We have an web application written in ASP on IIS5 and connects to
the SQL database in the backend. Normally the server CPU
is under utilized with only 5%. However, the system can jump from
5% utilization to 90% utilization sometimes. The results from the
performance monitor shows that it had
increased in a sudden. The majority of this utilization is due to
INETINFO.EXE.
The following is the IISState log. Can anyone help to see what the
problem is?
Opened log file 'Y:\app\iisstate\output\IISState-2356.log'
***********************
Starting new log output
IISState version 3.2
Fri Oct 20 11:15:02 2006
OS = Windows 2000
Executable: inetinfo.exe
PID = 2356
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: 944
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** ERROR: Module load completed but symbols could not be loaded for
C:\WINNT\System32\inetsrv\inetinfo.exe
Thread Type: Other
# ChildEBP RetAddr
00 0006f89c 7c5785d1 ntdll!ZwReadFile+0xb
01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
WARNING: Stack unwind information not available. Following frames may
be wrong.
05 0006fd30 01001e94 inetinfo+0x2884
06 77e2b495 2474ff50 inetinfo+0x1e94
07 0c24448d 00000000 0x2474ff50
Thread ID: 1
System Thread ID: 690
Kernel Time: 0:0:0.140
User Time: 0:0:0.46
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\System32\inetsrv\iisadmin.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0067fd1c 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 0067fd44 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 0067fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 0067fd70 01002440 iisadmin!ServiceEntry+0x155
04 77e2b495 2474ff50 inetinfo+0x2440
05 0c24448d 00000000 0x2474ff50
Thread ID: 2
System Thread ID: 750
Kernel Time: 0:2:30.281
User Time: 0:1:10.234
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\system32\IisRTL.DLL -
Thread Type: Other
# ChildEBP RetAddr
00 007bfe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 007bfeac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 007bff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 007bff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 00283c78 000003e9
IisRTL!ALLOC_CACHE_HANDLER::SetLookasideCleanupInterval+0xe4
Thread ID: 3
System Thread ID: 60c
Kernel Time: 0:2:59.656
User Time: 0:0:57.421
Thread Type: Other
# ChildEBP RetAddr
00 007ffe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 007ffeac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 007fff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 007fff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 00283d28 000003ea
IisRTL!ALLOC_CACHE_HANDLER::SetLookasideCleanupInterval+0xe4
Thread ID: 4
System Thread ID: 9b8
Kernel Time: 0:0:0.140
User Time: 0:0:0.62
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\System32\inetsrv\INFOCOMM.DLL -
Thread Type: Other
# ChildEBP RetAddr
00 00eefc1c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 00eefc6c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00eefcc8 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 00eefce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 00cec144 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
Thread ID: 5
System Thread ID: 874
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00f2fc1c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 00f2fc6c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00f2fcc8 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 00f2fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 00ceb8a4 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
Thread ID: 6
System Thread ID: 9c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\System32\inetsrv\ISATQ.DLL -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0108ff5c 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 0108ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may
be wrong.
02 0108ffb4 7c57438b ISATQ!CDirMonitor::RemoveEntry+0x183
03 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 7
System Thread ID: 67c
Kernel Time: 0:0:11.437
User Time: 0:0:15.375
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 010cff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 010cff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may
be wrong.
02 7c310dd6 f76868ff ISATQ!CDirMonitor::RemoveEntry+0xeb
03 6aec8b55 00000000 0xf76868ff
Thread ID: 8
System Thread ID: 738
Kernel Time: 0:0:9.921
User Time: 0:0:14.750
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0110ff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 0110ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may
be wrong.
02 7c310dd6 f76868ff ISATQ!CDirMonitor::RemoveEntry+0xeb
03 6aec8b55 00000000 0xf76868ff
Thread ID: 9
System Thread ID: 97c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: *** ERROR: Symbol file could not be found. Defaulted
to export symbols for C:\WINNT\System32\inetsrv\asp.dll -
ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0128feb8 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 0128fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27
02 0128ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e
03 0128ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 0128ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9
05 0128ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
06 0128ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
07 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 10
System Thread ID: 940
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0148fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0148ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0148ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0148ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 0148ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
05 0148ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 11
System Thread ID: 610
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0150fd20 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0150fd70 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
02 0150fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
03 0150ffb4 7c57438b RTUTILS!TraceServerThread+0xde
04 0150ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 12
System Thread ID: 628
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\system32\WS2_32.DLL -
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\System32\inetsrv\ftpsvc2.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0155ff00 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0155ff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea
WARNING: Stack unwind information not available. Following frames may
be wrong.
02 0155ff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18
03 00cec9d4 000003b4 ftpsvc2!COMMON_METADATA::SetAccessPerms+0xce0
Thread ID: 13
System Thread ID: 9d8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\System32\inetsrv\compfilt.dll -
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0159ff5c 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 0159ff84 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 0159ff94 732c3366 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 0159ffb4 7c57438b compfilt!HttpFilterProc+0xe3
04 00000000 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 14
System Thread ID: 964
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\System32\inetsrv\w3svc.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for -
Thread Type: Other
# ChildEBP RetAddr
00 0160fe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0160fec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0160ff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0160ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0160ff7c 78008454 w3svc!HTTP_HEADER_MAPPER::Initialize+0x431
05 0160ffb4 7c57438b MSVCRT!endthread+0xc1
06 0160ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 15
System Thread ID: a14
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0164fea8 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0164fef8 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0164ff54 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0164ff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0164ffb4 7c57438b w3svc!HTTP_HEADER_MAPPER::Initialize+0x4ad
05 0164ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 16
System Thread ID: 440
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\system32\msafd.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\system32\inetsloc.dll -
Thread Type: Other
# ChildEBP RetAddr
00 016cfce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
01 016cfd1c 74fd3c59 msafd+0x1394
02 016cfe08 750312f5 msafd!WSPSetSockOpt+0xdaa
03 016cfe6c 6e2b3b6e WS2_32!select+0xcb
04 016cffb4 7c57438b inetsloc!TerminateSvcLocator+0xbe8
05 016cffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 17
System Thread ID: 624
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0180fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
01 0180fe38 74fd3c59 msafd+0x1394
02 0180ff24 750312f5 msafd!WSPSetSockOpt+0xdaa
03 0180ff88 6d7075bd WS2_32!select+0xcb
04 00d0b87c 000008a0 ISATQ!SetIISCapTraceFlag+0x1ce5
Thread ID: 18
System Thread ID: 200
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 019cff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 019cff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
02 019cff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
03 019cffb4 7c57438b comsvcs!CEventDispatcher::PushEvents+0x4e
04 019cffc0 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 19
System Thread ID: 3a8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
Remote call is either to a MTA object or object not initialized. Also,
possible utility thread.
DCOM call being made to Process ID: 2224
Waiting on thread id: ffffffff
# ChildEBP RetAddr
00 01a0fb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
01 01a0fb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
02 01a0fba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c
03 01a0fbc0 77b25a52 ole32!ThreadSendReceive+0xef
04 01a0fbd8 77b22ab6
ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
05 01a0fc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96
06 01a0fc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11
07 01a0fc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9
08 01a0fce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
09 01a0fcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
0a 01a0ff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
0b 01a0ff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
0c 01a0ff70 787f5818 RPCRT4!ObjectStubless+0xf
0d 01a0ffb4 7c57438b
comsvcs!CEventDispatcher::GetEventServerInfoThread+0x118
0e 01a0ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 20
System Thread ID: 1a4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0272fe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0272fec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0272ff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0272ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0272ff7c 78008454 asp!GetExtensionVersion+0x2deb
05 0272ffb4 7c57438b MSVCRT!endthread+0xc1
06 0272ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 21
System Thread ID: 8cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0276fe70 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0276fec0 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0276ff1c 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0276ff38 74a01eca USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0276ff7c 78008454 asp!GetExtensionVersion+0x2e4c
05 0276ffb4 7c57438b MSVCRT!endthread+0xc1
06 0276ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 22
System Thread ID: 96c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** WARNING: Unable to verify checksum for
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 027afddc 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 027afe2c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 027afe88 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 027afea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
04 027aff88 4a008a85 pdm+0x886c
05 027affb0 4a008a09 pdm+0x8a85
06 027affb4 7c57438b pdm+0x8a09
07 027affec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 23
System Thread ID: 68c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0282ff9c 77f842c4 ntdll!NtDelayExecution+0xb
01 0282ffb4 7c57438b ntdll!RtlpTimerThread+0x42
02 0282ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 24
System Thread ID: 95c
Kernel Time: 0:0:3.953
User Time: 0:0:23.390
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0286fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0286fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0286fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0286fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0286ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0286ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0286ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 25
System Thread ID: 93c
Kernel Time: 0:0:15.515
User Time: 0:1:20.468
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 028afe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 028afe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 028afed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 028afef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 028aff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 028affb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 028affec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 26
System Thread ID: 670
Kernel Time: 0:0:6.468
User Time: 0:0:34.859
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 028efe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 028efe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 028efed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 028efef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 028eff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 028effb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 028effec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 27
System Thread ID: 980
Kernel Time: 0:0:21.250
User Time: 0:1:47.718
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0292fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0292fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0292fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0292fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0292ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0292ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0292ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 28
System Thread ID: 9a8
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for y:\app\filenet\idm\fnpfetch.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for -
Thread Type: Other
# ChildEBP RetAddr
00 061efe08 66df6f50 USER32!NtUserWaitMessage+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
01 061eff0c 6c3bde29 fnpfetch+0x6f50
02 061eff7c 780085bc MFC42!Ordinal2546+0x147
03 061effb4 7c57438b MSVCRT!endthreadex+0xbc
04 061effec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 29
System Thread ID: 58c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 06bdff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
01 06bdffb4 7c57438b ntdll!RtlpWorkerThread+0x6b
02 06bdffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 30
System Thread ID: 998
Kernel Time: 0:0:0.687
User Time: 0:16:17.828
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for y:\PROGRA~1\JavaSoft\JRE\132E6D~1.1\bin\HotSpot\jvm.dll -
Thread Type: Other
# ChildEBP RetAddr
00 33a9fea8 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 33a9fed0 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 33a9fee0 6d46475a KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 33a9ff10 6d48ad8a jvm!JVM_FindSignal+0x121b5
04 33a9ff68 6d48ac1e jvm!JVM_FindSignal+0x387e5
05 33a9ff7c 780085bc jvm!JVM_FindSignal+0x38679
06 33a9ffb4 7c57438b MSVCRT!endthreadex+0xbc
07 33a9ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 31
System Thread ID: a1c
Kernel Time: 0:0:0.125
User Time: 0:0:0.546
Thread Type: Other
# ChildEBP RetAddr
00 33adfc18 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 33adfc40 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 33adfc50 6d465f47 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 33adfc88 6d4763ae jvm!JVM_FindSignal+0x139a2
04 33adfcac 6d44b9f2 jvm!JVM_FindSignal+0x23e09
05 33adfccc 069c5138 jvm!JVM_MonitorWait+0x70
06 33adfcfc 069c2c02 0x69c5138
07 33adfd30 069c2c02 0x69c2c02
08 33adfd5c 6d4db41c 0x69c2c02
09 33adfd84 6d44034e
jvm!JVMCI_InstallStackOvrFlowExceptionFilter+0x435c4
0a 33adfe04 6d46932d jvm!JVM_DisableCompiler+0x678d
0b 33adfe40 6d440262 jvm!JVM_FindSignal+0x16d88
0c 33adfe94 6d43ffe0 jvm!JVM_DisableCompiler+0x66a1
0d 33adfee8 6d44f403 jvm!JVM_DisableCompiler+0x641f
0e 33adff3c 6d482c10 jvm!JVM_StartThread+0x1bb
0f 33adff68 6d482be0 jvm!JVM_FindSignal+0x3066b
10 33adff7c 780085bc jvm!JVM_FindSignal+0x3063b
11 33adffb4 7c57438b MSVCRT!endthreadex+0xbc
12 33adffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 32
System Thread ID: 4ac
Kernel Time: 0:0:0.15
User Time: 0:0:0.265
Thread Type: Other
# ChildEBP RetAddr
00 33b1fbe0 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 33b1fc08 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 33b1fc18 6d465f47 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 33b1fc50 6d4763ae jvm!JVM_FindSignal+0x139a2
04 33b1fc74 6d44b9f2 jvm!JVM_FindSignal+0x23e09
05 33b1fc94 069c5138 jvm!JVM_MonitorWait+0x70
06 33b1fcc4 069c2c02 0x69c5138
07 33b1fd00 069c2c52 0x69c2c02
08 33b1fd44 069c2c52 0x69c2c52
09 33b1fd68 6d4db41c 0x69c2c52
0a 33b1fd84 6d44034e
jvm!JVMCI_InstallStackOvrFlowExceptionFilter+0x435c4
0b 33b1fe04 6d46932d jvm!JVM_DisableCompiler+0x678d
0c 33b1fe40 6d440262 jvm!JVM_FindSignal+0x16d88
0d 33b1fe94 6d43ffe0 jvm!JVM_DisableCompiler+0x66a1
0e 33b1fee8 6d44f403 jvm!JVM_DisableCompiler+0x641f
0f 33b1ff3c 6d482c10 jvm!JVM_StartThread+0x1bb
10 33b1ff68 6d482be0 jvm!JVM_FindSignal+0x3066b
11 33b1ff7c 780085bc jvm!JVM_FindSignal+0x3063b
12 33b1ffb4 7c57438b MSVCRT!endthreadex+0xbc
13 33b1ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 33
System Thread ID: 924
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 33b5ff08 7c573a4e ntdll!NtDelayExecution+0xb
01 33b5ff28 7c573a22 KERNEL32!SleepEx+0x32
02 33b5ff34 6d469578 KERNEL32!Sleep+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 33b5ff58 6d48273d jvm!JVM_FindSignal+0x16fd3
04 33b5ff7c 780085bc jvm!JVM_FindSignal+0x30198
05 33b5ffb4 7c57438b MSVCRT!endthreadex+0xbc
06 33b5ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 34
System Thread ID: 974
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 33b9fef4 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 33b9ff1c 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 33b9ff2c 6d46475a KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 33b9ff5c 6d482883 jvm!JVM_FindSignal+0x121b5
04 33b9ff7c 780085bc jvm!JVM_FindSignal+0x302de
05 33b9ffb4 7c57438b MSVCRT!endthreadex+0xbc
06 33b9ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 35
System Thread ID: 9bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.609
Thread Type: Other
# ChildEBP RetAddr
00 33bdfe84 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 33bdfeac 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 33bdfebc 6d4647a7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 33bdfeec 6d490750 jvm!JVM_FindSignal+0x12202
04 00000000 00000000 jvm!JVM_FindSignal+0x3e1ab
Thread ID: 36
System Thread ID: a08
Kernel Time: 0:0:0.62
User Time: 0:0:0.187
Thread Type: Other
# ChildEBP RetAddr
00 3409fc30 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 3409fc58 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 3409fc68 6d465f47 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 3409fca0 6d4763ae jvm!JVM_FindSignal+0x139a2
04 3409fcc4 6d44b9f2 jvm!JVM_FindSignal+0x23e09
05 3409fce4 069c5138 jvm!JVM_MonitorWait+0x70
06 3409fd14 069c2c02 0x69c5138
07 3409fd50 6d4db41c 0x69c2c02
08 3409fd84 6d44034e
jvm!JVMCI_InstallStackOvrFlowExceptionFilter+0x435c4
09 3409fe04 6d46932d jvm!JVM_DisableCompiler+0x678d
0a 3409fe40 6d440262 jvm!JVM_FindSignal+0x16d88
0b 3409fe94 6d43ffe0 jvm!JVM_DisableCompiler+0x66a1
0c 3409fee8 6d44f403 jvm!JVM_DisableCompiler+0x641f
0d 3409ff3c 6d482c10 jvm!JVM_StartThread+0x1bb
0e 3409ff68 6d482be0 jvm!JVM_FindSignal+0x3066b
0f 3409ff7c 780085bc jvm!JVM_FindSignal+0x3063b
10 3409ffb4 7c57438b MSVCRT!endthreadex+0xbc
11 3409ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 37
System Thread ID: 548
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 3411f69c 74fd1394 ntdll!ZwWaitForSingleObject+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
01 3411f6d8 74fd487c msafd+0x1394
02 3411fb80 7503ca41 msafd!WSPSetSockOpt+0x19cd
03 3411fbb8 7503c9cc WS2_32!WSAAccept+0x72
04 3411fc38 069c5138 WS2_32!accept+0x15
05 3411fc64 069c2c02 0x69c5138
06 3411fc9c 069c2c02 0x69c2c02
07 3411fcc4 069c2c02 0x69c2c02
08 3411fcf8 069c2c52 0x69c2c02
09 3411fd20 069c2cca 0x69c2c52
0a 3411fd6c 6d4db41c 0x69c2cca
0b 3411fd84 6d44034e
jvm!JVMCI_InstallStackOvrFlowExceptionFilter+0x435c4
0c 3411fe04 6d46932d jvm!JVM_DisableCompiler+0x678d
0d 3411fe40 6d440262 jvm!JVM_FindSignal+0x16d88
0e 3411fe94 6d43ffe0 jvm!JVM_DisableCompiler+0x66a1
0f 3411fee8 6d44f403 jvm!JVM_DisableCompiler+0x641f
10 3411ff3c 6d482c10 jvm!JVM_StartThread+0x1bb
11 3411ff68 6d482be0 jvm!JVM_FindSignal+0x3066b
12 3411ff7c 780085bc jvm!JVM_FindSignal+0x3063b
13 3411ffb4 7c57438b MSVCRT!endthreadex+0xbc
14 3411ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 38
System Thread ID: 484
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 3415fbb0 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 3415fbd8 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 3415fbe8 6d465f47 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 3415fc20 6d4763ae jvm!JVM_FindSignal+0x139a2
04 3415fc44 6d44b9f2 jvm!JVM_FindSignal+0x23e09
05 3415fc64 069c5138 jvm!JVM_MonitorWait+0x70
06 3415fc94 069c2c02 0x69c5138
07 3415fcd0 069c2c52 0x69c2c02
08 3415fd14 069c2c52 0x69c2c52
09 3415fd38 069c2cca 0x69c2c52
0a 3415fd6c 6d4db41c 0x69c2cca
0b 3415fd84 6d44034e
jvm!JVMCI_InstallStackOvrFlowExceptionFilter+0x435c4
0c 3415fe04 6d46932d jvm!JVM_DisableCompiler+0x678d
0d 3415fe40 6d440262 jvm!JVM_FindSignal+0x16d88
0e 3415fe94 6d43ffe0 jvm!JVM_DisableCompiler+0x66a1
0f 3415fee8 6d44f403 jvm!JVM_DisableCompiler+0x641f
10 3415ff3c 6d482c10 jvm!JVM_StartThread+0x1bb
11 3415ff68 6d482be0 jvm!JVM_FindSignal+0x3066b
12 3415ff7c 780085bc jvm!JVM_FindSignal+0x3063b
13 3415ffb4 7c57438b MSVCRT!endthreadex+0xbc
14 3415ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 39
System Thread ID: 7e4
Kernel Time: 0:0:0.390
User Time: 0:0:1.437
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\Program Files\Common Files\System\OLE DB\oledb32.dll -
Thread Type: Other
# ChildEBP RetAddr
00 1f53ff58 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 1f53ff80 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 1f53ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 1f53ffb4 7c57438b oledb32!DllGetClassObject+0x2881
04 1f53ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 40
System Thread ID: 91c
Kernel Time: 0:0:0.843
User Time: 0:0:0.859
Thread Type: Other
# ChildEBP RetAddr
00 1f57ff50 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 1f57ff78 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 1f57ff88 1f8945bb KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 1f57ffb4 7c57438b oledb32!DllGetClassObject+0x2891
04 1f57ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 41
System Thread ID: 914
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 1f5bfd54 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 1f5bfd7c 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 1f5bfd8c 7878db85 KERNEL32!WaitForSingleObject+0xf
03 1f5bffb4 7c57438b comsvcs!PingThread+0xf5
04 1f5bffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 42
System Thread ID: 970
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 065eff88 75179cd7 ntdll!ZwWaitForMultipleObjects+0xb
01 065effb4 7c57438b NETAPI32!NetbiosWaiter+0x71
02 065effec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 43
System Thread ID: 850
Kernel Time: 0:1:9.609
User Time: 0:8:28.781
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\Program Files\Common Files\System\ADO\msado15.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0b2df50c 000c0003 msado15!DllCanUnloadNow+0x2e89
01 00000409 00000000 0xc0003
Thread ID: 44
System Thread ID: 878
Kernel Time: 0:0:9.281
User Time: 0:0:49.93
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0b07fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0b07fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0b07fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0b07fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0b07ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0b07ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0b07ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 45
System Thread ID: 910
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 098eff10 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 098eff38 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 098eff48 6c37143a KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 098effb4 7c57438b MFC42!Ordinal4168+0xd
04 098effec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 46
System Thread ID: 2c8
Kernel Time: 0:0:1.156
User Time: 0:0:0.734
Thread Type: Other
# ChildEBP RetAddr
00 09ffff30 77abbad5 USER32!NtUserGetMessage+0xb
01 09ffff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40
02 09ffff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2
03 09ffff90 77ab50ee ole32!DLLHostThreadEntry+0x9
04 09ffffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
05 09ffffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 09ffffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 47
System Thread ID: 7a4
Kernel Time: 0:0:7.125
User Time: 0:0:37.921
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0b65fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0b65fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0b65fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0b65fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0b65ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0b65ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0b65ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 48
System Thread ID: 818
Kernel Time: 0:0:6.109
User Time: 0:0:7.562
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0b8eff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 0b8eff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may
be wrong.
02 7c310dd6 f76868ff ISATQ!CDirMonitor::RemoveEntry+0xeb
03 6aec8b55 00000000 0xf76868ff
Thread ID: 49
System Thread ID: 960
Kernel Time: 0:0:9.250
User Time: 0:0:45.921
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0beafe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0beafe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0beafed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0beafef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0beaff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0beaffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0beaffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 50
System Thread ID: 988
Kernel Time: 0:0:2.31
User Time: 0:0:10.906
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0af6fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0af6fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0af6fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0af6fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0af6ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0af6ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0af6ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 51
System Thread ID: 544
Kernel Time: 0:0:0.0
User Time: 0:0:0.78
Thread Type: Other
# ChildEBP RetAddr
00 029afbac 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 029afbd4 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 029afbe4 6d465f47 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 029afc1c 6d4763ae jvm!JVM_FindSignal+0x139a2
04 029afc40 6d44b9f2 jvm!JVM_FindSignal+0x23e09
05 029afc60 069c5138 jvm!JVM_MonitorWait+0x70
06 029afc90 069c2c02 0x69c5138
07 029afccc 069c2c52 0x69c2c02
08 029afd18 069c2cca 0x69c2c52
09 029afd6c 6d4db41c 0x69c2cca
0a 029afd84 6d44034e
jvm!JVMCI_InstallStackOvrFlowExceptionFilter+0x435c4
0b 029afe04 6d46932d jvm!JVM_DisableCompiler+0x678d
0c 029afe40 6d440262 jvm!JVM_FindSignal+0x16d88
0d 029afe94 6d43ffe0 jvm!JVM_DisableCompiler+0x66a1
0e 029afee8 6d44f403 jvm!JVM_DisableCompiler+0x641f
0f 029aff3c 6d482c10 jvm!JVM_StartThread+0x1bb
10 029aff68 6d482be0 jvm!JVM_FindSignal+0x3066b
11 029aff7c 780085bc jvm!JVM_FindSignal+0x3063b
12 029affb4 7c57438b MSVCRT!endthreadex+0xbc
13 029affec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 52
System Thread ID: 5a4
Kernel Time: 0:0:0.281
User Time: 0:0:5.671
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 00c6fc20 7c573a4e ntdll!NtDelayExecution+0xb
01 00c6fc40 7c573a22 KERNEL32!SleepEx+0x32
02 00c6fc4c 74a2c8a6 KERNEL32!Sleep+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 00c6fc64 74a2c844 asp!DllUnregisterServer+0x12f90
04 74a33ca0 02a80000 asp!DllUnregisterServer+0x12f2e
05 00000f70 00000000 0x2a80000
Thread ID: 53
System Thread ID: 838
Kernel Time: 0:0:0.687
User Time: 0:0:3.687
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 029efe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 029efe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 029efed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 029efef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 029eff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 029effb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 029effec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 54
System Thread ID: 868
Kernel Time: 0:0:0.750
User Time: 0:0:9.953
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0296fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0296fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0296fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0296fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0296ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0296ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0296ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 55
System Thread ID: 884
Kernel Time: 0:3:12.125
User Time: 0:6:56.656
Thread Type: Other
# ChildEBP RetAddr
00 08eae864 7c2d1a16 ntdll!NtOpenKey+0xb
01 08eae8f0 7c2d1d82 ADVAPI32!LocalBaseRegOpenKey+0x13e
02 08eae924 1f89da05 ADVAPI32!RegOpenKeyExW+0xf8
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 08eae9cc 00450064 oledb32!DllGetClassObject+0xbcdb
04 00650064 00000000 0x450064
Thread ID: 56
System Thread ID: 5a8
Kernel Time: 0:0:0.953
User Time: 0:0:6.718
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0906fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0906fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0906fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0906fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0906ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0906ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0906ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 57
System Thread ID: 9f4
Kernel Time: 0:0:1.765
User Time: 0:0:12.765
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 027efc20 7c573a4e ntdll!NtDelayExecution+0xb
01 027efc40 7c573a22 KERNEL32!SleepEx+0x32
02 027efc4c 74a2c8a6 KERNEL32!Sleep+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 027efc64 74a2c844 asp!DllUnregisterServer+0x12f90
04 74a33ca0 02a80000 asp!DllUnregisterServer+0x12f2e
05 00000f70 00000000 0x2a80000
Thread ID: 58
System Thread ID: 1d0
Kernel Time: 0:0:1.218
User Time: 0:0:11.296
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02a2fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 02a2fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 02a2fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 02a2fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 02a2ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 02a2ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 02a2ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 59
System Thread ID: 74c
Kernel Time: 0:0:0.718
User Time: 0:0:3.968
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0938fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0938fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0938fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0938fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0938ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0938ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0938ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 60
System Thread ID: 108
Kernel Time: 0:0:2.78
User Time: 0:0:10.390
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 098afe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 098afe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 098afed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 098afef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 098aff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 098affb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 098affec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 61
System Thread ID: 870
Kernel Time: 0:0:0.62
User Time: 0:0:0.218
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0afafe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0afafe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0afafed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0afafef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0afaff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0afaffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0afaffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 62
System Thread ID: 744
Kernel Time: 0:0:2.437
User Time: 0:0:15.843
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 092bfe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 092bfe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 092bfed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 092bfef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 092bff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 092bffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 092bffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 63
System Thread ID: 98c
Kernel Time: 0:0:0.343
User Time: 0:0:3.671
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0b79fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0b79fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0b79fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0b79fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0b79ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0b79ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0b79ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 64
System Thread ID: 5b0
Kernel Time: 0:3:13.578
User Time: 0:7:0.828
Thread Type: Other
# ChildEBP RetAddr
00 0afee914 7c2d1889 ntdll!NtClose+0xb
01 0afee924 7c2d184f ADVAPI32!BaseRegCloseKeyInternal+0x4f
02 0afee92c 7c2d1918 ADVAPI32!LocalBaseRegCloseKey+0x9
03 0afee934 1f89da57 ADVAPI32!RegCloseKey+0x74
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0afee9f4 77a98ee1 oledb32!DllGetClassObject+0xbd2d
05 00000000 00000000 ole32!GetCurrentApartmentId+0x42
Thread ID: 65
System Thread ID: 7c4
Kernel Time: 0:0:0.625
User Time: 0:0:6.578
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0b02fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0b02fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0b02fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0b02fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0b02ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0b02ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0b02ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 66
System Thread ID: 6a4
Kernel Time: 0:0:2.500
User Time: 0:0:20.250
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0b38fc20 7c573a4e ntdll!NtDelayExecution+0xb
01 0b38fc40 7c573a22 KERNEL32!SleepEx+0x32
02 0b38fc4c 74a2c8a6 KERNEL32!Sleep+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 0b38fc64 74a2c844 asp!DllUnregisterServer+0x12f90
04 74a33ca0 02a80000 asp!DllUnregisterServer+0x12f2e
05 00000f70 00000000 0x2a80000
Thread ID: 67
System Thread ID: 908
Kernel Time: 0:0:0.468
User Time: 0:0:2.984
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0932fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0932fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0932fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0932fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0932ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0932ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0932ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 68
System Thread ID: 954
Kernel Time: 0:0:1.531
User Time: 0:0:19.734
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 093ffe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 093ffe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 093ffed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 093ffef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 093fff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 093fffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 093fffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 69
System Thread ID: a04
Kernel Time: 0:0:1.62
User Time: 0:0:9.890
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0bdffe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0bdffe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0bdffed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0bdffef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0bdfff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0bdfffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0bdfffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 70
System Thread ID: 684
Kernel Time: 0:1:8.906
User Time: 0:3:33.500
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\system32\MSDART.DLL -
Thread Type: Other
# ChildEBP RetAddr
00 0663e694 7c2d1889 ntdll!NtClose+0xb
01 0663e6a4 7c2d184f ADVAPI32!BaseRegCloseKeyInternal+0x4f
02 0663e6ac 7c2d1918 ADVAPI32!LocalBaseRegCloseKey+0x9
03 0663e6b4 1f89da57 ADVAPI32!RegCloseKey+0x74
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0663e75c 1f67901e oledb32!DllGetClassObject+0xbd2d
05 00000073 00000000 MSDART!UMSEnterCSWraper+0xae
Thread ID: 71
System Thread ID: 590
Kernel Time: 0:0:0.93
User Time: 0:0:0.203
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0bb5fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0bb5fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0bb5fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0bb5fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
04 0bb5ff1c 787c2cc0 comsvcs!STAThread::WaitForWork+0x33
05 0bb5ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x4e2
06 0bb5ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 72
System Thread ID: 99c
Kernel Time: 0:0:0.687
User Time: 0:0:6.62
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0943fc20 7c573a4e ntdll!NtDelayExecution+0xb
01 0943fc40 7c573a22 KERNEL32!SleepEx+0x32
02 0943fc4c 74a2c8a6 KERNEL32!Sleep+0xb
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 0943fc64 74a2c844 asp!DllUnregisterServer+0x12f90
04 74a33ca0 02a80000 asp!DllUnregisterServer+0x12f2e
05 00000f70 00000000 0x2a80000
Thread ID: 73
System Thread ID: 9ec
Kernel Time: 0:1:8.484
User Time: 0:3:29.93
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\WINNT\System32\vbscript.dll -
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02a6f1bc 73591e00 vbscript!DllRegisterServer+0x1ea4
01 02a6f2b0 73573936 vbscript!DllGetClassObject+0x19984
02 02a6f2d4 73575877 vbscript!DllCanUnloadNow+0x22c3
03 02a6f5b0 73574380 vbscript!DllCanUnloadNow+0x4204
04 02a6f6b4 7357c7c1 vbscript!DllCanUnloadNow+0x2d0d
05 02a6f988 73574380 vbscript!DllGetClassObject+0x4345
06 02a6fa8c 7357444c vbscript!DllCanUnloadNow+0x2d0d
07 02a6faf0 73574746 vbscript!DllCanUnloadNow+0x2dd9
08 02a6fb40 735747b3 vbscript!DllCanUnloadNow+0x30d3
09 02a6fb5c 749f55b2 vbscript!DllCanUnloadNow+0x3140
0a 02a6fb8c 749f5585 asp!HttpExtensionProc+0x4075
0b 02a6fbd0 749f5534 asp!HttpExtensionProc+0x4048
0c 02a6fbdc 749f4570 asp!HttpExtensionProc+0x3ff7
0d 02a6fc18 749f43ef asp!HttpExtensionProc+0x3033
0e 02a6fc60 749f2e6f asp!HttpExtensionProc+0x2eb2
0f 02a6fcb0 749f2b13 asp!HttpExtensionProc+0x1932
10 02a6fcc8 787c3bda asp!HttpExtensionProc+0x15d6
11 02a6fcd0 77aa1f39 comsvcs!STAActivityWorkHelper+0xa
12 02a6fd14 77aa1d5d ole32!EnterForCallback+0x6a
13 02a6fe40 77aa1c1c ole32!SwitchForCallback+0x12f
14 02a6fe68 77aa672a ole32!PerformCallback+0x50
15 02a6fed4 77aa6583
ole32!CObjectContext::InternalContextCallback+0x10d
16 02a6fef4 787c0515 ole32!CObjectContext::DoCallback+0x1a
17 02a6ff24 787c2b31 comsvcs!STAActivityWork::DoWork+0x75
18 02a6ffb4 7c57438b comsvcs!STAThread::STAThreadWorker+0x353
19 02a6ffec 00000000 KERNEL32!BaseThreadStart+0x52
Thread ID: 74
System Thread ID: 994
Kernel Time: 0:0:0.46
User Time: 0:0:0.125
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0baffc20 7c573a4e ntdll!NtDelayExecution+0xb
01 0baffc40 7c573a22 KERNEL32