ASP.NET application locking up on Windows 2003

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - WebDAV - Where the properties go? HI, Can any one know where the WebDEV properties are stored in the server? I want to set the custom ("dead") properties programmatcially using PROPATCH method. For example, I want to set the "Status", "Category", "BranchName" some thing like this. I want to make sure that these properties exists along with the file when I take the back-up or move the files to different network drive. What I figured out is that, if I move or copy OR edit or rename the file within the same server harddisk, it has its properties. But if I move the file to a different computer and copy it back to the server, it lost its properties. Can anybody know where these properties are stored? and How I can make these properties persist along with the file? Thanks in advance Thanga Tag: ASP.NET application locking up on Windows 2003 Tag: 360766
  - 2
    - forms no longer submit after applying Windows Firewall Just applied the Windows Firewall using the Security Analyzer Wizard on a Windows Server 2003 machine hosting our websites. Now, forms on our sites will no longer submit. We get a FrontPage Error, check your application log for errors message when submit is pushed. There are no messages in the application log on the web server. I do have failed security audits in my security log that read the following: Object Open: Object Server: Security Object Type: File Object Name: C:\FRONTPG.LOG Handle ID: - Operation ID: {0,14007729} Process ID: 3548 Image File Name: C:\WINDOWS\system32\inetsrv\w3wp.exe Primary User Name: Webserver$ Primary Domain: Domain Primary Logon ID: (0x0,0x3E7) Client User Name: IUSR_Webserver Client Domain: Domain Client Logon ID: (0x0,0xD0DA6A) Accesses: READ_CONTROL SYNCHRONIZE WriteData (or AddFile) AppendData (or AddSubdirectory or CreatePipeInstance) WriteEA ReadAttributes WriteAttributes Privileges: - Restricted Sid Count: 0 Access Mask: 0x120196 Not sure if the above failed audit is related to it or not. I've tried doing a rollback on the security analyzer wizard and shutting off the Windows Firewall. I get the same error. This worked perfectly fine until the firewall was implemented yesterday afternoon. Tag: ASP.NET application locking up on Windows 2003 Tag: 360765
  - 3
    - Virtual directory dissapeared Hi, I am running IIS 6.0 on a windows 2003 server environment. It seems after configuring FrontPage server extensions the virtual directory has dissapeared from IIS. The resource in the application pool still points to it, but the vd is not under the default website anymore. Very strange. I can still access the website on the internet. Is there something wrong with iis config or registry that would cause such a problem? note: If i try to recreate the VD it says the alias is already in use. thanks Tag: ASP.NET application locking up on Windows 2003 Tag: 360764
  - 4
    - IIS6 question: How to pass through? Hi, I would like to be able to do the following; We have a domain name under IIS, lets call it; mysite.com On my IIS server I have installed a mail server application. This has a webmail facility, which can be accessed like this; mysite.com:8000 What I want though is to create a sub domain called webmail.mysite.com Which internally redirects to the correct URL. The problem is that one of the companies I work for have a very strict firewall, so a simple redirect isn't sufficient. I also want to do something groovy like this; pc1.mysite.com Which will actually point to a PC on my internal network at home so that I can login over VNC. Can anyone make any suggestions on how to do this? Many thanks John Tag: ASP.NET application locking up on Windows 2003 Tag: 360763
  - 5
    - what is the safest way to reload global.asa in IIS 6.0? i read in othe threads on this group that making any change to the global.asa file and saving it will initiate the application shutdown / application start up process and reload the application. iis finishes up all active sessions, refuses new connections, then recompiles global.asa. the global.asa is super simple. it just builds an array into an application variable: Sub Application_OnStart ' brief comment describing the array Dim aInfo(2,2) aInfo(0,0) = "A" aInfo(0,1) = "B" aInfo(1,0) = "C" aInfo(1,1) = "D" Application("AppArray") = aInfo End Sub and it works just fine. so the method we were using to force a global.asa reload was the following: 1. add a WHITE SPACE character to the end of the COMMENT LINE 2. save the global.asa file this would generate the following error in asp pages that reference the Application variable: "Type mismatch. An unexpected data type was encountered." a sample line generating this error would look like this: Dim aLocalArray aLocalArray = Application("AppArray") to fix this error, we would have to actually remove the WHITE SPACE character that was added to the live global.asa file, and then the asp pages would all work correctly. so obviously, my questions are: * why on earth does adding white space to a vbscript comment cause global.asa to suddenly break asp pages that reference its application variables? * what is the official "safe" way to reload global.asa in IIS 6.0? thanks for any help, jason Tag: ASP.NET application locking up on Windows 2003 Tag: 360762
  - 6
    - IIS6 cannot start a CMD process Hello I'm having difficulty with an application running under IIS6 which runs a process called HTMLDOC by shelling out to a command prompt - it is not working, apparently because it is not able to start the CMD process. Anyone got any ideas? We had this app working under IIS5 on win2K and are trying to migrate it to IIS6 on W2003. I notice that when it runs on IIS5 it seems to be using the IWAM account to run the CMD process whereas on IIS6 it seems to be trying to use the IUSR account - but I don't know how you would pre-determine which of these accounts it would use? Thanks Tag: ASP.NET application locking up on Windows 2003 Tag: 360759
  - 7
    - Performance Counter not working on one website I am running the WebService / CurrentConnections performance counter. It works fine for one of the websites I'm looking at, but not for another. The one it doesn't work for, the polling vertical red line doesn't even move. Is there a setting somewhere that controls whether a web site can be be 'polled' or not? I am using Windows Server 2003 Standard Edition. Thanks, John Tag: ASP.NET application locking up on Windows 2003 Tag: 360754
  - 8
    - Additional Help for SSL on IIS 6.0? Thanks for the help. I set SSL port and worked through another error related to certificates and now have a new error. Here is the relevant data from the SSL Diag log: Probing SSL... Connecting to 192.168.1.254:443 Connected Handshake: 78 bytes sent Handshake: 1051 bytes received Handshake: 310 bytes sent #WARNING:Handshake: unspecified error receiving data #WARNING:Handshake: 0x80090304 (-2146893052) error [ W3SVC/948978326/root ] AccessSSLFlags = 264 (0x108) AccessSSL = True AccessSSL128 = True AccessSSLNegotiateCert = False AccessSSLRequireCert = False AccessSSLMapCert = False There were no other errors in the log. Any additional information would be greatly appreciated. carl Tag: ASP.NET application locking up on Windows 2003 Tag: 360749
  - 9
    - Disable Automatic Password Synchronization in IIS 6.0 I need from an anonymous asp page under IIS6.0 to access a network resources file. After investigation, I found that is not permit by design, but it may be possible if You Disable Automatic Password Synchronization in IIS 6.0. http://support.microsoft.com/default.aspx?scid=kb;en-us;Q207671 I cannot find this setting in IIS6.0. Of course if the Q207671 is not applicable to IIS6.0, can you point me to the correct article? Thanks in advance Tag: ASP.NET application locking up on Windows 2003 Tag: 360746
  - 10
    - w3wp.exe identification Hi, If I have 5 application pools and 5 w3wp.exe processes how to identify which app pool uses which w3wp process? best regards Przemo Tag: ASP.NET application locking up on Windows 2003 Tag: 360742
  - 11
    - HTTP_URL different under IIS6 (vs. IIS5) yesterday I discovered that a number of scripts on our site have been relying on Request.ServerVariables("HTTP_URL") to deliver the server-relative URL requested, *even* when this results in a 404-Error. (this has been convenient in a number of cases.) apparently this doesn't change when the request is successful, but it appears that after a 404-Error (which we handle with our own script) the value of this server variable under IIS6 is now, e.g. 404;http://hostname/URL (where we used to get just /URL i can work around this problem (and to some extent having this clue is useful) but I thought I would check whether this behavior has officially changed. (other sites, like ours, are likely to upgrade or migrate from IIS5 to IIS6 in the coming months or years.) cheers, Tim Hanson Tag: ASP.NET application locking up on Windows 2003 Tag: 360741
  - 12
    - Creating Virtual Directories using DirectoryEntry - HRESULT: 0x8000500F Hello, The following C# method (taken from http://msdn.microsoft.com/library/default.asp?url=/library/en-us/iissdk/html/f55859db-6d44-46f3-ab25-751a23629f4a.asp) successfully creates a virtual directory at a specific location. static void CreateVDir(string metabasePath, string vDirName, string physicalPath) { // metabasePath is of the form "IIS://<servername>/<service>/<siteID>/Root[/<vdir>]" // for example "IIS://localhost/W3SVC/1/Root" // vDirName is of the form "<name>", for example, "MyNewVDir" // physicalPath is of the form "<drive>:\<path>", for example, "C:\Inetpub\Wwwroot" Console.WriteLine("\nCreating virtual directory {0}/{1}, mapping the Root application to {2}:", metabasePath, vDirName, physicalPath); try { DirectoryEntry site = new DirectoryEntry(metabasePath); string className = site.SchemaClassName.ToString(); if ((className.EndsWith("Server")) || (className.EndsWith("VirtualDir"))) { DirectoryEntries vdirs = site.Children; DirectoryEntry newVDir = vdirs.Add(vDirName, "IIsWebVirtualDir"); newVDir.Properties["Path"][0] = physicalPath; newVDir.Properties["AccessScript"][0] = true; // These properties are necessary for an application to be created. newVDir.Properties["AppFriendlyName"][0] = vDirName; newVDir.Properties["AppIsolated"][0] = "1"; newVDir.Properties["AppRoot"][0] = "/LM" + metabasePath.Substring(metabasePath.IndexOf("/", ("IIS://".Length))); newVDir.CommitChanges(); Console.WriteLine(" Done."); } else Console.WriteLine(" Failed. A virtual directory can only be created in a site or virtual directory node."); } catch (Exception ex) { Console.WriteLine("Failed in CreateVDir with the following exception: \n{0}", ex.Message); } } The limitation is that the virtual directory can only be created under a Server or VirtualDir object. My IIS has the following structure: [site]/[vdir]/[subfolder] Where [site] is an iis site, [vdir] is a virtual directory and [subfolder] is a folder that resides under the physical folder that is pointed to by [vdir]. Now, I can successfully create a new virtual directory under [vdir], but what I want to do is create one under [subfolder]. I can do this manually within IIS but not programmatically. The SchemaClassName reported by DirectoryEntry for [subfolder] is IIsObject, so the above code in it's original form (correctly) falls to the else branch. If I modify the if statement and attempt to create the virtual directory under [subfolder] I get a HRESULT: 0x8000500F exception. According to (http://msdn.microsoft.com/library/default.asp?url=/library/en-us/adsi/adsi/generic_adsi_error_codes.asp) this means "E_ADS_SCHEMA_VIOLATION - The attempted action violates the directory service schema rules". So, if I can create a virtual directory manually in IIS at this location, even though the SchemaClassName is not strictly a VirtualDir, why cant I do it programmatically using DirectoryEntry methods? Is there a workaround for this? Can I "cast" the SchemaClassName of IIsObject to IIsWebVirtualDir? Any other hints or tips? Thanks in advance, Steve Tag: ASP.NET application locking up on Windows 2003 Tag: 360738
  - 13
    - .exe extension my computer is running 2003 iis i found that some extension can not be download at client side for example .exe or .avi but they can download .zip I checked MIME Type, the .exe and .avi listed on mime type what's wrong Tag: ASP.NET application locking up on Windows 2003 Tag: 360731
  - 14
    - Does anyone know server side webdav programming? thanks. Hi, I found webdav is very good. I want to develope some code to handle webdav request. But I could not find any resource about it. Does anyone have experience about this, please help. Thanks! Tag: ASP.NET application locking up on Windows 2003 Tag: 360730
  - 15
    - IIS 5 HTTP Headers not working - corrupt metabase? Hi, We are running IIS 5 on a Windows 2000 SP4 server. We are running several sites in IIS and they seem to work OK - except it for the HTTP headers setting. We have set HTTP headers to "Expire Immediately" for certain sites. However this setting is ignored and when I view the raw HTTP header settings it returns something like "Cache control: private, max-age=86400" and the pages are cached by IE. I have been using explicit HTTP header cache control directives in our ASP and ASPX pages to stop the pages being cached. This seems to work. However if I take these away the HTTP header in IIS are ignored and the pages are cached by IE. Has anyone had similar problems. Could it be problems in the metabase? Could the HTTP header setting be being ignored for some reason? Can any recommend a tool to check this? Another possible factor is that we have installed a new software firewall on that server recently (Visnetic firewall). It has a HTTP filter on it. However it does not seem to be the cause. Grateful for any info, Pete Tag: ASP.NET application locking up on Windows 2003 Tag: 360729
  - 16
    - Integrated authentication with IIS6 Hi, Here is what I did to use integrated auth in IIS6: 1. created an application pool 2. changed the application pool's identity to a domain account 3. put the domain account to IIS_WPG group 4. create a virtual directory (test) with a simple test.htm and configure it to use the above created application pool 5. tested and it works fine 6. changed virtual directory to use integrated authentication only 7. use setspn.exe to do the following: setspn.exe -A Http/computername domain\account setspn.exe -A HTTP/computername.domainname domain\account setspn.exe -R computername 8. restarted the computer 9. try http://computername/test/test.htm test page from different computer - in my home domain (domain functional level 2003), it works fine BUT in my work place domain (functional level 2000 native), I would get a NT challenge popup to ask for username and password, even I enter a correct username and password I still get "HTTP Error 401.1 - Unauthorized: Access is denied due to invalid credentials." Any idea? Thanks very much!!! Regards, John Tag: ASP.NET application locking up on Windows 2003 Tag: 360716
  - 17
    - IIS 5 Isolation mode If a server has upgraded from IIS5 to IIS6 and the server is set without the IIS 5 Isolation mode enabled. Can it be reenabled without any problems to sites installed? Thanks. Tag: ASP.NET application locking up on Windows 2003 Tag: 360713
  - 18
    - SMTP server to send email to customers Hi...from time to time we send out the seasonal promotion email to our existing customers, currently outsource the service, but due to the cost, we are thinking of bring it in house. Thinking of set up a saparated SMTP server, in order not to upset our exchange server/internal network, let me draw a picture of the setups: 1) a new ADSL connection 2) a firewall 3) a separeted subnet behind the new ADSL 4) a stand alone Windows 2003 server with SMTP service enable or IIS installed, DNS server points to a the ISP's DNS server. 5) an ASP page to send mail batch from our CRM system. Will this work? Is there any limitation on how many messages to be in queue at the same time? How would I evaluate the speed/amount of the messages being delivered? How could it not to be labelled as SPAM by other servers? Do I actually has to set up a separated subnet in the above steps? What happend if the SMTP server is at the same domain as Exchange? Will it change the way how Exchange server sending the email now? A long question, thanks for the patient. Fshguo. Tag: ASP.NET application locking up on Windows 2003 Tag: 360712
  - 19
    - schedule to start web server automatically Hello, I would like to make sure my web server gets hit periodically every 1 hours or so in case aspnet_wp.exe process gets recycled because memory consumption exceeds the setting limit - it would get relaunched and my code (static) gets to run again. I can put this in a batch file and have it scheduled to run: "C:\Program Files\Internet Explorer\IEXPLORE.EXE" http://MySite/website/index.aspx The problem with that approach is that it doesn't return and a new IE window will be launched and stay up forever until somebody has to manually shuts it down. Do you know any other way? Thanks! Tag: ASP.NET application locking up on Windows 2003 Tag: 360707
  - 20
    - Display file contents for all extensions I have a server with a directory that needs to have IIS serve several files all with varying file extensions. Basically, we need the .* extensions\ to be able to be requested and served, rather than giving a 404 error. Any ideas on how to do this if we don't know exactly what filenames will be added? Tag: ASP.NET application locking up on Windows 2003 Tag: 360697
  - 21
    - need to view contents of metabase (IIS 5) independent of machine Has anyone seen a utility program that would display the contents of a metabase.bin in a readable format when it is not on the machine it was created on. We have a machine that was hacked to the point of being non bootable from a sister agency. The security folks have been able to recover the metabase.bin from the server, but without its underlying server the normal tools for looking at the metabase are not working. Tag: ASP.NET application locking up on Windows 2003 Tag: 360694
  - 22
    - FTP upload failures on 2003 server-urgent while uploading 450mb files ftp fails half way through, and I am unable to continue using ws_ftp. This failure is apparently cvaused by a second FTP session beginning on another directory on the server. What is the cause of this interaction, and how do I resolve it? -- Thanks, StanD Tag: ASP.NET application locking up on Windows 2003 Tag: 360688
  - 23
    - ftp timeout? Hello, I'm trying to host a couple rather large files w/ Windows 2003 Server FTP. I've configured the "timeout" parameter on both the site I'm using, and the main(default) site for HUGE numbers and I'm still getting timeout errors on clients. Can anyone suggest what/where I might be missing something? Tag: ASP.NET application locking up on Windows 2003 Tag: 360686
  - 24
    - iusr Is it possible to attach a personal certificate to the IUSR account? Tag: ASP.NET application locking up on Windows 2003 Tag: 360680
  - 25
    - How to create ns.domainname.com Hi, I would like to create my own DNS server for my DomainName.com such as NS.Domainname.com and NS1.DomainName.com Does any body know how to do this? I need help. Thanks Tag: ASP.NET application locking up on Windows 2003 Tag: 360679
- Next
  - 1
    - iis and dns configuratio behind firewall I am setting up web servers at a co-location facility. All of the web servers will be sitting behind a PIX 515 firewall on a private network of 10.10.10.0 addresses. The web servers are currently on the DMZ on our internal network have multiple IP addresses configured in TCP/IP with the public IP addresses. Should the new TCP/IP config be setup with private IPs and the sites be configured with private IPs and let the firewall NAT to the outside? We are also running primary and secondary DNS for the sites. Will the sites be setup with public IP addresses? Thanks for any help. Tag: ASP.NET application locking up on Windows 2003 Tag: 360678
  - 2
    - Permissions with IIS 6.0 I'm running an ASP.Net web application on Windows Server 2003. The application is attempting to launch a non-ASP.Net web application to no avail. Specifically, nothing happens when the user clicks a launch button. The code for launching the second application is of the following format (C# language): Response.Redirect("<url_name>") I suspect this is a permissions issue with Windows Server 2003. The code runs on Windows XP without any problem. To confirm this, I ran the PermissionVerifier utility that is part of the IIS 6.0 resource kit. The test failed, and indicated that ASPNET did not have the SeInteractiveLogonRight. The recommended solution is to add the ASPNET client to the "Log on as a service" policy in the "User Rights Assignment" folder in the "Local Security Settings" dialogue. However, ASPNET is already included in this group. I checked all the other policies to insure the proper users had been added. Any help would be appreciated. -- GIS System Architect Tag: ASP.NET application locking up on Windows 2003 Tag: 360675
  - 3
    - My web pages are not being updated correctly Hello, I'm having a problem with the IIS 6.0 server, serving up my web pages. Windows 2003. I have the following four html files and one *.dll executable. The first html file, called user.html, contains html code that divides my web page into 3 frames. (heading frame, left or menu frame, and right frame). This works fine. user.html <html> ... <frameset rows="125,*" framespacing="2" border="1" frameborder="1"> <frame src="../User/heading.html" scrolling="auto" name="heading"> <frameset cols="200,*" framespacing="2" border="1" frameborder="1"> <frame src="../User/menu.html" scrolling="auto" name="left_frame"> <frame src="../User/home.html" scrolling="auto" name="right_frame"> </frameset> </frameset> ... </html> The second html file, called menu.html, contains the following html code which has a link.. Clicking on the link will execute a .dll which should ouptut a new web page. I have the target, as target="_parent". menu.html <html> .... <font face="Arial"><b><a href="../Scenario/Scenario_Link/Scenario_Link.dll" target="_parent">Scenario</a></b></font> ... </html> This .dll, called Scenario_Link.dll, when executed, makes a request to the server to output the third html file, called scenario_link.html. This web page will consist of the three frames(heading, menu, and right) where the right frame will be updated with new html code(fourth html file, scenario_generation_update_frame.html). The html code for this scenario_link.html file is: scenario_link.html <html> ... <frameset rows="125,*" framespacing="2" border="1" frameborder="1"> <frame src="../../User/heading.html" scrolling="auto" name="heading"> <frameset cols="200,*" framespacing="2" border="1" frameborder="1"> <frame src="../../User/menu.html" scrolling="auto" name="left_frame"> <frame src="../Scenario_Generation/scenario_generation_update_frame.html" scrolling="auto" name="right_frame"> </frameset> </frameset> .... </html> When one clicks on the Link, the .dll is executed, which updates the scenario_generation_update_frame.html file and then makes a request to the server with the scenario_link.html file as its source. The server does output the correct web page the first time, but subsequent clicks on the Link, does not change the web page even though the file, scenario_generation_update_frame.html, has been updated and changed, which is part of the scenario_link.html file which is sourced to the server. I've tried sourcing the scenario_link.html file as a file and then as a buffer to the server but the same thing happens. Namely, it works for the first click, but subsequent clicks the web page is not being updated or changed even though the scenario_generation_update_frame.html has been updated correctly. Any ideas? Let me know if you need more information. Thank you. Tag: ASP.NET application locking up on Windows 2003 Tag: 360673
  - 4
    - Publising Frontpage Website When I'm ready to publish my Frontpage website, does frontpage have to be installed on the server that I'm publishing too? From http://www.developmentnow.com/g/59_2003_10_0_7_0/inetserver-iis.htm Posted via DevelopmentNow.com Groups http://www.developmentnow.com Tag: ASP.NET application locking up on Windows 2003 Tag: 360672
  - 5
    - Sharepoint Portal 2001 + IIS 5 + Windows 2000 Server = Unexpected Hangs... sometimes IIS stop responding. usually an IISReset is enough in order to resolve that issue. i tried the IISSTATE tool. i'm unable to understand the log. Can someone help me? Opened log file 'C:\iisstate\output\IISState-2992.log' *********************** Starting new log output IISState version 3.3.1 Tue Apr 19 17:40:46 2005 OS = Windows 2000 Executable: inetinfo.exe PID = 2992 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: bcc Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006f89c 7962660d ntdll!ZwReadFile+0xb 01 0006f910 79270135 KERNEL32!ReadFile+0x181 02 0006f93c 7926ffbb ADVAPI32!ScGetPipeInput+0x28 03 0006f9b8 79271995 ADVAPI32!ScDispatcherLoop+0x4a 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1 06 0006ff70 01002fbf inetinfo!main+0x654 07 0006ffc0 796287f5 inetinfo!mainCRTStartup+0xff 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: 980 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0059fd1c 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0059fd44 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0059fd54 6e651685 KERNEL32!WaitForSingleObject+0xf 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156 04 0059ffa4 792702f7 inetinfo!InetinfoStartService+0x2bd 05 0059ffb4 7962987c ADVAPI32!ScSvcctrlThreadA+0xe 06 0059ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 2 System Thread ID: 5ec Kernel Time: 0:0:0.531 User Time: 0:0:0.984 Thread Type: Other # ChildEBP RetAddr 00 006dfe5c 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 006dfeac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 006dff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 006dff24 6e505a7c USER32!MsgWaitForMultipleObjects+0x1d 04 006dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7 05 006dffb4 7962987c MSVCRT!_endthreadex+0xc1 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: a24 Kernel Time: 0:0:0.515 User Time: 0:0:0.984 Thread Type: Other # ChildEBP RetAddr 00 0071fe5c 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0071feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0071ff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 0071ff24 6e505a7c USER32!MsgWaitForMultipleObjects+0x1d 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7 05 0071ffb4 7962987c MSVCRT!_endthreadex+0xc1 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: 77c Kernel Time: 0:0:1.140 User Time: 0:0:0.93 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00b7fe24 7712dbac ntdll!NtReplyWaitReceivePortEx+0xb 01 00b7ff74 7712d9db RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 00b7ff78 7712dd59 RPCRT4!RecvLotsaCallsWrapper+0x9 03 00b7ffa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 04 00b7ffb4 7962987c RPCRT4!ThreadStartRoutine+0x18 05 00b7ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: ad0 Kernel Time: 0:0:0.109 User Time: 0:0:0.46 Thread Type: Other # ChildEBP RetAddr 00 00e0fc1c 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 00e0fc6c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00e0fcc8 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 00e0fce4 788071e0 USER32!MsgWaitForMultipleObjects+0x1d 04 00e0fd30 65d9cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00e0fd70 01002440 w3svc!ServiceEntry+0x1b5 06 00e0ffa4 792702f7 inetinfo!InetinfoStartService+0x2bd 07 00e0ffb4 7962987c ADVAPI32!ScSvcctrlThreadA+0xe 08 00e0ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 6 System Thread ID: 9dc Kernel Time: 0:0:0.93 User Time: 0:0:0.31 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 00e4fc1c 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 00e4fc6c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00e4fcc8 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 00e4fce4 788071e0 USER32!MsgWaitForMultipleObjects+0x1d 04 00e4fd30 78361a78 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00e4fd70 01002440 SMTPSVC!ServiceEntry+0x136 06 00e4ffa4 792702f7 inetinfo!InetinfoStartService+0x2bd 07 00e4ffb4 7962987c ADVAPI32!ScSvcctrlThreadA+0xe 08 00e4ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 7 System Thread ID: 950 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00e8fc1c 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 00e8fc6c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00e8fcc8 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 00e8fce4 788071e0 USER32!MsgWaitForMultipleObjects+0x1d 04 00e8fd30 69cd7e25 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00e8fd70 01002440 NntpSvc!ServiceEntry+0x13f 06 00e8ffa4 792702f7 inetinfo!InetinfoStartService+0x2bd 07 00e8ffb4 7962987c ADVAPI32!ScSvcctrlThreadA+0xe 08 00e8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 8 System Thread ID: a4c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00ecfc1c 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 00ecfc6c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00ecfcc8 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 00ecfce4 788071e0 USER32!MsgWaitForMultipleObjects+0x1d 04 00ecfd30 6fbdb2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00ecfd70 01002440 ftpsvc2!ServiceEntry+0xc7 06 00ecffa4 792702f7 inetinfo!InetinfoStartService+0x2bd 07 00ecffb4 7962987c ADVAPI32!ScSvcctrlThreadA+0xe 08 00ecffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: c9c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00f8ff5c 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 00f8ff88 6d6329ef KERNEL32!GetQueuedCompletionStatus+0x27 02 00f8ffb4 7962987c ISATQ!I_AtqOplockThreadFunc+0x32 03 00f8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: c90 Kernel Time: 0:0:2.921 User Time: 0:0:0.453 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00fcff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 00fcff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 00fcffb4 7962987c ISATQ!AtqPoolThread+0x40 03 00fcffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: a84 Kernel Time: 0:0:6.953 User Time: 0:0:1.78 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0104ff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0104ff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0104ffb4 7962987c ISATQ!AtqPoolThread+0x40 03 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: 7c8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0128fe24 7712dbac ntdll!NtReplyWaitReceivePortEx+0xb 01 0128ff74 7712d9db RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0128ff78 7712dd59 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0128ffa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 04 0128ffb4 7962987c RPCRT4!ThreadStartRoutine+0x18 05 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: 884 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 012cfd20 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 012cfd70 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 012cfd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17 03 012cffb4 7962987c RTUTILS!TraceServerThread+0xde 04 012cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: ac8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0155feb8 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0155fee4 771257c0 KERNEL32!GetQueuedCompletionStatus+0x27 02 0155ff20 77142899 RPCRT4!COMMON_ProcessCalls+0x9e 03 0155ff74 77142778 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99 04 0155ff78 7712dd59 RPCRT4!ProcessIOEventsWrapper+0x9 05 0155ffa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 06 0155ffb4 7962987c RPCRT4!ThreadStartRoutine+0x18 07 0155ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 15 System Thread ID: 97c Kernel Time: 0:0:1.125 User Time: 0:0:0.62 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 015afe24 7712dbac ntdll!NtReplyWaitReceivePortEx+0xb 01 015aff74 7712d9db RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 015aff78 7712dd59 RPCRT4!RecvLotsaCallsWrapper+0x9 03 015affa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 04 015affb4 7962987c RPCRT4!ThreadStartRoutine+0x18 05 015affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 16 System Thread ID: 65c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 015eff20 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 015eff70 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 015eff88 700924fa KERNEL32!WaitForMultipleObjects+0x17 03 015effb4 7962987c exstrace!RegNotifyThread+0x6f 04 015effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: a90 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0162ff00 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0162ff50 74fe7871 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0162ff6c 6fbd6e80 WS2_32!WSAWaitForMultipleEvents+0x18 03 0162ffb4 7962987c ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39 04 0162ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: cd8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0166ff5c 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0166ff84 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0166ff94 73263366 KERNEL32!WaitForSingleObject+0xf 03 0166ffb4 7962987c compfilt!CompressionThread+0x29 04 0166ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 19 System Thread ID: ac0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 016aff24 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 016aff74 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 016aff8c 70091e6a KERNEL32!WaitForMultipleObjects+0x17 03 016affb4 7962987c exstrace!WriteTraceThread+0x2f 04 016affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 20 System Thread ID: b68 Kernel Time: 0:0:0.78 User Time: 0:0:0.93 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0176ff64 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0176ff8c 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0176ff9c 6fe9841e KERNEL32!WaitForSingleObject+0xf 03 0176ffb4 7962987c FCACHDLL!CScheduleThread::ScheduleThread+0x22 04 0176ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 21 System Thread ID: a60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 018aff18 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 018aff68 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 018aff80 7837b026 KERNEL32!WaitForMultipleObjects+0x17 03 018affb4 7962987c SMTPSVC!TcpRegNotifyThread+0x136 04 018affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 22 System Thread ID: 75c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 018eff68 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 018eff90 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 018effa0 7837ae5a KERNEL32!WaitForSingleObject+0xf 03 018effb4 7962987c SMTPSVC!FreeLibThread+0x1d 04 018effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 23 System Thread ID: 99c Kernel Time: 0:0:0.93 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0192ff64 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0192ff8c 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0192ff9c 69cf7598 KERNEL32!WaitForSingleObject+0xf 03 0192ffb4 7962987c NntpSvc!CScheduleThread::ScheduleThread+0x22 04 0192ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 24 System Thread ID: 678 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0196ff5c 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0196ff84 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0196ff94 69cf3c14 KERNEL32!WaitForSingleObject+0xf 03 0196ffb4 7962987c NntpSvc!CRetryQ::RetryQueueThread+0x36 04 0196ffc0 78463404 KERNEL32!BaseThreadStart+0x52 05 00e8fba4 78478191 ntdll!LdrpLoadDll+0x3c5 06 00e8fba4 78478191 ntdll!_except_handler3 07 00e8fc54 771379f1 ntdll!_except_handler3 08 00e8fc6c 77e13990 RPCRT4!LRPC_SASSOCIATION::DealWithBindBackMessage+0x42 09 00e8ffdc 7963f0b4 USER32!MsgWaitForMultipleObjectsEx+0x153 0a ffffffff 00000000 KERNEL32!_except_handler3 Thread ID: 25 System Thread ID: afc Kernel Time: 0:0:0.62 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 019dfe70 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 019dfec0 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 019dff1c 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 019dff38 65d99ccb USER32!MsgWaitForMultipleObjects+0x1d 04 019dff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42 05 019dffb4 7962987c MSVCRT!_endthread+0xc6 06 019dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 26 System Thread ID: b1c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01a1fea8 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 01a1fef8 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01a1ff54 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153 03 01a1ff70 65d99d47 USER32!MsgWaitForMultipleObjects+0x1d 04 01a1ffb4 7962987c w3svc!OleHackThread+0x88 05 01a1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 27 System Thread ID: 3d4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01cbfce0 74f81394 ntdll!NtWaitForSingleObject+0xb 01 01cbfd1c 74f83c59 msafd!SockWaitForSingleObject+0x1a8 02 01cbfe08 74fe12f5 msafd!WSPSelect+0x24e 03 01cbfe6c 6e213b6e WS2_32!select+0xe7 04 01cbffb4 7962987c inetsloc!SocketListenThread+0x51 05 01cbffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: c60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 01cffe24 7712dbac ntdll!NtReplyWaitReceivePortEx+0xb 01 01cfff74 7712d9db RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 01cfff78 7712dd59 RPCRT4!RecvLotsaCallsWrapper+0x9 03 01cfffa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 04 01cfffb4 7962987c RPCRT4!ThreadStartRoutine+0x18 05 01cfffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 29 System Thread ID: ab8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Listener # ChildEBP RetAddr 00 01d3fdfc 74f81394 ntdll!NtWaitForSingleObject+0xb 01 01d3fe38 74f83c59 msafd!SockWaitForSingleObject+0x1a8 02 01d3ff24 74fe12f5 msafd!WSPSelect+0x24e 03 01d3ff88 6d6375bd WS2_32!select+0xe7 04 01d3ffb0 6d63791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22 05 01d3ffb4 7962987c ISATQ!BmonThreadFunc+0x9 06 01d3ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 30 System Thread ID: 9f0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01d8ff54 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 01d8ff7c 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 01d8ff8c 676f99cd KERNEL32!WaitForSingleObject+0xf 03 01d8ffb4 7962987c aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+0xce 04 01d8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 31 System Thread ID: 418 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01dcff4c 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 01dcff74 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 01dcff84 69cc42a5 KERNEL32!WaitForSingleObject+0xf 03 01dcffb4 7962987c NntpSvc!CNewsTree::NewsTreeCrawler+0x1d0 04 01dcffc0 0074692e KERNEL32!BaseThreadStart+0x52 WARNING: Frame IP not in any known module. Following frames may be wrong. 05 6f697061 00000000 0x74692e Thread ID: 32 System Thread ID: 87c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01e0ff58 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 01e0ff84 69cedfd8 KERNEL32!GetQueuedCompletionStatus+0x27 02 01e0ffb4 7962987c NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 01e0ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 33 System Thread ID: 8a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01e4ff58 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 01e4ff84 69cedfd8 KERNEL32!GetQueuedCompletionStatus+0x27 02 01e4ffb4 7962987c NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 01e4ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 34 System Thread ID: b90 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01e8ff58 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 01e8ff84 69cedfd8 KERNEL32!GetQueuedCompletionStatus+0x27 02 01e8ffb4 7962987c NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 01e8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 35 System Thread ID: 804 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01ecff58 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 01ecff84 69cedfd8 KERNEL32!GetQueuedCompletionStatus+0x27 02 01ecffb4 7962987c NntpSvc!CThreadPool::ThreadDispatcher+0x34 03 01ecffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 36 System Thread ID: a64 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01f0ff48 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 01f0ff70 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 01f0ff80 69cbabe8 KERNEL32!WaitForSingleObject+0xf 03 01f0ffb4 7962987c NntpSvc!FeedScheduler+0x5c 04 01f0ffc0 0074692e KERNEL32!BaseThreadStart+0x52 WARNING: Frame IP not in any known module. Following frames may be wrong. 05 6f697061 00000000 0x74692e Thread ID: 37 System Thread ID: c50 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 01f4fe24 7712dbac ntdll!NtReplyWaitReceivePortEx+0xb 01 01f4ff74 7712d9db RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 01f4ff78 7712dd59 RPCRT4!RecvLotsaCallsWrapper+0x9 03 01f4ffa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 04 01f4ffb4 7962987c RPCRT4!ThreadStartRoutine+0x18 05 01f4ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 38 System Thread ID: ca0 Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 01fcfed0 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 01fcff20 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 01fcff38 676e00e1 KERNEL32!WaitForMultipleObjects+0x17 03 01fcff9c 7836dccd aqueue!CConnMgr::GetNextConnection+0x1da 04 01fcffb4 7962987c SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x23 05 01fcffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 39 System Thread ID: c7c Kernel Time: 0:0:0.109 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0213ff08 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0213ff58 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 0213ff70 6b4d37d4 KERNEL32!WaitForMultipleObjects+0x17 03 0213ffb4 7962987c comsvcs!CEventDispatcher::PushEvents+0x44 04 0213ffc0 00000008 KERNEL32!BaseThreadStart+0x52 Thread ID: 40 System Thread ID: 288 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. Remote call is either to a MTA object or object not initialized. Also, possible utility thread. DCOM call being made to Process ID: 2404 Waiting on thread id: ffffffff # ChildEBP RetAddr 00 0217fb68 77128d8a ntdll!NtRequestWaitReplyPort+0xb 01 0217fb94 77126f6c RPCRT4!LRPC_CCALL::SendReceive+0x11e 02 0217fba0 77b2b8fd RPCRT4!I_RpcSendReceive+0x2c 03 0217fbc0 77b2b84b ole32!ThreadSendReceive+0xef 04 0217fbd8 77b2b6bc ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14a 05 0217fc18 77b2dbc2 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 0217fc28 77a903a0 ole32!CRpcChannelBuffer::SendReceive+0x11 07 0217fc88 77a90349 ole32!CAptRpcChnl::SendReceive+0xa9 08 0217fce0 77184908 ole32!CCtxComChnl::SendReceive+0x124 09 0217fcfc 77183e62 RPCRT4!NdrProxySendReceive+0x4c 0a 0217ff44 771849ef RPCRT4!NdrClientCall2+0x4f5 0b 0217ff60 77131baf RPCRT4!ObjectStublessClient+0x76 0c 0217ff70 6b4d372e RPCRT4!ObjectStubless+0xf 0d 0217ffb4 7962987c comsvcs!CEventDispatcher::GetEventServerInfoThread+0x10e 0e 0217ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 41 System Thread ID: c88 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\SHAREP~1\Bin\vaiutild.dll - Thread Type: Other # ChildEBP RetAddr 00 0250feec 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0250ff3c 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 0250ff54 49ac80b6 KERNEL32!WaitForMultipleObjects+0x17 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0250ff9c 49ac8188 vaiutild+0x80b6 04 0250ffb4 7962987c vaiutild+0x8188 05 0250ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 42 System Thread ID: bf8 Kernel Time: 0:0:0.78 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programmi\SharePoint Portal Server\Bin\msdmisap.dll - Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0255ff28 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0255ff50 490634e7 KERNEL32!WaitForSingleObjectEx+0x71 WARNING: Stack unwind information not available. Following frames may be wrong. 02 0255ff64 4906758e msdmisap+0x34e7 03 0255ffa0 49067650 msdmisap!HttpExtensionProc+0x1ef9 04 0255ffb4 7962987c msdmisap!HttpExtensionProc+0x1fbb 05 0255ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 43 System Thread ID: 580 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programmi\File comuni\Microsoft Shared\Web Storage System\bin\PTTRACE.DLL - Thread Type: Other # ChildEBP RetAddr 00 0c25ff20 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0c25ff70 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 0c25ff88 62dd22ff KERNEL32!WaitForMultipleObjects+0x17 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0c25ffb4 7962987c PTTRACE!TermAsyncTrace+0x51b 04 0c25ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 44 System Thread ID: 7f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0c29ff24 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0c29ff74 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 0c29ff8c 62dd189b KERNEL32!WaitForMultipleObjects+0x17 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0c29ffb4 7962987c PTTRACE!DebugAssert+0x4f3 04 0c29ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 45 System Thread ID: af0 Kernel Time: 0:0:0.109 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 0c35ff18 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0c35ff68 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 0c35ff80 5e1300b0 KERNEL32!WaitForMultipleObjects+0x17 03 0c35ffb4 7962987c davex!CIdleThread::DwIdleThreadProc+0x2c 04 0c35ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 46 System Thread ID: 634 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programmi\File comuni\Microsoft Shared\Web Storage System\bin\ifsproxy.dll - Thread Type: Other # ChildEBP RetAddr 00 0c50ff34 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0c50ff60 6112216b KERNEL32!GetQueuedCompletionStatus+0x27 WARNING: Stack unwind information not available. Following frames may be wrong. 02 0c50ffb4 7962987c ifsproxy!CIfsGlobals::operator=+0x9b 03 0c50ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 47 System Thread ID: c08 Kernel Time: 0:0:1.593 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programmi\File comuni\Microsoft Shared\Web Storage System\bin\EPOXY.DLL - Thread Type: Other # ChildEBP RetAddr 00 0c56fef8 7962bdd7 ntdll!ZwWaitForMultipleObjects+0xb 01 0c56ff48 7963abfb KERNEL32!WaitForMultipleObjectsEx+0xea 02 0c56ff60 62f23004 KERNEL32!WaitForMultipleObjects+0x17 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0c56ffb0 62f243ea EPOXY+0x3004 04 00000fb8 00000000 EPOXY!CEpoxyQIF::operator=+0x1158 Thread ID: 48 System Thread ID: 7c4 Kernel Time: 0:0:0.953 User Time: 0:0:0.31 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0108fe24 7712dbac ntdll!NtReplyWaitReceivePortEx+0xb 01 0108ff74 7712d9db RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0108ff78 7712dd59 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0108ffa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 04 0108ffb4 7962987c RPCRT4!ThreadStartRoutine+0x18 05 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 49 System Thread ID: a0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Programmi\SharePoint Portal Server\Bin\pkmdasl.dll - Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01f8ff30 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 01f8ff58 4942f69a KERNEL32!WaitForSingleObjectEx+0x71 WARNING: Stack unwind information not available. Following frames may be wrong. 02 01f8ffb4 7962987c pkmdasl!MyHttpExtensionProc+0x4edf 03 01f8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 50 System Thread ID: 214 Kernel Time: 0:0:0.625 User Time: 0:0:0.78 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0ccbff50 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0ccbff78 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0ccbff88 49413458 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 0ccbffb4 7962987c pkmdasl+0x13458 04 0ccbffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 51 System Thread ID: cd4 Kernel Time: 0:0:0.875 User Time: 0:0:0.46 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0ccfff50 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0ccfff78 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0ccfff88 49413458 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 0ccfffb4 7962987c pkmdasl+0x13458 04 0ccfffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 52 System Thread ID: aec Kernel Time: 0:0:0.843 User Time: 0:0:0.46 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0cd4ff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0cd4ff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0cd4ffb4 7962987c ISATQ!AtqPoolThread+0x40 03 0cd4ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 53 System Thread ID: b70 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 0cddff9c 78465c42 ntdll!NtDelayExecution+0xb 01 0cddffb4 7962987c ntdll!RtlpTimerThread+0x42 02 0cddffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 54 System Thread ID: 130 Kernel Time: 0:0:0.500 User Time: 0:0:0.109 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0d0eff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d0eff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d0effb4 7962987c ISATQ!AtqPoolThread+0x40 03 0d0effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 55 System Thread ID: ce4 Kernel Time: 0:0:0.843 User Time: 0:0:0.46 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0d16ff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d16ff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d16ffb4 7962987c ISATQ!AtqPoolThread+0x40 03 0d16ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 56 System Thread ID: 824 Kernel Time: 0:0:3.812 User Time: 0:0:0.515 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0d1aff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d1aff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d1affb4 7962987c ISATQ!AtqPoolThread+0x40 03 0d1affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 57 System Thread ID: 9ec Kernel Time: 0:0:0.328 User Time: 0:0:0.62 Thread Status: Thread is in a WAIT state. Thread Type: ISAPI Extension # ChildEBP RetAddr 00 0d5df47c 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0d5df4a4 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0d5df4b4 65dc08a2 KERNEL32!WaitForSingleObject+0xf 03 0d5df4c4 65dbe369 w3svc!EXEC_DESCRIPTOR::WaitForChildEvent+0x19 04 0d5dfcd0 65dc8b4f w3svc!HTTP_REQUEST::ExecuteChildCGIBGI+0x3d6 05 0d5dfcec 65c17f98 w3svc!WAM_REQUEST::SSIncExec+0x79 06 0d5dfd24 5e146014 wam!ServerSupportFunction+0x472 07 0d5dff70 5e15591f davex!CExecuteChildContext::DoWork+0x37 08 0d5dff8c 5e15599e davex!CDavWorkerThread::GetWorkCompletion+0x38 09 0d5dffb4 7962987c davex!CDavWorkerThread::ThreadDispatcher+0x30 0a 0d5dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 58 System Thread ID: 7fc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 0d70ff30 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d70ff5c 6ee499c2 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d70ff8c 6ee4997a httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 0d70ffb4 7962987c httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 0d70ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 59 System Thread ID: c24 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 0d74ff30 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d74ff5c 6ee499c2 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d74ff8c 6ee4997a httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 0d74ffb4 7962987c httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 0d74ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 60 System Thread ID: c74 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 0d78ff30 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d78ff5c 6ee499c2 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d78ff8c 6ee4997a httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 0d78ffb4 7962987c httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 0d78ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 61 System Thread ID: b24 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 0d7cff30 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d7cff5c 6ee499c2 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d7cff8c 6ee4997a httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 0d7cffb4 7962987c httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 0d7cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 62 System Thread ID: 33c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: WebDav Worker Thread # ChildEBP RetAddr 00 0d80ff30 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0d80ff5c 6ee499c2 KERNEL32!GetQueuedCompletionStatus+0x27 02 0d80ff8c 6ee4997a httpext!CDavWorkerThread::GetWorkCompletion+0x23 03 0d80ffb4 7962987c httpext!CDavWorkerThread::ThreadDispatcher+0x30 04 0d80ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 63 System Thread ID: 9bc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0f36ff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0f36ff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0f36ffb4 7962987c ISATQ!AtqPoolThread+0x40 03 0f36ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 64 System Thread ID: a7c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0f3aff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0f3aff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0f3affb4 7962987c ISATQ!AtqPoolThread+0x40 03 0f3affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 65 System Thread ID: bfc Kernel Time: 0:0:0.609 User Time: 0:0:0.109 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0f3eff50 7962fea1 ntdll!NtRemoveIoCompletion+0xb 01 0f3eff7c 6d632957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0f3effb4 7962987c ISATQ!AtqPoolThread+0x40 03 0f3effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 66 System Thread ID: 4a8 Kernel Time: 0:0:0.78 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0f48fe24 7712dbac ntdll!NtReplyWaitReceivePortEx+0xb 01 0f48ff74 7712d9db RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0f48ff78 7712dd59 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0f48ffa8 7712dd0b RPCRT4!BaseCachedThreadRoutine+0x4f 04 0f48ffb4 7962987c RPCRT4!ThreadStartRoutine+0x18 05 0f48ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 67 System Thread ID: a20 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0f5aff20 7846c35a ntdll!NtRemoveIoCompletion+0xb 01 0f5affb4 7962987c ntdll!RtlpWorkerThread+0x6b 02 0f5affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 68 System Thread ID: c94 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: ISAPI Extension # ChildEBP RetAddr 00 0f6cf47c 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0f6cf4a4 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0f6cf4b4 65dc08a2 KERNEL32!WaitForSingleObject+0xf 03 0f6cf4c4 65dbe369 w3svc!EXEC_DESCRIPTOR::WaitForChildEvent+0x19 04 0f6cfcd0 65dc8b4f w3svc!HTTP_REQUEST::ExecuteChildCGIBGI+0x3d6 05 0f6cfcec 65c17f98 w3svc!WAM_REQUEST::SSIncExec+0x79 06 0f6cfd24 5e146014 wam!ServerSupportFunction+0x472 07 0f6cff70 5e15591f davex!CExecuteChildContext::DoWork+0x37 08 0f6cff8c 5e15599e davex!CDavWorkerThread::GetWorkCompletion+0x38 09 0f6cffb4 7962987c davex!CDavWorkerThread::ThreadDispatcher+0x30 0a 0f6cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 69 System Thread ID: cac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: ISAPI Extension # ChildEBP RetAddr 00 0f70f47c 7963c4c2 ntdll!NtWaitForSingleObject+0xb 01 0f70f4a4 79631b1b KERNEL32!WaitForSingleObjectEx+0x71 02 0f70f4b4 65dc08a2 KERNEL32!WaitForSingleObject+0xf 03 0f70f4c4 65dbe369 w3svc!EXEC_DESCRIPTOR::WaitForChildEvent+0x19 04 0f70fcd0 65dc8b4f w3svc!HTTP_REQUEST::ExecuteChildCGIBGI+0x3d6 05 0f70fcec 65c17f98 w3svc!WAM_REQUEST::SSIncExec+0x79 06 0f70fd24 5e146014 wam!ServerSupportFunction+0x472 07 0f70ff70 5e15591f davex!CExecuteChildContext::DoWork+0x37 08 0f70ff8c 5e15599e davex!CDavWorkerThread::GetWorkCompletion+0x38 09 0f70ffb4 7962987c davex!CDavWorkerThread::ThreadDispatcher+0x30 0a 0f70ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 70 System Thread ID: 344 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0f74ff5c 7963aca5 ntdll!NtDelayExecution+0xb 01 0f74ff7c 7963ac79 KERNEL32!SleepEx+0x32 02 0f74ff88 77a60216 KERNEL32!Sleep+0xb 03 0f74ff90 77a8e970 ole32!CROIDTable::WorkerThreadLoop+0xc 04 0f74ffa8 77a8e92f ole32!CRpcThread::WorkerLoop+0x22 05 0f74ffb4 7962987c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 0f74ffec 00000000 KERNEL32!BaseThreadStart+0x52 ***** Dump name is formatted as: PID-Timestamp.dmp Creating C:\iisstate\output\2992-1113925262.dmp - mini user dump ***** Closing open log file C:\iisstate\output\IISState-2992.log Thanks a lot! Tag: ASP.NET application locking up on Windows 2003 Tag: 360670
  - 6
    - help with IISState Log` I was wondering if anyone can help me out figuring out this log file, it sounds like the problem is with ws2help.dll but I couldnt any info on this, here is two crashes just today... Opened log file 'C:\iisstate\output\IISState-5660.log' *********************** Starting new log output IISState version 3.3.1 Tue Apr 19 11:25:04 2005 OS = Windows 2000 Executable: inetinfo.exe PID = 5660 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis DLL (!FunctionName) that failed: WS2HELP!WahReferenceContextByHandle Thread ID: 40 System Thread ID: 1788 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 04d0fe3c 750313c6 WS2HELP!WahReferenceContextByHandle+0x40 01 04d0fe5c 6d7076cb WS2_32!WSARecv+0x56 02 04d0fe94 65f27728 ISATQ!AtqReadSocket+0xf8 03 04d0feb8 65f27240 w3svc!CLIENT_CONN::ReadFile+0x29 04 04d0fed0 65f252bf w3svc!HTTP_REQ_BASE::ReadFile+0x55 05 04d0fef4 65f19c5d w3svc!HTTP_REQ_BASE::StartNewRequest+0x183 06 04d0ff0c 65f19ae5 w3svc!CLIENT_CONN::OnSessionStartup+0x7e 07 04d0ff38 65f1a895 w3svc!CLIENT_CONN::DoWork+0x241 08 04d0ff4c 6d70877b w3svc!W3Completion+0x43 09 04d0ff80 6d708a43 ISATQ!AtqpProcessContext+0x266 0a 04d0ffb4 7c57438b ISATQ!AtqPoolThread+0x1a8 0b 04d0ffec 00000000 KERNEL32!BaseThreadStart+0x52 Closing open log file C:\iisstate\output\IISState-5660.log Opened log file 'C:\iisstate\output\IISState-5660.log' Starting new log output IISState version 3.3.1 Tue Apr 19 12:23:38 2005 OS = Windows 2000 Executable: inetinfo.exe PID = 2708 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis DLL (!FunctionName) that failed: WS2HELP!WahReferenceContextByHandle Thread ID: 38 System Thread ID: e60 Kernel Time: 0:0:1.343 User Time: 0:0:0.218 Thread Type: HTTP Listener # ChildEBP RetAddr 00 03f1fc04 74fd11b4 WS2HELP!WahReferenceContextByHandle+0x4a 01 03f1fc10 74fd1fbb msafd!SockFindAndReferenceSocket+0x10 02 03f1fc98 750314b5 msafd!WSPCloseSocket+0x72 03 03f1fcb8 6d70737d WS2_32!closesocket+0x5e 04 03f1fcd0 65f1a54f ISATQ!AtqCloseSocket+0x15c 05 03f1ff08 65f19b97 w3svc!CLIENT_CONN::Disconnect+0x8c6 06 03f1ff38 65f1a895 w3svc!CLIENT_CONN::DoWork+0x2f3 07 03f1ff4c 6d70877b w3svc!W3Completion+0x43 08 03f1ff80 6d708a43 ISATQ!AtqpProcessContext+0x266 09 03f1ffb4 7c57438b ISATQ!AtqPoolThread+0x1a8 0a 03f1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Closing open log file C:\iisstate\output\IISState-2708.log Opened log file 'C:\iisstate\output\IISState-2708.log' Tag: ASP.NET application locking up on Windows 2003 Tag: 360669
  - 7
    - IIS Logs I am using IIS 5 Logs W3C Extended format I need to collect vital information on authenticated users on the website? All the entries for the authenticated username for the fields cs-username are empty in the above IIS logs the other information appears to be captured in the above logs The user name and password are entered into an ASPX login form, but the actual authentication is performed by forms authentication. I need the username in the log files in order that webtrends log analyzer could use it to provide meaningful information about the web usage. How can I code the ASPX login form to push the authenticated username into the IIS logs? What object collection in IIS contains the authenticated users or current user logged on for the session? See Attached log file and screenshot of the extended properties of IIS. Tag: ASP.NET application locking up on Windows 2003 Tag: 360668
  - 8
    - IIS STATE LOG -crash on IIS 6 - analysis needed The following log file was taken during a crash of IIS6 on W2003 - can anyone throw any light on why this is happening for me please? The app was working fine under W2000 but when moved to W2003 it crashes two or three times a day. Many Thanks Graham B Opened log file 'C:\Program Files\IIS Resources\IISState\output\IISState.log' *********************** Starting new log output IISState version 3.0 Wed Mar 30 15:54:15 2005 OS = Windows 2003 Server Executable: dllhost.exe PID = 5900 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis DLL (!FunctionName) that failed: ntdll!RtlImageDirectoryEntryToData Thread ID: 133 System Thread ID: 1a8 Kernel Time: 0:0:0.31 User Time: 0:0:0.46 *** WARNING: Unable to verify checksum for \\?\D:\Sw\IIS\AdminScripts\wsisa.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\D:\Sw\IIS\AdminScripts\wsisa.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0073f290 77f46866 ntdll!RtlImageDirectoryEntryToData+0x21c 01 0073f35c 77bbb9be ntdll!RtlFreeHeap+0x181 02 0073f3a4 1000545c msvcrt!free+0xc3 03 01047298 50545448 wsisa+0x545c Closing open log file C:\Program Files\IIS Resources\IISState\output\IISState.log Opened log file 'C:\Program Files\IIS Resources\IISState\output\IISState.log' *********************** Starting new log output IISState version 3.0 Wed Mar 30 15:54:19 2005 OS = Windows 2003 Server Executable: dllhost.exe PID = 5900 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 1710 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0006fcd8 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0006fd4c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0006fd5c 7720aa16 kernel32!WaitForSingleObject+0xf 03 0006fd78 7720b48c ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x49 04 0006fd90 0100137c ole32!CoRegisterSurrogateEx+0x1a4 05 0006ff1c 01001646 dllhost!WinMain+0xda 06 0006ffc0 77e4f38c dllhost!WinMainCRTStartup+0x182 07 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: 171c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 005eff14 77d01758 SharedUserData!SystemCallStub+0x4 01 005eff34 771b2711 USER32!NtUserGetMessage+0xc 02 005eff74 771b268f ole32!CDllHost::STAWorkerLoop+0x70 03 005eff90 771b25da ole32!CDllHost::WorkerThread+0xc6 04 005eff94 771625ea ole32!DLLHostThreadEntry+0x9 05 005eff9c 77160000 ole32!CRpcThread::WorkerLoop+0x1e 06 005effac 77162653 ole32!_imp__InstallApplication <PERF> (ole32+0x0) 07 005effb8 77e4a990 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1f 08 005effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 1724 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0066ff9c 77f4262b SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0066ffb8 77e4a990 ntdll!NtDelayExecution+0xc 02 0066ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 3 System Thread ID: 1728 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 006aff70 77f430c7 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 006affb8 77e4a990 ntdll!ZwRemoveIoCompletion+0xc 02 006affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 4 System Thread ID: 172c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 006ffecc 77f430c7 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 006ffefc 7569b4ef ntdll!ZwRemoveIoCompletion+0xc 02 006fff78 7569b786 COMSVCS!WORK_QUEUE::WorkerLoop+0x66 03 006fff84 77bc91ed COMSVCS!WORK_QUEUE::ThreadLoop+0x15 04 006fffb8 77e4a990 msvcrt!_endthreadex+0x95 05 006fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 5 System Thread ID: 12e0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 009cfe94 77f4372d SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 009cff40 77e4b0e4 ntdll!ZwWaitForMultipleObjects+0xc 02 009cff58 756354dd kernel32!WaitForMultipleObjects+0x17 03 009cffb8 77e4a990 COMSVCS!PostData+0x174 04 009cffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 6 System Thread ID: 1488 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** WARNING: Unable to verify checksum for \\?\G:\Crystal Decisions\Enterprise 10\win32_x86\wcsisapi.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\G:\Crystal Decisions\Enterprise 10\win32_x86\wcsisapi.dll - Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00fffefc 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 00ffff70 77e4168f ntdll!NtWaitForSingleObject+0xc 02 00ffff80 00f7fbac kernel32!WaitForSingleObject+0xf 03 00ffffb4 00f7fb62 wcsisapi!TerminateExtension+0xb2ac 04 00ffffec 00000000 wcsisapi!TerminateExtension+0xb262 Thread ID: 7 System Thread ID: 148c Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0114fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0114fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0114fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0114ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 8 System Thread ID: 7dc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0118fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0118fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0118fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0118ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 9 System Thread ID: f4c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 011cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 011cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 011cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 011cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 10 System Thread ID: f50 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0120fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0120fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0120fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0120ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 11 System Thread ID: 105c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0124fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0124fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0124fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0124ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 12 System Thread ID: 10c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0128fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0128fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0128fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0128ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 13 System Thread ID: 1490 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 012cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 012cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 012cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 012cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 14 System Thread ID: 1050 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0130fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0130fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0130fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0130ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 15 System Thread ID: 10c8 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0134fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0134fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0134fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0134ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 16 System Thread ID: 1458 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0138fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0138fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0138fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0138ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 17 System Thread ID: 149c Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 013cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 013cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 013cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 013cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 18 System Thread ID: 10d8 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0140fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0140fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0140fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0140ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 19 System Thread ID: 1494 Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0144fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0144fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0144fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0144ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 20 System Thread ID: 14a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0148fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0148fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0148fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0148ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 21 System Thread ID: 1028 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 014cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 014cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 014cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 014cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 22 System Thread ID: 1030 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0150fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0150fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0150fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0150ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 23 System Thread ID: 14a8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0154fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0154fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0154fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0154ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 24 System Thread ID: 6d8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0158fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0158fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0158fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0158ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 25 System Thread ID: b30 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 015cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 015cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 015cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 015cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 26 System Thread ID: 1670 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0160fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0160fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0160fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0160ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 27 System Thread ID: 166c Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0164fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0164fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0164fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0164ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 28 System Thread ID: 12c0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0168fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0168fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0168fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0168ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 29 System Thread ID: 129c Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 016cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 016cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 016cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 016cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 30 System Thread ID: 1290 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0170fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0170fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0170fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0170ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 31 System Thread ID: 12c8 Kernel Time: 0:0:0.0 User Time: 0:0:0.46 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0174fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0174fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0174fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0174ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 32 System Thread ID: 14b0 Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0178fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0178fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0178fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0178ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 33 System Thread ID: 14ac Kernel Time: 0:0:0.0 User Time: 0:0:0.46 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 017cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 017cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 017cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 017cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 34 System Thread ID: 120c Kernel Time: 0:0:0.0 User Time: 0:0:0.46 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0180fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0180fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0180fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0180ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 35 System Thread ID: 11fc Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0184fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0184fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0184fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0184ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 36 System Thread ID: 12c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0188fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0188fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0188fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0188ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 37 System Thread ID: 1294 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 018cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 018cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 018cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 018cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 38 System Thread ID: 12cc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0190fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0190fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0190fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0190ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 39 System Thread ID: 108c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0194fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0194fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0194fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0194ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 40 System Thread ID: 1008 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0198fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 0198fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 0198fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 0198ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 41 System Thread ID: 1010 Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 019cfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 019cfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 019cfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 019cff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 42 System Thread ID: 14c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a0fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 01a0fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 01a0fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 01a0ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 43 System Thread ID: 100c Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a4fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 01a4fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 01a4fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 01a4ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 44 System Thread ID: 1270 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a8fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 01a8fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 01a8fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 01a8ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 45 System Thread ID: 1084 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01acfe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 01acfe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 01acfe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 01acff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f Thread ID: 46 System Thread ID: 1460 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01b0fe18 77f43741 SharedUserData!SystemCallStub+0x4 WARNING: Stack unwind information not available. Following frames may be wrong. 01 01b0fe8c 77e4168f ntdll!NtWaitForSingleObject+0xc 02 01b0fe9c 00f77b43 kernel32!WaitForSingleObject+0xf 03 01b0ff14 63003a4f wcsisapi!TerminateExtension+0x3243 04 ffffffff 00000000 etc_1_0_12_1!Etc10012::JTCThread::_JTC_startThreadHook+0x8f -- Graham B Tag: ASP.NET application locking up on Windows 2003 Tag: 360667
  - 9
    - IIS State log for analysis Can you please let me know why the locks on the asp threads are happening in the following IIS State logs. Thas al ot for your help. Opened log file 'C:\IISSTATE\output\IISState-3572.log' *********************** Starting new log output IISState version 3.3.1 Tue Apr 19 15:20:29 2005 OS = Windows 2000 Executable: dllhost.exe PID = 3572 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 7d4 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 0006fd28 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0006fd50 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0006fd60 77aaa701 KERNEL32!WaitForSingleObject+0xf 03 0006fd80 77aa9f0f ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169 05 0006ff24 010014c6 dllhost!WinMain+0xb0 06 0006ffc0 7c581af6 dllhost!WinMainCRTStartup+0x156 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: 5bc Kernel Time: 0:0:4.593 User Time: 0:0:5.78 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 008cfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 008cff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 008cff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9 03 008cffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 04 008cffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 008cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 2 System Thread ID: f28 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0094ff30 77abbad5 USER32!NtUserGetMessage+0xb 01 0094ff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40 02 0094ff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2 03 0094ff90 77ab50ee ole32!DLLHostThreadEntry+0x9 04 0094ffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22 05 0094ffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 0094ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: ce0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00a5fc54 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 00a5fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27 02 00a5fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0 03 00a5ffb4 7c57438b TxfAux!WORK_QUEUE::ThreadLoop+0x58 04 00a5ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: e88 Kernel Time: 0:0:3.687 User Time: 0:0:5.453 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 00b1fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 00b1ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 00b1ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9 03 00b1ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 04 00b1ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 00b1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: ec4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00c9ff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 00c9ff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea 02 00c9ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17 03 00c9ffb4 7c57438b COMSVCS!CEventDispatcher::PushEvents+0x4e 04 00c9ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 6 System Thread ID: dac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page Remote call is either to a MTA object or object not initialized. Also, possible utility thread. DCOM call being made to Process ID: 2092 Waiting on thread id: ffffffff # ChildEBP RetAddr 00 00cdfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb 01 00cdfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e 02 00cdfba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c 03 00cdfbc0 77b25a52 ole32!ThreadSendReceive+0xef 04 00cdfbd8 77b22ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f 05 00cdfc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 00cdfc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11 07 00cdfc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9 08 00cdfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124 09 00cdfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c 0a 00cdff44 77d95136 RPCRT4!NdrClientCall2+0x4f5 0b 00cdff60 77d46e75 RPCRT4!ObjectStublessClient+0x76 0c 00cdff70 787f5818 RPCRT4!ObjectStubless+0xf 0d 00cdffb4 7c57438b COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118 0e 00cdffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 7 System Thread ID: e80 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00d1fee0 7c573a4e ntdll!NtDelayExecution+0xb 01 00d1ff00 7c573a22 KERNEL32!SleepEx+0x32 02 00d1ff0c 787d12aa KERNEL32!Sleep+0xb 03 00d1ff7c 780085bc COMSVCS!PostData+0xf2 04 00d1ff88 77ab779b MSVCRT!_endthreadex+0xc1 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d Thread ID: 8 System Thread ID: 818 Kernel Time: 0:6:42.984 User Time: 0:1:50.484 Thread Type: Other # ChildEBP RetAddr 00 00f9fe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 00f9feac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00f9ff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 00f9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 00f9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7 05 00f9ffb4 7c57438b MSVCRT!_endthreadex+0xc1 06 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: e8c Kernel Time: 0:5:15.171 User Time: 0:2:20.812 Thread Type: Other # ChildEBP RetAddr 00 00fdfe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 00fdfeac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00fdff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 00fdff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 00fdff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7 05 00fdffb4 7c57438b MSVCRT!_endthreadex+0xc1 06 00fdffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: e50 Kernel Time: 0:0:0.750 User Time: 0:0:0.328 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0110ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 0110ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0110ffb4 7c57438b ISATQ!AtqPoolThread+0x40 03 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: f00 Kernel Time: 0:0:0.437 User Time: 0:0:0.218 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0114ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 0114ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0114ffb4 7c57438b ISATQ!AtqPoolThread+0x40 03 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: 9c0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 012cfeb8 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 012cfee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27 02 012cff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e 03 012cff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99 04 012cff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9 05 012cffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 06 012cffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 07 012cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: ee0 Kernel Time: 0:0:4.62 User Time: 0:0:5.468 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0138fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0138ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0138ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0138ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0138ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 0138ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: f10 Kernel Time: 0:0:0.78 User Time: 0:0:0.46 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 01eafe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 01eafec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01eaff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 01eaff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d 04 01eaff7c 78008454 asp!CMTACallbackThread::Thread+0x42 05 01eaffb4 7c57438b MSVCRT!_endthread+0xc6 06 01eaffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 15 System Thread ID: 63c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 01eefe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 01eefec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01eeff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 01eeff38 74a01eca USER32!MsgWaitForMultipleObjects+0x1d 04 01eeff7c 78008454 asp!Debugger+0x74 05 01eeffb4 7c57438b MSVCRT!_endthread+0xc6 06 01eeffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 16 System Thread ID: dc0 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: PDM (Debugger) Thread. # ChildEBP RetAddr 00 01f3fddc 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 01f3fe2c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01f3fe88 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 01f3fea4 5186a15a USER32!MsgWaitForMultipleObjects+0x1d 04 01f3ff88 5186b3b4 pdm!CDebuggerThread::CallableWaitForMultiple+0x9d 05 01f3ffb0 5186b3e8 pdm!CDebuggerThread::ThreadEntry+0x74 06 01f3ffb4 7c57438b pdm!DebuggerThreadEntry+0x9 07 01f3ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: f30 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01f8ff9c 77f842c4 ntdll!NtDelayExecution+0xb 01 01f8ffb4 7c57438b ntdll!RtlpTimerThread+0x42 02 01f8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: ed4 Kernel Time: 0:4:47.906 User Time: 0:11:55.781 *** WARNING: Unable to verify checksum for H:\Ora10\bin\oip10.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for H:\Ora10\bin\oip10.dll - Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: eb4 Thread Type: ASP Executing Page: H:\DIPLOMAT\WEBCONTROLLER\CONTENT\JOB_VIEWER.ASP # ChildEBP RetAddr 00 01fcf328 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 01fcf39c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 01fcf3a4 02375665 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 01fcf3e0 77a2310e oip10!DllUnregisterServer+0x71d61 04 01fcf470 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 01fcf494 0233fa7d OLEAUT32!DispInvoke+0x2d 06 01fcf5dc 75a356a4 oip10!DllUnregisterServer+0x3c179 07 01fcf614 0233f831 vbscript!COleScript::GetObjectOfItem+0x5f 08 01fcf630 78001f07 oip10!DllUnregisterServer+0x3bf2d 09 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 19 System Thread ID: f24 Kernel Time: 0:4:38.625 User Time: 0:11:45.703 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 0200ec3c 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0200ecb0 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0200ecb8 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0200ecc8 02315917 oip10!DllUnregisterServer+0x3bcbe 04 065e9d44 45435255 oip10!DllUnregisterServer+0x12013 05 4f534552 00000000 0x45435255 Thread ID: 20 System Thread ID: f0c Kernel Time: 0:0:27.375 User Time: 0:1:23.140 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0204fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0204fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0204fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0204fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0204ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0204ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0204ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 21 System Thread ID: e7c Kernel Time: 0:4:29.359 User Time: 0:11:26.500 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 0208ed00 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0208ed74 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0208ed7c 0233fcce ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0208efb4 77a22c4f oip10!DllUnregisterServer+0x3c3ca 04 0208efd0 779d7bc9 OLEAUT32!CTypeInfo2::GetIDsOfNames+0x37 05 0208efe4 0233f831 OLEAUT32!DispGetIDsOfNames+0x19 06 0208f000 78001f07 oip10!DllUnregisterServer+0x3bf2d 07 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 22 System Thread ID: e9c Kernel Time: 0:4:54.328 User Time: 0:12:40.312 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 020cf2b0 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 020cf324 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 020cf32c 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 020cf3c4 779d7d5d oip10!DllUnregisterServer+0x3bcbe 04 ffffffff 00000000 OLEAUT32!DispCallFunc+0x15d Thread ID: 23 System Thread ID: e44 Kernel Time: 0:4:28.703 User Time: 0:11:16.578 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 0210f0a0 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0210f114 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0210f11c 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0210f1b4 779d7d5d oip10!DllUnregisterServer+0x3bcbe 04 ffffffff 00000000 OLEAUT32!DispCallFunc+0x15d Thread ID: 24 System Thread ID: f04 Kernel Time: 0:4:31.78 User Time: 0:11:22.656 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 0214f504 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0214f578 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0214f580 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0214f5f0 77a2310e oip10!DllUnregisterServer+0x3bcbe 04 0214f680 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 0214f6a4 0233fb2d OLEAUT32!DispInvoke+0x2d 06 0214f7f4 77a22c4f oip10!DllUnregisterServer+0x3c229 07 0214f810 779d7bc9 OLEAUT32!CTypeInfo2::GetIDsOfNames+0x37 08 0214f824 0233f831 OLEAUT32!DispGetIDsOfNames+0x19 09 0214f840 78001f07 oip10!DllUnregisterServer+0x3bf2d 0a 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 25 System Thread ID: eb0 Kernel Time: 0:4:37.718 User Time: 0:11:22.203 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 0218f0a0 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0218f114 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0218f11c 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0218f1b4 779d7d5d oip10!DllUnregisterServer+0x3bcbe 04 ffffffff 00000000 OLEAUT32!DispCallFunc+0x15d Thread ID: 26 System Thread ID: eb4 Kernel Time: 0:4:23.703 User Time: 0:10:24.578 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 021cf504 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 021cf578 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 021cf580 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 021cf5f0 77a2310e oip10!DllUnregisterServer+0x3bcbe 04 021cf680 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 021cf6a4 0233fb2d OLEAUT32!DispInvoke+0x2d 06 021cf7f4 77a22c4f oip10!DllUnregisterServer+0x3c229 07 021cf810 779d7bc9 OLEAUT32!CTypeInfo2::GetIDsOfNames+0x37 08 021cf824 0233f831 OLEAUT32!DispGetIDsOfNames+0x19 09 021cf840 78001f07 oip10!DllUnregisterServer+0x3bf2d 0a 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 27 System Thread ID: d00 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 02d8ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb 01 02d8ffb4 7c57438b ntdll!RtlpWorkerThread+0x6b 02 02d8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: c3c Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: eb4 Thread Type: Other # ChildEBP RetAddr 00 031eff18 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 031eff8c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 031eff94 02375b2b ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 031effb0 02375d7d oip10!DllUnregisterServer+0x72227 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 29 System Thread ID: 7b8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: f04 Thread Type: Other # ChildEBP RetAddr 00 03aaff18 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 03aaff8c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 03aaff94 02375b2b ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 03aaffb0 02375d7d oip10!DllUnregisterServer+0x72227 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 30 System Thread ID: d80 Kernel Time: 0:0:0.31 User Time: 0:0:0.31 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: d14 Thread Type: Other # ChildEBP RetAddr 00 03b6ff18 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 03b6ff8c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 03b6ff94 02375b2b ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 03b6ffb0 02375d7d oip10!DllUnregisterServer+0x72227 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 31 System Thread ID: f8c Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 03caff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 03caff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 03caff90 02375b16 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 03caffb0 02375d7d oip10!DllUnregisterServer+0x72212 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 32 System Thread ID: f40 Kernel Time: 0:0:0.46 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 0808ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0808ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0808ff90 02375b16 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 0808ffb0 02375d7d oip10!DllUnregisterServer+0x72212 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 33 System Thread ID: c54 Kernel Time: 0:0:4.187 User Time: 0:0:5.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0bf8fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0bf8ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0bf8ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0bf8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0bf8ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 0bf8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 34 System Thread ID: c9c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0bfeff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0bfeff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0bfeff90 02375b16 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 0bfeffb0 02375d7d oip10!DllUnregisterServer+0x72212 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 35 System Thread ID: d50 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0c0bfea4 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0c0bfef4 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea 02 0c0bff0c 743d78d7 KERNEL32!WaitForMultipleObjects+0x17 03 0c0bff54 743d7a3d browscap!CMonitor::DoMonitoring+0xf9 04 0c0bff7c 780085bc browscap!CMonitor::ThreadFunc+0x26 05 0c0bffb4 7c57438b MSVCRT!_endthreadex+0xc1 06 0c0bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 36 System Thread ID: d88 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 0c22ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0c22ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0c22ff90 02375b16 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 0c22ffb0 02375d7d oip10!DllUnregisterServer+0x72212 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 37 System Thread ID: eb8 Kernel Time: 0:0:0.359 User Time: 0:0:0.281 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0eb4ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 0eb4ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0eb4ffb4 7c57438b ISATQ!AtqPoolThread+0x40 03 0eb4ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 38 System Thread ID: 2dc Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Type: Other # ChildEBP RetAddr 00 0090ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0090ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0090ff90 02375b16 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 0090ffb0 02375d7d oip10!DllUnregisterServer+0x72212 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 39 System Thread ID: d5c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 140aff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 140aff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 140aff90 02375b16 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 140affb0 02375d7d oip10!DllUnregisterServer+0x72212 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 40 System Thread ID: cd4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 1410ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 1410ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 1410ff90 02375b16 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 1410ffb0 02375d7d oip10!DllUnregisterServer+0x72212 04 00000000 00000000 oip10!DllUnregisterServer+0x72479 Thread ID: 41 System Thread ID: bfc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 1940ff5c 7c573a4e ntdll!NtDelayExecution+0xb 01 1940ff7c 7c573a22 KERNEL32!SleepEx+0x32 02 1940ff88 77ab8ffb KERNEL32!Sleep+0xb 03 1940ff90 77ab50ee ole32!CROIDTable::WorkerThreadLoop+0xc 04 1940ffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22 05 1940ffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 1940ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 42 System Thread ID: db8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: ASP Executing Page: H:\DIPLOMAT\RESOURCE\CONTENT\TOOLBARACTION.ASP # ChildEBP RetAddr 00 00a9f0e4 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 00a9f158 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 00a9f160 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 00a9f1d0 77a2310e oip10!DllUnregisterServer+0x3bcbe 04 00a9f260 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 00a9f284 0233fb2d OLEAUT32!DispInvoke+0x2d 06 00a9f3cc 75a356a4 oip10!DllUnregisterServer+0x3c229 07 00a9f404 0233f831 vbscript!COleScript::GetObjectOfItem+0x5f 08 00a9f420 78001f07 oip10!DllUnregisterServer+0x3bf2d 09 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 43 System Thread ID: cdc Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: eb4 Thread Type: ASP Executing Page: H:\DIPLOMAT\WEBCONTROLLER\CONTENT\JOB_VIEWER_FOOTER.ASP # ChildEBP RetAddr 00 0324f328 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0324f39c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0324f3a4 02375665 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0324f3e0 77a2310e oip10!DllUnregisterServer+0x71d61 04 0324f470 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 0324f494 0233fa7d OLEAUT32!DispInvoke+0x2d 06 0324f5dc 75a356a4 oip10!DllUnregisterServer+0x3c179 07 0324f614 0233f831 vbscript!COleScript::GetObjectOfItem+0x5f 08 0324f630 78001f07 oip10!DllUnregisterServer+0x3bf2d 09 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 44 System Thread ID: f94 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: f04 Thread Type: Other # ChildEBP RetAddr 00 03b0f548 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 03b0f5bc 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 03b0f5c4 023393d1 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 03b0f5f0 77a2310e oip10!DllUnregisterServer+0x35acd 04 03b0f680 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 03b0f6a4 0233fb2d OLEAUT32!DispInvoke+0x2d 06 03b0f7f4 77a22c4f oip10!DllUnregisterServer+0x3c229 07 03b0f810 779d7bc9 OLEAUT32!CTypeInfo2::GetIDsOfNames+0x37 08 03b0f824 0233f831 OLEAUT32!DispGetIDsOfNames+0x19 09 03b0f840 78001f07 oip10!DllUnregisterServer+0x3bf2d 0a 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 45 System Thread ID: d14 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: ed4 Thread Type: Other # ChildEBP RetAddr 00 03bcf504 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 03bcf578 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 03bcf580 0233f5c2 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 03bcf5f0 77a2310e oip10!DllUnregisterServer+0x3bcbe 04 03bcf680 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 03bcf6a4 0233fb2d OLEAUT32!DispInvoke+0x2d 06 03bcf7f4 77a22c4f oip10!DllUnregisterServer+0x3c229 07 03bcf810 779d7bc9 OLEAUT32!CTypeInfo2::GetIDsOfNames+0x37 08 03bcf824 0233f831 OLEAUT32!DispGetIDsOfNames+0x19 09 03bcf840 78001f07 oip10!DllUnregisterServer+0x3bf2d 0a 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 46 System Thread ID: d10 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: eb4 Thread Type: Other # ChildEBP RetAddr 00 03c4f548 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 03c4f5bc 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 03c4f5c4 023393d1 ntdll!RtlEnterCriticalSection+0x46 WARNING: Stack unwind information not available. Following frames may be wrong. 03 03c4f5f0 77a2310e oip10!DllUnregisterServer+0x35acd 04 03c4f680 779d7bfd OLEAUT32!CTypeInfo2::Invoke+0x244 05 03c4f6a4 0233fb2d OLEAUT32!DispInvoke+0x2d 06 03c4f7f4 77a22c4f oip10!DllUnregisterServer+0x3c229 07 03c4f810 779d7bc9 OLEAUT32!CTypeInfo2::GetIDsOfNames+0x37 08 03c4f824 0233f831 OLEAUT32!DispGetIDsOfNames+0x19 09 03c4f840 78001f07 oip10!DllUnregisterServer+0x3bf2d 0a 00000000 00000000 MSVCRT!_control87+0x28 Thread ID: 47 System Thread ID: b20 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: d14 Thread Type: ASP Executing Page: H:\DIPLO