IIS 5.0 REDIRECTING url

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - string compare in asp Hi there, I am trying to compare two strings and get the differenc in vbscript. Example: Str1="This is a test text" Str2="This is a fine test text but a little long" I like to compare str1 with str2 and get the difference. Above example the difference will be "fine" and "but a little long" How do I do that? A sample code would be apprciable. Thanks for your time Jyoti Tag: IIS 5.0 REDIRECTING url Tag: 335670
  - 2
    - Filtering IIS Hallo, I 'm pretty sure that, in some cases, my 500 sites IIS 5 - w2k server sp4 is under DDOS. How can I do to monitor, manage and filter traffic IN and OUT from IIS? Please any help MUCH MUCH appreciated. :-\ Best regards. -- Fabrizio Maccarrone -- YAMSSQLU (Yet Another MSSQL User) Tag: IIS 5.0 REDIRECTING url Tag: 335669
  - 3
    - URLSCAN on IIS6 config I am having some problems getting URLScan 2.5 running properly on IIS6. I can't get the default doc to display unless it is written out in the url. If I remove urlscan from the server it is okay. The urlscan logs looks like it is seeing a . in the url and rejecting the request there is obviously no period in the url Help please Mike http://ricweb3/default.asp output: Boo http://ricweb3/ output: The system cannot find the file specified. code in default.asp <% response.write "Boo" %> ---------------------------------------------------- From urlscanlog: [06-04-2004 - 09:08:20] Client at xxx.xxx.xxx.xxx: URL contains extension '.', which is not specifically allowed. Request will be rejected. Site Instance='599050834', Raw URL='/' ------------------------------------------------ urlscan.ini settings UseAllowExtensions=1 [AllowExtensions] ; ; Extensions listed here are commonly used on a typical IIS server. ; ; Note that these entries are effective if "UseAllowExtensions=1" ; is set in the [Options] section above. ; .htm .html .txt .jpg .jpeg .gif .asp ------------------------------------------ Tag: IIS 5.0 REDIRECTING url Tag: 335668
  - 4
    - IISBITS Service Good morning, I am trying to install SMS Server and it is needing something called IISBITS Service up and running. It references IIS so though maybe someone here would know what the heck that is and how I can start it? Thanks! Derek Tag: IIS 5.0 REDIRECTING url Tag: 335667
  - 5
    - http conf. and client side issues Hi, I am writing a "Process" (Client) which communicates with a "HTTP Server" In my model, Client sends a number of files to server (HTTP) using HTTP protocol. I am planning to use the Avl Windows API. If u know of any suitable API/Lib. Please Let me Know. When i send a File. I want some executable to execute. How do i do it using HTTP. I know there is some way of doing it. But I Dont know how to do it. I would appreciate if some one could explain with an example. It will be very very helpful. Since i am using HTTP for file transfer. Can I place any timeout on the transfer. ie. If i am not able to send the file to server due to network problem. i must be able to come out and inform the user of it. as soon as possible. How to set a time out in HTTP CLient. Any Help is appreciated. Thanks, james Tag: IIS 5.0 REDIRECTING url Tag: 335664
  - 6
    - HTML file access is there an effective means either though IIS or base Win32 that one can monitor when a HTML page has been opened for display I want to have a background Service monitoring such activity for one or more web pages Thank Philip Tag: IIS 5.0 REDIRECTING url Tag: 335663
  - 7
    - IIS 5 and Logs I set on of my sites on IIS 5 on w2k server sp4 to log monthly. When I try to open log and go to eof (end of file) I see logged only access of about 2 hours ago...:-( Ex: I analyze txt log file of site A on 11:40 AM. The last line I can see on that file has 09:40 as time information.... What is happening ? Any help or suggestions much appreciated. Best Regards. -- Fabrizio Maccarrone -- YAMSSQLU (Yet Another MSSQL User) Tag: IIS 5.0 REDIRECTING url Tag: 335643
  - 8
    - Creating Web Sites Programmatically in IIS 5 with ASP I found a solution to this problem below but I need some help to get it to support multiple host names. Does anybody know how to add additional host headers to a virtual website through a script? The article demonstrates how to create an ASP application to setup a new website. The script is based on mkw3site.vbs. I got it working but I need help to modify the script to support additional host headers. I am trying to setup and app that adds for example www.mycompany.com and mycompany.com at the same time. Currently it takes forever for me to add new customers http://www.winnetmag.com/Articles/Index.cfm?ArticleID=2155 The following article demonstrates how to create a web site with multiple host headers using a modified version of MKW3Site.VBS. http://www.iisfaq.com/default.aspx?View=A399&P=10 I tried using the code in the article above to update MKW3Site.ASP file from the 1st article with no success at all Any help would be appreciated Thank Vlad vlad@myetrac.co Tag: IIS 5.0 REDIRECTING url Tag: 335642
  - 9
    - ASP CLASSIC UNDER IIS 6 hi to all. i have ASP based web site wich works corecctly under win 2000 pro ( iis 5) but i dosnt work in win 2003 server (iis6 ) i have been enabled ASP server extension ( changed it from prohabit to allowed) but i still have a problem with starting site... it said Bad Request.. any one have a suggestion to solve this problem ? thanks . Tag: IIS 5.0 REDIRECTING url Tag: 335629
  - 10
    - IIS Suddenly the pages on my IIS are not coming in completely. Previously it has always been working very well. I did not do anything to change it. For example this page is very incomplete http://www.unifon.org. It should have the same layout as this page http://www.unifon.org/Bett-on-Unifon.htm This is the only page that is coming in correctly. Anyone have any ideas? Tag: IIS 5.0 REDIRECTING url Tag: 335626
  - 11
    - Default WEb Site won't start I have searched on this and couldn't find anything. I have IIS 4 running on NT4 Server (SP6a). When I try to start the default web site in IIS it doesn't work. I don't get any error messages either. I checked the event viewer logs and nothing turns up in any log. I also checked the IIS logs and nothing is there. I have tried changing it to a different port (from 80 to 8080) and still nothing. ANy suggestions? Thanks! Tag: IIS 5.0 REDIRECTING url Tag: 335625
  - 12
    - cannot start the IIS This is a multi-part message in MIME format. ------=_NextPart_000_0008_01C44A2F.407A1F00 Content-Type: text/plain; charset="big5" Content-Transfer-Encoding: quoted-printable how come i cannot start my IIS?? I have installed all the options. the = IIS was work properly before, it cannot work after I restart the PC ------=_NextPart_000_0008_01C44A2F.407A1F00 Content-Type: text/html; charset="big5" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; charset=3Dbig5"> <META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV><FONT face=3DVerdana size=3D2>how come i cannot start my IIS?? I = have installed=20 all the options. the IIS was work properly before, it cannot work after = I=20 restart the PC</FONT></DIV></BODY></HTML> ------=_NextPart_000_0008_01C44A2F.407A1F00-- Tag: IIS 5.0 REDIRECTING url Tag: 335624
  - 13
    - Conncurent Connections in 2003 server I recently migrated my server over from 2000 to 2003. I am running ColdFusion 6.1 on the IIS server. I know I would rather be using ASP.NET but we will get ehere in time. I have tried 2003 web eddtion and and Standard addtion. Here is what happens I maintain an easy 30 to 70 current anynomus users according to performace monitor on the 2000 box. I swap over to the 2003 bos and the site traffic drops big time I'm lucky if I see between 6 and 10 continues users. Now I checked what I thought would be the obvious with license mode and have set the serer up in device/user mode and per server mode. I have pulled my hair out for days on this with no sucess. it's got to be something simple with 2003 I'm missing Please help Tag: IIS 5.0 REDIRECTING url Tag: 335622
  - 14
    - ANN: Perl module Win32::EventLog::Carp 1.30 released The latest version of Win32::EventLog::Carp has been uploaded to PAUSE and should begin showing up in a CPAN mirror near you at $CPAN/authors/id/R/RR/RRWO/Win32-EventLog-Carp-1.30.tar.gz NAME Win32::EventLog::Carp - for carping in the Windows NT Event Log REQUIREMENTS Carp Win32::EventLog REVISION HISTORY Changes since Win32::EventLog::Carp v1.21. (Note: potential incompatabilities are marked with '*'.) 1.30 Thu June 3 2004 - added tests - fixed issue with uninitialized values (RT#5408). - added Build.PL as alternative to Makefile.PL - added META.yml to distribution * source registration disabled by default; must be enabled in import - renamed global variables with initial caps - added note in POD about Windows 2003/IIS security policy - added require for Carp::Heavy because of longmess_heavy and shortmess_heavy routines - added note in POD about warnings from Win32::EventLog A detailed revision history is in the Changes file included with this distribution. SYNOPSIS use Win32::EventLog::Carp; croak "We're outta here!"; use Win32::EventLog::Carp qw(cluck); cluck "This is how we got here!"; DESCRIPTION `Win32::EventLog::Carp' traps warnings and fatal errors in Perl and reports these errors in the Windows NT Event Log. This is useful for scripts which run as services or through the scheduler, and for CGI/ISAPI scripts. The interface is similar to `Carp': the `carp', `croak' and `confess' functions are exported (with `cluck' being optional). You need only change references of "Carp" to "Win32::EventLog::Carp" to begin using this module. A more detailed description can be found in the module's POD docu- mentation. AUTHOR Robert Rothenberg <rrwo at cpan.org> LICENSE Copyright (c) 2000-2004 Robert Rothenberg. All rights reserved. This program is free software; you can redistribute it and/or modify it under the same terms as Perl itself. Tag: IIS 5.0 REDIRECTING url Tag: 335617
  - 15
    - Using IIS6 with UNC Just installed a few IIS6 (2k3 Web Edition) Servers and looking to get them up and running with our NAS. While all documentation says it should be easy as pie, it never is when you try to work with it. So far I think I've tried every possible combination of authentication mechanism's and ways to specify the UNC without any luck This works perfectly under IIS5. Using existing sites that work with IIS5 return HTTP 401.3 errors. Permissions appear correct. Sites fail regardless of Anonymous or using the domain admin account to connect via HTTP. I have tried allowing the local IUSR_Machinename account and even setup using the IUSR_domainaccount for anonymous and it absolutely bombs out. Event logs show no errors only successful authentication requests for Anonymous or the Admin account, yet the filer seems to cause the 401.3 errors I'm at my wits end. Help?! Tag: IIS 5.0 REDIRECTING url Tag: 335615
  - 16
    - Can't get my website to display I've followed all the directions for setting up a virtual site at least several times and I'm not getting any results. "Page cannot be displayed." The virtual directory I've created points to where the file lives, and the file it's pointing to, is verified in the directory. When I click on the Virtual Directory that I created from the details pane, I see all the files that live in that directory it's pointing to. When I right click on the file I'm trying to show and choose browse I get a url of http://localhost/dls/<filename> (dls being the virtual directory) with a page cannot be found error I have unchecked the option in my browser internet options "show unfriendly http: errors" already and that doesn't help Any other ideas? I am running Windows 2000 server, with IIS 5.0 (but you guys all aready know that :-) Are they any known facts, commom mistakes or tips about IIS 5 that I'm overloooking? Tag: IIS 5.0 REDIRECTING url Tag: 335614
  - 17
    - IIS Digest Authentication compatible with non-MS browsers? Dear Community, While researching authentication options for my Windows 2000 IIS web server I encountered a few articles dated from 2002 that described incompatibilities between Apache and Microsoft implementations of of the Digest Authentication protocol. http://www.eweek.com/print_article/0,3668,a%3D24177,00.asp At the time, it was discovered that the Microsoft IIS version of Digest Authentication worked only with Microsoft's Internet Explorer browser. All other, non-MS browsers such as Mozilla, Netscape, etc., could not authenticate with a Windows web server using digest authentication. (The reverse was also true--IE could not authenticate with Apache servers.) Does anyone know if this incompatibility has since been resolved? Thanks, Kerry Tag: IIS 5.0 REDIRECTING url Tag: 335613
  - 18
    - Remove IIS 6.0 to create clean slate? I've been exploring Windows SharePoint Services with Separate Active Directory Directory Service Organization Unit Deployment. In the process I've renamed my SharePoint server a couple of times, created various applicaton pools and maybe messed things up a bit. For example the first computer name is still used in the metabase. I don't have any sites I plan to keep. Now that I'm getting the hang of things it would be nice to start over, but not go all the way to reinstalling the server OS. Is there any problem with removing and reinstalling IIS 6.0 to get a clean slate? Or will it not clean the slate or create other problems I don't anticipate? THANKS! Tag: IIS 5.0 REDIRECTING url Tag: 335612
  - 19
    - TerminateExtension called unexpectedly I've got an ISAPI extension that uses the TerminateExtension call to clean up any threads I've created before exit. My thread clean-up routine in TerminateExtension can only complete once all threads created by my extension have stopped. Because of this, it's important that TerminateExtension is only called when the web server is shutting down and is therefore not accepting new requests. I have ISAPI extension caching set to 'on', so I expect that TerminateExtension is only called when the web server is stopping. But from a stack dump, it looks like a large number of threads sitting in my TerminateExtension function even though my web server is not shutting down at all. What I'm wondering is: with ISAPI extension caching on, are there conditinos other than server shut-down under which TerminateExtension will be executed? Is there a way to ensure that it only gets called on shut-down? I'm not overly experienced with web server administration, so any insight into this would be appreciated. It may be something as simple as a configuration parameter. Thanks, scott Tag: IIS 5.0 REDIRECTING url Tag: 335610
  - 20
    - Moving frontpage intranet website directory to new server Hi, We are in the process of migrating from an old SBS2000 box to a new SBS2003 box. A user has created an intranet website with Frontpage and has it stored in a directory called intranet under the user share. I need to move this directory to the new server where the user will be able to continue to work on it and the intranet can still function. How do I accomplish this? Copy and paste? Xcopy? Backup and Restore? IIS migration tool? I'm a little confused about this and could really use some help. :) Thanks. Steve Tag: IIS 5.0 REDIRECTING url Tag: 335609
  - 21
    - Unable to post multipart/form-data I really need help with a strange problem. i have a page having ONLY this cleaned and washed HTML code, no client scripting at all and "some" folks are unable to post any file till "some" are able. All using IE6 (SP1 or not) Leaving the <input type="file"> unassigned is ok for everyone but when you select a file, even a SMALL SMALL SMALL 10 bytes almost empty txt file, the form fails to be submitted. I've installed a packet sniffer software on the server and looked carefully at the packets reaching the server on this specific port (not 80). It appears that, for some reasons i realy dont know of, the client response to the "HTTP/1.1 100 Continue" never reach the server. Client seems to time-out waiting for an ACK, server seem to time-out waiting for the data. There is a NAT/Router (SMC) involved and an ADSL modem using PPPoE. IIS is running on a Win2000 SP4, no script blocking (NAV). Here is the WHOLE (HTML 4.01 transit) code of the non working page. - - - - - 8< - - - - - - - - - - - - - - - - - - - - - - - - - - <HTML> <BODY> <FORM ACTION="Document_Save2.asp" METHOD="post" ENCTYPE="multipart/form-data"> <INPUT TYPE="TEXT" NAME="NAME"><BR> <INPUT TYPE="FILE" NAME="Binary"><BR> <INPUT TYPE="SUBMIT" VALUE="Send"> </FORM> </BODY> </HTML> - - - - - 8< - - - - - - - - - - - - - - - - - - - - - - - - - - the pages called by this one is simply <BODY>SAVED</BODY> Any help will be appreciated. Please reply to both this message and my not so private email address. You'll find an account called "doltharz" on hotmail's servers. Tag: IIS 5.0 REDIRECTING url Tag: 335606
  - 22
    - IIS not rendering CSS and background images Hello, My IIS (5.01) server is no longer serving up any images or CSS sheets, whether I use relative or absolute paths. Two things have changed, one I installed an online game (city of heros) and the new version of Zone Alarm. I tested the zone alarm, and that is not inhibiting anything. I can see all public pages normally. I cannot connect to the server at all using VS.NET. I can connect using Dreamweaver, but the pages still don't render correctly. All sites under IIS are like this. I'm figuring some DLL got corrupted during the game install, but I don't know which one. Any help or suggestions would be great. Tag: IIS 5.0 REDIRECTING url Tag: 335602
  - 23
    - ADPlus Log for IIS AV Hi, I have an IIS site hosting a combination Visual Basic/Visual C++ web app for e-commerce. I've been having random crashes lately so I hooked up adplus and got the following for the access violation. I just triple checked all my VB DLL's for Retain In Memory/Unattended Execution and they are all set correctly. I just thought I would post this up to the NG and see if anyone has any pointers before I call PSS. Thanks! Jeff Thu Jun 03 04:49:26 2004: (76c.6b0): Access violation - code c0000005 (!!! second chance !!!) --- 2nd chance Acess Violation - Faulting stack below --- . 41 Id: 76c.6b0 Suspend: 1 Teb: 7ff91000 Unfrozen Start: comsvcs!CTransactionResourcePool::PutResource+2e (787c27de) # ChildEBP RetAddr Args to Child WARNING: Frame IP not in any known module. Following frames may be wrong. 00 02b4fb28 660292dc 04cfb468 1100ff70 1100ff54 0x405daf7 01 02b4fb50 660158c8 04dd7bb8 1100ff70 02b4fb84 MSVBVM60!RESDESCTBL::DestructItem+0x88 02 02b4fb70 6602e6bd 04dd7bb8 00000003 1101ff53 MSVBVM60!RESDESCTBL::DestructModInst+0x43 03 02b4fb8c 6602e64c 04dd7bb8 041163b8 04dd7bb8 MSVBVM60!RUN_INSTMGR::DestructModInstance+0x32 (FPO: [1,0,2]) 04 02b4fb9c 660157a7 04dd7bb8 00000000 1100ad18 MSVBVM60!RUN_INSTMGR::DestructObjInstance+0x2a (FPO: [1,0,2]) 05 02b4fbbc 66015295 1100ad18 00000040 00000001 MSVBVM60!RcmSemiReset_606+0x224 06 02b4fbd4 660151ef 1100ad18 00000000 00000000 MSVBVM60!RcmShutDownProject+0x3f (FPO: [2,0,2]) 07 02b4fbec 660150ef 1100ad18 00000000 030d1e94 MSVBVM60!RcmResetProject+0x1b (FPO: [2,0,3]) 08 02b4fe68 66016ed9 04123c30 11000000 66014f6b MSVBVM60!EbResetProjectNormal+0xd5 09 02b4fe74 66014f6b 11000000 041b5acc 030d1e94 MSVBVM60!EbResetProject+0x27 (FPO: [1,0,0]) 0a 02b4fe8c 66016cfb 041b92d4 00000000 00000001 MSVBVM60!CThreadPool::ResetProject+0x5a 0b 02b4fea8 6608846f 041b92d4 00000001 00000000 MSVBVM60!CVBThreadAction::CleanupProjData+0x46 0c 02b4feb8 6603ebac 030d1e94 02b726d0 02b4feec MSVBVM60!CThreadPool::CleanupAtDllDetach+0x14 (FPO: [1,0,0]) 0d 02b4fed0 77f830e6 11050164 11050160 11000000 MSVBVM60!UserDllMain_38+0x39 0e 02b4fef8 77f837f5 110033f0 11000000 00000003 ntdll!ZwReplyPort+0xd (FPO: [2,0,0]) 0f 02b4fef8 77f837f5 110033f0 11000000 00000003 ntdll!RtlDeleteCriticalSection+0x31 (FPO: [Non-Fpo]) 10 02b4ff4c 7c5745e7 ffffffff 010cece0 010cf02c ntdll!RtlDeleteCriticalSection+0x31 (FPO: [Non-Fpo]) 11 02b4ffb4 7c574391 00000000 ffffffff 010cece0 KERNEL32!NlsAnsiToUnicode+0x12e (FPO: [Non-Fpo]) 12 02b4ffec 00000000 787c27de 010cf02c 00000000 KERNEL32!MapCase+0x21 (FPO: [Non-Fpo]) Creating C:\PROGRA~1\DEBUGG~1\CRASH_~2\PID-1900__INETINFO.EXE__2nd_chance_access_viol ation__full_2004-06-03_04-49-26-184_076C.dmp - mini user dump No export elog_str found quit: eax=0405da00 ebx=1100ff54 ecx=04cfb468 edx=00000003 esi=1100ff70 edi=00000000 eip=0405daf7 esp=02b4f81f ebp=02b4fb28 iopl=0 nv up ei pl nz na po nc cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000206 0405daf7 000c08 add [eax+ecx],cl ds:0023:08d58e68=?? Tag: IIS 5.0 REDIRECTING url Tag: 335601
  - 24
    - How to figure out which site is using all the ram. We have a Win2K3 Server with about 20 .Net sites running on it all in their own process. I can see in task manager all the w3wp.exe processes running with the various amounts of ram being used for each. In task manager I have a PID number for each, but nothing that jumps out and says "it's this site". How do you tell which site is using what resources? Thanks Tag: IIS 5.0 REDIRECTING url Tag: 335599
  - 25
    - Page Content does not change in IIS This is my second post regarding this problem. I am running IIS 5.0 with Windows 2000 Advanced Server. Most of the site pages are in ASP but some are html. I have checked the directory in IIS and the fact that there is only one copy of the website on my machine. I am making changes to my code and they are not being reflected in the web browser, only the old site information can be seen. I have the following code in my asp and html pages : ASP <% response.expires = 0 response.expiresabsolute = now()-1 response.addheader "pragma", "no-cache" response.addheader "cache-control","private" response.cachecontrol = "no-cache" %> HTML <meta http-equiv="Pragma" content="no-cache" /> <meta http-equiv="Pragma" content="-1"/> I have the HTTP Header for the web site set to expire the content immediately. I have also followed the instructions in the Microsoft Knowledge Base Article 319384 titled Pages do not Expire as Expected After Web Site Content Change. I have even cleared the cache IE and hit f5 to refresh. Tag: IIS 5.0 REDIRECTING url Tag: 335597
- Next
  - 1
    - IISSTATE log analysis... Pat, hoping you can help. Posted a previous message, but will give more info here... I'm having a problem with one of two processes that is heavily utilizing a server of mine's cpu . The memory usage is normal. The cpu spikes are not constant, but it occurs every couple of seconds. There are two processes from which I cannot pinpoint the culprit since both of them it looks are keeping the cpu very busy. (DLLHOST & INETINFO) Herewith the results for both: (DLLHOST LOG IS BELOW) ######################################################### INETINFO LOG: ########################################################## Opened log file 'D:\tools\installed\iisstate\output\IISState-2664.log' *********************** Starting new log output IISState version 3.3.1 Thu Jun 03 13:36:07 2004 OS = Windows 2000 Executable: dllhost.exe PID = 2664 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: ad0 Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006fd28 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0006fd50 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0006fd60 77aaa701 KERNEL32!WaitForSingleObject+0xf 03 0006fd80 77aa9f0f ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169 05 0006ff24 010014c6 dllhost!WinMain+0xb0 06 0006ffc0 7c581af6 dllhost!WinMainCRTStartup+0x156 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: a64 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00baff30 77abbad5 USER32!NtUserGetMessage+0xb 01 00baff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40 02 00baff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2 03 00baff90 77ab50ee ole32!DLLHostThreadEntry+0x9 04 00baffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22 05 00baffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 00baffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 2 System Thread ID: a48 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00d3fc54 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 00d3fc80 00c0b9d0 KERNEL32!GetQueuedCompletionStatus+0x27 02 00d3fd94 00c0b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0 03 00d3ffb4 7c57438b TxfAux!WORK_QUEUE::ThreadLoop+0x58 04 00d3ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: a78 Kernel Time: 0:0:0.62 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00f7ff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 00f7ff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea 02 00f7ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17 03 00f7ffb4 7c57438b COMSVCS!CEventDispatcher::PushEvents+0x4e 04 00f7ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: 398 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. Remote call is either to a MTA object or object not initialized. Also, possible utility thread. DCOM call being made to Process ID: 2056 Waiting on thread id: ffffffff # ChildEBP RetAddr 00 00fbfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb 01 00fbfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e 02 00fbfba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c 03 00fbfbc0 77b25a52 ole32!ThreadSendReceive+0xef 04 00fbfbd8 77b22ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f 05 00fbfc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 00fbfc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11 07 00fbfc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9 08 00fbfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124 09 00fbfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c 0a 00fbff44 77d95136 RPCRT4!NdrClientCall2+0x4f5 0b 00fbff60 77d46e75 RPCRT4!ObjectStublessClient+0x76 0c 00fbff70 787f5818 RPCRT4!ObjectStubless+0xf 0d 00fbffb4 7c57438b COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118 0e 00fbffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: 7f8 Kernel Time: 0:0:0.31 User Time: 0:0:0.93 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00bffee0 7c573a4e ntdll!NtDelayExecution+0xb 01 00bfff00 7c573a22 KERNEL32!SleepEx+0x32 02 00bfff0c 787d12aa KERNEL32!Sleep+0xb 03 00bfff7c 780085bc COMSVCS!PostData+0xf2 04 00bfff88 77ab779b MSVCRT!_endthreadex+0xc1 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d Thread ID: 6 System Thread ID: c48 Kernel Time: 0:0:0.78 User Time: 0:0:0.93 Thread Type: Other # ChildEBP RetAddr 00 00ffff9c 77f842c4 ntdll!NtDelayExecution+0xb 01 00ffffb4 7c57438b ntdll!RtlpTimerThread+0x42 02 00ffffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 7 System Thread ID: 5f8 Kernel Time: 0:1:29.562 User Time: 0:6:58.250 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0104fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0104fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0104fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0104fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0104ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0104ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 8 System Thread ID: 7f4 Kernel Time: 0:1:29.796 User Time: 0:6:57.109 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0108fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0108fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0108fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0108fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0108ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0108ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: af8 Kernel Time: 0:1:27.984 User Time: 0:6:56.515 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 010cfe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 010cfe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 010cfed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 010cfef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 010cff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 010cffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 010cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: 4f0 Kernel Time: 0:0:4.765 User Time: 0:0:3.671 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0110fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0110fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0110fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0110fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0110ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0110ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: 468 Kernel Time: 0:1:28.468 User Time: 0:6:59.968 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0114fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0114fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0114fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0114fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0114ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0114ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: afc Kernel Time: 0:1:28.656 User Time: 0:7:3.484 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 011cfe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 011cfe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 011cfed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 011cfef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 011cff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 011cffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 011cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: 9c0 Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01d6ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb 01 01d6ffb4 7c57438b ntdll!RtlpWorkerThread+0x6b 02 01d6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: f80 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 02edfd20 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 02edfd70 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea 02 02edfd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17 03 02edffb4 7c57438b RTUTILS!TraceServerThread+0xde 04 02edffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 15 System Thread ID: cfc Kernel Time: 0:0:15.203 User Time: 0:1:11.406 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 024efe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 024efe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 024efed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 024efef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 024eff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 024effb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 024effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 16 System Thread ID: 12c0 Kernel Time: 0:0:3.843 User Time: 0:0:12.968 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 025afe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 025afe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 025afed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 025afef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 025aff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 025affb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 025affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: 12d0 Kernel Time: 0:0:3.625 User Time: 0:0:17.656 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0377fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0377fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0377fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0377fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0377ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0377ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0377ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: 10f4 Kernel Time: 0:0:0.687 User Time: 0:0:2.140 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0118ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0118ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0118ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0118ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 19 System Thread ID: 1264 Kernel Time: 0:0:0.468 User Time: 0:0:1.281 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00b6ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00b6ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00b6ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00b6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 20 System Thread ID: 854 Kernel Time: 0:0:0.296 User Time: 0:0:1.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0224ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0224ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0224ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0224ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 21 System Thread ID: 12e8 Kernel Time: 0:0:0.234 User Time: 0:0:0.421 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00cfff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00cfffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00cfffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00cfffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 22 System Thread ID: d30 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 021cff5c 7c573a4e ntdll!NtDelayExecution+0xb 01 021cff7c 7c573a22 KERNEL32!SleepEx+0x32 02 021cff88 77ab8ffb KERNEL32!Sleep+0xb 03 021cff90 77ab50ee ole32!CROIDTable::WorkerThreadLoop+0xc 04 021cffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22 05 021cffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 021cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 23 System Thread ID: 1458 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00d8ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00d8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00d8ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00d8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 24 System Thread ID: 1460 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00dcff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00dcffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00dcffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00dcffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 25 System Thread ID: 1464 Kernel Time: 0:0:0.250 User Time: 0:0:0.546 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0120ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0120ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0120ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 26 System Thread ID: 146c Kernel Time: 0:0:0.515 User Time: 0:0:2.671 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0124fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0124fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0124fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0124fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0124ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0124ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0124ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 27 System Thread ID: 1470 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0220ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0220ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0220ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0220ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: 1478 Kernel Time: 0:0:0.171 User Time: 0:0:0.578 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0228fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0228ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0228ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0228ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 04 0228ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 0228ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 29 System Thread ID: 147c Kernel Time: 0:0:0.593 User Time: 0:0:2.453 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0230fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0230fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0230fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0230fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0230ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0230ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0230ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 30 System Thread ID: 1480 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0246ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0246ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0246ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0246ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 31 System Thread ID: 1484 Kernel Time: 0:0:0.140 User Time: 0:0:0.328 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 024afe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 024aff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 024aff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 03 024affa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 04 024affb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 024affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 32 System Thread ID: 1488 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0252ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0252ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0252ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0252ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 33 System Thread ID: 148c Kernel Time: 0:0:0.15 User Time: 0:0:0.171 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0256ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0256ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0256ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0256ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 34 System Thread ID: 1494 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0347ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0347ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0347ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0347ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 35 System Thread ID: 1498 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 034bff74 77d359a3 ntdll!NtDelayExecution+0xb 01 034bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 034bffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 034bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 36 System Thread ID: 14a0 Kernel Time: 0:0:0.15 User Time: 0:0:0.109 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 034fff74 77d359a3 ntdll!NtDelayExecution+0xb 01 034fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 034fffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 034fffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 37 System Thread ID: 14a4 Kernel Time: 0:0:0.171 User Time: 0:0:0.421 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. DCOM call being made to Process ID: 2664 Waiting on thread id: 14a8 # ChildEBP RetAddr 00 0353f1e0 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0353f208 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0353f218 77ab3b27 KERNEL32!WaitForSingleObject+0xf 03 0353f234 77b259f6 ole32!GetToSTA+0x6c 04 0353f250 77b22ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0xf3 05 0353f290 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 0353f2a0 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11 07 0353f300 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9 08 0353f358 77d94c1a ole32!CCtxComChnl::SendReceive+0x124 09 0353f374 77d9487d RPCRT4!NdrProxySendReceive+0x4c 0a 0353f5bc 77d95136 RPCRT4!NdrClientCall2+0x4f5 0b 0353f5d8 77d46e75 RPCRT4!ObjectStublessClient+0x76 0c 0353f5e8 77ac00e2 RPCRT4!ObjectStubless+0xf 0d 0353f608 77ac0038 ole32!CProcessActivator::CCICallback+0x6b 0e 0353f628 77abff47 ole32!CProcessActivator::AttemptActivation+0x2a 0f 0353f66c 77abfef8 ole32!CProcessActivator::ActivateByContext+0x4a 10 0353f694 77b0fa4d ole32!CProcessActivator::CreateInstance+0x32 11 0353f6b0 787c1a48 ole32!ActivationPropertiesIn::DelegateCreateInstance+0x4a 12 0353f71c 77b0fa4d COMSVCS!CSTAPoolActivator::CreateInstance+0x5ea 13 0353f738 787ab318 ole32!ActivationPropertiesIn::DelegateCreateInstance+0x4a 14 0353f780 77b0fa4d COMSVCS!CStdContextActivator::CreateInstance+0x258 15 0353f79c 77aaa90b ole32!ActivationPropertiesIn::DelegateCreateInstance+0x4a 16 0353f7c4 77d32355 ole32!CSurrogateProcessActivator::CreateInstance+0x9e 17 0353f7e8 77d9356d RPCRT4!Invoke+0x30 18 0353fa54 77d93a2c RPCRT4!NdrStubCall2+0x664 19 0353fab8 77b24584 RPCRT4!CStdStubBuffer_Invoke+0xc8 1a 0353fafc 77b2485f ole32!SyncStubInvoke+0x61 1b 0353fb44 77ab7881 ole32!StubInvoke+0xa8 1c 0353fba8 77aa9c8f ole32!CCtxComChnl::ContextInvoke+0xbb 1d 0353fbc4 77b24469 ole32!MTAInvoke+0x18 1e 0353fbf4 77b24bab ole32!AppInvoke+0xb5 1f 0353fcb4 77b22360 ole32!ComInvokeWithLockAndIPID+0x2b5 20 0353fcf4 77d321e0 ole32!ThreadInvoke+0x1b7 21 0353fd2c 77d320fe RPCRT4!DispatchToStubInC+0x32 22 0353fd84 77d32021 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x100 23 0353fda4 77d389cc RPCRT4!RPC_INTERFACE::DispatchToStub+0x5e 24 0353fdd4 77d37526 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xa9 25 0353fe10 77d37030 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x1cd 26 0353fe28 77d37c1d RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x10c 27 0353ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x229 28 0353ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 29 0353ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 2a 0353ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 2b 0353ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 38 System Thread ID: 14a8 Kernel Time: 0:0:0.531 User Time: 0:0:2.421 Other information: Thread is waiting for a lock to be released. Looking for lock owner. The owning thread is 0. This usually indicates that the lock has either been leaked or is in a 'convoy' state Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0357f380 77a65577 ntdll!RtlEnterCriticalSection+0xf 01 0357f3a4 77ab3678 ole32!COleStaticMutexSem::Request+0x34 02 0357f3cc 77a9bb80 ole32!StdMarshalObject+0x44 03 0357f414 7884fe57 ole32!CDestObjectWrapper::MarshalInterface+0x140 04 0357f440 77a6a827 COMSVCS!CCtxtCntrlMarshal::MarshalInterface+0x67 05 0357f478 77b11334 ole32!CoMarshalInterface+0x81 06 0357f4e4 77b0e2bc ole32!ActivationPropertiesOut::OutSerializer::GetSize+0x121 07 0357f51c 77b0e1a2 ole32!ActivationProperties::GetSize+0x9c 08 0357f59c 77a9bae3 ole32!ActivationProperties::GetMarshalSizeMax+0x9d 09 0357f5e4 7884fe57 ole32!CDestObjectWrapper::MarshalInterface+0xa3 0a 0357f610 77a6a827 COMSVCS!CCtxtCntrlMarshal::MarshalInterface+0x67 0b 0357f648 77ac0469 ole32!CoMarshalInterface+0x81 0c 0357f674 77aa1f39 ole32!DoServerContextCCI+0x3b 0d 0357f6b8 77aa1d5d ole32!EnterForCallback+0x6a 0e 0357f7e4 77aa1c1c ole32!SwitchForCallback+0x12f 0f 0357f80c 77aa672a ole32!PerformCallback+0x50 10 0357f878 77aa6583 ole32!CObjectContext::InternalContextCallback+0x10d 11 0357f898 77ac0358 ole32!CObjectContext::DoCallback+0x1a 12 0357f8c4 77ac0534 ole32!CApartmentActivator::ContextCallHelper+0x4c 13 0357f8f0 77d32355 ole32!CApartmentActivator::CreateInstance+0x53 14 0357f914 77d9356d RPCRT4!Invoke+0x30 15 0357fb80 77d93a2c RPCRT4!NdrStubCall2+0x664 16 0357fbe4 77b24584 RPCRT4!CStdStubBuffer_Invoke+0xc8 17 0357fc28 77b2485f ole32!SyncStubInvoke+0x61 18 0357fc70 77ab7881 ole32!StubInvoke+0xa8 19 0357fcd4 77aa9c8f ole32!CCtxComChnl::ContextInvoke+0xbb 1a 0357fcf0 77aa9af9 ole32!MTAInvoke+0x18 1b 0357fd20 77b2443c ole32!STAInvoke+0x56 1c 0357fd54 77b24bab ole32!AppInvoke+0x88 1d 0357fe14 77b248d7 ole32!ComInvokeWithLockAndIPID+0x2b5 1e 0357fe34 77ab3c3d ole32!ComInvoke+0x41 1f 0357fe44 77a6c301 ole32!ThreadDispatch+0x21 20 0357fe5c 77e11ef0 ole32!ThreadWndProc+0x101 21 0357fe7c 77e1204c USER32!UserCallWinProc+0x18 22 0357ff08 77e121af USER32!DispatchMessageWorker+0x2e4 23 0357ff14 787c3075 USER32!DispatchMessageW+0xb 24 0357ff24 787c2c01 COMSVCS!STAMessageWork::DoWork+0x15 25 0357ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x423 26 0357ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 39 System Thread ID: 14b0 Kernel Time: 0:0:0.250 User Time: 0:0:0.468 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 035bfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 035bff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 035bff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 03 035bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 04 035bffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 035bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 40 System Thread ID: 93c Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 035fff74 77d359a3 ntdll!NtDelayExecution+0xb 01 035fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 035fffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 035fffec 00000000 KERNEL32!BaseThreadStart+0x52 ***** Dump name is formatted as: PID-Timestamp.dmp Creating D:\tools\installed\iisstate\output\2664-1086262624.dmp - mini user dump ***** Closing open log file D:\tools\installed\iisstate\output\IISState-2664.log ############################################################################ ############################################################################ ############################################################################ DLLHOST LOG: ############################################################################ Opened log file 'D:\tools\installed\iisstate\output\IISState-2664.log' *********************** Starting new log output IISState version 3.3.1 Thu Jun 03 13:36:07 2004 OS = Windows 2000 Executable: dllhost.exe PID = 2664 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: ad0 Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006fd28 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0006fd50 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0006fd60 77aaa701 KERNEL32!WaitForSingleObject+0xf 03 0006fd80 77aa9f0f ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169 05 0006ff24 010014c6 dllhost!WinMain+0xb0 06 0006ffc0 7c581af6 dllhost!WinMainCRTStartup+0x156 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: a64 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00baff30 77abbad5 USER32!NtUserGetMessage+0xb 01 00baff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40 02 00baff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2 03 00baff90 77ab50ee ole32!DLLHostThreadEntry+0x9 04 00baffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22 05 00baffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 00baffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 2 System Thread ID: a48 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00d3fc54 7c573c73 ntdll!ZwRemoveIoCompletion+0xb 01 00d3fc80 00c0b9d0 KERNEL32!GetQueuedCompletionStatus+0x27 02 00d3fd94 00c0b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0 03 00d3ffb4 7c57438b TxfAux!WORK_QUEUE::ThreadLoop+0x58 04 00d3ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: a78 Kernel Time: 0:0:0.62 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00f7ff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 00f7ff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea 02 00f7ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17 03 00f7ffb4 7c57438b COMSVCS!CEventDispatcher::PushEvents+0x4e 04 00f7ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: 398 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. Remote call is either to a MTA object or object not initialized. Also, possible utility thread. DCOM call being made to Process ID: 2056 Waiting on thread id: ffffffff # ChildEBP RetAddr 00 00fbfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb 01 00fbfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e 02 00fbfba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c 03 00fbfbc0 77b25a52 ole32!ThreadSendReceive+0xef 04 00fbfbd8 77b22ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f 05 00fbfc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 00fbfc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11 07 00fbfc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9 08 00fbfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124 09 00fbfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c 0a 00fbff44 77d95136 RPCRT4!NdrClientCall2+0x4f5 0b 00fbff60 77d46e75 RPCRT4!ObjectStublessClient+0x76 0c 00fbff70 787f5818 RPCRT4!ObjectStubless+0xf 0d 00fbffb4 7c57438b COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118 0e 00fbffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: 7f8 Kernel Time: 0:0:0.31 User Time: 0:0:0.93 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 00bffee0 7c573a4e ntdll!NtDelayExecution+0xb 01 00bfff00 7c573a22 KERNEL32!SleepEx+0x32 02 00bfff0c 787d12aa KERNEL32!Sleep+0xb 03 00bfff7c 780085bc COMSVCS!PostData+0xf2 04 00bfff88 77ab779b MSVCRT!_endthreadex+0xc1 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d Thread ID: 6 System Thread ID: c48 Kernel Time: 0:0:0.78 User Time: 0:0:0.93 Thread Type: Other # ChildEBP RetAddr 00 00ffff9c 77f842c4 ntdll!NtDelayExecution+0xb 01 00ffffb4 7c57438b ntdll!RtlpTimerThread+0x42 02 00ffffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 7 System Thread ID: 5f8 Kernel Time: 0:1:29.562 User Time: 0:6:58.250 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0104fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0104fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0104fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0104fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0104ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0104ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 8 System Thread ID: 7f4 Kernel Time: 0:1:29.796 User Time: 0:6:57.109 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0108fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0108fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0108fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0108fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0108ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0108ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: af8 Kernel Time: 0:1:27.984 User Time: 0:6:56.515 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 010cfe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 010cfe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 010cfed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 010cfef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 010cff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 010cffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 010cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: 4f0 Kernel Time: 0:0:4.765 User Time: 0:0:3.671 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0110fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0110fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0110fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0110fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0110ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0110ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: 468 Kernel Time: 0:1:28.468 User Time: 0:6:59.968 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0114fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0114fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0114fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0114fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0114ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0114ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: afc Kernel Time: 0:1:28.656 User Time: 0:7:3.484 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 011cfe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 011cfe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 011cfed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 011cfef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 011cff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 011cffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 011cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: 9c0 Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01d6ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb 01 01d6ffb4 7c57438b ntdll!RtlpWorkerThread+0x6b 02 01d6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: f80 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 02edfd20 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 02edfd70 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea 02 02edfd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17 03 02edffb4 7c57438b RTUTILS!TraceServerThread+0xde 04 02edffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 15 System Thread ID: cfc Kernel Time: 0:0:15.203 User Time: 0:1:11.406 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 024efe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 024efe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 024efed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 024efef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 024eff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 024effb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 024effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 16 System Thread ID: 12c0 Kernel Time: 0:0:3.843 User Time: 0:0:12.968 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 025afe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 025afe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 025afed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 025afef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 025aff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 025affb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 025affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: 12d0 Kernel Time: 0:0:3.625 User Time: 0:0:17.656 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0377fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0377fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0377fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0377fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0377ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0377ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0377ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: 10f4 Kernel Time: 0:0:0.687 User Time: 0:0:2.140 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0118ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0118ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0118ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0118ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 19 System Thread ID: 1264 Kernel Time: 0:0:0.468 User Time: 0:0:1.281 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00b6ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00b6ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00b6ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00b6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 20 System Thread ID: 854 Kernel Time: 0:0:0.296 User Time: 0:0:1.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0224ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0224ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0224ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0224ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 21 System Thread ID: 12e8 Kernel Time: 0:0:0.234 User Time: 0:0:0.421 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00cfff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00cfffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00cfffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00cfffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 22 System Thread ID: d30 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 021cff5c 7c573a4e ntdll!NtDelayExecution+0xb 01 021cff7c 7c573a22 KERNEL32!SleepEx+0x32 02 021cff88 77ab8ffb KERNEL32!Sleep+0xb 03 021cff90 77ab50ee ole32!CROIDTable::WorkerThreadLoop+0xc 04 021cffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22 05 021cffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a 06 021cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 23 System Thread ID: 1458 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00d8ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00d8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00d8ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00d8ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 24 System Thread ID: 1460 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00dcff74 77d359a3 ntdll!NtDelayExecution+0xb 01 00dcffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 00dcffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 00dcffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 25 System Thread ID: 1464 Kernel Time: 0:0:0.250 User Time: 0:0:0.546 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0120ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0120ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0120ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 26 System Thread ID: 146c Kernel Time: 0:0:0.515 User Time: 0:0:2.671 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0124fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0124fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0124fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0124fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0124ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0124ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0124ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 27 System Thread ID: 1470 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0220ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0220ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0220ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0220ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: 1478 Kernel Time: 0:0:0.171 User Time: 0:0:0.578 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0228fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0228ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0228ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 03 0228ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 04 0228ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 0228ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 29 System Thread ID: 147c Kernel Time: 0:0:0.593 User Time: 0:0:2.453 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0230fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb 01 0230fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0230fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153 03 0230fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d 04 0230ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33 05 0230ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2 06 0230ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 30 System Thread ID: 1480 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0246ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0246ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0246ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0246ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 31 System Thread ID: 1484 Kernel Time: 0:0:0.140 User Time: 0:0:0.328 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 024afe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 024aff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 024aff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 03 024affa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 04 024affb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 024affec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 32 System Thread ID: 1488 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0252ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0252ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0252ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0252ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 33 System Thread ID: 148c Kernel Time: 0:0:0.15 User Time: 0:0:0.171 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0256ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0256ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0256ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0256ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 34 System Thread ID: 1494 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0347ff74 77d359a3 ntdll!NtDelayExecution+0xb 01 0347ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 0347ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 0347ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 35 System Thread ID: 1498 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 034bff74 77d359a3 ntdll!NtDelayExecution+0xb 01 034bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 034bffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 034bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 36 System Thread ID: 14a0 Kernel Time: 0:0:0.15 User Time: 0:0:0.109 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 034fff74 77d359a3 ntdll!NtDelayExecution+0xb 01 034fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 034fffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 034fffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 37 System Thread ID: 14a4 Kernel Time: 0:0:0.171 User Time: 0:0:0.421 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. DCOM call being made to Process ID: 2664 Waiting on thread id: 14a8 # ChildEBP RetAddr 00 0353f1e0 7c573b28 ntdll!ZwWaitForSingleObject+0xb 01 0353f208 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71 02 0353f218 77ab3b27 KERNEL32!WaitForSingleObject+0xf 03 0353f234 77b259f6 ole32!GetToSTA+0x6c 04 0353f250 77b22ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0xf3 05 0353f290 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96 06 0353f2a0 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11 07 0353f300 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9 08 0353f358 77d94c1a ole32!CCtxComChnl::SendReceive+0x124 09 0353f374 77d9487d RPCRT4!NdrProxySendReceive+0x4c 0a 0353f5bc 77d95136 RPCRT4!NdrClientCall2+0x4f5 0b 0353f5d8 77d46e75 RPCRT4!ObjectStublessClient+0x76 0c 0353f5e8 77ac00e2 RPCRT4!ObjectStubless+0xf 0d 0353f608 77ac0038 ole32!CProcessActivator::CCICallback+0x6b 0e 0353f628 77abff47 ole32!CProcessActivator::AttemptActivation+0x2a 0f 0353f66c 77abfef8 ole32!CProcessActivator::ActivateByContext+0x4a 10 0353f694 77b0fa4d ole32!CProcessActivator::CreateInstance+0x32 11 0353f6b0 787c1a48 ole32!ActivationPropertiesIn::DelegateCreateInstance+0x4a 12 0353f71c 77b0fa4d COMSVCS!CSTAPoolActivator::CreateInstance+0x5ea 13 0353f738 787ab318 ole32!ActivationPropertiesIn::DelegateCreateInstance+0x4a 14 0353f780 77b0fa4d COMSVCS!CStdContextActivator::CreateInstance+0x258 15 0353f79c 77aaa90b ole32!ActivationPropertiesIn::DelegateCreateInstance+0x4a 16 0353f7c4 77d32355 ole32!CSurrogateProcessActivator::CreateInstance+0x9e 17 0353f7e8 77d9356d RPCRT4!Invoke+0x30 18 0353fa54 77d93a2c RPCRT4!NdrStubCall2+0x664 19 0353fab8 77b24584 RPCRT4!CStdStubBuffer_Invoke+0xc8 1a 0353fafc 77b2485f ole32!SyncStubInvoke+0x61 1b 0353fb44 77ab7881 ole32!StubInvoke+0xa8 1c 0353fba8 77aa9c8f ole32!CCtxComChnl::ContextInvoke+0xbb 1d 0353fbc4 77b24469 ole32!MTAInvoke+0x18 1e 0353fbf4 77b24bab ole32!AppInvoke+0xb5 1f 0353fcb4 77b22360 ole32!ComInvokeWithLockAndIPID+0x2b5 20 0353fcf4 77d321e0 ole32!ThreadInvoke+0x1b7 21 0353fd2c 77d320fe RPCRT4!DispatchToStubInC+0x32 22 0353fd84 77d32021 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x100 23 0353fda4 77d389cc RPCRT4!RPC_INTERFACE::DispatchToStub+0x5e 24 0353fdd4 77d37526 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xa9 25 0353fe10 77d37030 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x1cd 26 0353fe28 77d37c1d RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x10c 27 0353ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x229 28 0353ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 29 0353ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 2a 0353ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 2b 0353ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 38 System Thread ID: 14a8 Kernel Time: 0:0:0.531 User Time: 0:0:2.421 Other information: Thread is waiting for a lock to be released. Looking for lock owner. The owning thread is 0. This usually indicates that the lock has either been leaked or is in a 'convoy' state Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0357f380 77a65577 ntdll!RtlEnterCriticalSection+0xf 01 0357f3a4 77ab3678 ole32!COleStaticMutexSem::Request+0x34 02 0357f3cc 77a9bb80 ole32!StdMarshalObject+0x44 03 0357f414 7884fe57 ole32!CDestObjectWrapper::MarshalInterface+0x140 04 0357f440 77a6a827 COMSVCS!CCtxtCntrlMarshal::MarshalInterface+0x67 05 0357f478 77b11334 ole32!CoMarshalInterface+0x81 06 0357f4e4 77b0e2bc ole32!ActivationPropertiesOut::OutSerializer::GetSize+0x121 07 0357f51c 77b0e1a2 ole32!ActivationProperties::GetSize+0x9c 08 0357f59c 77a9bae3 ole32!ActivationProperties::GetMarshalSizeMax+0x9d 09 0357f5e4 7884fe57 ole32!CDestObjectWrapper::MarshalInterface+0xa3 0a 0357f610 77a6a827 COMSVCS!CCtxtCntrlMarshal::MarshalInterface+0x67 0b 0357f648 77ac0469 ole32!CoMarshalInterface+0x81 0c 0357f674 77aa1f39 ole32!DoServerContextCCI+0x3b 0d 0357f6b8 77aa1d5d ole32!EnterForCallback+0x6a 0e 0357f7e4 77aa1c1c ole32!SwitchForCallback+0x12f 0f 0357f80c 77aa672a ole32!PerformCallback+0x50 10 0357f878 77aa6583 ole32!CObjectContext::InternalContextCallback+0x10d 11 0357f898 77ac0358 ole32!CObjectContext::DoCallback+0x1a 12 0357f8c4 77ac0534 ole32!CApartmentActivator::ContextCallHelper+0x4c 13 0357f8f0 77d32355 ole32!CApartmentActivator::CreateInstance+0x53 14 0357f914 77d9356d RPCRT4!Invoke+0x30 15 0357fb80 77d93a2c RPCRT4!NdrStubCall2+0x664 16 0357fbe4 77b24584 RPCRT4!CStdStubBuffer_Invoke+0xc8 17 0357fc28 77b2485f ole32!SyncStubInvoke+0x61 18 0357fc70 77ab7881 ole32!StubInvoke+0xa8 19 0357fcd4 77aa9c8f ole32!CCtxComChnl::ContextInvoke+0xbb 1a 0357fcf0 77aa9af9 ole32!MTAInvoke+0x18 1b 0357fd20 77b2443c ole32!STAInvoke+0x56 1c 0357fd54 77b24bab ole32!AppInvoke+0x88 1d 0357fe14 77b248d7 ole32!ComInvokeWithLockAndIPID+0x2b5 1e 0357fe34 77ab3c3d ole32!ComInvoke+0x41 1f 0357fe44 77a6c301 ole32!ThreadDispatch+0x21 20 0357fe5c 77e11ef0 ole32!ThreadWndProc+0x101 21 0357fe7c 77e1204c USER32!UserCallWinProc+0x18 22 0357ff08 77e121af USER32!DispatchMessageWorker+0x2e4 23 0357ff14 787c3075 USER32!DispatchMessageW+0xb 24 0357ff24 787c2c01 COMSVCS!STAMessageWork::DoWork+0x15 25 0357ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x423 26 0357ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 39 System Thread ID: 14b0 Kernel Time: 0:0:0.250 User Time: 0:0:0.468 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 035bfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb 01 035bff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 035bff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9 03 035bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f 04 035bffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 05 035bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 40 System Thread ID: 93c Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 035fff74 77d359a3 ntdll!NtDelayExecution+0xb 01 035fffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3 02 035fffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18 03 035fffec 00000000 KERNEL32!BaseThreadStart+0x52 ***** Dump name is formatted as: PID-Timestamp.dmp Creating D:\tools\installed\iisstate\output\2664-1086262624.dmp - mini user dump ***** Closing open log file D:\tools\installed\iisstate\output\IISState-2664.log ############################################################################## ############################################################################## Greatly appreciating any help. Derek Tag: IIS 5.0 REDIRECTING url Tag: 335596
  - 2
    - IIS ODBC logging with extended stored procedure on a trigger Hello, I passed several days with this problem, may be someone already tryed something like this. What I want to do is to log data from an IIS using ODBC logging but in a diferent way, I mean to a different table structure, so my idea is to create the standard table that IIS needs to log and insert an instead of trigger that collect and transform some of the columns of the standard table and insert the processed results to my new table. I'm using SQL Server 2000. Up to here this worked perfectly, I was able to use the instead of trigger functionality and insert to my table with no problems. The problem comes when I try to use an extended stored procedure called from the trigger, this procedure is responsible to do the transformation IP to country code, it works very nice outside the trigger. To sumarize, the weird thing is the following : On the trigger code, if I comment the line that calls to the extended sotored procedure, all works ok. But whenever I try to call it, it seems that the trigger aborts the execution, and nothing is inserted to my table. Also IIS raise this error on event logs : "IIS ODBC Logging failed to log data to data source WEBSTATS. For additional information specific to this message please visit the Microsoft Online Support site located at: http://www.microsoft.com/contentredirect.asp" All the permissions on tables and the extended stored procedure are the more relaxed as I can configure... If someone can give me some advice, I would really apresiate it ! Thanks ! Tag: IIS 5.0 REDIRECTING url Tag: 335590
  - 3
    - inetinfo hi, im running IIs5 on a W2k server sp4 for WEB outlook only all updates and upgrades are done but still the inetinfo process is at 100% even after a reboot my server is very slow because of that any reason why it is at 100% all the time ?? thanks Tag: IIS 5.0 REDIRECTING url Tag: 335589
  - 4
    - set ScriptTimeout All, I would like change the ScriptTimeout from 90 seconds to 100 seconds which will be effetive for my website on the IIS (i.e. on all the folders and subfolders for my website). I am aware that this limit can be set on the individual ASP page viz. Server.ScriptTimeout = 100. I do not want to take this route as it would mean code change and regression testing. I have also seen references to change the ASPScriptTimeout value from IIS Configuration. I don't know how does this translate into the default Server.ScriptTimeout of 90 seconds. My question is: Where is this 90 seconds value stored and how can this be changed WITHOUT changing any ASP code? Pl note that the IIS hosts few other websites and I would like to change this only for my website (IFFFF possible). Thanx in advance! -j- Tag: IIS 5.0 REDIRECTING url Tag: 335557
  - 5
    - IISSTATE and ASP.dll symbol Hallo, I want to track which one ASP/ASP.NET page is pumping the w3wp.exe to use more than 95% of the CPU... When I read the dump file I come to a line which saids: ------------------ Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis... ------------------ so in the iisstate\symbols\ folder/subfolders is no ASP.dll file. What should I do in order to track the page which causes the hangout? Thank you in advance! Nikoi ;) *** Sent via Devdex http://www.devdex.com *** Don't just participate in USENET...get rewarded for it! Tag: IIS 5.0 REDIRECTING url Tag: 335554
  - 6
    - IIS Won't Let Me Browse My Own Web Sites! This has to be a classic blooper. I get 403 - Forbidden when I try to access my webs either from within the IIS manager or from a local browser. I have admin privilege. Jeb. Tag: IIS 5.0 REDIRECTING url Tag: 335541
  - 7
    - Code Red Worm Is there any option to recover from the Code Red infection other than to re-install the entire system. The virus has infected our web server. IIS keeps shutting down. Tag: IIS 5.0 REDIRECTING url Tag: 335538
  - 8
    - How to Ok guys ... I have NT4 running IIS4 hosting 10 websites and planning a upgrade this week to Win2000. I have a seperate PC installed with Win2000 Server and IIS on it. My question is how do I move all the IIS metabase from NT4 - IIS to th new Win2000 - IIS Server? Do I have to create the all the stuff again? I know there is a backup file for the IIS metabase but I have learn that will not be used for restore on a different server. Please advice what will be the safest and easit approach to acquir this - pand ----------------------------------------------------------------------- Posted via http://www.webservertalk.co ----------------------------------------------------------------------- View this thread: http://www.webservertalk.com/message249533.htm Tag: IIS 5.0 REDIRECTING url Tag: 335536
  - 9
    - sql database access from windows 2003 webedition We have a web server that is set up in the DMZ of our firewall. It of course is on a seperate subnet from the internal SQL server. Our network is Windows 2000 with active directory. The web server is windows 2003 web edition. We are having trouble getting the ASP.net web application to authenticate or establish it's connection string to the SQL server and associated databases. We had it working when the server was setup temporarily on a XP desk top with IIS.(it was a little inconsistent)Now that it is installed on a 2003 web edition server, it will not establish a connection to the database.Nic settings the same as working XP setup. Firewall settings the same. Maybe 2003 has different default setting or will not handle SQL the same. Webserver is correct in DNS and WINS. Does anyone know how to resolve this issue? Tag: IIS 5.0 REDIRECTING url Tag: 335535
  - 10
    - IIS 6.0 caching I have an IIS 6.0 machine with Windows Server2003. We are making changes constantly to the website and they are not automatically updating, previously it was updating properly without having to restart IIS on the old server. I turned off that ISAPI Caching in the configuration. Well now if they delete something it doesn't go away either Tag: IIS 5.0 REDIRECTING url Tag: 335534
  - 11
    - iisstate log inspect: help needed. (100% CPU utilization spikes) Halo. I'm having a problem with one of two processes that is heavily utilizing a server of mine's (dual) cpu's. The memory usage is normal. The cpu spikes are not constant, but it occurs every couple of seconds. There are two processes from which I cannot pinpoint the culprit since both of them it looks are keeping the cpu very busy. (DLLHOST & INETINFO) I've run the iisstate tool on both processes and posted the results here: http://chenome.homelinux.org Greatly appreciating any help. Derek Tag: IIS 5.0 REDIRECTING url Tag: 335532
  - 12
    - HTTP Error 500-12 Application Restarting I have a website (win2k server, iis5) that is experiencing the 'HTTP Error 500-12 Application Restarting' problem. According the microsoft, virus scanner can be causing this. (Microsoft Knowledge Base Article - 248013). We do have a global.asa file. We have excluded global.asa from the virus scan, but it hasn't fixed the problem. The twist in our case is that the content for the website is not located on the webserver itself, but on a share located on another computer (the Home Directory tab, share located on another computer radio button). We have turned off virus scanning both on the webserver and the other computer which hosts the content with no result. As a test, I moved all the content local to the webserver and changed the Home Directory properties, and immediately the problem went away. So, it appears having global.asa hosted on a another machine is causing IIS to think it is being changed every few minutes, and IIS is restarting the application. But, we really need to keep the content on another host, since we will have multiple webservers accessing the same content files. Does anyone know why this is, or how to fix it? Is there a way to have global.asa local but all other content remote? TIA... Tag: IIS 5.0 REDIRECTING url Tag: 335529
  - 13
    - There are too many people accessing the Web site at this time - with only one user - and HTTP keep-alives = false Hello I'm writing a web user interface for a process control system. It has different pages displaying charts and numerical data that is continuously being updated. The updating of chart images (typically four images per page) is done by javascripts that sets the images' "src" property over and over again at intervals of about 5 seconds. On the server side there is a FAST active-x control that draws the charts and sends them as gif images. When the user "stresses" the app by changing pages rapidly, the app stops with the following error message "There are too many people accessing the Web site at this time This happens even though there's only ONE user. And the web server is a brand new fast PC with lots of RAM, running Windows 2000 Professional. The applications calculating/supplying the data are located on other PC's in the LAN, and is not the bottle neck A similar question has newly been posted by someone else, and the solution was to disable "HTTP keep-alives". However, that doesn't help in my case If you have an idea of how to solve this problem: Please respond By the way, I'm also interested to know why there's such long response time on HTTP requests from web servers in general, even when referring to "localhost" or a host in the LAN Thanks ;o Geir Tag: IIS 5.0 REDIRECTING url Tag: 335528
  - 14
    - Pages not being updated in IIS 5.0 I upgraded machine using Windows 2000 Professional to Windows 2000 Advanced Server (clean install of course) that is used as a web server. Since the upgrade I have asp code on my server that no longer works and none of the code changes I make to the web site are reflected in the browser. I went into the web site in IIS 5.0 and under HTTP headers I set the web site content to expire immediately and I even have no caching code on a few pages but still none of the changes I have made are visible to the web browser. I even cleared the temporary files in IE but still the old site comes up. The code changes I make to the web pages (those with a .asp extension and those with a .htm extension) do not seem to take any effect when the page is viewed in a web browser. I am at a loss! Tag: IIS 5.0 REDIRECTING url Tag: 335518
  - 15
    - iis 4.0 service stop i have an NT 4.0 server with IIS 4.0 running on it. once a week the world wide web publishing service stops for no apparent reason. i have checked the event viewer and there are no errors reported. any one know how to fix this issue thank joe Tag: IIS 5.0 REDIRECTING url Tag: 335515
  - 16
    - Examples of ISS and IFilter Does anyone know of any good examples of syntax used for indexing and searching pdf files. Platform is Win2k, IIS5. I have installed IFilter on the server and the dll appears in the registry. Bit lost with what to do next Any help would be appreciated. Tag: IIS 5.0 REDIRECTING url Tag: 335507
  - 17
    - The requested resource is in use Dear sir, I met this problem for too many times already. I am running IIS under my xp laptop, I often met an error of "The requested resource is in use". Does anyone has an idea how can I fix this? -- Kind regards Guoqi Zheng guoqi AT meetholland dot com Http://www.meetholland.com Tag: IIS 5.0 REDIRECTING url Tag: 335505
  - 18
    - Integrated Windows authentication and launching executables Hi, I have a problem which I can't find a solution to. Basically, I want to be able to launch exes from an ASP script which will run with the LOGON_USER's rights. The problem is that all I seem to be able to do is get their domain/username. Is there any way I can get a security token to enable me to run a process? I know there maybe lots of security implications but I need to be able to do this. Otherwise, I'm am going to have to fetch the person's logon password ... which I'd rather not do. Any help would be very much appreciated. Cheers Mike Tag: IIS 5.0 REDIRECTING url Tag: 335504
  - 19
    - IIS 6 - changes to metabase have no effect Dear all, we have setup a test system and a production environment with Windows 2003 Server and IIS6. For being able to use the ASPSmartUpload for files larger than 200kB, it is necessary to change the metabase.xml and add the line: AspMaxRequestEntityAllowed="1073741824" to the LM/W3SVC node Referring to the following pages, this should work: http://www.microsoft.com/resources/documentation/iis/6/all/proddocs/en-us/ref_mb_aspmaxrequestentityallowed.mspx and http://www.aspsmart.com/scripts/aspSmartUpload/publigen/content/templates/show.asp?P=267&L=EN So, on the testmachine in the IIS Manager, we turned on "allow changes to MetaBase configuration while IIS is running", made the changes to metabase.xml, saved the file and everything worked fine. So far, so good. On the production system, however, we did the same and the configuration is not accepted. We do not get an entry in EventViewer, no error message, nothing. It just does not work. When we uncheck the option "allow changes to MetaBase configuration while IIS is running", the old metabase from memory or the history is written back to the harddisk, without the changes just made. We also tried to shut down the Webservices, made the changes to the metabase.xml, but when we started the webservice again, the file was overwritten with the default values again. There seems to be no way to edit the metabase.xml and get it into the memory. We looked in the Microsoft knowledge base, we read the Chapter 4 from IIS 6 Resource Kit "Working with the Metabase" and all what we can get out of all of this lecture is that it _should_ work the way we tried it. Do you guys have any hints on that? Thanks, -Gernot Tag: IIS 5.0 REDIRECTING url Tag: 335493
  - 20
    - Licensing Hi can anybody tell me which licenses and how much it would cost to do the followin Run windows 2003 with iis6 web server running mysql+php for unlimited connections Tag: IIS 5.0 REDIRECTING url Tag: 335484
  - 21
    - IIS6.0 and window2003 I get an error when I run asp.net web page in the IIS6.0, I make a page that execute a lot of work. The client browse will show a message to tell us, current page couldn't be shown, when it execute more than 3 minutes. Tag: IIS 5.0 REDIRECTING url Tag: 335469
  - 22
    - WebDav Server with ASP.NET IHttpHander, IIS 6.0 I want to create a custom webdav server by implementing IHttpHandler in my own class and firing it via IIS 6.0 Wildcard Application Maps. I have written my HttpHandler class implementing IHttpHandler. In the ProcessRequest method, I simply write a line to the Application Event Log stating what verb was requested. It doesn't work with a wildcard application map and a WebDav request. If I configure an extension specific map (.test for example) and launch a GET request from a browser, the handler fires as expected and records the event to the Event Log. If I remove all extension specific maps and configure a Wildcard Application Map and launch a GET request from a browser, it works correctly. HOWEVER, when I try to map a drive to the virtual directory (with the mini-redirector in XP) I am prompted for username and password. No accounts even with administrator level access will satisfy the prompt. I always receive Error 5 (access denied) A few other details: WebDav is enabled as a Web Service Extension in IIS 6 configuration. I've tried creating an application pool with administrator level identity. NTFS file permissions for the content directory are set to Everyone - Full Control. Write and Directory Browsing are checked on the application folder. I have configured my application in both the web server root and in a virtual directory. Tag: IIS 5.0 REDIRECTING url Tag: 335468
  - 23
    - Own Server Certificate expired Hi! Maybe someone here can help me, I'm very new at this... We issued our own server certificate to be use for OWA and now the certificate has expired. How do we renew it or should we re-issue and re-install a new one? I thought that I could just go into the Certificate Authority application to make the change but the certificate isn't listed! We used SSL Diagnotics to help us troubleshoot the certificate and it looks like it has recreate the certificate... Thank you in advance for your help. Ninon Tag: IIS 5.0 REDIRECTING url Tag: 335466
  - 24
    - Mapping to SSINC.DLL All, This is one of those nights where you just "can't get there from here". I am trying to add mappings for .html and .htm files to SSINC.DLL. The instructions from Microsoft are simple enough: In IIS Admin ... Right-Click on Virtual Directory/Properties/Configuration/AppMappings. When I go to add a new mapping the instructions say: 4. In the EXECUTABLE field browse to SSINC.DLL then click open. So far so good. 5. In the Extension field, type .html, and then click OK. 5 goes good until the "click OK" part. OK is greyed out. I have tried changing security settings out the ying-yang and can't get that OK button active - it won't let me add the mappings. Is there some other setting somewhere that I need to allow me to do this? I just installed PHP and it happily added it's mappings but I can't do it through the GUI. Anybody know what I'm doing wrong? Thanks, -bruce Tag: IIS 5.0 REDIRECTING url Tag: 335465
  - 25
    - IIS6 bug or config error I am currently working on a IIS assessment project. The problem I have now is that: The same ISAPI filter code works fine in IIS5/Win2k webserver. It does not work on IIS6/Win2k3. I am not using Read_Raw_Data at all. Does anyone have suggestions? Here is the setup: Client has ISAPI code in VC6 and it redirect request to Login.asp if there is no cookie. It works fine in IIS5/Win2k server. They got a new Win2k3 server with IIS 6, code was copied over to the new box. But the same redirect code dose not work anymore. The IE window will just hung. The log file is as follows: 172.30.1.219(0x3c16)MyWriteClientString 172.30.1.219(0x7e2e)OnEndOfRequest 172.30.1.219(0x7e2e)OnEndOfRequestRedirecting to access denied page. 172.30.1.219(0x7e2e)OnEndOfRequest 172.30.1.219(0x7e2e)OnEndOfRequestRedirecting to access denied page. 172.30.1.219(0x7e2e)MyWriteClientString 172.30.1.219(0x7e2e)MyWriteClientStringWriteClient 172.30.1.219(0x7e2e)MyWriteClientString 172.30.1.219(0x7e2e)MyWriteClientStringOutputToClient = HTTP/1.1 302 Object Moved Location: /logon/helperror.htm . My debug tells me that pfc->WriteClient(pfc, szOutput, &dwBuffSize, 0)) is called. Return code is true, which is good. But the content does not output to the client. So the client IE will time out. ------------------------------------------------- Code of redirect is as follows: ////////////////////////////////////////////////////////// //////////// // OnEndOfRequest // // If a redirect is required, we send the redirection response to // the client. // ////////////////////////////////////////////////////////// //////////// DWORD SSOFilter::OnEndOfRequest(HTTP_FILTER_CONTEXT *pfc) { CSSOFilterContext *pFC = static_cast< CSSOFilterContext * >(pfc->pFilterContext); if ( pFC ) { TRACE_INIT( m_pTracer, _T("%s(%#x) OnEndOfRequest"), LPSAFETSTR( pFC->m_strClientIP ), pFC- >m_nID ); TRACE( _T("\n") ); if ( pFC->m_bAccessDeniedRedirect ) { TRACE( _T("Redirecting to access denied page.\n") ); pFC->m_bAccessDeniedRedirect = false; // don't want to do it more than once WriteClientString( pfc, _T("HTTP/1.1 302 Object Moved\r\nLocation: %s\r\n"), m_szAccessDeniedURL ); } else if ( pFC->m_bLoginURLRedirect ) { TRACE( _T("Redirecting to login page.\n") ); pFC->m_bLoginURLRedirect = false; // don't want to do it more than once MyWriteClientString( pfc, //this write is to redirect, but not working in IIS 6 _T("HTTP/1.1 302 Object Moved\r\nLocation: %s\r\nSet- Cookie: SSOTicket=; path=/;domain=%s\r\nSet-Cookie: SSOBounce=%s; path=/;\r\n"), m_szLoginURL,m_szDomain, LPSAFETSTR(pFC->m_strDestinationURL) ); } } return SF_STATUS_REQ_NEXT_NOTIFICATION; } ///////////// // output string to client ////// DWORD SSOFilter::MyWriteClientString( HTTP_FILTER_CONTEXT *pfc, LPSTR szString, ...) { CSSOFilterContext *pFC = static_cast< CSSOFilterContext * >(pfc->pFilterContext); if ( pFC ) { TRACE_INIT( m_pTracer, _T("%s(%#x) MyWriteClientString"), LPSAFETSTR( pFC->m_strClientIP ), pFC->m_nID ); TRACE( _T("\n") ); CHAR szOutput[1000]; DWORD dwBuffSize; bool retval = false; va_list args; va_start(args, szString); vsprintf(szOutput, szString, args); va_end(args); dwBuffSize = strlen(szOutput); if( pfc ) { //comparison to get rid of: warning C4800: 'int' : forcing value to bool 'true' or 'false' (performance warning) retval = (1 == pfc->WriteClient(pfc, szOutput, &dwBuffSize, 0)); TRACE( _T("OutputToClient = %s.\n"), szOutput); } return retval; } return 0; } Tag: IIS 5.0 REDIRECTING url Tag: 335461

Hi

am in process of transferring my site from java to aspx..
M using win2k/sp4/iis 5.0/with dot.net framework 1.1.

I want my old java url to redirected to the new url...
my java url is
https://www.abc.com/prod/servlet/ShareWeb?name=EBPLogin

to my new aspx url

https://www.abc.com/Global/EBP/Login.aspx

I have tried all the option in IIS seems not to be working.....
Any other way, like writing scripts etc.. then how to would be helpful

regds
RamP

Top

Re: IIS 5.0 REDIRECTING url by Tom

Tom
Fri Jun 04 09:04:25 CDT 2004

"Ramesh Pillai" <ramesh.pillai@infrasofttech.com> wrote in message
news:%23ZM9WejSEHA.2128@TK2MSFTNGP11.phx.gbl...
> Hi
>
> am in process of transferring my site from java to aspx..
> M using win2k/sp4/iis 5.0/with dot.net framework 1.1.
>
> I want my old java url to redirected to the new url...
> my java url is
> https://www.abc.com/prod/servlet/ShareWeb?name=EBPLogin
>
> to my new aspx url
>
> https://www.abc.com/Global/EBP/Login.aspx
>
> I have tried all the option in IIS seems not to be working.....
> Any other way, like writing scripts etc.. then how to would be helpful

Why not just map all requests for https://www.abc.com/prod/servlet/ to
https://www.abc.com/Global/EBP/Login.aspx?

In the IIS MMC, bring up the properties dialog for the /prod/servlet/ folder
and on the Directory folder select "A redirection to a URL" and redirect to
https://www.abc.com/Global/EBP/Login.aspx and select "The exact URL entered
above".

--
Tom Kaminski IIS MVP
http://www.iistoolshed.com/ - tools, scripts, and utilities for running IIS
http://mvp.support.microsoft.com/
http://www.microsoft.com/windowsserver2003/community/centers/iis/

>

Top

Re: IIS 5.0 REDIRECTING url by Yaroslav

Yaroslav
Fri Jun 04 13:29:27 CDT 2004
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Top