The following log was produced with IIS state on an IIS application
which was hung. It looks like thread 21 is blocking by locking a file.
Is this right? Can anyone shed further light on this, e.g is there
anything to suggest why thread 21 is waiting? Thanks,

Opened log file 'C:\iisstate\output\IISState-1024.log'

***********************
Starting new log output
IISState version 3.4

Fri Aug 26 10:35:52 2005

OS = Windows 2000
Executable: dllhost.exe
PID = 1024

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: f2c
Kernel Time: 0:0:0.156
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
03 0006fd80 77aaa88c
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
05 0006ff24 010014c6 dllhost!WinMain+0xb0
06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: b40
Kernel Time: 0:0:0.171
User Time: 0:0:0.125
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0088ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 0088ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: 11c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0090ff30 77abc471 USER32!NtUserGetMessage+0xb
01 0090ff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
02 0090ff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
03 0090ff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
04 0090ffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
05 0090ffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 5b0
Kernel Time: 0:0:0.46
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 00a1fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 00a1fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
02 00a1fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
03 00a1ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
04 00a1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 12e0
Kernel Time: 0:0:0.156
User Time: 0:0:0.125
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 00adfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00adff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00adff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00adffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 00adffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 00adffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: f98
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00c5ff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00c5ff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00c5ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
03 00c5ffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
04 00c5ffc0 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: d68
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

Remote call is either to a MTA object or object not initialized. Also,
possible utility thread.
DCOM call being made to Process ID: 2036
Waiting on thread id: ffffffff

# ChildEBP RetAddr
00 00c9fb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
01 00c9fb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
02 00c9fba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
03 00c9fbc0 77b26ad2 ole32!ThreadSendReceive+0xef
04 00c9fbd8 77b23ab6
ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
05 00c9fc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
06 00c9fc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
07 00c9fc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
08 00c9fce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
09 00c9fcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
0a 00c9ff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
0b 00c9ff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
0c 00c9ff70 787f5818 RPCRT4!ObjectStubless+0xf
0d 00c9ffb4 7c57b388
COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
0e 00c9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 860
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00cdfee0 7c59a243 ntdll!NtDelayExecution+0xb
01 00cdff00 7c59a20e KERNEL32!SleepEx+0x32
02 00cdff0c 787d12aa KERNEL32!Sleep+0xb
03 00cdff7c 780085bc COMSVCS!PostData+0xf2
04 00cdff88 77ab8107 MSVCRT!_endthreadex+0xc1
05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d




Thread ID: 8
System Thread ID: 5dc
Kernel Time: 0:0:2.765
User Time: 0:0:1.109
Thread Type: Other
# ChildEBP RetAddr
00 00f5fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00f5feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00f5ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00f5ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00f5ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00f5ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: 698
Kernel Time: 0:0:2.125
User Time: 0:0:1.406
Thread Type: Other
# ChildEBP RetAddr
00 00f9fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 00f9feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00f9ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00f9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00f9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00f9ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
06 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: be8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 010cff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 010cff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 010cffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 010cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: b60
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0110ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0110ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 0110ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
03 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: d0c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 0128feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
01 0128fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
02 0128ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
03 0128ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 0128ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
05 0128ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
06 0128ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
07 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: fb8
Kernel Time: 0:0:0.62
User Time: 0:0:0.62
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 0134fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0134ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0134ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
05 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14
System Thread ID: 1344
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 01e6fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01e6fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01e6ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01e6ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
04 01e6ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
05 01e6ffb4 7c57b388 MSVCRT!_endthread+0xc6
06 01e6ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 15
System Thread ID: 77c
Kernel Time: 0:0:0.46
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 01eafe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01eafec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01eaff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01eaff38 74a01eca USER32!MsgWaitForMultipleObjects+0x1d
04 01eaff7c 78008454 asp!Debugger+0x74
05 01eaffb4 7c57b388 MSVCRT!_endthread+0xc6
06 01eaffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 16
System Thread ID: d98
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** WARNING: Unable to verify checksum for
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 01eefddc 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
01 01eefe2c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01eefe88 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
03 01eefea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
04 01eeff88 4a008a85 pdm+0x886c
05 01eeffb0 4a008a09 pdm+0x8a85
06 01eeffb4 7c57b388 pdm+0x8a09
07 01eeffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 17
System Thread ID: ef0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01f2ff9c 77f842c4 ntdll!NtDelayExecution+0xb
01 01f2ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
02 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 18
System Thread ID: 854
Kernel Time: 0:0:2.125
User Time: 0:0:3.312
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for -
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: ASP
Executing Page: ******\DOWNLOAD.ASP

# ChildEBP RetAddr
00 01f6e6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 01f6e71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 01f6e724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 01f6e784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
04 01f6e7b0 77abe4d8
ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
05 01f6e7d4 77abe9cc
ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
06 01f6e800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
07 01f6e8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
08 01f6e8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
09 01f6e908 74a2e6a2 ole32!CoCreateInstance+0x35
0a 01f6e920 74a0bfc0 asp!ViperCreateInstance+0x16
0b 01f6e944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
0c 01f6e98c 74a0d26d asp!CComponentObject::Instantiate+0x42
0d 01f6e9a4 74a2cde1
asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
0e 01f6e9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
0f 01f6ea20 779d7d5d asp!CServer::CreateObject+0x5c
10 01f6ea40 77a2310e OLEAUT32!DispCallFunc+0x15d
11 01f6ead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
12 01f6eaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
WARNING: Stack unwind information not available. Following frames may
be wrong.
13 01f6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
14 01f6f254 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 19
System Thread ID: 11a8
Kernel Time: 0:0:0.687
User Time: 0:0:1.312
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: ASP
Executing Page: ******\DOWNLOAD.ASP

# ChildEBP RetAddr
00 01fae6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 01fae71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 01fae724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 01fae784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
04 01fae7b0 77abe4d8
ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
05 01fae7d4 77abe9cc
ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
06 01fae800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
07 01fae8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
08 01fae8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
09 01fae908 74a2e6a2 ole32!CoCreateInstance+0x35
0a 01fae920 74a0bfc0 asp!ViperCreateInstance+0x16
0b 01fae944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
0c 01fae98c 74a0d26d asp!CComponentObject::Instantiate+0x42
0d 01fae9a4 74a2cde1
asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
0e 01fae9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
0f 01faea20 779d7d5d asp!CServer::CreateObject+0x5c
10 01faea40 77a2310e OLEAUT32!DispCallFunc+0x15d
11 01faead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
12 01faeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
WARNING: Stack unwind information not available. Following frames may
be wrong.
13 01faeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
14 01faf254 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 20
System Thread ID: 1028
Kernel Time: 0:0:1.203
User Time: 0:0:3.31
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: ASP
Executing Page: ******\DOWNLOAD.ASP

# ChildEBP RetAddr
00 01fee6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 01fee71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 01fee724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 01fee784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
04 01fee7b0 77abe4d8
ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
05 01fee7d4 77abe9cc
ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
06 01fee800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
07 01fee8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
08 01fee8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
09 01fee908 74a2e6a2 ole32!CoCreateInstance+0x35
0a 01fee920 74a0bfc0 asp!ViperCreateInstance+0x16
0b 01fee944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
0c 01fee98c 74a0d26d asp!CComponentObject::Instantiate+0x42
0d 01fee9a4 74a2cde1
asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
0e 01fee9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
0f 01feea20 779d7d5d asp!CServer::CreateObject+0x5c
10 01feea40 77a2310e OLEAUT32!DispCallFunc+0x15d
11 01feead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
12 01feeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
WARNING: Stack unwind information not available. Following frames may
be wrong.
13 01feeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
14 01fef254 1f447271 vbscript!DllCanUnloadNow+0xd21a
15 1f440000 00000003 msado15!CContext::PushError+0x694




Thread ID: 21
System Thread ID: aac
Kernel Time: 0:0:0.671
User Time: 0:0:1.546
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0202fd08 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0202fd30 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0202fd40 7632046c KERNEL32!WaitForSingleObject+0xf
03 0202fd4c 76320455 MSVBVM50!CReadWriteMutex::_WaitForEvent+0x11
04 0202fd70 762f514b MSVBVM50!CReadWriteMutex::RequestWrite+0x2d
05 0202fd8c 7633ad37 MSVBVM50!CVBThreadAction::CleanupProjData+0x71
06 0202fdd4 762e39e5 MSVBVM50!CThreadPool::CheckForProjectUnload+0x33
07 0202fe3c 762e37ef MSVBVM50!FnwpMainFilter+0x1d6
08 0202fe5c 77e3a3d0 MSVBVM50!FnwpMain+0x1b
09 0202fe7c 77e14605 USER32!UserCallWinProc+0x18
0a 0202ff08 77e1a7ba USER32!DispatchMessageWorker+0x2e4
0b 0202ff14 787c3075 USER32!DispatchMessageW+0xb
0c 0202ff24 787c2c01 COMSVCS!STAMessageWork::DoWork+0x15
0d 0202ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x423
0e 0202ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 22
System Thread ID: 10a8
Kernel Time: 0:0:0.734
User Time: 0:0:1.937
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: ASP
Executing Page: ******\DOWNLOAD.ASP

# ChildEBP RetAddr
00 0206e6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 0206e71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 0206e724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 0206e784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
04 0206e7b0 77abe4d8
ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
05 0206e7d4 77abe9cc
ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
06 0206e800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
07 0206e8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
08 0206e8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
09 0206e908 74a2e6a2 ole32!CoCreateInstance+0x35
0a 0206e920 74a0bfc0 asp!ViperCreateInstance+0x16
0b 0206e944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
0c 0206e98c 74a0d26d asp!CComponentObject::Instantiate+0x42
0d 0206e9a4 74a2cde1
asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
0e 0206e9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
0f 0206ea20 779d7d5d asp!CServer::CreateObject+0x5c
10 0206ea40 77a2310e OLEAUT32!DispCallFunc+0x15d
11 0206ead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
12 0206eaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
WARNING: Stack unwind information not available. Following frames may
be wrong.
13 0206eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
14 0206f254 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 23
System Thread ID: c0
Kernel Time: 0:0:0.906
User Time: 0:0:1.828
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: ASP
Executing Page: ******\DOWNLOAD.ASP

# ChildEBP RetAddr
00 020ae6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 020ae71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 020ae724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 020ae784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
04 020ae7b0 77abe4d8
ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
05 020ae7d4 77abe9cc
ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
06 020ae800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
07 020ae8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
08 020ae8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
09 020ae908 74a2e6a2 ole32!CoCreateInstance+0x35
0a 020ae920 74a0bfc0 asp!ViperCreateInstance+0x16
0b 020ae944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
0c 020ae98c 74a0d26d asp!CComponentObject::Instantiate+0x42
0d 020ae9a4 74a2cde1
asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
0e 020ae9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
0f 020aea20 779d7d5d asp!CServer::CreateObject+0x5c
10 020aea40 77a2310e OLEAUT32!DispCallFunc+0x15d
11 020aead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
12 020aeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
WARNING: Stack unwind information not available. Following frames may
be wrong.
13 020aeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
14 020af254 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 24
System Thread ID: 1328
Kernel Time: 0:0:0.593
User Time: 0:0:1.437
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: ASP
Executing Page: ******\DOWNLOAD.ASP

# ChildEBP RetAddr
00 020ee6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 020ee71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 020ee724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 020ee784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
04 020ee7b0 77abe4d8
ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
05 020ee7d4 77abe9cc
ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
06 020ee800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
07 020ee8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
08 020ee8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
09 020ee908 74a2e6a2 ole32!CoCreateInstance+0x35
0a 020ee920 74a0bfc0 asp!ViperCreateInstance+0x16
0b 020ee944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
0c 020ee98c 74a0d26d asp!CComponentObject::Instantiate+0x42
0d 020ee9a4 74a2cde1
asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
0e 020ee9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
0f 020eea20 779d7d5d asp!CServer::CreateObject+0x5c
10 020eea40 77a2310e OLEAUT32!DispCallFunc+0x15d
11 020eead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
12 020eeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
WARNING: Stack unwind information not available. Following frames may
be wrong.
13 020eeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
14 020ef254 00000000 vbscript!DllCanUnloadNow+0xd21a




Thread ID: 25
System Thread ID: e94
Kernel Time: 0:0:0.734
User Time: 0:0:1.328
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0212fd0c 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 0212fd80 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 0212fd88 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 0212fdd4 762e39e5 MSVBVM50!CMutexSem::Request+0x10
04 0212fe3c 762e37ef MSVBVM50!FnwpMainFilter+0x1d6
05 0212fe5c 77e3a3d0 MSVBVM50!FnwpMain+0x1b
06 0212fe7c 77e14605 USER32!UserCallWinProc+0x18
07 0212ff08 77e1a7ba USER32!DispatchMessageWorker+0x2e4
08 0212ff14 787c3075 USER32!DispatchMessageW+0xb
09 0212ff24 787c2b31 COMSVCS!STAMessageWork::DoWork+0x15
0a 0212ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x353
0b 0212ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 26
System Thread ID: 10e8
Kernel Time: 0:0:0.421
User Time: 0:0:0.843
Other information: Thread is waiting for a lock to be released.
Looking for lock owner.
Owning thread System ID: aac
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0216fbf8 77f8822a ntdll!ZwWaitForSingleObject+0xb
01 0216fc6c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
02 0216fc74 762e1b79 ntdll!RtlEnterCriticalSection+0x46
03 0216fd00 76321b84 MSVBVM50!CMutexSem::Request+0x10
04 0216fd38 763af536 MSVBVM50!CCreErrCreateCtl+0x2d
05 0216fd6c 763af54c MSVBVM50!ErrCreatePrinterObjects+0x56
06 0216fd78 763433af MSVBVM50!CVBApplication::hctlPrint+0xf
07 0216fde0 762e37ef MSVBVM50!FnwpMainFilter_213+0x271
08 0216fe00 77e3a3d0 MSVBVM50!FnwpMain+0x1b
09 0216fe20 77e14750 USER32!UserCallWinProc+0x18
0a 0216fe3c 77e2da15 USER32!DispatchClientMessage+0x4b
0b 0216fe6c 77f9ff57 USER32!__fnINSTRING+0x35
0c 0216febc 77e1480f ntdll!KiUserCallbackDispatcher+0x13
0d 0216fee4 77e1a877 USER32!_PeekMessage+0x72
0e 0216ff10 787c297b USER32!PeekMessageW+0xba
0f 0216ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x19d
10 0216ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 27
System Thread ID: 12f0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0258ff58 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0258ff80 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0258ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
03 0258ffb4 7c57b388 oledb32!ReleaseResourceThread+0x54
04 0258ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 28
System Thread ID: e28
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 025cff50 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 025cff78 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 025cff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
03 025cffb4 7c57b388 oledb32!ResetResourceThread+0x84
04 025cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 29
System Thread ID: 5b4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0260fd54 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
01 0260fd7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
02 0260fd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
03 0260ffb4 7c57b388 COMSVCS!PingThread+0xf5
04 0260ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 30
System Thread ID: c80
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0264ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
01 0264ffb4 7c57b388 ntdll!RtlpWorkerThread+0x6b
02 0264ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 31
System Thread ID: 754
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0271ff88 751a4848 ntdll!ZwWaitForMultipleObjects+0xb
01 0271ffb4 7c57b388 NETAPI32!NetbiosWaiter+0x71
02 0271ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 32
System Thread ID: ce4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 067aff5c 7c59a243 ntdll!NtDelayExecution+0xb
01 067aff7c 7c59a20e KERNEL32!SleepEx+0x32
02 067aff88 77ab9967 KERNEL32!Sleep+0xb
03 067aff90 77ab5a5b ole32!CROIDTable::WorkerThreadLoop+0xc
04 067affa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
05 067affb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 067affec 00000000 KERNEL32!BaseThreadStart+0x52

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\1024-1125049082.dmp - mini user dump

*****


*****SUMMARY*****

IISState has detected that the process is most likely in a hung state.
This is most likely the result of an incorrectly compiled or configured
VB5 COM Object.

To address this problem, please follow the steps outline in KB Article:
186273
(http://support.microsoft.com/default.aspx?scid=kb;en-us;186273).


Closing open log file C:\iisstate\output\IISState-1024.log

Re: Help with IISState log by Pat

Pat
Fri Aug 26 09:55:29 CDT 2005

This is deadlocked inside the MSVBVM50.dll due to a race condition between
loading & unloading a VB DLL. In VB6, this problem is referred to as the
RIM (Retain in Memory) problem. VB5, however, does not support Retain in
Memory so the fix is a bit toughter.

You can (pick one):
1) Re-Compile the code with VB6 & make sure to check the Retain in Memory
and Unattended Execution compiler options
2) Modify the VB5 code to include a reference to an empty class (i.e.
artificially keep the refcount > 0) and re-compile in VB5


Pat

"martin_devlin@NOSPAMhotmail.com" <martin_devlin@hotmail.com> wrote in
message news:1125051161.944922.193280@z14g2000cwz.googlegroups.com...
> The following log was produced with IIS state on an IIS application
> which was hung. It looks like thread 21 is blocking by locking a file.
> Is this right? Can anyone shed further light on this, e.g is there
> anything to suggest why thread 21 is waiting? Thanks,
>
> Opened log file 'C:\iisstate\output\IISState-1024.log'
>
> ***********************
> Starting new log output
> IISState version 3.4
>
> Fri Aug 26 10:35:52 2005
>
> OS = Windows 2000
> Executable: dllhost.exe
> PID = 1024
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: f2c
> Kernel Time: 0:0:0.156
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf
> 03 0006fd80 77aaa88c
> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
> 06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156
> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: b40
> Kernel Time: 0:0:0.171
> User Time: 0:0:0.125
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0088ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0088ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: 11c4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0090ff30 77abc471 USER32!NtUserGetMessage+0xb
> 01 0090ff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40
> 02 0090ff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2
> 03 0090ff90 77ab5a5b ole32!DLLHostThreadEntry+0x9
> 04 0090ffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
> 05 0090ffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: 5b0
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00a1fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 00a1fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00a1fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
> 03 00a1ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58
> 04 00a1ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 12e0
> Kernel Time: 0:0:0.156
> User Time: 0:0:0.125
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00adfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 00adff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00adff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00adffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00adffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 00adffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: f98
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00c5ff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00c5ff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00c5ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
> 03 00c5ffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e
> 04 00c5ffc0 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: d68
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> Remote call is either to a MTA object or object not initialized. Also,
> possible utility thread.
> DCOM call being made to Process ID: 2036
> Waiting on thread id: ffffffff
>
> # ChildEBP RetAddr
> 00 00c9fb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
> 01 00c9fb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
> 02 00c9fba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c
> 03 00c9fbc0 77b26ad2 ole32!ThreadSendReceive+0xef
> 04 00c9fbd8 77b23ab6
> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
> 05 00c9fc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96
> 06 00c9fc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11
> 07 00c9fc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9
> 08 00c9fce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
> 09 00c9fcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
> 0a 00c9ff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
> 0b 00c9ff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
> 0c 00c9ff70 787f5818 RPCRT4!ObjectStubless+0xf
> 0d 00c9ffb4 7c57b388
> COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
> 0e 00c9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 860
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00cdfee0 7c59a243 ntdll!NtDelayExecution+0xb
> 01 00cdff00 7c59a20e KERNEL32!SleepEx+0x32
> 02 00cdff0c 787d12aa KERNEL32!Sleep+0xb
> 03 00cdff7c 780085bc COMSVCS!PostData+0xf2
> 04 00cdff88 77ab8107 MSVCRT!_endthreadex+0xc1
> 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d
>
>
>
>
> Thread ID: 8
> System Thread ID: 5dc
> Kernel Time: 0:0:2.765
> User Time: 0:0:1.109
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00f5fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00f5feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00f5ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00f5ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 00f5ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
> 05 00f5ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 698
> Kernel Time: 0:0:2.125
> User Time: 0:0:1.406
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00f9fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 00f9feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00f9ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00f9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 00f9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
> 05 00f9ffb4 7c57b388 MSVCRT!_endthreadex+0xc1
> 06 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: be8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 010cff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 010cff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 010cffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 010cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: b60
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0110ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0110ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0110ffb4 7c57b388 ISATQ!AtqPoolThread+0x40
> 03 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: d0c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0128feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb
> 01 0128fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0128ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
> 03 0128ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 0128ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 0128ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 0128ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 07 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: fb8
> Kernel Time: 0:0:0.62
> User Time: 0:0:0.62
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0134fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 0134ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0134ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18
> 05 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: 1344
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 01e6fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01e6fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01e6ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01e6ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01e6ff7c 78008454 asp!CMTACallbackThread::Thread+0x42
> 05 01e6ffb4 7c57b388 MSVCRT!_endthread+0xc6
> 06 01e6ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 15
> System Thread ID: 77c
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 01eafe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01eafec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01eaff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01eaff38 74a01eca USER32!MsgWaitForMultipleObjects+0x1d
> 04 01eaff7c 78008454 asp!Debugger+0x74
> 05 01eaffb4 7c57b388 MSVCRT!_endthread+0xc6
> 06 01eaffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 16
> System Thread ID: d98
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> *** WARNING: Unable to verify checksum for
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for -
> Thread Type: PDM (Debugger) Thread.
> # ChildEBP RetAddr
> 00 01eefddc 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb
> 01 01eefe2c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01eefe88 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01eefea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
> 04 01eeff88 4a008a85 pdm+0x886c
> 05 01eeffb0 4a008a09 pdm+0x8a85
> 06 01eeffb4 7c57b388 pdm+0x8a09
> 07 01eeffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 17
> System Thread ID: ef0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01f2ff9c 77f842c4 ntdll!NtDelayExecution+0xb
> 01 01f2ffb4 7c57b388 ntdll!RtlpTimerThread+0x42
> 02 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 18
> System Thread ID: 854
> Kernel Time: 0:0:2.125
> User Time: 0:0:3.312
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for -
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: ASP
> Executing Page: ******\DOWNLOAD.ASP
>
> # ChildEBP RetAddr
> 00 01f6e6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 01f6e71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 01f6e724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 01f6e784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
> 04 01f6e7b0 77abe4d8
> ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
> 05 01f6e7d4 77abe9cc
> ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
> 06 01f6e800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
> 07 01f6e8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
> 08 01f6e8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
> 09 01f6e908 74a2e6a2 ole32!CoCreateInstance+0x35
> 0a 01f6e920 74a0bfc0 asp!ViperCreateInstance+0x16
> 0b 01f6e944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
> 0c 01f6e98c 74a0d26d asp!CComponentObject::Instantiate+0x42
> 0d 01f6e9a4 74a2cde1
> asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
> 0e 01f6e9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
> 0f 01f6ea20 779d7d5d asp!CServer::CreateObject+0x5c
> 10 01f6ea40 77a2310e OLEAUT32!DispCallFunc+0x15d
> 11 01f6ead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
> 12 01f6eaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 13 01f6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 14 01f6f254 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 19
> System Thread ID: 11a8
> Kernel Time: 0:0:0.687
> User Time: 0:0:1.312
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: ASP
> Executing Page: ******\DOWNLOAD.ASP
>
> # ChildEBP RetAddr
> 00 01fae6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 01fae71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 01fae724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 01fae784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
> 04 01fae7b0 77abe4d8
> ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
> 05 01fae7d4 77abe9cc
> ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
> 06 01fae800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
> 07 01fae8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
> 08 01fae8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
> 09 01fae908 74a2e6a2 ole32!CoCreateInstance+0x35
> 0a 01fae920 74a0bfc0 asp!ViperCreateInstance+0x16
> 0b 01fae944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
> 0c 01fae98c 74a0d26d asp!CComponentObject::Instantiate+0x42
> 0d 01fae9a4 74a2cde1
> asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
> 0e 01fae9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
> 0f 01faea20 779d7d5d asp!CServer::CreateObject+0x5c
> 10 01faea40 77a2310e OLEAUT32!DispCallFunc+0x15d
> 11 01faead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
> 12 01faeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 13 01faeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 14 01faf254 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 20
> System Thread ID: 1028
> Kernel Time: 0:0:1.203
> User Time: 0:0:3.31
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: ASP
> Executing Page: ******\DOWNLOAD.ASP
>
> # ChildEBP RetAddr
> 00 01fee6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 01fee71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 01fee724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 01fee784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
> 04 01fee7b0 77abe4d8
> ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
> 05 01fee7d4 77abe9cc
> ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
> 06 01fee800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
> 07 01fee8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
> 08 01fee8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
> 09 01fee908 74a2e6a2 ole32!CoCreateInstance+0x35
> 0a 01fee920 74a0bfc0 asp!ViperCreateInstance+0x16
> 0b 01fee944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
> 0c 01fee98c 74a0d26d asp!CComponentObject::Instantiate+0x42
> 0d 01fee9a4 74a2cde1
> asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
> 0e 01fee9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
> 0f 01feea20 779d7d5d asp!CServer::CreateObject+0x5c
> 10 01feea40 77a2310e OLEAUT32!DispCallFunc+0x15d
> 11 01feead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
> 12 01feeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 13 01feeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 14 01fef254 1f447271 vbscript!DllCanUnloadNow+0xd21a
> 15 1f440000 00000003 msado15!CContext::PushError+0x694
>
>
>
>
> Thread ID: 21
> System Thread ID: aac
> Kernel Time: 0:0:0.671
> User Time: 0:0:1.546
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0202fd08 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0202fd30 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0202fd40 7632046c KERNEL32!WaitForSingleObject+0xf
> 03 0202fd4c 76320455 MSVBVM50!CReadWriteMutex::_WaitForEvent+0x11
> 04 0202fd70 762f514b MSVBVM50!CReadWriteMutex::RequestWrite+0x2d
> 05 0202fd8c 7633ad37 MSVBVM50!CVBThreadAction::CleanupProjData+0x71
> 06 0202fdd4 762e39e5 MSVBVM50!CThreadPool::CheckForProjectUnload+0x33
> 07 0202fe3c 762e37ef MSVBVM50!FnwpMainFilter+0x1d6
> 08 0202fe5c 77e3a3d0 MSVBVM50!FnwpMain+0x1b
> 09 0202fe7c 77e14605 USER32!UserCallWinProc+0x18
> 0a 0202ff08 77e1a7ba USER32!DispatchMessageWorker+0x2e4
> 0b 0202ff14 787c3075 USER32!DispatchMessageW+0xb
> 0c 0202ff24 787c2c01 COMSVCS!STAMessageWork::DoWork+0x15
> 0d 0202ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x423
> 0e 0202ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 22
> System Thread ID: 10a8
> Kernel Time: 0:0:0.734
> User Time: 0:0:1.937
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: ASP
> Executing Page: ******\DOWNLOAD.ASP
>
> # ChildEBP RetAddr
> 00 0206e6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 0206e71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 0206e724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 0206e784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
> 04 0206e7b0 77abe4d8
> ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
> 05 0206e7d4 77abe9cc
> ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
> 06 0206e800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
> 07 0206e8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
> 08 0206e8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
> 09 0206e908 74a2e6a2 ole32!CoCreateInstance+0x35
> 0a 0206e920 74a0bfc0 asp!ViperCreateInstance+0x16
> 0b 0206e944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
> 0c 0206e98c 74a0d26d asp!CComponentObject::Instantiate+0x42
> 0d 0206e9a4 74a2cde1
> asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
> 0e 0206e9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
> 0f 0206ea20 779d7d5d asp!CServer::CreateObject+0x5c
> 10 0206ea40 77a2310e OLEAUT32!DispCallFunc+0x15d
> 11 0206ead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
> 12 0206eaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 13 0206eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 14 0206f254 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 23
> System Thread ID: c0
> Kernel Time: 0:0:0.906
> User Time: 0:0:1.828
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: ASP
> Executing Page: ******\DOWNLOAD.ASP
>
> # ChildEBP RetAddr
> 00 020ae6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 020ae71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 020ae724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 020ae784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
> 04 020ae7b0 77abe4d8
> ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
> 05 020ae7d4 77abe9cc
> ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
> 06 020ae800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
> 07 020ae8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
> 08 020ae8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
> 09 020ae908 74a2e6a2 ole32!CoCreateInstance+0x35
> 0a 020ae920 74a0bfc0 asp!ViperCreateInstance+0x16
> 0b 020ae944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
> 0c 020ae98c 74a0d26d asp!CComponentObject::Instantiate+0x42
> 0d 020ae9a4 74a2cde1
> asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
> 0e 020ae9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
> 0f 020aea20 779d7d5d asp!CServer::CreateObject+0x5c
> 10 020aea40 77a2310e OLEAUT32!DispCallFunc+0x15d
> 11 020aead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
> 12 020aeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 13 020aeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 14 020af254 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 24
> System Thread ID: 1328
> Kernel Time: 0:0:0.593
> User Time: 0:0:1.437
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: ASP
> Executing Page: ******\DOWNLOAD.ASP
>
> # ChildEBP RetAddr
> 00 020ee6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 020ee71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 020ee724 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 020ee784 77abdf02 MSVBVM50!CMutexSem::Request+0x10
> 04 020ee7b0 77abe4d8
> ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35
> 05 020ee7d4 77abe9cc
> ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166
> 06 020ee800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71
> 07 020ee8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9
> 08 020ee8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b
> 09 020ee908 74a2e6a2 ole32!CoCreateInstance+0x35
> 0a 020ee920 74a0bfc0 asp!ViperCreateInstance+0x16
> 0b 020ee944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76
> 0c 020ee98c 74a0d26d asp!CComponentObject::Instantiate+0x42
> 0d 020ee9a4 74a2cde1
> asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58
> 0e 020ee9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce
> 0f 020eea20 779d7d5d asp!CServer::CreateObject+0x5c
> 10 020eea40 77a2310e OLEAUT32!DispCallFunc+0x15d
> 11 020eead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244
> 12 020eeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 13 020eeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24
> 14 020ef254 00000000 vbscript!DllCanUnloadNow+0xd21a
>
>
>
>
> Thread ID: 25
> System Thread ID: e94
> Kernel Time: 0:0:0.734
> User Time: 0:0:1.328
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0212fd0c 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 0212fd80 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 0212fd88 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 0212fdd4 762e39e5 MSVBVM50!CMutexSem::Request+0x10
> 04 0212fe3c 762e37ef MSVBVM50!FnwpMainFilter+0x1d6
> 05 0212fe5c 77e3a3d0 MSVBVM50!FnwpMain+0x1b
> 06 0212fe7c 77e14605 USER32!UserCallWinProc+0x18
> 07 0212ff08 77e1a7ba USER32!DispatchMessageWorker+0x2e4
> 08 0212ff14 787c3075 USER32!DispatchMessageW+0xb
> 09 0212ff24 787c2b31 COMSVCS!STAMessageWork::DoWork+0x15
> 0a 0212ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x353
> 0b 0212ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 26
> System Thread ID: 10e8
> Kernel Time: 0:0:0.421
> User Time: 0:0:0.843
> Other information: Thread is waiting for a lock to be released.
> Looking for lock owner.
> Owning thread System ID: aac
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0216fbf8 77f8822a ntdll!ZwWaitForSingleObject+0xb
> 01 0216fc6c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e
> 02 0216fc74 762e1b79 ntdll!RtlEnterCriticalSection+0x46
> 03 0216fd00 76321b84 MSVBVM50!CMutexSem::Request+0x10
> 04 0216fd38 763af536 MSVBVM50!CCreErrCreateCtl+0x2d
> 05 0216fd6c 763af54c MSVBVM50!ErrCreatePrinterObjects+0x56
> 06 0216fd78 763433af MSVBVM50!CVBApplication::hctlPrint+0xf
> 07 0216fde0 762e37ef MSVBVM50!FnwpMainFilter_213+0x271
> 08 0216fe00 77e3a3d0 MSVBVM50!FnwpMain+0x1b
> 09 0216fe20 77e14750 USER32!UserCallWinProc+0x18
> 0a 0216fe3c 77e2da15 USER32!DispatchClientMessage+0x4b
> 0b 0216fe6c 77f9ff57 USER32!__fnINSTRING+0x35
> 0c 0216febc 77e1480f ntdll!KiUserCallbackDispatcher+0x13
> 0d 0216fee4 77e1a877 USER32!_PeekMessage+0x72
> 0e 0216ff10 787c297b USER32!PeekMessageW+0xba
> 0f 0216ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x19d
> 10 0216ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 27
> System Thread ID: 12f0
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0258ff58 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0258ff80 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0258ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
> 03 0258ffb4 7c57b388 oledb32!ReleaseResourceThread+0x54
> 04 0258ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 28
> System Thread ID: e28
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 025cff50 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 025cff78 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 025cff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
> 03 025cffb4 7c57b388 oledb32!ResetResourceThread+0x84
> 04 025cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 29
> System Thread ID: 5b4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0260fd54 7c599fe4 ntdll!ZwWaitForSingleObject+0xb
> 01 0260fd7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71
> 02 0260fd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
> 03 0260ffb4 7c57b388 COMSVCS!PingThread+0xf5
> 04 0260ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 30
> System Thread ID: c80
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0264ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
> 01 0264ffb4 7c57b388 ntdll!RtlpWorkerThread+0x6b
> 02 0264ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 31
> System Thread ID: 754
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0271ff88 751a4848 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0271ffb4 7c57b388 NETAPI32!NetbiosWaiter+0x71
> 02 0271ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 32
> System Thread ID: ce4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 067aff5c 7c59a243 ntdll!NtDelayExecution+0xb
> 01 067aff7c 7c59a20e KERNEL32!SleepEx+0x32
> 02 067aff88 77ab9967 KERNEL32!Sleep+0xb
> 03 067aff90 77ab5a5b ole32!CROIDTable::WorkerThreadLoop+0xc
> 04 067affa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22
> 05 067affb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 067affec 00000000 KERNEL32!BaseThreadStart+0x52
>
> *****
>
> Dump name is formatted as: PID-Timestamp.dmp
>
> Creating C:\iisstate\output\1024-1125049082.dmp - mini user dump
>
> *****
>
>
> *****SUMMARY*****
>
> IISState has detected that the process is most likely in a hung state.
> This is most likely the result of an incorrectly compiled or configured
> VB5 COM Object.
>
> To address this problem, please follow the steps outline in KB Article:
> 186273
> (http://support.microsoft.com/default.aspx?scid=kb;en-us;186273).
>
>
> Closing open log file C:\iisstate\output\IISState-1024.log
>