt!free+0xc8









Thread ID: 16

System Thread ID: 1344

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: ASP

Executing Page: Unable to locate ASP page



# ChildEBP RetAddr

00 0273fefc 77f43741 SharedUserData!SystemCallStub+0x4

01 0273ff00 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0273ff70 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0273ff80 709f4800 kernel32!WaitForSingleObject+0xf

04 0273ffb4 77f5cd6b asp!CViperReqManager::WatchThread+0x65









Thread ID: 17

System Thread ID: 1078

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0279fef0 77f43741 SharedUserData!SystemCallStub+0x4

01 0279fef4 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0279ff64 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0279ff74 75611e06 kernel32!WaitForSingleObject+0xf

04 0279ff84 77bc91ed

comsvcs!CSTAThreadPool::LoadBalanceThreadControlLoop+0x25

05 0279ffb8 77e4a990 msvcrt!_endthreadex+0x95

06 0279ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 18

System Thread ID: 13cc

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 027dfee8 77f43741 SharedUserData!SystemCallStub+0x4

01 027dfeec 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 027dff5c 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 027dff6c 75611999 kernel32!WaitForSingleObject+0xf

04 027dff84 77bc91ed comsvcs!CSTAThreadPool::KillThreadControlLoop+0x21

05 027dffb8 77e4a990 msvcrt!_endthreadex+0x95

06 027dffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 19

System Thread ID: 1528

Kernel Time: 0:0:0.62

User Time: 0:0:0.31

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0281fdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 0281fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 0281fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 0281fed4 77d037f0 USER32!VkKeyScanW+0xd2

04 0281fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 0281ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 0281ffb8 77e4a990 msvcrt!_endthreadex+0x95

07 0281ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 20

System Thread ID: 1318

Kernel Time: 0:0:0.0

User Time: 0:0:0.15

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0285fdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 0285fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 0285fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 0285fed4 77d037f0 USER32!VkKeyScanW+0xd2

04 0285fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 0285ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 0285ffb8 77e4a990 msvcrt!_endthreadex+0x95

07 0285ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 21

System Thread ID: 570

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0289fdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 0289fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 0289fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 0289fed4 77d037f0 USER32!VkKeyScanW+0xd2

04 0289fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 0289ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 0289ffb8 77e4a990 msvcrt!_endthreadex+0x95

07 0289ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 22

System Thread ID: 238

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Status: Thread is in a WAIT state.

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 028dfdcc 77f4372d SharedUserData!SystemCallStub+0x4

01 028dfdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc

02 028dfe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a

WARNING: Stack unwind information not available. Following frames may be

wrong.

03 028dfed4 77d037f0 USER32!VkKeyScanW+0xd2

04 028dfef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d

05 028dff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3

06 028dffb8 77e4a990 msvcrt!_endthreadex+0x95

07 028dffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 23

System Thread ID: e3c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 0309ff10 77f43741 SharedUserData!SystemCallStub+0x4

01 0309ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0309ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0309ff94 02d538a9 kernel32!WaitForSingleObject+0xf

04 0309ffb8 77e4a990 oledb32!ReleaseResourceThread+0x54

05 0309ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 24

System Thread ID: 1388

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 030dff08 77f43741 SharedUserData!SystemCallStub+0x4

01 030dff0c 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 030dff7c 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 030dff8c 02d538b9 kernel32!WaitForSingleObject+0xf

04 030dffb8 77e4a990 oledb32!ResetResourceThread+0x84

05 030dffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 25

System Thread ID: 15c

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Idle ASP thread

# ChildEBP RetAddr

00 0311fd04 77f43741 SharedUserData!SystemCallStub+0x4

01 0311fd08 77e41817 ntdll!ZwWaitForSingleObject+0xc

02 0311fd78 77e4168f kernel32!WaitForSingleObjectEx+0xac

03 0311fd88 755f4fbf kernel32!WaitForSingleObject+0xf

04 0311ffb8 77e4a990 comsvcs!PingThread+0xea

05 0311ffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 26

System Thread ID: ee8

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 03efff70 77f430c7 SharedUserData!SystemCallStub+0x4

01 03efff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

02 03efffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

03 03efffec 00000000 kernel32!BaseThreadStart+0x34









Thread ID: 27

System Thread ID: 274

Kernel Time: 0:0:0.0

User Time: 0:0:0.0

Thread Type: Other

# ChildEBP RetAddr

00 07f3ff70 77f430c7 SharedUserData!SystemCallStub+0x4

01 07f3ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc

02 07f3ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b

03 07f3ffec 00000000 kernel32!BaseThreadStart+0x34



*****



Dump name is formatted as: PID-Timestamp.dmp



Creating C:\iisstate\output\2820-1113310987.dmp - mini user dump



*****



Closing open log file C:\iisstate\output\IISState-2820.log









"Ken Schaefer" wrote:





-