Preventing Log Evasion in IIS

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Conntribute 3 Hi all, Has anyone tried Contribute 3 with Server 2003 and IIS 6? We have been using Frontpage extensions to allow users to put up web sites. I work at a junior college and the users are faculty, not web designers. Thanks. Tag: Preventing Log Evasion in IIS Tag: 369187
  - 2
    - ODBC Time out error for more users only Hello, I have to migrate a running we application of ASP3, SQL Server 2000 and on WIN2000 server. Which is running on a Local Network. The application migrated successfully to a new dedicated server. And runs smoothly. But I have a problem when more than 5 to 8 clients are connected to use this new Pages. then An ODBC Time OUT message is displayed and all other users are hangged. and an error message of page cnnot be displayed.... Althogh the old server was running smoothly, with no such problems. Please advice. -- MCSD not .Net yet :( Tag: Preventing Log Evasion in IIS Tag: 369186
  - 3
    - SBS2003 Premium and MELL Not authorized The SBS2003 newsgroup referred me here. One SBS2003 domain installed and happy. Want to add Mell as a web page to the server for internal training. All work so far is being done in the lab on a SBS2003 Premium Eval setup. Install MELL as per standard instructions. Add as a WEB server to SBS2003 server after installing SQL 2000 from eval cds. Seems like a good SQL install. When trying to access MELL web pages get Unauthorised to view. I am trying to view from the server as the server administrator. IIS Manager tool show MELL install. Directory Security shows Windows Integrated. Browsing the MELL install from inside the tool gets 403! unauthorized! Comments. Tag: Preventing Log Evasion in IIS Tag: 369184
  - 4
    - How to Change back from IIS 5.0 mode to IIS 6.0 worker process mode hi all, Iam using windows 2003 server and i have installed IIS 6.0,recently i changed the web server mode to IIS 5.0 Isolation mode,but now i want to change back to IIS 6.0 Worker process mode. How can i do it.Please let me know. Thanks, yogananth Tag: Preventing Log Evasion in IIS Tag: 369181
  - 5
    - dynamically requesting windows authentication on a resource Hi, I have a asp.net web application, and in one of my pages I would like to be able to request windows authentication on the fly, without the page configured for windows authenticatino in IIS. is this possible using some http header / return value? i can surely mimic IIS behavior returning access denied, but a key should be added and IIS have to accept the credentials of the client. TIA. Tag: Preventing Log Evasion in IIS Tag: 369179
  - 6
    - Re: Apache and IIS Hey, The other suggestions are good, but what you are particularly looking for is called "DisableSocketPooling." This metabase property is designed to instruct IIS to *NOT* bind to all IP addresses on the server. This is crucial when you have 2 webservers running on the same OS installation. To disable this feature, you can issue this command - Cscript adsutil.vbs set w3svc/disablesocketpooling 1 The next step is to restart IIS. You will now notice that we only bind to the specific addresses\ports defined in the metabase property - ServerBindings. If you need more help review the following KB: How to Disable Socket Pooling: http://support.microsoft.com/default.aspx?scid=kb;EN-US;238131 It is important to note that this property, although it still exists, is not valid in IIS 6.0. This property does nothing for the W3SVC service in IIS 6.0 -- you instead should review HTTP.sys's IPListenList registry key and\or httpcfg to change this behavior. -----Original Message----- From: Dave Posted At: Friday, August 26, 2005 6:08 AM Posted To: microsoft.public.inetserver.iis Conversation: Apache and IIS Subject: Re: Apache and IIS it may depend on your version of iis, but look on the website properties on the iis manager, it should be right on the website tab. "Benedictum" <benedictum@dominusvobis.com> wrote in message news:%23u64FyjqFHA.904@TK2MSFTNGP10.phx.gbl... >I have an assignment to convert PHP apps to ASP. The PHP runs under Apache. >I started the ASP project but I have to stop Apache service everytime so >that the IIS can run the ASP. How can I configure IIS so that it uses a >different port? > > Thanks, > Victor > Tag: Preventing Log Evasion in IIS Tag: 369177
  - 7
    - Help! Faulting application w3wp.exe on uploads The full message is: Faulting application w3wp.exe, version 6.0.3790.1830, stamp 42435be1, faulting module stswel.dll, version 11.0.6411.0, stamp 4192c908, debug? 0, fault address 0x00059dc4. It happens whenever I try to upload a document or picture to our WSS server. Does anybody know what's happening and how to fix it? I'm using IIs vs 6, WSS vs 6.0.2.6411, W2003 SBS There's a lot of products interacting here. Should I be posting this in a different newsgroup? The IISState log follows: ---------------------------------------- Starting new log output IISState version 3.3.1 Sun Aug 28 02:04:05 2005 OS = Windows 2003 Server Executable: w3wp.exe PID = 4516 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\60\BIN\stswel.dll - DLL (!FunctionName) that failed: stswel!VdocumentStore::getWebMetainfo Thread ID: 20 System Thread ID: 17f8 Kernel Time: 0:0:0.0 User Time: 0:0:0.187 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0c8afb5c 3338fe5d stswel!VdocumentStore::getWebMetainfo+0x2c2 01 0c8afb98 333d44ab stswel!VdbSubweb::metaInfo+0x90 02 0c8afbd4 333d464e stswel!Vfshtml::Vfshtml+0xdc 03 0c8afc78 6f6f6c20 stswel!Vfshtml::runIt+0xb1 04 6f742065 00000000 0x6f6f6c20 Closing open log file C:\iisstate\output\IISState-4516.log Opened log file 'C:\iisstate\output\IISState-4516.log' *********************** Starting new log output IISState version 3.3.1 Sun Aug 28 02:05:33 2005 OS = Windows 2003 Server Executable: w3wp.exe PID = 4516 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 5f8 Kernel Time: 0:0:0.0 User Time: 0:0:0.78 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd 07 0006ff0c 0100187c w3core!UlW3Start+0x26e 08 0006ff44 01001a23 w3wp!wmain+0x22a 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: 14b4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009eff9c 7c821364 ntdll!KiFastSystemCallRet 01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc 02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47 03 009effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 1224 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00c9ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00c9ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 00c9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00c9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00c9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00c9ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00c9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 3 System Thread ID: 968 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00cdff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00cdff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 00cdff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00cdff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00cdffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00cdffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00cdffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 4 System Thread ID: 178c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00d1ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00d1ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 00d1ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00d1ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00d1ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00d1ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00d1ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 5 System Thread ID: 122c Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00d5ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00d5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 00d5ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00d5ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00d5ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00d5ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00d5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 6 System Thread ID: 1320 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00e1fcec 7c822114 ntdll!KiFastSystemCallRet 01 00e1fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 00e1ffb8 77e66063 ntdll!RtlpWaitThread+0x161 03 00e1ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 7 System Thread ID: fec Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0185fa84 7c822124 ntdll!KiFastSystemCallRet 01 0185fa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0185faf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0185fb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 04 0185ffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126 05 0185ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: b4c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0189fe18 7c821c54 ntdll!KiFastSystemCallRet 01 0189fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 0189ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 0189ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 0189ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 0189ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 0189ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: 12c8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 018ffec0 7c822114 ntdll!KiFastSystemCallRet 01 018ffec4 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 018fff6c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 018fff88 018a1a4c kernel32!WaitForMultipleObjects+0x18 04 018fffb8 77e66063 stsfltr!VinclusionManager::ListenerThreadFunc+0x69 05 018fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: 138c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - Thread Type: Other # ChildEBP RetAddr 00 01a5feb0 7c821364 ntdll!KiFastSystemCallRet 01 01a5feb4 77e42439 ntdll!NtDelayExecution+0xc 02 01a5ff1c 77e424b7 kernel32!SleepEx+0x68 03 01a5ff2c 791bf4f9 kernel32!Sleep+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 04 01a5ffb8 77e66063 mscorsvr!Ordinal76+0xf4f9 05 01a5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: 8f8 Kernel Time: 0:0:0.312 User Time: 0:0:2.515 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a9fdf8 7c822124 ntdll!KiFastSystemCallRet 01 01a9fdfc 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 01a9fe6c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 01a9fe80 791d401f kernel32!WaitForSingleObject+0x12 WARNING: Stack unwind information not available. Following frames may be wrong. 04 01a9fea4 791fdacc mscorsvr!GetCompileInfo+0x1512 05 01a9ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x151b3 06 01a9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: 1598 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01befe70 7c822114 ntdll!KiFastSystemCallRet 01 01befe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 01beff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 01beff38 79238fd6 kernel32!WaitForMultipleObjects+0x18 WARNING: Stack unwind information not available. Following frames may be wrong. 04 01beffa0 79238f4d mscorsvr!CoInitializeCor+0x43ad 05 01beffb8 77e66063 mscorsvr!CoInitializeCor+0x4324 06 01beffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: 604 Kernel Time: 0:0:0.0 User Time: 0:0:0.140 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0bd5fefc 7c822124 ntdll!KiFastSystemCallRet 01 0bd5ff00 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0bd5ff70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0bd5ff84 791fe6b0 kernel32!WaitForSingleObject+0x12 WARNING: Stack unwind information not available. Following frames may be wrong. 04 0bd5ffac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97 05 0bd5ffb8 77e66063 mscorsvr!CoInitializeCor+0xa96 06 0bd5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 14 System Thread ID: 1274 Kernel Time: 0:0:0.0 User Time: 0:0:0.156 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0bd9fdfc 7c822124 ntdll!KiFastSystemCallRet 01 0bd9fe00 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0bd9fe70 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0bd9fe84 791fe6b0 kernel32!WaitForSingleObject+0x12 WARNING: Stack unwind information not available. Following frames may be wrong. 04 0bd9feac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97 05 0bd9ffb8 77e66063 mscorsvr!CoInitializeCor+0xa96 06 0bd9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 15 System Thread ID: 1288 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0bddfdf8 7c822114 ntdll!KiFastSystemCallRet 01 0bddfdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0bddfea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 0bddfec0 7927826b kernel32!WaitForMultipleObjects+0x18 WARNING: Stack unwind information not available. Following frames may be wrong. 04 0bddfee0 791fecf4 mscorsvr!CoEEShutDownCOM+0x2516a 05 0bddff24 79245681 mscorsvr!GetAssemblyMDImport+0x163db 06 0bddffb8 77e66063 mscorsvr!CoUninitializeEE+0xa13e 07 0bddffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 16 System Thread ID: 1600 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0c08ff38 7c821364 ntdll!KiFastSystemCallRet 01 0c08ff3c 77e42439 ntdll!NtDelayExecution+0xc 02 0c08ffa4 791cc578 kernel32!SleepEx+0x68 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0c08ffec 00000000 mscorsvr!Ordinal76+0x1c578 Thread ID: 17 System Thread ID: 17f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0c2afec0 7c822114 ntdll!KiFastSystemCallRet 01 0c2afec4 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0c2aff6c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 0c2aff88 76928415 kernel32!WaitForMultipleObjects+0x18 04 0c2affb8 77e66063 USERENV!NotificationThread+0x5f 05 0c2affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 18 System Thread ID: 5f4 Kernel Time: 0:0:0.31 User Time: 0:0:0.31 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\60\BIN\onetutil.dll - Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0c78fc68 7c822114 ntdll!KiFastSystemCallRet 01 0c78fc6c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0c78fd14 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0c78fd70 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0c78fd98 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0c78fe0c 3319a4e1 ole32!CoWaitForMultipleHandles+0xcf WARNING: Stack unwind information not available. Following frames may be wrong. 06 0c78fe40 331cdb43 onetutil!VwaitForMultipleObjects+0xa0 07 0c78ff80 331cd372 onetutil!COWSThreadWithHeap::Uninitialize+0x327 08 0c78ffb8 77e66063 onetutil!VthreadContext::release+0x152 09 0c78ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 19 System Thread ID: 14ec Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0c81fc68 7c822114 ntdll!KiFastSystemCallRet 01 0c81fc6c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0c81fd14 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0c81fd70 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0c81fd98 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0c81fe0c 3319a4e1 ole32!CoWaitForMultipleHandles+0xcf WARNING: Stack unwind information not available. Following frames may be wrong. 06 0c81fe40 331cdb43 onetutil!VwaitForMultipleObjects+0xa0 07 0c81ff80 331cd372 onetutil!COWSThreadWithHeap::Uninitialize+0x327 08 0c81ffb8 77e66063 onetutil!VthreadContext::release+0x152 09 0c81ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 20 System Thread ID: 17f8 Kernel Time: 0:0:0.0 User Time: 0:0:0.187 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0c8afb5c 3338fe5d stswel!VdocumentStore::getWebMetainfo+0x2c2 01 0c8afb98 333d44ab stswel!VdbSubweb::metaInfo+0x90 02 0c8afbd4 333d464e stswel!Vfshtml::Vfshtml+0xdc 03 0c8afc78 6f6f6c20 stswel!Vfshtml::runIt+0xb1 04 6f742065 00000000 0x6f6f6c20 Thread ID: 21 System Thread ID: 358 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0c93fc68 7c822114 ntdll!KiFastSystemCallRet 01 0c93fc6c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0c93fd14 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0c93fd70 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0c93fd98 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0c93fe0c 3319a4e1 ole32!CoWaitForMultipleHandles+0xcf WARNING: Stack unwind information not available. Following frames may be wrong. 06 0c93fe40 331cdb43 onetutil!VwaitForMultipleObjects+0xa0 07 0c93ff80 331cd372 onetutil!COWSThreadWithHeap::Uninitialize+0x327 08 0c93ffb8 77e66063 onetutil!VthreadContext::release+0x152 09 0c93ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 22 System Thread ID: 1f8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0cabfc7c 7c822114 ntdll!KiFastSystemCallRet 01 0cabfc80 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0cabfd28 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0cabfd84 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0cabfdac 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0cabfe20 3319a4e1 ole32!CoWaitForMultipleHandles+0xcf WARNING: Stack unwind information not available. Following frames may be wrong. 06 0cabfe54 333a59be onetutil!VwaitForMultipleObjects+0xa0 07 0cabff80 331cd372 stswel!VeventManager::ThreadHandlerProc+0xde 08 0cabffb8 77e66063 onetutil!VthreadContext::release+0x152 09 0cabffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 23 System Thread ID: a2c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0cdefd00 7c822124 ntdll!KiFastSystemCallRet 01 0cdefd04 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0cdefd74 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0cdefd88 75bb250b kernel32!WaitForSingleObject+0x12 04 0cdeffb8 77e66063 comsvcs!PingThread+0xf6 05 0cdeffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 24 System Thread ID: dc8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0d0ffdf4 7c822114 ntdll!KiFastSystemCallRet 01 0d0ffdf8 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0d0ffea0 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 0d0ffebc 333e4bca kernel32!WaitForMultipleObjects+0x18 WARNING: Stack unwind information not available. Following frames may be wrong. 04 0d0fff00 00000004 stswel!VvirusCheckReport::getDownloadReportUrl+0x1ae Thread ID: 25 System Thread ID: 1568 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0d77fe48 7c822114 ntdll!KiFastSystemCallRet 01 0d77fe4c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0d77fef4 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0d77ff50 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0d77ff6c 4dda6ad4 USER32!MsgWaitForMultipleObjects+0x1f 05 0d77ffb8 77e66063 gdiplus!BackgroundThreadProc+0x59 06 0d77ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 26 System Thread ID: 137c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Front Page Authoring. # ChildEBP RetAddr 00 0ee1fc68 7c822114 ntdll!KiFastSystemCallRet 01 0ee1fc6c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0ee1fd14 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0ee1fd70 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0ee1fd98 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0ee1fe0c 32e5a596 ole32!CoWaitForMultipleHandles+0xcf 06 0ee1fe40 32e5e6e3 fp5Autl!VwaitForMultipleObjects+0xa0 07 0ee1ff80 32e237f0 fp5Autl!COWSThreadPool::ThreadHandlerProc+0x97 08 0ee1ff84 77bcb530 fp5Autl!COWSThread::CallThreadProc+0x9 09 0ee1ffb8 77e66063 msvcrt!_endthreadex+0xa3 0a 0ee1ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 27 System Thread ID: 9a8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Front Page Authoring. # ChildEBP RetAddr 00 0eeafc68 7c822114 ntdll!KiFastSystemCallRet 01 0eeafc6c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0eeafd14 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0eeafd70 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0eeafd98 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0eeafe0c 32e5a596 ole32!CoWaitForMultipleHandles+0xcf 06 0eeafe40 32e5e6e3 fp5Autl!VwaitForMultipleObjects+0xa0 07 0eeaff80 32e237f0 fp5Autl!COWSThreadPool::ThreadHandlerProc+0x97 08 0eeaff84 77bcb530 fp5Autl!COWSThread::CallThreadProc+0x9 09 0eeaffb8 77e66063 msvcrt!_endthreadex+0xa3 0a 0eeaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 28 System Thread ID: 6cc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Front Page Authoring. # ChildEBP RetAddr 00 0ef3fc68 7c822114 ntdll!KiFastSystemCallRet 01 0ef3fc6c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0ef3fd14 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0ef3fd70 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0ef3fd98 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0ef3fe0c 32e5a596 ole32!CoWaitForMultipleHandles+0xcf 06 0ef3fe40 32e5e6e3 fp5Autl!VwaitForMultipleObjects+0xa0 07 0ef3ff80 32e237f0 fp5Autl!COWSThreadPool::ThreadHandlerProc+0x97 08 0ef3ff84 77bcb530 fp5Autl!COWSThread::CallThreadProc+0x9 09 0ef3ffb8 77e66063 msvcrt!_endthreadex+0xa3 0a 0ef3ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 29 System Thread ID: 17a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Front Page Authoring. # ChildEBP RetAddr 00 0efcfc68 7c822114 ntdll!KiFastSystemCallRet 01 0efcfc6c 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0efcfd14 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 0efcfd70 77697483 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 0efcfd98 776c6029 ole32!CCliModalLoop::BlockFn+0x80 05 0efcfe0c 32e5a596 ole32!CoWaitForMultipleHandles+0xcf 06 0efcfe40 32e5e6e3 fp5Autl!VwaitForMultipleObjects+0xa0 07 0efcff80 32e237f0 fp5Autl!COWSThreadPool::ThreadHandlerProc+0x97 08 0efcff84 77bcb530 fp5Autl!COWSThread::CallThreadProc+0x9 09 0efcffb8 77e66063 msvcrt!_endthreadex+0xa3 0a 0efcffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 30 System Thread ID: 174c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0f14ff24 7c821364 ntdll!KiFastSystemCallRet 01 0f14ff28 77e42439 ntdll!NtDelayExecution+0xc 02 0f14ff90 79249f45 kernel32!SleepEx+0x68 WARNING: Stack unwind information not available. Following frames may be wrong. 03 0f14ffb8 77e66063 mscorsvr!GetMetaDataPublicInterfaceFromInternal+0x33e5 04 0f14ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 31 System Thread ID: 880 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0da2ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0da2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0da2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0da2ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 32 System Thread ID: 1780 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0daafe18 7c821c54 ntdll!KiFastSystemCallRet 01 0daafe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 0daaff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 0daaff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 0daaffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 0daaffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 0daaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 33 System Thread ID: 14dc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0d53fe18 7c821c54 ntdll!KiFastSystemCallRet 01 0d53fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 0d53ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 0d53ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 0d53ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 0d53ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 0d53ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 34 System Thread ID: 8b0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 35 System Thread ID: 15a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00a9ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00a9ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00a9ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 00a9ffec 00000000 kernel32!BaseThreadStart+0x34 ***** Dump name is formatted as: PID-Timestamp.dmp Creating C:\iisstate\output\4516-1125209302.dmp - mini user dump ***** Closing open log file C:\iisstate\output\IISState-4516.log Tag: Preventing Log Evasion in IIS Tag: 369176
  - 8
    - Access to project directory thwarted when trying to build a Web App in .NET Hi All, Is there on-line documentation for the permissions available in IIS for a Virtual Directory's Local Path? Specifically I want documentation in relation to developing Web Forms using Visual Studio .Net. I'm developing my first (small) .Net WebForm app by following Jeff Prosise's "Programming Microsoft .Net" (2002 edition) guidance on page 220. I created a virtual directory without incident. But when I took the next step to create a Web App Proj, I ran into an access problem. I got a "Web Access Failed" dialog saying: ======================= The default Web access mode for this project is set to file share, but the project folder at http://localhost/MyVirtualProj cannot be opened with the path "K:\_Projects\WebForms\MyWebProj". The error returned was: Unable to created Web project "MyVirtualProj". The UNC share "K:\_Projects\WebForms\MyWebProj" does not exist or you do not have access. ======================== I got around it by accessing my virtual directory's properties in IIS and gave the Local Path all the permissions I could. That did the job. But I'd like to know what the most appropriate permissions are for various contexts. Thanks in advance, Richard Tag: Preventing Log Evasion in IIS Tag: 369171
  - 9
    - Faulting application w3wp.exe on Win2k3 ENT sp1 Faulting application w3wp.exe, version 6.0.3790.1830, faulting module mscorwks.dll, version 1.1.4322.2300, fault address 0x0005088b. We started getting this error yesterday. Any insight would be greatly appreciated. Thanks! Tag: Preventing Log Evasion in IIS Tag: 369169
  - 10
    - Indexing Service / Search script stopped working Good afternoon, I've been using IIS 5 for sometime on an Intranet site, mainly to make use of the Indexing Service to perform searchs within documents via an ASP script. This has suddenly stopped working today - the search page still displays and the ASP page runs after the search criteria has been entered but will not return any results. Has anyone any idea why this has happened? I've tried stopping / starting IIS and then removed and reinstalled it. Any help gratefully received!! Many thanks. Andrew Tag: Preventing Log Evasion in IIS Tag: 369167
  - 11
    - I want to run my own e-mail server - Help please I am completely new to all this IIS stuff, but I am very much enjoyed learning how it works. I would also like to be able to set up my own mail server. I would like to know what you guys/gals recommend. It must be freeware or cheap shareware. I have seen a few e-mail server packages available on the net which don't appear to do what I want. The packages I have seen all appear to rely on an ISP mail server. I would like to run the mail server at my end. I have now learned how to set up MX records, but at this time have yet find software to suit me. Please, if you have any pointers for me, I would be very grateful to you. Thank you all, Don Tag: Preventing Log Evasion in IIS Tag: 369160
  - 12
    - re: cgi script causes 404 2 1260 to be written to IIS logfile Hey~ The first thing to try as only a "Test" step is to enable "Allow all Unknown CGI's" to ensure that you effectively have CGI setup. This should be disabled immediately afterwards. The syntax you are using seems accurate for ActiveState Perl. The first question I have, honestly, is do you have to use CGI? CGI is very much outperformed on IIS by ISAPI. If you are using Perl, we typically recommend you use the PERL ISAPI extension for much more performance "out of the box." Here is the documentation on setting up ActiveState Perl for CGI: http://aspn.activestate.com/ASPN/docs/ActivePerl/5.8/faq/Windows/ActivePerl-Winfaq6.html For ISAPI, though, here is the documentation: http://aspn.activestate.com/ASPN/Mail/Message/perl-win32-web/2593732 Hope this helps, -----Original Message----- From: alan@discussions.microsoft.com Posted At: Friday, August 26, 2005 10:51 AM Posted To: microsoft.public.inetserver.iis Conversation: cgi script causes 404 2 1260 to be written to IIS logfile Subject: re: cgi script causes 404 2 1260 to be written to IIS logfile Greetings. I have a cgi which writes "404 2 1260" to the IIS 6.0 logfile. I'm running Windows 2003 Server. I've added a web extension and pointed it to the perl5.8.4 exe. When adding the extension I specified the pathname to the exe as C:\Program Files\DDE\Perlbin\perl5.8.4.exe "%s" %s (I used an example from a previouis forum post for the variable syntax.) Any suggestions on how to correctly specify the webextension would be appreciated. Thanks. alan Tag: Preventing Log Evasion in IIS Tag: 369153
  - 13
    - Re: IIS not working in W2k SP4 Try these articles Configured Identity Is Incorrect for IWAM Account http://support.microsoft.com/default.aspx?scid=kb;%5BLN%5D;Q297989 http://www.iisfaq.com/Default.aspx?tabid=3095 and this google search http://www.google.com/search?ie=UTF-8&oe=UTF-8&q=%27the%20server%20process%20could%20not%20be%20started%20because%20the%20configured%20identity%20is%20 -- Cheers Chris Chris Crowe [IIS MVP] http://blog.crowe.co.nz>>> "abcd" <abcd@abcd.com> wrote in messagenews:OiXsrUpqFHA.3788@TK2MSFTNGP12.phx.gbl...>>I can see 2 Evern logs>>>> The server failed to load application '/LM/W3SVC/1/ROOT'. The error was'The server process could not be started because the configured identity isincorrect. Check the username and password.>> '.>> For additional information specific to this message please visit theMicrosoft Online Support site located at:http://www.microsoft.com/contentredirect.asp.>>>>>> and>>>>>> DCOM got error "Logon failure: unknown user name or bad password. " andwas unable to logon .\IWAM_G7RDENGR1 in order to run the server:{3D14228D-FBE1-11D0-995D-00C04FD919C1}>>>>>>>>>>>> "Chris Crowe [MVP]" <IISMVP2005@iisfaq.homeip.net> wrote in messagenews:eNatwEpqFHA.2064@TK2MSFTNGP09.phx.gbl...>>> Open your event log under Control Panel - Administrative tools and seeif you can see anything related to IIS and post your results.>>>>>> -->>> Cheers>>>>>> Chris>>>>>> Chris Crowe [IIS MVP]>>> http://blog.crowe.co.nz>>>>>>>>> "abcd" <abcd@abcd.com> wrote in messagenews:e7C7wxoqFHA.2540@TK2MSFTNGP09.phx.gbl...>>>> suddenly IIS manager is not working, when clicked nothing appears likedefault web site etc....so I uninstalled IIS ...thenr einstalled IIS andthen applied SP4 patch again....still IIS does not work...any clues....>>>>>>>>>>>>>>>> Tag: Preventing Log Evasion in IIS Tag: 369151
  - 14
    - FTP script and synchronize question??? Does anyone know of a microsoft command-line tool, either native to W2K or W2K03 or apart of a resource kit which will enable scripting an FTP command and synchronizing files between a local and remote location?? I would need it to: 1. build FTP session. 2. do a file update similar to what can be done with robocopy.exe 3. tear down session. I know there are numerous third party tools out there that will do it, but I'd prefer to stick w/ MS command line tools Tag: Preventing Log Evasion in IIS Tag: 369145
  - 15
    - IIS not working in W2k SP4 suddenly IIS manager is not working, when clicked nothing appears like default web site etc....so I uninstalled IIS ...thenr einstalled IIS and then applied SP4 patch again....still IIS does not work...any clues.... Tag: Preventing Log Evasion in IIS Tag: 369142
  - 16
    - Keep getting "Page Cannot be Found 404" errors Hello everyone, I am creating an intranet. I have a site called Company Intranet that I created in IIS. I pointed the home directory to the folder D:\Intranet. I placed a file called test.html in that directory. However when I try to access http://servername/test.html, I get the 404 error. I also tried moving the home directory back to the default of c:\inetpub\wwwroot. I still get a 404 error. The site name test.html is listed when I go into IIS. I am on Windows 2003 server. I also have Windows Sharepoint Services installed. I can access the default.aspx and other pages for it just fine. I don't even know where to start looking for. Does anyone have any ideas? Thanks Tag: Preventing Log Evasion in IIS Tag: 369138
  - 17
    - WebApplication displays Server Error in Application (Runtime Error This is regarding a Web Application displaying a page with information as follows Server Error in ... Application ---------------------------------- Runtime Error Desc: An application error occured on the server. The current custom error settings for this application prevent the details of the application error from being displayed .... and gives information as to how to enable detail message by changing the customErrors mode in Web.config file to Off. In our Web Application, we have set the customErrors mode to "On" and have a defaultRedirect to a Custom Error Page. Inspite of this, we keep getting the above mentioned page intermittently whenever the web application is accessed from a new session. Sometime we have to restart IIS in order to get rid of this problem. I have also tried setting the customErrors mode to "Off" in order to get a details message. However, I keep getting the same Server Error Page. Any help is appreciated, Thanks, Saibal Das TelStrat, Dallas Tag: Preventing Log Evasion in IIS Tag: 369125
  - 18
    - IIS/firewall problem Hi, I have set up a web site which runs off one of our internal web servers. Everything works fine when I try to access the site from within our network but unfortunately it doesn't work at all when I try to access it over the internet - I get "Cannot find server" error page. I have configured NAT so that one of our external IP addresses points to the internal IP address of the server - I know this is working because I have accessed other services on that server externally. I have also purchased a domain name and have configured its A record to point to the server's external IP address. I have configured the host header name in IIS to the domain name. I have also opened port 80 on our firewall so that it is open for the source as the internal LAN web server IP and the destination as "*". I'm almost totally sure it's a firewall issue because: 1) It works fine internally within our network 2) It still doesn't work when I add the domain name and external IP to my Hosts file (therefore it won't be a domain issue) Does anyone have any suggestions as to what the problem could be? Do I only have to open port 80 for IIS? TIA. Tag: Preventing Log Evasion in IIS Tag: 369124
  - 19
    - cgi script causes 404 2 1260 to be written to IIS logfile Greetings. I have a cgi which writes "404 2 1260" to the IIS 6.0 logfile. I'm running Windows 2003 Server. I've added a web extension and pointed it to the perl5.8.4 exe. When adding the extension I specified the pathname to the exe as C:\Program Files\DDE\Perlbin\perl5.8.4.exe "%s" %s (I used an example from a previouis forum post for the variable syntax.) Any suggestions on how to correctly specify the webextension would be appreciated. Thanks. alan Tag: Preventing Log Evasion in IIS Tag: 369114
  - 20
    - redir.asp IIS change password issue We have a hosted E2K3 SP1 environment with OWA and O2K3 RPC/HTTPS clients and as such we develped a simple application to notify users via email about their password expiration a number of days before the actual expiration. It happens that in our test, when the application sends out the email notification message to the users with the link https://server.domain.com/iisadmpwd/aexp2b.asp), O2K3 users can get to the page fine, but OWA users get an HTTP 403 error when OWA tries to redirect the browser to https://server.domain.com/exchweb/bin/redir.asp?URL=https://server.domain.com/iisadmpwd/aexp2b.asp using redir.asp. Would anyone have any suggestions on how to make this work for the OWA users? Thanks! Tag: Preventing Log Evasion in IIS Tag: 369112
  - 21
    - MSGinga and IIS I would like to Customize the IIS Login Dialog box on a Win2k IIS5 Web server. Q: Does the msgina.dll handle this? I have managed to add a custom logo to the msgina.dll, but can only see it if I logon locally. Tool used Resource Tuner, 30 day trial version from http://restuner.com Thanks, Chief Tag: Preventing Log Evasion in IIS Tag: 369109
  - 22
    - Event ID 1009 - Application pool terminating. There is a similar question posted today, but the event ID is different I see the following error anywhere from 2-3 times a day on Windows 2003 server. Event ID- 1009, a process serving application pool 'Q' terminated unexpectedly. The process ID was 'xxxx' . The process code was 'xxx' So far we have not noticed anything on the application side, but once in a while W3WP.EXE starts using up all the CPU and the server comes to a halt. This is not associated with the application pool terminating, but wondering if it is conntributing it. I have applied SP1 for Windows 2003, that did not make any difference. Any help is apprciated. Tag: Preventing Log Evasion in IIS Tag: 369105
  - 23
    - "The page cannot be displayed"/Can not find server or DNS error Greetings. My pc runs Windows 2003 Server and IIS 6.0. I've had problems getting a cgi script to run and finally ended up testing with a perl script that prints the environment. (I've searched this forum as best I could but couldn't find anything exactly like the configuration my pc runs with the problem I'm seeing. Sorry if you've seen this one before.) The script runs at the command prompt when I fully specify the path to perl and the script name. When I try to run it from IE I get "The page cannot be displayed" displayed at the top of the page and "Can not find server or DNS error" displayed at the bottom. I'd apprecately greatly any suggestions about how to get the script to work. Thanks very much. alan Tag: Preventing Log Evasion in IIS Tag: 369104
  - 24
    - IIS 6.0 Installation on Windows 2003 Server Hi, I want to load IIS 6.0 on my Server 2003 machine. I have already Loaded Windows 2003 Standard Server Edition and I do not have IIS listed under Windows Components to install. Any Ideas on what i can do to install this? Thanks Dave Lugo Tag: Preventing Log Evasion in IIS Tag: 369103
  - 25
    - Multiple websites on 1 Windows 2000 box I want to setup multiple websites on a Win2000 server. Can anyone tell me where to begin???? Thanks! Tag: Preventing Log Evasion in IIS Tag: 369096
- Next
  - 1
    - Apply to Online Certification Authority Hi I want to ass SSL authentication to one of our Web Sites. The site is hosted on a server in our DMZ but will be made available to our customers. I have installed Microsoft Certificate services on this server but when I try to set up SSL I am only given the Option to prepare the request to send to a Certification Authority. The option to apply to an Online authentication authority immediately is greyed out. I have another site on the same server which has a Veri Sign SSL certificate. (That would not cause a problem, would it?) This is a Windows 2000 Server SP4 with IIS5 It is possible that I have not installed the Certification Services properly but it did look as if it installed OK. Any help appreciated. Thank you. Tag: Preventing Log Evasion in IIS Tag: 369078
  - 2
    - Apache and IIS I have an assignment to convert PHP apps to ASP. The PHP runs under Apache. I started the ASP project but I have to stop Apache service everytime so that the IIS can run the ASP. How can I configure IIS so that it uses a different port? Thanks, Victor Tag: Preventing Log Evasion in IIS Tag: 369076
  - 3
    - Where is the default Mime Map configured on IIS 5.1 Hi, I can't seem to find the list of default Mime types under IIS 5.1 on XP Pro. I've right clicked the 'Web Sites' item in the IIS Manager and chosen Properties. HttpHeaders/File Types shows an empty list, implying that the default Mime map is held at a higher level, but I can't find any way to display it. Anyone know how to do this please. Thanks, JF Tag: Preventing Log Evasion in IIS Tag: 369072
  - 4
    - IIS 6.0 hangs on Windows 2003 SP1 while connecting to Access datab I have a web based application which retrieves data from a MS Access database. On a Windows 2003 SP1 system, under light traffic conditions, IIS stops reaponding. I previously experienced a similar problem on Windows 2003, but the MSJet patch appeared to resolve it. Here is the debugDiag log, can somebody help identify what is causing the hang. (see reply for continuation of log) regards, Mike Tag: Preventing Log Evasion in IIS Tag: 369067
  - 5
    - App Pool crash - 8007006d Our production server has recently started experiencing AppPool crashes. These seem to occur sporadically. sometimes three times a day, sometimes not for a couple of days. The error manifests itself to the client as "Service Unavailable". In the system event log we see the following: A process serving application pool 'DefaultAppPool' suffered a fatal communication error with the World Wide Web Publishing Service With error number: 8007006d At the same time (but not always) we see this error in the Application Log "Faulting application w3wp.exe, version 6.0.3790.0, faulting module kernel32.dll, version 5.2.3790.0, fault address 0x000249d3" The application does usually start working again after anywhere between 2 and 15 minutes (although no worker process restarts or recycles appear in our perf logs). This problems seems to have started occuring following the latest MS patches being applied to our server. It may just be a coincidence though. We are running Windows Server 2003 Standard. We are about to apply SP1 in an attempt to solve this problem, but I wanted to find out if anyone else has had this problem and what the solution was. I have seen several similarish posts but nothing concrete as a solution. I have seen this article (http://support.microsoft.com/Default.aspx?id=885654) but it doesn't quite match our situation as we are not running as a domain controller. We haven't yet tried running registry monitor as I wanted to find out if error 8007006d always equates to a registry permission problem?? before installing 3rd party freeware onto our production server. Any help is much appreciated Regards Ian Tag: Preventing Log Evasion in IIS Tag: 369066
  - 6
    - redirect http to https for all websites How I do redirect http to https for all websites? I have IIS 6.0 and made redirect as in kb555126. Now I have to make redirect at Root Directory Level. Tag: Preventing Log Evasion in IIS Tag: 369065
  - 7
    - Help with IISState log The following log was produced with IIS state on an IIS application which was hung. It looks like thread 21 is blocking by locking a file. Is this right? Can anyone shed further light on this, e.g is there anything to suggest why thread 21 is waiting? Thanks, Opened log file 'C:\iisstate\output\IISState-1024.log' *********************** Starting new log output IISState version 3.4 Fri Aug 26 10:35:52 2005 OS = Windows 2000 Executable: dllhost.exe PID = 1024 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: f2c Kernel Time: 0:0:0.156 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006fd28 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 0006fd50 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0006fd60 77aab07e KERNEL32!WaitForSingleObject+0xf 03 0006fd80 77aaa88c ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169 05 0006ff24 010014c6 dllhost!WinMain+0xb0 06 0006ffc0 7c59893d dllhost!WinMainCRTStartup+0x156 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: b40 Kernel Time: 0:0:0.171 User Time: 0:0:0.125 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0088fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0088ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0088ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0088ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0088ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 2 System Thread ID: 11c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0090ff30 77abc471 USER32!NtUserGetMessage+0xb 01 0090ff70 77abc3bf ole32!CDllHost::STAWorkerLoop+0x40 02 0090ff8c 77abc2fa ole32!CDllHost::WorkerThread+0xc2 03 0090ff90 77ab5a5b ole32!DLLHostThreadEntry+0x9 04 0090ffa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22 05 0090ffb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: 5b0 Kernel Time: 0:0:0.46 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00a1fc54 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 00a1fc80 6de8b9d0 KERNEL32!GetQueuedCompletionStatus+0x27 02 00a1fd94 6de8b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0 03 00a1ffb4 7c57b388 TxfAux!WORK_QUEUE::ThreadLoop+0x58 04 00a1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: 12e0 Kernel Time: 0:0:0.156 User Time: 0:0:0.125 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 00adfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 00adff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 00adff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9 03 00adffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 04 00adffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 00adffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: f98 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00c5ff08 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 00c5ff58 7c59a0c2 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00c5ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17 03 00c5ffb4 7c57b388 COMSVCS!CEventDispatcher::PushEvents+0x4e 04 00c5ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 6 System Thread ID: d68 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page Remote call is either to a MTA object or object not initialized. Also, possible utility thread. DCOM call being made to Process ID: 2036 Waiting on thread id: ffffffff # ChildEBP RetAddr 00 00c9fb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb 01 00c9fb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e 02 00c9fba0 77b26c07 RPCRT4!I_RpcSendReceive+0x2c 03 00c9fbc0 77b26ad2 ole32!ThreadSendReceive+0xef 04 00c9fbd8 77b23ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f 05 00c9fc18 77b26946 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 00c9fc28 77a6cc2a ole32!CRpcChannelBuffer::SendReceive+0x11 07 00c9fc88 77ab7e2f ole32!CAptRpcChnl::SendReceive+0xa9 08 00c9fce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124 09 00c9fcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c 0a 00c9ff44 77d95136 RPCRT4!NdrClientCall2+0x4f5 0b 00c9ff60 77d46e75 RPCRT4!ObjectStublessClient+0x76 0c 00c9ff70 787f5818 RPCRT4!ObjectStubless+0xf 0d 00c9ffb4 7c57b388 COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118 0e 00c9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 7 System Thread ID: 860 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00cdfee0 7c59a243 ntdll!NtDelayExecution+0xb 01 00cdff00 7c59a20e KERNEL32!SleepEx+0x32 02 00cdff0c 787d12aa KERNEL32!Sleep+0xb 03 00cdff7c 780085bc COMSVCS!PostData+0xf2 04 00cdff88 77ab8107 MSVCRT!_endthreadex+0xc1 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d Thread ID: 8 System Thread ID: 5dc Kernel Time: 0:0:2.765 User Time: 0:0:1.109 Thread Type: Other # ChildEBP RetAddr 00 00f5fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 00f5feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00f5ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 00f5ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 00f5ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7 05 00f5ffb4 7c57b388 MSVCRT!_endthreadex+0xc1 06 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: 698 Kernel Time: 0:0:2.125 User Time: 0:0:1.406 Thread Type: Other # ChildEBP RetAddr 00 00f9fe5c 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 00f9feac 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 00f9ff08 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 00f9ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d 04 00f9ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7 05 00f9ffb4 7c57b388 MSVCRT!_endthreadex+0xc1 06 00f9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: be8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 010cff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 010cff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 010cffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 010cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: b60 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0110ff50 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 0110ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0110ffb4 7c57b388 ISATQ!AtqPoolThread+0x40 03 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: d0c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0128feb8 7c5853d7 ntdll!ZwRemoveIoCompletion+0xb 01 0128fee4 77d31394 KERNEL32!GetQueuedCompletionStatus+0x27 02 0128ff20 77d3e93f RPCRT4!COMMON_ProcessCalls+0x9e 03 0128ff74 77d3e8c2 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99 04 0128ff78 77d35924 RPCRT4!ProcessIOEventsWrapper+0x9 05 0128ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 06 0128ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 07 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: fb8 Kernel Time: 0:0:0.62 User Time: 0:0:0.62 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0134fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0134ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0134ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0134ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0134ffb4 7c57b388 RPCRT4!ThreadStartRoutine+0x18 05 0134ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: 1344 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 01e6fe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 01e6fec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01e6ff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 01e6ff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d 04 01e6ff7c 78008454 asp!CMTACallbackThread::Thread+0x42 05 01e6ffb4 7c57b388 MSVCRT!_endthread+0xc6 06 01e6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 15 System Thread ID: 77c Kernel Time: 0:0:0.46 User Time: 0:0:0.0 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 01eafe70 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 01eafec0 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01eaff1c 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 01eaff38 74a01eca USER32!MsgWaitForMultipleObjects+0x1d 04 01eaff7c 78008454 asp!Debugger+0x74 05 01eaffb4 7c57b388 MSVCRT!_endthread+0xc6 06 01eaffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 16 System Thread ID: d98 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 *** WARNING: Unable to verify checksum for *** ERROR: Symbol file could not be found. Defaulted to export symbols for - Thread Type: PDM (Debugger) Thread. # ChildEBP RetAddr 00 01eefddc 7c59a1af ntdll!ZwWaitForMultipleObjects+0xb 01 01eefe2c 77e1e9a5 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01eefe88 77e1e9f2 USER32!MsgWaitForMultipleObjectsEx+0x153 03 01eefea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d 04 01eeff88 4a008a85 pdm+0x886c 05 01eeffb0 4a008a09 pdm+0x8a85 06 01eeffb4 7c57b388 pdm+0x8a09 07 01eeffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: ef0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01f2ff9c 77f842c4 ntdll!NtDelayExecution+0xb 01 01f2ffb4 7c57b388 ntdll!RtlpTimerThread+0x42 02 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: 854 Kernel Time: 0:0:2.125 User Time: 0:0:3.312 *** ERROR: Symbol file could not be found. Defaulted to export symbols for - Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: ASP Executing Page: ******\DOWNLOAD.ASP # ChildEBP RetAddr 00 01f6e6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 01f6e71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 01f6e724 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 01f6e784 77abdf02 MSVBVM50!CMutexSem::Request+0x10 04 01f6e7b0 77abe4d8 ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35 05 01f6e7d4 77abe9cc ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166 06 01f6e800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71 07 01f6e8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9 08 01f6e8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b 09 01f6e908 74a2e6a2 ole32!CoCreateInstance+0x35 0a 01f6e920 74a0bfc0 asp!ViperCreateInstance+0x16 0b 01f6e944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76 0c 01f6e98c 74a0d26d asp!CComponentObject::Instantiate+0x42 0d 01f6e9a4 74a2cde1 asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58 0e 01f6e9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce 0f 01f6ea20 779d7d5d asp!CServer::CreateObject+0x5c 10 01f6ea40 77a2310e OLEAUT32!DispCallFunc+0x15d 11 01f6ead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244 12 01f6eaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b WARNING: Stack unwind information not available. Following frames may be wrong. 13 01f6eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24 14 01f6f254 00000000 vbscript!DllCanUnloadNow+0xd21a Thread ID: 19 System Thread ID: 11a8 Kernel Time: 0:0:0.687 User Time: 0:0:1.312 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: ASP Executing Page: ******\DOWNLOAD.ASP # ChildEBP RetAddr 00 01fae6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 01fae71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 01fae724 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 01fae784 77abdf02 MSVBVM50!CMutexSem::Request+0x10 04 01fae7b0 77abe4d8 ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35 05 01fae7d4 77abe9cc ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166 06 01fae800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71 07 01fae8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9 08 01fae8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b 09 01fae908 74a2e6a2 ole32!CoCreateInstance+0x35 0a 01fae920 74a0bfc0 asp!ViperCreateInstance+0x16 0b 01fae944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76 0c 01fae98c 74a0d26d asp!CComponentObject::Instantiate+0x42 0d 01fae9a4 74a2cde1 asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58 0e 01fae9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce 0f 01faea20 779d7d5d asp!CServer::CreateObject+0x5c 10 01faea40 77a2310e OLEAUT32!DispCallFunc+0x15d 11 01faead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244 12 01faeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b WARNING: Stack unwind information not available. Following frames may be wrong. 13 01faeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24 14 01faf254 00000000 vbscript!DllCanUnloadNow+0xd21a Thread ID: 20 System Thread ID: 1028 Kernel Time: 0:0:1.203 User Time: 0:0:3.31 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: ASP Executing Page: ******\DOWNLOAD.ASP # ChildEBP RetAddr 00 01fee6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 01fee71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 01fee724 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 01fee784 77abdf02 MSVBVM50!CMutexSem::Request+0x10 04 01fee7b0 77abe4d8 ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35 05 01fee7d4 77abe9cc ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166 06 01fee800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71 07 01fee8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9 08 01fee8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b 09 01fee908 74a2e6a2 ole32!CoCreateInstance+0x35 0a 01fee920 74a0bfc0 asp!ViperCreateInstance+0x16 0b 01fee944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76 0c 01fee98c 74a0d26d asp!CComponentObject::Instantiate+0x42 0d 01fee9a4 74a2cde1 asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58 0e 01fee9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce 0f 01feea20 779d7d5d asp!CServer::CreateObject+0x5c 10 01feea40 77a2310e OLEAUT32!DispCallFunc+0x15d 11 01feead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244 12 01feeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b WARNING: Stack unwind information not available. Following frames may be wrong. 13 01feeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24 14 01fef254 1f447271 vbscript!DllCanUnloadNow+0xd21a 15 1f440000 00000003 msado15!CContext::PushError+0x694 Thread ID: 21 System Thread ID: aac Kernel Time: 0:0:0.671 User Time: 0:0:1.546 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0202fd08 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 0202fd30 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0202fd40 7632046c KERNEL32!WaitForSingleObject+0xf 03 0202fd4c 76320455 MSVBVM50!CReadWriteMutex::_WaitForEvent+0x11 04 0202fd70 762f514b MSVBVM50!CReadWriteMutex::RequestWrite+0x2d 05 0202fd8c 7633ad37 MSVBVM50!CVBThreadAction::CleanupProjData+0x71 06 0202fdd4 762e39e5 MSVBVM50!CThreadPool::CheckForProjectUnload+0x33 07 0202fe3c 762e37ef MSVBVM50!FnwpMainFilter+0x1d6 08 0202fe5c 77e3a3d0 MSVBVM50!FnwpMain+0x1b 09 0202fe7c 77e14605 USER32!UserCallWinProc+0x18 0a 0202ff08 77e1a7ba USER32!DispatchMessageWorker+0x2e4 0b 0202ff14 787c3075 USER32!DispatchMessageW+0xb 0c 0202ff24 787c2c01 COMSVCS!STAMessageWork::DoWork+0x15 0d 0202ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x423 0e 0202ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 22 System Thread ID: 10a8 Kernel Time: 0:0:0.734 User Time: 0:0:1.937 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: ASP Executing Page: ******\DOWNLOAD.ASP # ChildEBP RetAddr 00 0206e6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0206e71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0206e724 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 0206e784 77abdf02 MSVBVM50!CMutexSem::Request+0x10 04 0206e7b0 77abe4d8 ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35 05 0206e7d4 77abe9cc ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166 06 0206e800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71 07 0206e8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9 08 0206e8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b 09 0206e908 74a2e6a2 ole32!CoCreateInstance+0x35 0a 0206e920 74a0bfc0 asp!ViperCreateInstance+0x16 0b 0206e944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76 0c 0206e98c 74a0d26d asp!CComponentObject::Instantiate+0x42 0d 0206e9a4 74a2cde1 asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58 0e 0206e9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce 0f 0206ea20 779d7d5d asp!CServer::CreateObject+0x5c 10 0206ea40 77a2310e OLEAUT32!DispCallFunc+0x15d 11 0206ead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244 12 0206eaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b WARNING: Stack unwind information not available. Following frames may be wrong. 13 0206eb74 6b61866f vbscript!DllCanUnloadNow+0x8e24 14 0206f254 00000000 vbscript!DllCanUnloadNow+0xd21a Thread ID: 23 System Thread ID: c0 Kernel Time: 0:0:0.906 User Time: 0:0:1.828 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: ASP Executing Page: ******\DOWNLOAD.ASP # ChildEBP RetAddr 00 020ae6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 020ae71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 020ae724 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 020ae784 77abdf02 MSVBVM50!CMutexSem::Request+0x10 04 020ae7b0 77abe4d8 ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35 05 020ae7d4 77abe9cc ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166 06 020ae800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71 07 020ae8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9 08 020ae8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b 09 020ae908 74a2e6a2 ole32!CoCreateInstance+0x35 0a 020ae920 74a0bfc0 asp!ViperCreateInstance+0x16 0b 020ae944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76 0c 020ae98c 74a0d26d asp!CComponentObject::Instantiate+0x42 0d 020ae9a4 74a2cde1 asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58 0e 020ae9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce 0f 020aea20 779d7d5d asp!CServer::CreateObject+0x5c 10 020aea40 77a2310e OLEAUT32!DispCallFunc+0x15d 11 020aead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244 12 020aeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b WARNING: Stack unwind information not available. Following frames may be wrong. 13 020aeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24 14 020af254 00000000 vbscript!DllCanUnloadNow+0xd21a Thread ID: 24 System Thread ID: 1328 Kernel Time: 0:0:0.593 User Time: 0:0:1.437 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: ASP Executing Page: ******\DOWNLOAD.ASP # ChildEBP RetAddr 00 020ee6a8 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 020ee71c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 020ee724 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 020ee784 77abdf02 MSVBVM50!CMutexSem::Request+0x10 04 020ee7b0 77abe4d8 ole32!CClassCache::CDllPathEntry::DllGetClassObject+0x35 05 020ee7d4 77abe9cc ole32!CClassCache::CDllFnPtrMoniker::BindToObject+0x166 06 020ee800 77ac19a7 ole32!CClassCache::SearchForLoadedClass+0x71 07 020ee8b0 77a6c2b7 ole32!ICoCreateInstanceEx+0xc9 08 020ee8d8 77a6c282 ole32!CoCreateInstanceEx+0x2b 09 020ee908 74a2e6a2 ole32!CoCreateInstance+0x35 0a 020ee920 74a0bfc0 asp!ViperCreateInstance+0x16 0b 020ee944 74a0bee2 asp!CComponentObject::TryInstantiate+0x76 0c 020ee98c 74a0d26d asp!CComponentObject::Instantiate+0x42 0d 020ee9a4 74a2cde1 asp!CPageComponentManager::AddScopedUnnamedInstantiated+0x58 0e 020ee9ec 74a23657 asp!CTypelibCache::CreateComponent+0xce 0f 020eea20 779d7d5d asp!CServer::CreateObject+0x5c 10 020eea40 77a2310e OLEAUT32!DispCallFunc+0x15d 11 020eead0 74a2407d OLEAUT32!CTypeInfo2::Invoke+0x244 12 020eeaf8 6b614279 asp!CDispatchImpl<IServer>::Invoke+0x4b WARNING: Stack unwind information not available. Following frames may be wrong. 13 020eeb74 6b61866f vbscript!DllCanUnloadNow+0x8e24 14 020ef254 00000000 vbscript!DllCanUnloadNow+0xd21a Thread ID: 25 System Thread ID: e94 Kernel Time: 0:0:0.734 User Time: 0:0:1.328 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0212fd0c 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0212fd80 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0212fd88 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 0212fdd4 762e39e5 MSVBVM50!CMutexSem::Request+0x10 04 0212fe3c 762e37ef MSVBVM50!FnwpMainFilter+0x1d6 05 0212fe5c 77e3a3d0 MSVBVM50!FnwpMain+0x1b 06 0212fe7c 77e14605 USER32!UserCallWinProc+0x18 07 0212ff08 77e1a7ba USER32!DispatchMessageWorker+0x2e4 08 0212ff14 787c3075 USER32!DispatchMessageW+0xb 09 0212ff24 787c2b31 COMSVCS!STAMessageWork::DoWork+0x15 0a 0212ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x353 0b 0212ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 26 System Thread ID: 10e8 Kernel Time: 0:0:0.421 User Time: 0:0:0.843 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: aac Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0216fbf8 77f8822a ntdll!ZwWaitForSingleObject+0xb 01 0216fc6c 77f8819b ntdll!RtlpWaitForCriticalSection+0x9e 02 0216fc74 762e1b79 ntdll!RtlEnterCriticalSection+0x46 03 0216fd00 76321b84 MSVBVM50!CMutexSem::Request+0x10 04 0216fd38 763af536 MSVBVM50!CCreErrCreateCtl+0x2d 05 0216fd6c 763af54c MSVBVM50!ErrCreatePrinterObjects+0x56 06 0216fd78 763433af MSVBVM50!CVBApplication::hctlPrint+0xf 07 0216fde0 762e37ef MSVBVM50!FnwpMainFilter_213+0x271 08 0216fe00 77e3a3d0 MSVBVM50!FnwpMain+0x1b 09 0216fe20 77e14750 USER32!UserCallWinProc+0x18 0a 0216fe3c 77e2da15 USER32!DispatchClientMessage+0x4b 0b 0216fe6c 77f9ff57 USER32!__fnINSTRING+0x35 0c 0216febc 77e1480f ntdll!KiUserCallbackDispatcher+0x13 0d 0216fee4 77e1a877 USER32!_PeekMessage+0x72 0e 0216ff10 787c297b USER32!PeekMessageW+0xba 0f 0216ffb4 7c57b388 COMSVCS!STAThread::STAThreadWorker+0x19d 10 0216ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 27 System Thread ID: 12f0 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0258ff58 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 0258ff80 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0258ff90 1f8945ab KERNEL32!WaitForSingleObject+0xf 03 0258ffb4 7c57b388 oledb32!ReleaseResourceThread+0x54 04 0258ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: e28 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 025cff50 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 025cff78 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 025cff88 1f8945bb KERNEL32!WaitForSingleObject+0xf 03 025cffb4 7c57b388 oledb32!ResetResourceThread+0x84 04 025cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 29 System Thread ID: 5b4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0260fd54 7c599fe4 ntdll!ZwWaitForSingleObject+0xb 01 0260fd7c 7c57b3db KERNEL32!WaitForSingleObjectEx+0x71 02 0260fd8c 7878db85 KERNEL32!WaitForSingleObject+0xf 03 0260ffb4 7c57b388 COMSVCS!PingThread+0xf5 04 0260ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 30 System Thread ID: c80 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0264ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb 01 0264ffb4 7c57b388 ntdll!RtlpWorkerThread+0x6b 02 0264ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 31 System Thread ID: 754 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0271ff88 751a4848 ntdll!ZwWaitForMultipleObjects+0xb 01 0271ffb4 7c57b388 NETAPI32!NetbiosWaiter+0x71 02 0271ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 32 System Thread ID: ce4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 067aff5c 7c59a243 ntdll!NtDelayExecution+0xb 01 067aff7c 7c59a20e KERNEL32!SleepEx+0x32 02 067aff88 77ab9967 KERNEL32!Sleep+0xb 03 067aff90 77ab5a5b ole32!CROIDTable::WorkerThreadLoop+0xc 04 067affa8 77ab59b3 ole32!CRpcThread::WorkerLoop+0x22 05 067affb4 7c57b388 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 067affec 00000000 KERNEL32!BaseThreadStart+0x52 ***** Dump name is formatted as: PID-Timestamp.dmp Creating C:\iisstate\output\1024-1125049082.dmp - mini user dump ***** *****SUMMARY***** IISState has detected that the process is most likely in a hung state. This is most likely the result of an incorrectly compiled or configured VB5 COM Object. To address this problem, please follow the steps outline in KB Article: 186273 (http://support.microsoft.com/default.aspx?scid=kb;en-us;186273). Closing open log file C:\iisstate\output\IISState-1024.log Tag: Preventing Log Evasion in IIS Tag: 369063
  - 8
    - Is it safe to publish a Web site directly on your Internet Security and Acceleration Server 2004 computer For the moment we use a separate Windows 2000 member server with ISA 2000. But our management wants to save on servers and wants to place the ISA server on a WEB server. It will be ISA 2004 standard edition. The following document describes the way to install it. http://support.microsoft.com/kb/885186 My question is, is it save to do so and what are the reason not to install it on a WEB server with IIS 6.0? Tag: Preventing Log Evasion in IIS Tag: 369061
  - 9
    - Win2k / IIS 5 Frontpage extensions not working We have an Windows 2000 / IIS 5 server witch we use for our hosting customers. We now have a problem with Frontpage extensions and publishing a site with the Frontpage program. If the user (every user, even a brand new test user) want's to publish his site and chooses for 'Frontpage or Sharepoint services' he gets the error that there are problems with getting to the site files of the Windows Sharepoint Services. I checked the permissions and everything is looking fine and I think that a recent security patch is in the way of things. But can anyone give me a resume of the right permissions needed for a stable working? I checked with my Win2003 server and the permissions on that server are the same as on the Win2k server? I the reinstalled the extensions but that didn't help. A previous employer has run IIS lockdown, can that be the problem? Thanx in advance! Justin / The Netherlands Tag: Preventing Log Evasion in IIS Tag: 369059
  - 10
    - IIS screen capture returns black screen Hi, I'm running a program on my IIS server that's written in C# that is supposed to make screen captures of the server's display. The problem is that the images that get created are all black although they are always the right size. I have tried everything from spawning an exe that takes the screenshots to using window handles to take the screenshots and all I get are black pictures. Now I know that the code to take the screenshot is correct because when I manually run the exe on the server images are displayed correctly but the same exe displays a black image when run from IIS. Also all of this code works fine when run on the Microsoft ASP.NET Development Server which means this problem has something to do with some limitations in IIS. I'm not that experienced with IIS so if any experts out there know any special configurations I have to run IIS under or if anyone knows any workarounds for this problem please let me know. Thanks! Kris Tag: Preventing Log Evasion in IIS Tag: 369058
  - 11
    - Iis migration Hello I have a W2k sp4 IIS server. My Op. Syst. doesn't work fine and I have to reinstall all the entire windows. But, there is some way to backup all my IIS data and configuration to easily recover on the new system? The hardware will be the same, as I maintain the computer, it's just a new windows installation on a new hard drive (the present hard drive will be keept as a backup). Thanks a lot! Tag: Preventing Log Evasion in IIS Tag: 369055
  - 12
    - Server keep sending e-mail There's a part in my program code that iterate an array list, and then send an e-mail for each item in the list. I think I made a mistake in the codes previously or what, it just keep sending e-mail non-stop. So I stopped running the program, expecting things will be normal again. But I discovered that the server still keep sending out e-mail when I have already stop the program. This has already persisted for 4 days, and today morning, I saw 6000 emails in my mailbox. I removed IIS, and everything resumed to normal. I installed IIS again, the server started sending e-mails again. What should I do? Tag: Preventing Log Evasion in IIS Tag: 369052
  - 13
    - WEB Site Config in IIS 6 -- lost site I have inherited a web site and am trying to figure it out. The site www.foo.com is not listed in the web sites in iis. However, it is on the server. When I look at other web sites for example foo.com which is a web site in iis, it is redirected to www.foo.com. Somewhere in iis www.foo.com is defined and described. Where should I look? Thanks Bill Tag: Preventing Log Evasion in IIS Tag: 369045
  - 14
    - One GET, Multiple POSTS I have started seeing this over the past few months for a small number of users: A user will make a request to a page that has a form, I see a single GET in the IIS logs. The user POSTS the form, I see multiple POSTS requests in the log, anything from 3 to 10, about a second apart. The user doesn't see any problems, ie the first post comes back OK, but the extra ones cause problems in our system, mainly they arent sending back a cookie, and are causing errors to be logged. They also can cause viewstate corrupt errors. My suspicions are a browser hijacker - anyone have any other ideas? Tag: Preventing Log Evasion in IIS Tag: 369042
  - 15
    - MDAC and Server 2003 IIS When I try to make connection to the MSSQL Server 2000 SP4 on my Windows 2003 Server (both are on the same server) I get the following error. Microsoft VBScript runtime error '800a01b0' File name or class name not found during Automation operation ../include/inc_dbopen.asp, line 4 <% Set moConnection = Server.CreateObject("ADODB.Connection") moConnection.Open Connectstring %> Any Ideas. Best Regards, Hans Tag: Preventing Log Evasion in IIS Tag: 369041
  - 16
    - win2k iis5.0 web servers randomly crashing I have 4 web servers that just started randomly crashing pretty much on a daily basis. Restarting IIS fixes it for a little while but ultimately i have to reboot the server. The only thing that i recently did was install the POST sp4 rollup. Are there any IIS issues with that update or any other new patches? There are no errors getting generated in my event logs or IIS logs. I have also ran Perfmon on the servers to see if anything weird is happening on the server when it crashes. I also have other 2k webservers in my server farm that do not seem to be affected. Any ideas. -- gerard Tag: Preventing Log Evasion in IIS Tag: 369034
  - 17
    - IIS 6 I have a customer that I am trying to assist with IIS 6 (Server 2003). This may be a really basic question to ask here. She is trying to post an audio/videofile to her website, to be able to play. However when she posted the file to her IIS server, and linked it on her website, she gets a 404 error. I had sent her an email to check her file permissions, as well as the urlscan.ini file to make sure that she allows that file extension. But she responded that IIS 6 no longer uses the urlscan.ini (news to me - I don't know anything about IIS 6 - only 4 and 5). She did say that she can download the new urlscan to use with it though. She did mention that inetmgr.exe offers a webserviuce extensions feature, but doesn't know the syntax to use it. Any suggestions appreciated in advance. Tag: Preventing Log Evasion in IIS Tag: 369027
  - 18
    - IUSER Question Hello, I don't know if this is the proper place to post this but I need to know about this. Recently, I have started to get a whole bunch of 529 (bad logon) errors in my event log associated with the IUSER account. I posted this on the SBS NG and the answer I recieved was to reset the IUSER account password. I did in AD and in IIS at the Default Site. This did not work and infact made everything worse. My OWA gave me a 440 logon error which I corrected by changing the IWAM password to the same one as my IUSER and then ran some scripts according to a website I found of a google search for the 440 error. That solved the OWA problem but now my IUSER account keeps generating 539 events (lockouts). My question is, are there any services that rely on the IUSER account? Is there a way to stop the lockout events and the 529 errors? Any suggestions welcome. Thanks, Jeff Jones Tag: Preventing Log Evasion in IIS Tag: 369021
  - 19
    - configuring IIS 6.0 in a C# app There are a number of ways to programmatically create and configure web sites in IIS 6.0. Is there a way, other than parsing the metabase.xml to have complete control over IIS config in a C# app? Tag: Preventing Log Evasion in IIS Tag: 369019
  - 20
    - Win 2003 SP1 and IIS 6.0 Why is it a problem to make a new virtual site with FP extensions after SP1 It is an Acces denied problem . i have a video wnd it shows before and after install SP1 in a Server 2003 . the link is below http://www.aranea-itconsulting.com/sp1/sp1fore.asp http://www.aranea-itconsulting.com/sp1/sp1efter.asp Jag har installerat 2003 Srv + Srvpack1 och skulle in och lÃ¤gga upp nÃ¥gra webbsiter med server extensions detta gick bra men sen nÃ¤r jag skulle lÃ¤gga upp virtuella siter med frontpage stÃ¶d sÃ¥ blev det tvÃ¤rnit. Finns det nÃ¥gra tips pÃ¥ Howtos eller nÃ¥n guideline .. Jag har spelat in en video Ã¶ver scenariot , noteras Ã¤r att pÃ¥ default website sÃ¥ fungerar FP extensions som innan upgrade med SP1 men de siter som man skapade sjÃ¤lv fÃ¶re upgrade funker inte att kÃ¶ra virtuella siter med FP Extensions . http://www.aranea-itconsulting.com/sp1/sp1fore.asp http://www.aranea-itconsulting.com/sp1/sp1efter.asp Tacksam fÃ¶r svar Tag: Preventing Log Evasion in IIS Tag: 369018
  - 21
    - IIS 6.0 Win server 2003 after SP1 Why is it a problem to make a new virtual site with FP extensions after SP1 It is an Acces denied problem . i have a video wnd it shows before and after install SP1 in a Server 2003 . the link is below http://www.aranea-itconsulting.com/sp1/sp1fore.asp http://www.aranea-itconsulting.com/sp1/sp1efter.asp Jag har installerat 2003 Srv + Srvpack1 och skulle in och lÃ¤gga upp nÃ¥gra webbsiter med server extensions detta gick bra men sen nÃ¤r jag skulle lÃ¤gga upp virtuella siter med frontpage stÃ¶d sÃ¥ blev det tvÃ¤rnit. Finns det nÃ¥gra tips pÃ¥ Howtos eller nÃ¥n guideline .. Jag har spelat in en video Ã¶ver scenariot , noteras Ã¤r att pÃ¥ default website sÃ¥ fungerar FP extensions som innan upgrade med SP1 men de siter som man skapade sjÃ¤lv fÃ¶re upgrade funker inte att kÃ¶ra virtuella siter med FP Extensions . http://www.aranea-itconsulting.com/sp1/sp1fore.asp http://www.aranea-itconsulting.com/sp1/sp1efter.asp Tacksam fÃ¶r svar Tag: Preventing Log Evasion in IIS Tag: 369017
  - 22
    - iis 5.1 and windows XP pro sp2 I am doing some web development and would like to set up a local website to do some testing. Although I have installed iis 5.1 on my Windows XP pro sp2 machine, I cannot view .asp pages. Over the past 3 weeks, I have found literally hundreds of others on various iis help websites with the same problem. I have read a number of help articles, and tried a number of solutions, but with no success. Here are my symptoms. 1. ASP pages display the source code, but .html files with simple text work fine 2. When I go to browse the default website I get the following error; Server Application Error The server has encountered an error while loading an application during the processing of your request. Please refer to the event log for more detail information. Please contact the server administrator for assistance. 3. When I check the event viewer, I see the following; The server failed to load application '/LM/W3SVC/1/ROOT'. The error was 'Class not registered '. Among the solutions I have tried are 1. turning off any antivirus software 2. turning off the firewall 3. uninstalling and reinstalling IIS 5.1 4. uninstalling and reinstalling MSTC 5. updating registry settings 6. worked with our network guy to see of there is something in our networking that is preventing the web stuff from working I would really appreciate any help with this. JFM Tag: Preventing Log Evasion in IIS Tag: 369014
  - 23
    - *.jsc files on IIS 6 Hi everybody! When i try to access to *.jsc files on www site under IIS 6.0 I recieve 404 error. What's up? Tag: Preventing Log Evasion in IIS Tag: 369012
  - 24
    - Setting up ip restriction via command line! Is there a way to assign ip restriction's in virtual folders via a command line utility? Tag: Preventing Log Evasion in IIS Tag: 369011
  - 25
    - Trouble configuring IIS 5.1 I've been having trouble getting a clean install of IIS5.1 on my XP Pro SP2 system. When I install it and go to localhost, the main page starts fine, but the IIS help page won't open - I get: Error Type: Server object, ASP 0177 (0x800401F3) Invalid class string /iishelp/iis/misc/default.asp, line 12 When I look in the code, (which is - surprisingly to me - located under the Windows folder hierarchy instead of under Inetpubs) I see that the line is trying to create an instance of MSWC.BrowserType. When I look in Regedit, I see that I have entries for both MSWC.BrowserType and MSWC.BrowserType.1. Furthermore, almost every MSWC entry has a .1 companion. I have no idea whether or not this is normal. My MSWC.BrowserType entry looks like this: Key Name: HKEY_CLASSES_ROOT\MSWC.BrowserType Class Name: <NO CLASS> Last Write Time: 8/25/2005 - 11:23 AM Value 0 Name: <NO NAME> Type: REG_SZ Data: MSWC.BrowserType Key Name: HKEY_CLASSES_ROOT\MSWC.BrowserType\CLSID Class Name: <NO CLASS> Last Write Time: 8/25/2005 - 11:23 AM Value 0 Name: <NO NAME> Type: REG_SZ Data: {0ACE4881-8305-11CF-9427-444553540000} Key Name: HKEY_CLASSES_ROOT\MSWC.BrowserType\CurVer Class Name: <NO CLASS> Last Write Time: 8/25/2005 - 11:23 AM Value 0 Name: <NO NAME> Type: REG_SZ Data: MSWC.BrowserType.1 My BrowserType1. entry looks like this: Key Name: HKEY_CLASSES_ROOT\MSWC.BrowserType.1 Class Name: <NO CLASS> Last Write Time: 8/25/2005 - 11:23 AM Value 0 Name: <NO NAME> Type: REG_SZ Data: MSWC.BrowserType Key Name: HKEY_CLASSES_ROOT\MSWC.BrowserType.1\CLSID Class Name: <NO CLASS> Last Write Time: 8/25/2005 - 11:23 AM Value 0 Name: <NO NAME> Type: REG_SZ Data: {0ACE4881-8305-11CF-9427-444553540000} I've installed and uninstalled IIS several times; ditto for FP extensions both 2000 and 2002. thanks for any help you can provide. Tag: Preventing Log Evasion in IIS Tag: 369010

The Web Application Security Consortium has released a new article
titled 'Preventing Log Evasion in IIS'.

Preventing Log Evasion in IIS
http://www.webappsec.org/projects/articles/

- w

Top