IIS Crashes, DLLHOST errors, SQLSERVR uses 100% RAM

I actually posted last week because DLLHOST was using all
the processor, but after setting all sites to run in High
process that seems to have fixed THAT issue, but I'm
still having issues.

Let me start by saying that I am fully patched and fully
updated, with antivirus running.

Now twice today IIS has crashed bringing down all sites
running on Access databases. None of the sites running on
Access get a lot of hits.

The first time it went down this morning, I quick opened
it up to restart it, but thought I'd check the processes
first. SQLSERVR.exe was using over 300MB of RAM. I
quick restarted the machine without thinking too hard
about it. The second time it went down I quick restarted
and after it came back up I checked the Event Log.

Here is what I'm getting from Event Viewer:
=================
Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 12/17/2003
Time: 2:08:50 PM
User: N/A
Computer: GILLIGAN
Description:
Application popup: dllhost.exe - Application Error : The
instruction at "0x6a9f93d9" referenced memory
at "0x01991f50". The memory could not be "read".
=================
AND
=================
Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 12/17/2003
Time: 2:08:54 PM
User: N/A
Computer: GILLIGAN
Description:
Application popup: dllhost.exe - Application Error : The
instruction at "0x6a9f93d9" referenced memory
at "0x01952010". The memory could not be "read".
================

I did a little searching on Google and these are similar
to errors caused by Welchia. I've double-checked that we
are patched against Welchia and ran a full virus scan.
None of the Welchia processes or executables are on the
server.

I'm stuck folks, and could use all the help you can
afford to give.

Thanks so much in advance, I appreciate it,
Matt Stanzel

Dev
Thu Dec 18 15:03:54 CST 2003


Matt,

If your server is crashing or hanging you might want to
download our ReJuvin8 tool. It's free for the first
15-days. It can keep your site running despite problems.

It's designed to detect problems then restart or reboot.
It can restart ANY programs, services, or processes in
precise order. It doesn't fix bugs but it does give you some
breathing room while you are finding them. ReJuvin8 also
gives you email and telephone alert messages and graphic
status reports.

It can also test, alert, and report on URLs running anywhere
on any server on your net connection. So if you use multiple
servers you can use them to watch each other, too.

ReJuvin8 has both an automatic and a custom mode. In the
auto mode you make all the settings by pointing and
clicking. This will handle most applications.

The custom mode uses heartbeat synch files to get absolute
detection that key processes are working. Tools and
instructions are provided to help you do this. We also offer
customization as a contract service.

Charles


Get ReJuvin8 at: http://www.rejuvin8.net?ac=ch1


"Matt Stanzel" <mstanzel_REMOVE_@rdi1.com> wrote in message
news:040101c3c4df$a9c1b020$a301280a@phx.gbl...
> I actually posted last week because DLLHOST was using all
> the processor, but after setting all sites to run in High
> process that seems to have fixed THAT issue, but I'm
> still having issues.
>
> Let me start by saying that I am fully patched and fully
> updated, with antivirus running.
>
> Now twice today IIS has crashed bringing down all sites
> running on Access databases. None of the sites running on
> Access get a lot of hits.
>
> The first time it went down this morning, I quick opened
> it up to restart it, but thought I'd check the processes
> first. SQLSERVR.exe was using over 300MB of RAM. I
> quick restarted the machine without thinking too hard
> about it. The second time it went down I quick restarted
> and after it came back up I checked the Event Log.
>
> Here is what I'm getting from Event Viewer:
> =================
> Event Type: Information
> Event Source: Application Popup
> Event Category: None
> Event ID: 26
> Date: 12/17/2003
> Time: 2:08:50 PM
> User: N/A
> Computer: GILLIGAN
> Description:
> Application popup: dllhost.exe - Application Error : The
> instruction at "0x6a9f93d9" referenced memory
> at "0x01991f50". The memory could not be "read".
> =================
> AND
> =================
> Event Type: Information
> Event Source: Application Popup
> Event Category: None
> Event ID: 26
> Date: 12/17/2003
> Time: 2:08:54 PM
> User: N/A
> Computer: GILLIGAN
> Description:
> Application popup: dllhost.exe - Application Error : The
> instruction at "0x6a9f93d9" referenced memory
> at "0x01952010". The memory could not be "read".
> ================
>
> I did a little searching on Google and these are similar
> to errors caused by Welchia. I've double-checked that we
> are patched against Welchia and ran a full virus scan.
> None of the Welchia processes or executables are on the
> server.
>
> I'm stuck folks, and could use all the help you can
> afford to give.
>
> Thanks so much in advance, I appreciate it,
> Matt Stanzel

tdevere
Thu Feb 05 02:06:30 CST 2004

Matt,

I am sure you've probably got your server fixed by now... but if not, let
me know and I'll be happy to work with you...

With crashes, almost all the time we'll need you to setup debug tools. You
might have a user.dmp file hanging around or drwatson32.log file... but you
may not...

Thank you,

Tony DeVere [MSFT]
Microsoft IIS
Newsgroup Support
tdevere@online.microsoft.com

"Please do not send email directly to this alias. This is our online
account name for newsgroup participation only."

This posting is provided "AS IS" with no warranties, and confers no rights.
You assume all risk for your use. © 2001 Microsoft Corporation. All rights
reserved.