Would someone help me find the source of my problem in this IISSTATE log.
My IIS4 server acted up again showing the exact same symptoms as before.
The symptoms were the Inetinfo.exe process started utilizing 100% cpu and
*.asp pages were no longer being served however html pages were still
working. From what I could tell, the problem seems to be a lock problem
during a query to a database but i'm not sure. If this is the case how do I
find the culprit.
Thanks for you help in advance.
The IISSTATE log is as follows:
***********************
Starting new log output
IISState version 3.2
Tue Oct 28 15:20:59 2003
OS = NT4
Executable: inetinfo.exe
PID = 1527
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: 110
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006fd44 77f0d2ca ntdll!NtReadFile+0xb
01 0006fdb0 77dd8a61 KERNEL32!ReadFile+0x1a6
02 0006fde4 77dd84ad ADVAPI32!ScGetPipeInput+0x28
03 0006fe48 77dd82ca ADVAPI32!ScDispatcherLoop+0x46
04 0006fe6c 0100182c ADVAPI32!StartServiceCtrlDispatcherA+0x82
05 0006fea4 010015d5 inetinfo!StartDispatchTable+0x61
06 0006ff70 01001e7f inetinfo!main+0x2a5
07 0006ffc0 77f1bbb5 inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40
Thread ID: 1
System Thread ID: 5eb
Kernel Time: 0:0:0.0
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0085fe2c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 0085fe54 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 0085fe64 683a18fe KERNEL32!WaitForSingleObject+0xf
03 0085fe80 0100175d iisadmin!ServiceEntry+0x11b
04 0085ffa8 77dd8c41 inetinfo!InetinfoStartService+0xfb
05 0085ffb8 77f04ef0 ADVAPI32!ScSvcctrlThreadA+0xe
06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 2
System Thread ID: ce
Kernel Time: 0:0:0.31
User Time: 0:0:0.31
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
INFOCOMM.dll -
Thread Type: Other
# ChildEBP RetAddr
00 00e8fd28 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 00e8fd80 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 00e8fddc 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 00e8fdf8 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0028dbcc 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
Thread ID: 3
System Thread ID: 5ef
Kernel Time: 0:11:39.265
User Time: 0:7:3.703
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ISATQ.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ecfe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 00ecfef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 00ecff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 00ecff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116
Thread ID: 4
System Thread ID: 5c4
Kernel Time: 0:12:30.937
User Time: 0:6:37.812
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f0fe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 00f0fef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 00f0ff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 00f0ff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116
Thread ID: 5
System Thread ID: 57b
Kernel Time: 0:0:9.812
User Time: 0:0:13.687
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3svc.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f8f9d8 77f10f30 ntdll!ZwCreateFile+0xb
01 00f8fa7c 685a6e35 KERNEL32!CreateFileW+0x396
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 00f8fd78 68c0c2f1 INFOCOMM!TsCreateFileFromURI+0x340
03 00f8fdc4 68c15f9c w3svc!CLIENT_CONN::Free+0x155d
04 00f8ff20 68c0a362 w3svc!HTTP_REQUEST::GetInfoForName+0x21a0
05 00f8ff40 68c0ae08 w3svc!ScanForTerminator+0x3ca
06 00f8ff88 6862731c w3svc!CLIENT_CONN::Free+0x74
07 00f8ffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x63c
08 00f8ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 6
System Thread ID: 565
Kernel Time: 0:0:6.328
User Time: 0:0:9.328
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fcff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 00fcff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 00fcffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 00fcffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 7
System Thread ID: 5b6
Kernel Time: 0:5:36.421
User Time: 0:1:0.828
Thread Type: Other
# ChildEBP RetAddr
00 0104ff30 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0104ff88 685a7e98 KERNEL32!WaitForMultipleObjectsEx+0xef
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 685b35a0 01dc7080 INFOCOMM!TS_OPEN_FILE_INFO::MakeStrongETag+0x7eb
03 000979c0 685b35a0 0x1dc7080
04 00098198 000979c0 INFOCOMM!MB::GetMultisz+0x649c
05 00098970 00098198 0x979c0
06 00099148 00098970 0x98198
07 00099920 00099148 0x98970
08 0009a0f8 00099920 0x99148
09 0009a8d0 0009a0f8 0x99920
0a 000a3100 0009a8d0 0x9a0f8
0b 000c8d38 000a3100 0x9a8d0
0c 000c9510 000c8d38 0xa3100
0d 000c9d78 000c9510 0xc8d38
0e 000ca550 000c9d78 0xc9510
0f 000cad28 000ca550 0xc9d78
10 000cb500 000cad28 0xca550
11 000d2020 000cb500 0xcad28
12 000d27f8 000d2020 0xcb500
13 000d2fd0 000d27f8 0xd2020
14 000d39e0 000d2fd0 0xd27f8
15 000d41b8 000d39e0 0xd2fd0
16 000d4990 000d41b8 0xd39e0
17 000e25b0 000d4990 0xd41b8
18 000e2d88 000e25b0 0xd4990
19 000e3560 000e2d88 0xe25b0
1a 000efed0 000e3560 0xe2d88
1b 000f06a8 000efed0 0xe3560
1c 000f0e80 000f06a8 0xefed0
1d 000fd900 000f0e80 0xf06a8
1e 000fe0d8 000fd900 0xf0e80
1f 000fe8b0 000fe0d8 0xfd900
20 0010b220 000fe8b0 0xfe0d8
21 0010b9f8 0010b220 0xfe8b0
22 0010c1d0 0010b9f8 0x10b220
23 00119cc8 0010c1d0 0x10b9f8
24 0011a4a0 00119cc8 0x10c1d0
25 0011ac78 0011a4a0 0x119cc8
26 00127660 0011ac78 0x11a4a0
27 00127e38 00127660 0x11ac78
28 00128610 00127e38 0x127660
29 00135108 00128610 0x127e38
2a 001358e0 00135108 0x128610
2b 001360b8 001358e0 0x135108
2c 00143a98 001360b8 0x1358e0
2d 00144270 00143a98 0x1360b8
2e 00144a48 00144270 0x143a98
2f 001513f0 00144a48 0x144270
30 00151bc8 001513f0 0x144a48
31 001523a0 00151bc8 0x1513f0
Thread ID: 8
System Thread ID: 58e
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: *** ERROR: Symbol file could not be found. Defaulted to
export symbols for asp.dll -
ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0108fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0108ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0108ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0108ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0108ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 0108ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 9
System Thread ID: 599
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0114fd20 776689ce ntdll!NtWaitForSingleObject+0xb
01 0114fd78 77664a12 msafd!SockWaitForSingleObject+0x204
02 0114fea0 776ba274 msafd!WSPSelect+0x28e
03 0114fef0 74fa21e2 WS2_32!select+0xfc
04 0114ff2c 77e20fae RpcLtScm!COMMON_ServerReceiveAny+0x2b8
05 0114ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
06 0114ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
07 0114ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
08 0114ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
09 0114ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
0a 0114ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 10
System Thread ID: 5cf
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 012dfee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 012dff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 012dff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 012dff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 012dff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 012dffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 012dffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
07 012dffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 11
System Thread ID: 5d8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0131fca0 776689ce ntdll!NtWaitForSingleObject+0xb
01 0131fcf8 77664a12 msafd!SockWaitForSingleObject+0x204
02 0131fe20 776ba274 msafd!WSPSelect+0x28e
03 0131fe70 68563c07 WS2_32!select+0xfc
04 0131ffb8 77f04ef0 inetsloc!SocketListenThread+0x51
05 0131ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 12
System Thread ID: 112
Kernel Time: 0:0:0.31
User Time: 0:0:0.109
Thread Type: Other
# ChildEBP RetAddr
00 0135fd34 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0135fd8c 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0135fde8 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0135fe04 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0023eec4 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
Thread ID: 13
System Thread ID: 5c0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0139fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0139ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0139ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0139ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0139ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
05 0139ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 14
System Thread ID: 5d7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 013dfee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 013dff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 013dff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 013dff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 013dff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 013dffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 013dffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
07 013dffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 15
System Thread ID: 10a
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
SMTPSVC.dll -
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0152ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0152ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0152ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0152ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 16
System Thread ID: c5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0156ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0156ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0156ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0028f9e8 0028f9e8 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 17
System Thread ID: 1df
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 015aff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 015aff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 015aff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0028f9e8 0028f9e8 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 18
System Thread ID: 592
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 015eff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 015eff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 015eff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0028f9e8 0028f9e8 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 19
System Thread ID: e5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0162ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0162ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0162ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0162ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
Thread ID: 20
System Thread ID: 113
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0166ff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 0166ff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 0166ff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0166ffb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
04 0028fa00 00000358 KERNEL32!BaseThreadStart+0x51
Thread ID: 21
System Thread ID: 5bb
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 016aff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 016aff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 016aff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 016affb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
04 0028fa60 00000364 KERNEL32!BaseThreadStart+0x51
Thread ID: 22
System Thread ID: 5fb
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 016eff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 016eff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 016eff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 016effb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
04 0028fac0 00000370 KERNEL32!BaseThreadStart+0x51
Thread ID: 23
System Thread ID: 1c2
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0172ff6c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 0172ff94 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 0172ffa4 678d5c44 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0172ffec 00000000 SMTPSVC!MIME_MAP::Print+0x20974
Thread ID: 24
System Thread ID: 604
Kernel Time: 0:0:0.500
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 017aff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 017aff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 017aff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 017affb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
04 0028fbe0 000003a0 KERNEL32!BaseThreadStart+0x51
Thread ID: 25
System Thread ID: 60c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 017efd28 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 017efd80 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 017efddc 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 017efdf8 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0023f5c4 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
Thread ID: 26
System Thread ID: 17a
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MFC42.DLL -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MSVCRT.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01a3fe68 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01a3fe90 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01a3fea0 5f41a6b7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01a3ff18 5f45e7ee MFC42!Ordinal4168+0xd
04 01a3ff84 78003820 MFC42!Ordinal6109+0xa6
05 01a3ffb8 77f04ef0 MSVCRT!beginthreadex+0xb2
06 01a3ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 27
System Thread ID: c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01a7fe6c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01a7fe94 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01a7fea4 5f41a6b7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01a7ff18 5f45e7ee MFC42!Ordinal4168+0xd
04 01a7ff84 78003820 MFC42!Ordinal6109+0xa6
05 01a7ffb8 77f04ef0 MSVCRT!beginthreadex+0xb2
06 01a7ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 28
System Thread ID: 5c7
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01affdc4 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 01affdec 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 01affdfc 5f41a6b7 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 01afff18 5f45e7ee MFC42!Ordinal4168+0xd
04 01afff84 78003820 MFC42!Ordinal6109+0xa6
05 01afffb8 77f04ef0 MSVCRT!beginthreadex+0xb2
06 01afffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 29
System Thread ID: 609
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b3fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01b3fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 01b3ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 01b3ff40 68c22d44 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 01b3ff84 7800b995 w3svc!HTTP_HEADERS::Cleanup+0x2f55
05 01b3ffb8 77f04ef0 MSVCRT!beginthread+0xce
06 01b3ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 30
System Thread ID: ea
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b7fea8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 01b7ff00 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 01b7ff5c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 01b7ff78 68c1acea USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 01b7ffb8 77f04ef0 w3svc!ServiceEntry+0x6d7
05 01b7ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 31
System Thread ID: 5ff
Kernel Time: 0:0:6.968
User Time: 0:0:8.796
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 01ebff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
01 01ebff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 01ebffb8 77f04ef0 ISATQ!AtqBandwidthGetInfo+0x5e6
03 01ebffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 32
System Thread ID: 5e8
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MtxDm.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0227ff58 77f1ce6b ntdll!NtWaitForSingleObject+0xb
01 0227ff80 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
02 0227ff90 69a21998 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0227ffb8 77f04ef0 MtxDm+0x1998
04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 33
System Thread ID: 585
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 022efe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 022efec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 022eff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 022eff40 680c5fa5 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 022eff84 7800b995 asp!AspStatusHtmlDump+0x276d
05 022effb8 77f04ef0 MSVCRT!beginthread+0xce
06 022effec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 34
System Thread ID: 602
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0232fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0232fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0232ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0232ff40 680bbf64 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0232ff84 7800b995 asp!DllCanUnloadNow+0x2ff0
05 0232ffb8 77f04ef0 MSVCRT!beginthread+0xce
06 0232ffec 00000000 KERNEL32!BaseThreadStart+0x51
Thread ID: 35
System Thread ID: 5fd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** WARNING: Unable to verify checksum for pdm.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
pdm.dll -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 0236fdd8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0236fe30 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 0236fe8c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 0236fea8 4a003b19 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 77e7ae75 0110247c pdm+0x3b19
05 83ec8b55 00000000 0x110247c
Thread ID: 36
System Thread ID: 5aa
Kernel Time: 0:1:10.500
User Time: 0:1:1.250
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
vbscript.dll -
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0240ee80 77f1de22 ntdll!ZwYieldExecution+0xb
01 0240ee84 1f693694 KERNEL32!SwitchToThread+0x6
02 0240ee9c 1f947918 MSDART!CReaderWriterLock3::_LockSpin+0x6e
03 0240eea8 1f933f13 oledb32!CAutoRWLock::ReadLock+0x20
04 0240eef0 1f933cf6 oledb32!CDCMPoolManager::DrawResource+0x7f
05 0240ef50 1f45732a oledb32!CDPO::Initialize+0x137
06 0240f054 1f458678 msado15!_ConnectAsync+0x9c
07 0240f200 1f461d27 msado15!CConnection::Open+0xf1a
08 0240f480 6b61869d msado15!CConnection::Invoke+0xc46
WARNING: Stack unwind information not available. Following frames may be
wrong.
09 00000000 00000000 vbscript!DllCanUnloadNow+0xd248
Thread ID: 37
System Thread ID: 5bf
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0256fefc 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 0256ff54 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0256ff70 6535