Hello,
I ve a problem to analyse the dump which has been created by
iisstate. It seems that the thread 55 is taking lot of cpu time. But I
don t know how to find the source of my problem.
thank you for your help.
Opened log file 'E:\iisstate\output\IISState-317.log'
***********************
Starting new log output
IISState version 3.3.1
Wed Jun 30 11:18:14 2004
OS = NT4
Executable: inetinfo.exe
PID = 317
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: 13c
Kernel Time: 0:0:0.30
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd44 77f0d291 ntdll!NtReadFile+0xb
01 0006fdb0 77dd8a61 KERNEL32!ReadFile+0x1a6
02 0006fde4 77dd84ad ADVAPI32!ScGetPipeInput+0x28
03 0006fe48 77dd82ca ADVAPI32!ScDispatcherLoop+0x46
04 0006fe6c 0100182c ADVAPI32!StartServiceCtrlDispatcherA+0x82
05 0006fea4 010015d5 inetinfo!StartDispatchTable+0x61
06 0006ff70 01001e7f inetinfo!main+0x2a5
07 0006ffc0 77f1bb7c inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40
Thread ID: 1
System Thread ID: 149
Kernel Time: 0:0:0.80
User Time: 0:0:0.210
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0085fe2c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0085fe54 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0085fe64 683a18fe KERNEL32!WaitForSingleObject+0xf
03 0085fe80 0100175d iisadmin!ServiceEntry+0x11b
04 0085ffa8 77dd8c41 inetinfo!InetinfoStartService+0xfb
05 0085ffb8 77f04eeb ADVAPI32!ScSvcctrlThreadA+0xe
06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 2
System Thread ID: 164
Kernel Time: 0:0:2.223
User Time: 0:0:3.575
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for KNFOCOMM.dll -
Thread Type: Other
# ChildEBP RetAddr
00 00e0fd58 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00e0fdb0 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00e0fe0c 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00e0fe28 5d148d7a USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 002aeb1c 00000000 KNFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
Thread ID: 3
System Thread ID: 165
Kernel Time: 0:0:0.80
User Time: 0:0:0.60
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for INFOCOMM.dll -
Thread Type: Other
# ChildEBP RetAddr
00 00e4fd28 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00e4fd80 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00e4fddc 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00e4fdf8 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 002ae95c 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
Thread ID: 4
System Thread ID: 166
Kernel Time: 0:0:0.70
User Time: 0:0:0.420
Thread Type: Other
# ChildEBP RetAddr
00 00e8fd34 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00e8fd8c 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00e8fde8 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00e8fe04 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 012e2eec 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
Thread ID: 5
System Thread ID: 167
Kernel Time: 0:0:0.150
User Time: 0:0:0.120
Thread Type: Other
# ChildEBP RetAddr
00 00ecfd28 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00ecfd80 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00ecfddc 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00ecfdf8 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 012e1684 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
Thread ID: 6
System Thread ID: 168
Kernel Time: 0:0:0.240
User Time: 0:0:0.180
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for broksvc.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00f0fde0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 00f0fe08 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 00f0fe18 5dfe3a2f KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 00f0fe80 0100175d broksvc!ServiceEntry+0x6d3
04 5dfe335c be575655 inetinfo!InetinfoStartService+0xfb
05 534cec83 00000000 0xbe575655
Thread ID: 7
System Thread ID: 169
Kernel Time: 0:0:0.40
User Time: 0:0:0.450
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for KSATQ.dll -
Thread Type: Other
# ChildEBP RetAddr
00 00f4fe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00f4fef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00f4ff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00f4ff6c 5d135cc6 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000000 00000000 KSATQ!ScheduleAdjustTime+0x116
Thread ID: 8
System Thread ID: 16a
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00f8fe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00f8fef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00f8ff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00f8ff6c 5d135cc6 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000000 00000000 KSATQ!ScheduleAdjustTime+0x116
Thread ID: 9
System Thread ID: 16b
Kernel Time: 0:0:0.80
User Time: 0:0:0.30
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for ISATQ.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fcfe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00fcfef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00fcff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00fcff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116
Thread ID: 10
System Thread ID: 16c
Kernel Time: 0:0:0.100
User Time: 0:0:0.80
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0104fe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0104fef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0104ff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0104ff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116
Thread ID: 11
System Thread ID: 5d
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0108ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0108ff84 5d13499b KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0108ffb8 77f04eeb KSATQ!AtqPostCompletionStatus+0x8c8
03 0108ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 12
System Thread ID: 137
Kernel Time: 0:0:0.190
User Time: 0:0:0.711
Thread Type: Other
# ChildEBP RetAddr
00 010cff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 010cff84 5d13499b KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 010cffb8 77f04eeb KSATQ!AtqPostCompletionStatus+0x8c8
03 010cffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 13
System Thread ID: 16d
Kernel Time: 0:0:0.190
User Time: 0:0:0.170
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0110ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0110ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0110ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0110ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 14
System Thread ID: 16e
Kernel Time: 0:0:2.874
User Time: 0:0:2.984
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0114ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0114ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0114ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0114ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 15
System Thread ID: 16f
Kernel Time: 0:0:1.662
User Time: 0:0:0.430
Thread Type: Other
# ChildEBP RetAddr
00 0128ff30 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0128ff88 685a7e98 KERNEL32!WaitForMultipleObjectsEx+0xef
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 685b35a0 0c53d598 INFOCOMM!TS_OPEN_FILE_INFO::MakeStrongETag+0x7eb
03 000dcd80 685b35a0 0xc53d598
04 000dd558 000dcd80 INFOCOMM!MB::GetMultisz+0x649c
05 000de5d8 000dd558 0xdcd80
06 000dedb0 000de5d8 0xdd558
07 000df588 000dedb0 0xde5d8
08 000dfdb0 000df588 0xdedb0
09 000e3670 000dfdb0 0xdf588
0a 000e2600 000e3670 0xdfdb0
0b 000e5918 000e2600 0xe3670
0c 000e60f0 000e5918 0xe2600
0d 000e68c8 000e60f0 0xe5918
0e 000e70a0 000e68c8 0xe60f0
0f 000e7878 000e70a0 0xe68c8
10 000e8050 000e7878 0xe70a0
11 000e8828 000e8050 0xe7878
12 000e9000 000e8828 0xe8050
13 000e97d8 000e9000 0xe8828
14 000e9fb0 000e97d8 0xe9000
15 000ea788 000e9fb0 0xe97d8
16 000eaf60 000ea788 0xe9fb0
17 000eb738 000eaf60 0xea788
18 000ebf10 000eb738 0xeaf60
19 000ec6e8 000ebf10 0xeb738
1a 000ecec0 000ec6e8 0xebf10
1b 000ed698 000ecec0 0xec6e8
1c 000f00f0 000ed698 0xecec0
1d 000f08c8 000f00f0 0xed698
1e 000fae38 000f08c8 0xf00f0
1f 000fb610 000fae38 0xf08c8
20 000fbde8 000fb610 0xfae38
21 000fc5c0 000fbde8 0xfb610
22 000e3f10 000fc5c0 0xfbde8
23 000ff628 000e3f10 0xfc5c0
24 0011c950 000ff628 0xe3f10
25 0011d5a0 0011c950 0xff628
26 0011def8 0011d5a0 0x11c950
27 0c520280 0011def8 0x11d5a0
28 0c520da0 0c520280 0x11def8
29 0c521578 0c520da0 0xc520280
2a 00162f40 0c521578 0xc520da0
2b 001638c0 00162f40 0xc521578
2c 00164448 001638c0 0x162f40
2d 00164fc8 00164448 0x1638c0
2e 001657a0 00164fc8 0x164448
2f 00165f78 001657a0 0x164fc8
30 001667a8 00165f78 0x1657a0
31 00166f80 001667a8 0x165f78
Thread ID: 16
System Thread ID: 170
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: *** ERROR: Symbol file could not be found. Defaulted to
export symbols for asp.dll -
ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 012cfdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 012cff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 012cff94 77e17bd3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 012cffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x9f
04 012cffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 012cffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 17
System Thread ID: 171
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0140ff30 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0140ff88 5d157063 KERNEL32!WaitForMultipleObjectsEx+0xef
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 5d1624d8 5d1624d8 KNFOCOMM!TS_OPEN_FILE_INFO::MakeStrongETag+0x5e6
Thread ID: 18
System Thread ID: 172
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 0144fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0144ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0144ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0144ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0144ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 0144ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 19
System Thread ID: 17b
Kernel Time: 0:0:0.520
User Time: 0:0:0.791
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for BROKESP.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0162ff3c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0162ff64 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0162ff74 5dfe41b2 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0162ffb0 5dff3422 broksvc!ServiceEntry+0xe56
04 00000002 00000000 BROKESP!EventLogTimer
Thread ID: 20
System Thread ID: 17d
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 0178fee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 0178ff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 0178ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 0178ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 0178ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 0178ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 0178ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
07 0178ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 21
System Thread ID: 17e
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 017cfee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 017cff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 017cff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 017cff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 017cff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 017cffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 017cffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
07 017cffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 22
System Thread ID: 175
Kernel Time: 0:0:0.0
User Time: 0:0:0.60
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for brokcach.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0182ff6c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0182ff94 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0182ffa4 5e031c5e KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0182ffec 00000000 brokcach!CScopeRWLock::operator=+0x729
Thread ID: 23
System Thread ID: 176
Kernel Time: 0:0:0.30
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for w3svc.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for MSVCRT.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0190fe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0190fec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0190ff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0190ff40 68c22d44 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0190ff84 7800b995 w3svc!HTTP_HEADERS::Cleanup+0x2f55
05 0190ffb8 77f04eeb MSVCRT!beginthread+0xce
06 0190ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 24
System Thread ID: 177
Kernel Time: 0:0:0.20
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 0194fea8 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0194ff00 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0194ff5c 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0194ff78 68c1acea USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0194ffb8 77f04eeb w3svc!ServiceEntry+0x6d7
05 0194ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 25
System Thread ID: 178
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0198ff40 776689ce ntdll!NtWaitForSingleObject+0xb
01 0198ff98 77661e92 msafd!SockWaitForSingleObject+0x204
02 0198ffb8 77f04eeb msafd!SockAsyncThread+0x2c
03 0198ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 26
System Thread ID: 179
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 019cfca0 776689ce ntdll!NtWaitForSingleObject+0xb
01 019cfcf8 77664a12 msafd!SockWaitForSingleObject+0x204
02 019cfe20 776ba274 msafd!WSPSelect+0x28e
03 019cfe70 68563c07 WS2_32!select+0xfc
04 019cffb8 77f04eeb inetsloc!SocketListenThread+0x51
05 019cffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 27
System Thread ID: 17a
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 01a0fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 01a0ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 01a0ff94 77e17bd3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 01a0ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x9f
04 01a0ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 01a0ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 28
System Thread ID: 13e
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 01a4fee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 01a4ff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 01a4ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 01a4ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 01a4ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 01a4ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 01a4ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
07 01a4ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 29
System Thread ID: d0
Kernel Time: 0:0:0.330
User Time: 0:0:1.291
Thread Type: Other
# ChildEBP RetAddr
00 01a9fe34 77e85394 USER32!ZwUserGetMessage+0xb
01 01a9fe54 585f7c69 USER32!GetMessageW+0x34
02 01a9ffb8 77f04eeb ldapdb!JETAccessThread+0xda0
03 01a9ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 30
System Thread ID: 17f
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for MTXDM.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 02a0ff58 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 02a0ff80 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 02a0ff90 69a21998 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 02a0ffb8 77f04eeb MTXDM+0x1998
04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 31
System Thread ID: 180
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 02b4fa80 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 02b4fad8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 02b4fb34 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 02b4fb50 1b10d5ac USER32!MsgWaitForMultipleObjects+0x1d
04 02b4ff84 1b110355 msjet40!COMCallThreadProc+0xdc
05 02b4ffb8 77f04eeb msjet40!_beginthread+0xdd
06 02b4ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 32
System Thread ID: 181
Kernel Time: 0:0:0.0
User Time: 0:0:0.20
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 06b8fef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 06b8ff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 06b8ff28 1b009994 KERNEL32!WaitForSingleObject+0xf
03 06b8ff34 1b00995c msjet40!Semaphore::Wait+0xe
04 06b8ff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
05 06b8ffb8 77f04eeb msjet40!System::WorkerThread+0x41
06 06b8ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 33
System Thread ID: 182
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 06bcfef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 06bcff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 06bcff28 1b009994 KERNEL32!WaitForSingleObject+0xf
03 06bcff34 1b00995c msjet40!Semaphore::Wait+0xe
04 06bcff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
05 06bcffb8 77f04eeb msjet40!System::WorkerThread+0x41
06 06bcffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 34
System Thread ID: 183
Kernel Time: 0:0:0.0
User Time: 0:0:0.20
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 06c0fef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 06c0ff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 06c0ff28 1b009994 KERNEL32!WaitForSingleObject+0xf
03 06c0ff34 1b00995c msjet40!Semaphore::Wait+0xe
04 06c0ff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
05 06c0ffb8 77f04eeb msjet40!System::WorkerThread+0x41
06 06c0ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 35
System Thread ID: 184
Kernel Time: 0:0:0.120
User Time: 0:0:0.120
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0b05fee8 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0b05ff10 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0b05ff20 1b272226 KERNEL32!WaitForSingleObject+0xf
03 0b05ff2c 1b272175 msrd3x40!Semaphore::Wait+0xe
04 0b05ff5c 1b28c775 msrd3x40!Queue::GetMessageW+0xd9
05 0b05ffb8 77f04eeb msrd3x40!System::WorkerThread+0x41
06 0b05ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 36
System Thread ID: 185
Kernel Time: 0:0:0.160
User Time: 0:0:0.80
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0b09fee8 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0b09ff10 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0b09ff20 1b272226 KERNEL32!WaitForSingleObject+0xf
03 0b09ff2c 1b272175 msrd3x40!Semaphore::Wait+0xe
04 0b09ff5c 1b28c775 msrd3x40!Queue::GetMessageW+0xd9
05 0b09ffb8 77f04eeb msrd3x40!System::WorkerThread+0x41
06 0b09ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 37
System Thread ID: 186
Kernel Time: 0:0:0.120
User Time: 0:0:0.70
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0b0dfee8 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0b0dff10 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0b0dff20 1b272226 KERNEL32!WaitForSingleObject+0xf
03 0b0dff2c 1b272175 msrd3x40!Semaphore::Wait+0xe
04 0b0dff5c 1b28c775 msrd3x40!Queue::GetMessageW+0xd9
05 0b0dffb8 77f04eeb msrd3x40!System::WorkerThread+0x41
06 0b0dffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 38
System Thread ID: 187
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0bf7fefc 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0bf7ff54 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0bf7ff70 65352a46 KERNEL32!WaitForMultipleObjects+0x16
03 0bf7ffb8 77f04eeb OLEAUT32!RegistryWatchThread+0x86
04 0bf7ffc4 77f3fd50 KERNEL32!BaseThreadStart+0x51
05 77f4181f 416d6f74 KERNEL32!_NULL_IMPORT_DESCRIPTOR+0x1b28
WARNING: Frame IP not in any known module. Following frames may be
wrong.
06 41646441 00000000 0x416d6f74
Thread ID: 39
System Thread ID: 62
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for SMTPSVC.dll -
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c16ff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0c16ff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0c16ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c16ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 40
System Thread ID: cd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c1aff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0c1aff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0c1aff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c1affec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 41
System Thread ID: 18c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c1eff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0c1eff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0c1eff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c1effec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 42
System Thread ID: 18f
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c22ff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0c22ff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0c22ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c22ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 43
System Thread ID: 190
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c26ff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0c26ff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0c26ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c26ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 44
System Thread ID: 191
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c2aff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0c2aff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0c2aff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c2affb8 77f04eeb SMTPSVC!MIME_MAP::Print+0x1ba37
04 002b4260 00001320 KERNEL32!BaseThreadStart+0x51
Thread ID: 45
System Thread ID: 192
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c2eff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0c2eff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0c2eff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c2effb8 77f04eeb SMTPSVC!MIME_MAP::Print+0x1ba37
04 002b42c0 00001328 KERNEL32!BaseThreadStart+0x51
Thread ID: 46
System Thread ID: 193
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c32ff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0c32ff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0c32ff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c32ffb8 77f04eeb SMTPSVC!MIME_MAP::Print+0x1ba37
04 002b4320 00001330 KERNEL32!BaseThreadStart+0x51
Thread ID: 47
System Thread ID: 194
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c36ff6c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0c36ff94 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0c36ffa4 678d5c44 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c36ffec 00000000 SMTPSVC!MIME_MAP::Print+0x20974
Thread ID: 48
System Thread ID: 196
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0c3eff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0c3eff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0c3eff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0c3effb8 77f04eeb SMTPSVC!MIME_MAP::Print+0x1ba37
04 002b4440 00001350 KERNEL32!BaseThreadStart+0x51
Thread ID: 49
System Thread ID: 198
Kernel Time: 0:0:0.781
User Time: 0:0:0.751
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0c92ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0c92ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0c92ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0c92ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 50
System Thread ID: 1a1
Kernel Time: 0:0:0.150
User Time: 0:0:0.90
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0cacff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0cacff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0cacffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0cacffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 51
System Thread ID: 1a3
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0cb1ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0cb1ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0cb1ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0cb1ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 52
System Thread ID: 1a5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0cb7fe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0cb7fec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0cb7ff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0cb7ff40 680c5fa5 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0cb7ff84 7800b995 asp!AspStatusHtmlDump+0x276d
05 0cb7ffb8 77f04eeb MSVCRT!beginthread+0xce
06 0cb7ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 53
System Thread ID: 1a6
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0cbbfe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0cbbfec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0cbbff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0cbbff40 680bbf64 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0cbbff84 7800b995 asp!DllCanUnloadNow+0x2ff0
05 0cbbffb8 77f04eeb MSVCRT!beginthread+0xce
06 0cbbffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 54
System Thread ID: 1a8
Kernel Time: 0:0:0.50
User Time: 0:0:0.20
*** WARNING: Unable to verify checksum for pdm.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for pdm.dll -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 0cbffe90 77e71eab USER32!ZwUserGetThreadState+0xb
01 0cbffea8 4a003b36 USER32!PeekMessageA+0xb3
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 77e7ae7f 0110247c pdm+0x3b36
03 83ec8b55 00000000 0x110247c
Thread ID: 55
System Thread ID: 1b2
Kernel Time: 0:0:4.716
User Time: 0:33:0.137
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for vbscript.dll -
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may be
wrong.
00 0cdaf8bc 7801df1e MSVCRT!seh_longjmp_unwind
01 0cdafba0 73574380 MSVCRT!longjmpex+0x49
02 0cdafca4 7357444c vbscript!DllCanUnloadNow+0x2d0d
03 0cdafd08 73574746 vbscript!DllCanUnloadNow+0x2dd9
04 0cdafd58 735747b3 vbscript!DllCanUnloadNow+0x30d3
05 0cdafd74 680ccfe2 vbscript!DllCanUnloadNow+0x3140
06 0cdafda4 680ccf6d asp!DllUnregisterServer+0x54a3
07 0cdafde8 680c0caf asp!DllUnregisterServer+0x542e
08 0cdafdf4 680c01ff asp!TerminateExtension+0x3d77
09 0cdafe30 680c0029 asp!TerminateExtension+0x32c7
0a 0cdafe78 680c34c3 asp!TerminateExtension+0x30f1
0b 00000000 00000000 asp!TerminateExtension+0x658b
Thread ID: 56
System Thread ID: 1ba
Kernel Time: 0:0:0.0
User Time: 0:0:0.20
*** ERROR: Symbol file could not be found. Defaulted to export symbols
for oledb32.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0d4fff5c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0d4fff84 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0d4fff94 01ce55a1 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0d4fffb8 77f04eeb oledb32!DllGetClassObject+0x38eb
04 0d4fffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 57
System Thread ID: 1bb
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0d53ff54 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0d53ff7c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0d53ff8c 01ce5593 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0d53ffb8 77f04eeb oledb32!DllGetClassObject+0x38dd
04 0d53ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 58
System Thread ID: 1c5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0d58ff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0d58ff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0d58ff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0d58ffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0d58ffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0d58ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 59
System Thread ID: 1c6
Kernel Time: 0:0:0.50
User Time: 0:0:0.170
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0d5cff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0d5cff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0d5cff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0d5cffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0d5cffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0d5cffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 60
System Thread ID: 1c7
Kernel Time: 0:0:0.20
User Time: 0:0:0.30
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0da9ff60 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0da9ff88 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0da9ff98 776b1c06 KERNEL32!WaitForSingleObject+0xf
03 0da9ffb8 77f04eeb WS2_32!SockAsyncThread+0x2c
04 0da9ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 61
System Thread ID: 1c8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0dadff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0dadff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0dadff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0dadffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0dadffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0dadffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 62
System Thread ID: 1c9
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0db1ff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0db1ff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0db1ff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0db1ffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0db1ffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0db1ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 63
System Thread ID: 1ca
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0dd8ff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0dd8ff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0dd8ff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0dd8ffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0dd8ffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0dd8ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 64
System Thread ID: 1cb
Kernel Time: 0:0:0.0
User Time: 0:0:0.20
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ddcff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ddcff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ddcff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0ddcffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0ddcffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0ddcffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 65
System Thread ID: 1cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0df8ff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0df8ff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0df8ff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0df8ffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0df8ffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0df8ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 66
System Thread ID: 1cd
Kernel Time: 0:0:0.0
User Time: 0:0:0.30
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0dfcff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0dfcff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0dfcff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0dfcffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0dfcffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0dfcffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 67
System Thread ID: 1ce
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0e4eff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0e4eff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0e4eff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0e4effb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0e4effb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0e4effec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 68
System Thread ID: 1c2
Kernel Time: 0:0:0.30
User Time: 0:0:0.30
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0e52ff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0e52ff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0e52ff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0e52ffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0e52ffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0e52ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 69
System Thread ID: 1cf
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ea5ff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ea5ff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ea5ff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0ea5ffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0ea5ffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0ea5ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 70
System Thread ID: 1d0
Kernel Time: 0:0:0.10
User Time: 0:0:0.10
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ea9ff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ea9ff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ea9ff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0ea9ffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0ea9ffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0ea9ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 71
System Thread ID: 1d1
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ebbff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ebbff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ebbff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0ebbffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0ebbffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0ebbffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 72
System Thread ID: 1d2
Kernel Time: 0:0:0.0
User Time: 0:0:0.20
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ebfff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ebfff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ebfff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0ebfffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0ebfffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0ebfffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 73
System Thread ID: 1d3
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ed1ff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ed1ff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ed1ff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0ed1ffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0ed1ffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0ed1ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 74
System Thread ID: 1d4
Kernel Time: 0:0:0.10
User Time: 0:0:0.40
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ed5ff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ed5ff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ed5ff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0ed5ffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0ed5ffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0ed5ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 75
System Thread ID: 1d5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0ee7ff1c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0ee7ff44 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0ee7ff54 587e555a KERNEL32!WaitForSingleObject+0xf
03 0ee7ffb4 587e54ec ilsdb!CTTLThread::TTLThreadFunc+0x6b
04 0ee7ffb8 77f04eeb ilsdb!CTTLThread::Term+0x4c
05 0ee7ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 76
System Thread ID: 1d6
Kernel Time: 0:0:0.10
User Time: 0:0:0.60
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0eebff08 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0eebff30 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0eebff40 58d43416 KERNEL32!WaitForSingleObject+0xf
03 0eebffb4 58d4335f dscomobj!CDsPollThd::DsPollThd+0xb4
04 0eebffb8 77f04eeb dscomobj!CDsPollThd::StartDsPollThd+0x9
05 0eebffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 77
System Thread ID: 1dd
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 10f0fd20 776689ce ntdll!NtWaitForSingleObject+0xb
01 10f0fd78 77664a12 msafd!SockWaitForSingleObject+0x204
02 10f0fea0 776ba274 msafd!WSPSelect+0x28e
03 10f0fef0 74fa21e2 WS2_32!select+0xfc
04 10f0ff2c 77e20fae RpcLtScm!COMMON_ServerReceiveAny+0x2b8
05 10f0ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
06 10f0ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
07 10f0ff94 77e17bd3 RPCRT4!ReceiveLotsaCallsWrapper+0x9
08 10f0ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x9f
09 10f0ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
0a 10f0ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 78
System Thread ID: 19b
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 1102fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 1102ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 1102ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 1102ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 1102ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 1102ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 79
System Thread ID: 1de
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
00 1108fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 1108ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 1108ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 1108ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 1108ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 1108ffec 00000000 KERNEL32!BaseThreadStart+0x51
*****
Dump name is formatted as: PID-Timestamp.dmp
Creating E:\iisstate\output\317-1088587241.dmp - mini user dump
*****
Closing open log file E:\iisstate\output\IISState-317.log