Search Link Problem

TheMSsForum.com: The Microsoft Software Forum

  • The MSS Forum ‹ IIS
    • Archive
      • Biz
      • MCSE
      • CRM
      • Drivers
      • Framework
      • ADO
      • ASP
      • Compact
      • Forms
      • Dotnet
      • C#
      • VB
      • FontpageGen
      • Excel
      • WorkSheet
      • Exchange
      • Setup
      • Fox
      • Fontpage
      • ASP
      • IIS
      • Entourage
      • Money
      • Messanger
      • PocketPC
      • Powerpoint
      • Project
      • Publisher
      • Excel
      • VB
      • Security
      • Portal
      • Services
      • SQLServerDev
      • SVCS
      • SQLServer
      • VB
      • VC
      • MFC
      • ExcelGen
    • Previous
      • 1
        • Invalid viewstate Hi, I have encountered a problem in our dev.test environment (W2003/ASP.NET 2.0). All of a sudden one of our asp.net web applications has seized to function. - We have not changed the code for this particular application for months - We have not re-configured the IIS or the OS in anyway for months All of a sudden every request in this application throws an exception stating that the Viewstate is invalid. - This is an isolated machine (i.e not a cluster) - No load is put on the machine so the processes should have to recycle frequently The application runs fine in other similiar envrionments (dev.stage, acceptance, production). My questions: Does anyone know if an Invalid Viewstate has been caused based upon the requesting clients UserAgent? Does anyone know if MS has released a security update or similiar that could cause this problem (the effected machine is the only one that recives auto updates..)? The machineKey is set to Autogenerate...ASPNET is running under Network_Service could that account update the registry hive?? Regards /Oscar Tag: Search Link Problem Tag: 387809
      • 2
        • IIS diagnostic Hi I'm running a .NET 2.0 Application on my 2003 Server and normally everything works fine, but sometimes the application starts working very wierd... objects stored in a shared hashtable seems to disappear. Is there a way (I'm sure there is) to figure out what IIS is doing, things like: Did it run out of memory Has a garbage collect just occured ... I'be been looking in the logfiles, but they seems to only log information about loaded pages..... Where should I look?? TIA Søren Tag: Search Link Problem Tag: 387806
      • 3
        • URLScan Rejecting .asmx Hello all, I've been having difficulties trying to expose my webservice. Each call to the page returns a 404 error. After reviewing the logs it appears as though URLScan is rejecting the requests because the "URL contains extension '.asmx', which is disallowed". I've checked my .ini file and it would appear as though I should be allowing them. Can someone please take a look at the following and see if I'm missing something rather trivial? Also, how do I go about disabling URLScan? I'd like to turn it off temporarily to see if that affects anything. Thanks, Frank PS I've changed the switch for UseAllowExtensions from 0 to 1 with no change. IIS Log: 2006-09-21 00:45:39 204.82.124.240 - 10.101.2.2 443 GET /<Rejected-By-UrlScan> ~/webservice/Service1.asmx/ 404 URLScan Log: [09-21-2006 - 11:45:39] Client at 204.82.124.240: URL contains extension '.asmx', which is disallowed. Request will be rejected. Site Instance='1', Raw URL='/webservices/Service1.asmx' urlscan.ini: [options] UseAllowVerbs=1 ; if 1, use [AllowVerbs] section, else use [DenyVerbs] section UseAllowExtensions=0 ; if 1, use [AllowExtensions] section, else use [DenyExtensions] section NormalizeUrlBeforeScan=1 ; if 1, canonicalize URL before processing VerifyNormalization=1 ; if 1, canonicalize URL twice and reject request if a change occurs AllowHighBitCharacters=0 ; if 1, allow high bit (ie. UTF8 or MBCS) characters in URL AllowDotInPath=1 ; if 1, allow dots that are not file extensions RemoveServerHeader=0 ; if 1, remove "Server" header from response EnableLogging=1 ; if 1, log UrlScan activity PerProcessLogging=0 ; if 1, the UrlScan.log filename will contain a PID (ie. UrlScan.123.log) AllowLateScanning=0 ; if 1, then UrlScan will load as a low priority filter. PerDayLogging=1 ; if 1, UrlScan will produce a new log each day with activity in the form UrlScan.010101.log RejectResponseUrl= ; UrlScan will send rejected requests to the URL specified here. Default is /<Rejected-by-UrlScan> UseFastPathReject=0 ; If 1, then UrlScan will not use the RejectResponseUrl or allow IIS to log the request ; If RemoveServerHeader is 0, then AlternateServerName can be ; used to specify a replacement for IIS's built in 'Server' header AlternateServerName= [AllowVerbs] ; ; The verbs (aka HTTP methods) listed here are those commonly ; processed by a typical IIS server. ; ; Note that these entries are effective if "UseAllowVerbs=1" ; is set in the [Options] section above. ; GET HEAD POST [DenyVerbs] ; ; The verbs (aka HTTP methods) listed here are used for publishing ; content to an IIS server via WebDAV. ; ; Note that these entries are effective if "UseAllowVerbs=0" ; is set in the [Options] section above. ; PROPFIND PROPPATCH MKCOL DELETE PUT COPY MOVE LOCK UNLOCK OPTIONS SEARCH [DenyHeaders] ; ; The following request headers alter processing of a ; request by causing the server to process the request ; as if it were intended to be a WebDAV request, instead ; of a request to retrieve a resource. ; Translate: If: Lock-Token: [AllowExtensions] ; ; Extensions listed here are commonly used on a typical IIS server. ; ; Note that these entries are effective if "UseAllowExtensions=1" ; is set in the [Options] section above. ; .asp .cer .cdx .asa .htm .html .txt .jpg .jpeg .gif .ashx .aspx .asmx .axd ;.idq ;.htw ;.ida ;.idc ;.shtm ;.shtml ;.stm ;.htr ;.printer [DenyExtensions] .asax .ascx .ctnfig .cs .csproj .dll .licx .pdb .resx .resources .vb .vbproj .vsdisco .webinfo .xsd .xsx ; ; Extensions listed here either run code directly on the server, ; are processed as scripts, or are static files that are ; generally not intended to be served out. ; ; Note that these entries are effective if "UseAllowExtensions=0" ; is set in the [Options] section above. ; ; Deny executables that could run on the server .exe .bat .cmd .com ; Deny infrequently used scripts .htw ; Maps to webhits.dll, part of Index Server .ida ; Maps to idq.dll, part of Index Server .idq ; Maps to idq.dll, part of Index Server .htr ; Maps to ism.dll, a legacy administrative tool .idc ; Maps to httpodbc.dll, a legacy database access tool .shtm ; Maps to ssinc.dll, for Server Side Includes .shtml ; Maps to ssinc.dll, for Server Side Includes .stm ; Maps to ssinc.dll, for Server Side Includes .printer ; Maps to msw3prt.dll, for Internet Printing Services ; Deny various static files .ini ; Configuration files .log ; Log files .pol ; Policy files .dat ; Configuration files ;.asp ;.cer ;.cdx ;.asa [DenyUrlSequences] .. ; Don't allow directory traversals ./ ; Don't allow trailing dot on a directory name \ ; Don't allow backslashes in URL : ; Don't allow alternate stream access % ; Don't allow escaping after normalization & ; Don't allow multiple CGI processes to run on a single request < > </ Tag: Search Link Problem Tag: 387805
      • 4
        • IIS6.0 I'm not sure if this is an IIS6.0 issue or FP2003. But, anyway, I'm running IIS6.0 on a win2k3 machine. I have an form that uploads image files. Everytime I click "upload", the server/IIS6.0 prompts me for a username and password (just as if I were opening the web site with FP2003 to publis. edit, update, etc.) How can I turn this off (prompting me for a username and password)???? -- NuBee Tag: Search Link Problem Tag: 387804
      • 5
        • Can IIS Do this? Hi all, I posted an IIS related question in the Windows XP group & it was suggested I post here, so here is the question I originally posted: I have a client who is running Windows XP Professional, with Apache > 2.0.59 for Windows as a web server. Recently, they added an > application to this machine which requires IIS (5.1 on this machine), > so I have set it up on port 8080 & it is working properly. > > Apache is doing the authentication via a username/password box & once > logged in, the user is redirected to the IIS server running on port > 8080. > > My question is - can IIS be configured to only accept requests for > data > once the user has been redirected from Apache server? > > If so, would someone please point me to a resource or outline how I > can do this - days of research have revealed next to nothing. > Please duplicate any reply post by email as I have great difficulty in finding these posts when next I visit - thanks in advance - my email address is hmag@ozemail.com.au - bye for now, Terry Tag: Search Link Problem Tag: 387802
      • 6
        • IIS Integrated Authentication Hi, We're facing a problem with getting an application we're using to pass user credentials to IIS. After a lengthy investigation, it was determined that the application was passing the userid in mixed case (which is how it has been entered in our Active Directory environment). We confirmed this was the problem by altering one test user such that the userid in AD for that test account was all lower case and everything worked as expected, the application was able to connect successfully to IIS. However, when reverting the username back to mixed case (i.e.Test as opposed to test), the authentication fails. All our usernames in Active Directory are entered in mixed case and modifying them to all be lower case is out of question. Is there anyway to force an XP client or IE browser to send userids to IIS in a case sensitive format (mixed case) regardless of how the usernames are entered in Active Directory? Thanks, Ahmed Tag: Search Link Problem Tag: 387801
      • 7
        • inetinfo at 100% intermittently, IISState log Hello, Well, I've perused many posts here concerning IISState logs in hopes of learning how to interpret them myself, but to no avail as I still can't make sense of my own. I see several threads with high kernel and user times but not sure which is the culprit, nor what pages/dlls to investigate. The server is Windows 2000 SP4 fully patched running IIS and FPE 2002. There are maybe 300 websites hosted with generally generic html. The issue only began occurring about two weeks ago so I assume the problem is someone's messy page or code somewhere. No idea how to track it down though. Any help would be greatly appreciated, thanks! (captured during 100% cpu utilization by inetinfo) Opened log file 'C:\iisstate\output\IISState-676.log' *********************** Starting new log output IISState version 3.3.1 Wed Sep 20 16:09:31 2006 OS = Windows 2000 Executable: inetinfo.exe PID = 676 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 2a0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006f89c 7c586351 ntdll!ZwReadFile+0xb 01 0006f910 7c2dd578 KERNEL32!ReadFile+0x181 02 0006f93c 7c2dd61e ADVAPI32!ObjectCloseAuditAlarmA+0x2f 03 0006f9b8 7c2d1e18 ADVAPI32!ObjectDeleteAuditAlarmW+0x4 04 0006fbf4 01002884 ADVAPI32!`string' 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1 06 0006ff70 01002fbf inetinfo!main+0x654 07 0006ffc0 7c5989a5 inetinfo!mainCRTStartup+0xff 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d Thread ID: 1 System Thread ID: 2b0 Kernel Time: 0:0:0.15 User Time: 0:0:0.125 Thread Type: Other # ChildEBP RetAddr 00 0059fd1c 7c59a072 ntdll!ZwWaitForSingleObject+0xb 01 0059fd44 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71 02 0059fd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf 03 0059fd70 01002440 iisadmin!ServiceEntry+0x156 04 0059ffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 05 0059ffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 2 System Thread ID: 2c8 Kernel Time: 0:0:3.859 User Time: 0:0:2.156 Thread Type: Other # ChildEBP RetAddr 00 006dfe5c 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 006dfeac 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 006dff08 77e41706 USER32!__ClientExtTextOutW+0x3f 03 006dff24 6e5a5a7c USER32!__ClientGetTextExtentPointW+0x48 04 006dff78 78008593 IisRTL!SchedulerWorkerThread+0xa7 05 006dffb4 7c57b396 MSVCRT!_endthreadex+0x98 06 006dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 3 System Thread ID: 2cc Kernel Time: 0:0:4.62 User Time: 0:0:1.953 Thread Type: Other # ChildEBP RetAddr 00 0071fe5c 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0071feac 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 0071ff08 77e41706 USER32!__ClientExtTextOutW+0x3f 03 0071ff24 6e5a5a7c USER32!__ClientGetTextExtentPointW+0x48 04 0071ff78 78008593 IisRTL!SchedulerWorkerThread+0xa7 05 0071ffb4 7c57b396 MSVCRT!_endthreadex+0x98 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 4 System Thread ID: 310 Kernel Time: 0:0:0.500 User Time: 0:0:0.812 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00b6fe24 77d595d9 ntdll!ZwReplyWaitReceivePortEx+0xb 01 00b6ff74 77d58e4a RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 00b6ff78 77d3aeed RPCRT4!RecvLotsaCallsWrapper+0x9 03 00b6ffa8 77d37de8 RPCRT4!BaseCachedThreadRoutine+0x4f 04 00b6ffb4 7c57b396 RPCRT4!ThreadStartRoutine+0x18 05 00b6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 5 System Thread ID: 3cc Kernel Time: 0:0:0.125 User Time: 0:0:0.312 Thread Type: Other # ChildEBP RetAddr 00 00fffc1c 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 00fffc6c 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 00fffcc8 77e41706 USER32!__ClientExtTextOutW+0x3f 03 00fffce4 769c71e0 USER32!__ClientGetTextExtentPointW+0x48 04 00fffd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 00fffd70 01002440 w3svc!ServiceEntry+0x1b5 06 00ffffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 07 00ffffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 6 System Thread ID: 3d8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 010cff5c 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 010cff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27 02 010cffb4 7c57b396 ISATQ!I_AtqOplockThreadFunc+0x32 03 010cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 7 System Thread ID: 3e8 Kernel Time: 0:0:12.531 User Time: 0:0:1.15 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0110ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 0110ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0110ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 8 System Thread ID: 3ec Kernel Time: 0:1:3.796 User Time: 0:0:5.281 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0114ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 0114ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0114ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 9 System Thread ID: 3f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 012cfeb8 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 012cfee4 77d818ff KERNEL32!GetQueuedCompletionStatus+0x27 02 012cff20 77d51484 RPCRT4!COMMON_ProcessCalls+0x9e 03 012cff74 77d512bd RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99 04 012cff78 77d3aeed RPCRT4!ProcessIOEventsWrapper+0x9 05 012cffa8 77d37de8 RPCRT4!BaseCachedThreadRoutine+0x4f 06 012cffb4 7c57b396 RPCRT4!ThreadStartRoutine+0x18 07 012cffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 10 System Thread ID: 40c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0151fd20 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0151fd70 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0151fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17 03 0151ffb4 7c57b396 RTUTILS!TraceServerThread+0xde 04 0151ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 11 System Thread ID: 42c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0156ff5c 7c59a072 ntdll!ZwWaitForSingleObject+0xb 01 0156ff84 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71 02 0156ff94 732c3366 KERNEL32!WaitForSingleObject+0xf 03 0156ffb4 7c57b396 compfilt!CompressionThread+0x29 04 0156ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 12 System Thread ID: 448 Kernel Time: 0:0:0.187 User Time: 0:0:0.46 Thread Type: Other # ChildEBP RetAddr 00 015dfe70 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 015dfec0 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 015dff1c 77e41706 USER32!__ClientExtTextOutW+0x3f 03 015dff38 65f09ccb USER32!__ClientGetTextExtentPointW+0x48 04 015dff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42 05 015dffb4 7c57b396 MSVCRT!_endthread+0xc6 06 015dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 13 System Thread ID: 44c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0161fea8 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0161fef8 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 0161ff54 77e41706 USER32!__ClientExtTextOutW+0x3f 03 0161ff70 65f09d47 USER32!__ClientGetTextExtentPointW+0x48 04 0161ffb4 7c57b396 w3svc!OleHackThread+0x88 05 0161ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 14 System Thread ID: 4b8 Kernel Time: 0:0:0.140 User Time: 0:0:0.46 Thread Type: Other # ChildEBP RetAddr 00 0169fc1c 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0169fc6c 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 0169fcc8 77e41706 USER32!__ClientExtTextOutW+0x3f 03 0169fce4 769c71e0 USER32!__ClientGetTextExtentPointW+0x48 04 0169fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 0169fd70 01002440 ftpsvc2!ServiceEntry+0xc7 06 0169ffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 07 0169ffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 15 System Thread ID: 4c0 Kernel Time: 0:0:0.31 User Time: 0:0:0.31 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 016dfc1c 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 016dfc6c 77e4169f KERNEL32!WaitForMultipleObjectsEx+0xea 02 016dfcc8 77e41706 USER32!__ClientExtTextOutW+0x3f 03 016dfce4 769c71e0 USER32!__ClientGetTextExtentPointW+0x48 04 016dfd30 6b561a78 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209 05 016dfd70 01002440 SMTPSVC!ServiceEntry+0x136 06 016dffa4 7c2dcf43 inetinfo!InetinfoStartService+0x2bd 07 016dffec 00000000 ADVAPI32!AccessCheckByTypeResultListAndAuditAlarmByHandleW+0x2f Thread ID: 16 System Thread ID: 4dc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0175ff00 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0175ff50 75037871 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0175ff6c 6fc66e80 WS2_32!WSAWaitForMultipleEvents+0x18 03 0175ffb4 7c57b396 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x39 04 0175ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 17 System Thread ID: 4e0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0179ff20 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0179ff70 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0179ff88 701224fa KERNEL32!WaitForMultipleObjects+0x17 03 0179ffb4 7c57b396 exstrace!RegNotifyThread+0x6f 04 0179ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 18 System Thread ID: 4e8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 017dff24 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 017dff74 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 017dff8c 70121e6a KERNEL32!WaitForMultipleObjects+0x17 03 017dffb4 7c57b396 exstrace!WriteTraceThread+0x2f 04 017dffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 19 System Thread ID: 4f4 Kernel Time: 0:0:0.15 User Time: 0:0:0.93 Thread Type: Other # ChildEBP RetAddr 00 0191ff64 7c59a072 ntdll!ZwWaitForSingleObject+0xb 01 0191ff8c 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71 02 0191ff9c 6ff2841e KERNEL32!WaitForSingleObject+0xf 03 0191ffb4 7c57b396 FCACHDLL!CScheduleThread::ScheduleThread+0x22 04 0191ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 20 System Thread ID: 4f8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 01a5ff18 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 01a5ff68 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01a5ff80 6b57b026 KERNEL32!WaitForMultipleObjects+0x17 03 01a5ffb4 7c57b396 SMTPSVC!TcpRegNotifyThread+0x136 04 01a5ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 21 System Thread ID: 4fc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 01a9ff68 7c59a072 ntdll!ZwWaitForSingleObject+0xb 01 01a9ff90 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71 02 01a9ffa0 6b57ae5a KERNEL32!WaitForSingleObject+0xf 03 01a9ffb4 7c57b396 SMTPSVC!FreeLibThread+0x1d 04 01a9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 22 System Thread ID: 680 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 01b5fe24 77d595d9 ntdll!ZwReplyWaitReceivePortEx+0xb 01 01b5ff74 77d58e4a RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 01b5ff78 77d3afbd RPCRT4!RecvLotsaCallsWrapper+0x9 03 01b5ffa8 77d37de8 RPCRT4!BaseCachedThreadRoutine+0x11f 04 01b5ffb4 7c57b396 RPCRT4!ThreadStartRoutine+0x18 05 01b5ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 23 System Thread ID: 6b4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01b9fce0 74fd1394 ntdll!ZwWaitForSingleObject+0xb 01 01b9fd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8 02 01b9fe08 750312f5 msafd!WSPSelect+0x24e 03 01b9fe6c 6e2b3b6e WS2_32!select+0xe7 04 01b9ffb4 7c57b396 inetsloc!SocketListenThread+0x51 05 01b9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 24 System Thread ID: 6bc Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 01bdfe24 77d595d9 ntdll!ZwReplyWaitReceivePortEx+0xb 01 01bdff74 77d58e4a RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 01bdff78 77d3afbd RPCRT4!RecvLotsaCallsWrapper+0x9 03 01bdffa8 77d37de8 RPCRT4!BaseCachedThreadRoutine+0x11f 04 01bdffb4 7c57b396 RPCRT4!ThreadStartRoutine+0x18 05 01bdffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 25 System Thread ID: 6c8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01c1fdfc 74fd1394 ntdll!ZwWaitForSingleObject+0xb 01 01c1fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8 02 01c1ff24 750312f5 msafd!WSPSelect+0x24e 03 01c1ff88 6d7075bd WS2_32!select+0xe7 04 01c1ffb0 6d70791b ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22 05 01c1ffb4 7c57b396 ISATQ!BmonThreadFunc+0x9 06 01c1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 26 System Thread ID: 294 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 01c6ff54 7c59a072 ntdll!ZwWaitForSingleObject+0xb 01 01c6ff7c 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71 02 01c6ff8c 741a99cd KERNEL32!WaitForSingleObject+0xf 03 01c6ffb4 7c57b396 aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+0xce 04 01c6ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 27 System Thread ID: 6f8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: SMTP Service Worker Thread # ChildEBP RetAddr 00 01cafed0 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 01caff20 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 01caff38 741900e1 KERNEL32!WaitForMultipleObjects+0x17 03 01caff9c 6b56dccd aqueue!CConnMgr::GetNextConnection+0x1da 04 01caffb4 7c57b396 SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x23 05 01caffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 28 System Thread ID: 6b0 Kernel Time: 0:1:16.453 User Time: 0:0:6.203 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0202ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 0202ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0202ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 0202ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 29 System Thread ID: 7f8 Kernel Time: 0:0:37.140 User Time: 0:0:3.78 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0217ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 0217ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 0217ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 0217ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 30 System Thread ID: 7b8 Kernel Time: 0:0:11.109 User Time: 0:0:1.140 Thread Type: HTTP Listener # ChildEBP RetAddr 00 023bff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 023bff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 023bffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 023bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 31 System Thread ID: 84c Kernel Time: 0:0:6.578 User Time: 0:0:0.468 Thread Type: HTTP Listener # ChildEBP RetAddr 00 023fff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 023fff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 023fffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 023fffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 32 System Thread ID: 434 Kernel Time: 0:0:0.343 User Time: 0:0:0.968 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0292fe24 77d595d9 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0292ff74 77d58e4a RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0292ff78 77d3aeed RPCRT4!RecvLotsaCallsWrapper+0x9 03 0292ffa8 77d37de8 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0292ffb4 7c57b396 RPCRT4!ThreadStartRoutine+0x18 05 0292ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 33 System Thread ID: 8e0 Kernel Time: 0:0:0.468 User Time: 0:0:0.921 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0296fe24 77d595d9 ntdll!ZwReplyWaitReceivePortEx+0xb 01 0296ff74 77d58e4a RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 0296ff78 77d3aeed RPCRT4!RecvLotsaCallsWrapper+0x9 03 0296ffa8 77d37de8 RPCRT4!BaseCachedThreadRoutine+0x4f 04 0296ffb4 7c57b396 RPCRT4!ThreadStartRoutine+0x18 05 0296ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 34 System Thread ID: 880 Kernel Time: 0:1:3.187 User Time: 0:0:5.62 Thread Type: HTTP Listener # ChildEBP RetAddr 00 034bf85c 7c5862f5 ntdll!ZwReadFile+0xb 01 034bf8d0 769b21cf KERNEL32!ReadFile+0x125 02 034bf914 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0xdc 03 034bfbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281 04 034bfbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73 05 034bfd18 769b2028 INFOCOMM!TsCreateFile+0x142 06 034bfd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a 07 034bfda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4 08 034bff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504 09 034bff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa 0a 034bff4c 6d701a22 w3svc!W3Completion+0x43 0b 034bff80 6d7029a6 ISATQ!AtqpProcessContext+0x266 0c 034bffb4 7c57b396 ISATQ!AtqPoolThread+0x1a8 0d 034bffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 35 System Thread ID: 66c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Idle ASP thread # ChildEBP RetAddr 00 0365ff08 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0365ff58 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0365ff70 787f67ee KERNEL32!WaitForMultipleObjects+0x17 03 0365ffb4 7c57b396 COMSVCS!CEventDispatcher::PushEvents+0x4e 04 0365ffc0 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 36 System Thread ID: 894 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. Remote call is either to a MTA object or object not initialized. Also, possible utility thread. DCOM call being made to Process ID: 1812 Waiting on thread id: ffffffff # ChildEBP RetAddr 00 0369fb68 77d4f214 ntdll!NtRequestWaitReplyPort+0xb 01 0369fb94 77d3b7a6 RPCRT4!LRPC_CCALL::SendReceive+0x124 02 0369fba0 7cef6bee RPCRT4!I_RpcSendReceive+0x2c 03 0369fbc0 7cef6ab9 ole32!ThreadSendReceive+0xef 04 0369fbd8 7cef3ab6 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f 05 0369fc18 7cef692d ole32!CRpcChannelBuffer::SendReceive2+0x96 06 0369fc28 7ce3cc2d ole32!CRpcChannelBuffer::SendReceive+0x11 07 0369fc88 7ce87f7f ole32!CAptRpcChnl::SendReceive+0xa9 08 0369fce0 77d91337 ole32!CCtxComChnl::SendReceive+0x124 09 0369fcfc 77d93b47 RPCRT4!NdrProxySendReceive+0x4c 0a 0369ff44 77d96f9c RPCRT4!NdrClientCall2+0x4f5 0b 0369ff60 77d792ab RPCRT4!ObjectStublessClient+0x76 0c 0369ff70 787f6732 RPCRT4!ObjectStubless+0xf 0d 0369ffb4 7c57b396 COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x152 0e 0369ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 37 System Thread ID: 8d0 Kernel Time: 0:0:8.687 User Time: 0:18:45.921 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\50\bin\fp5Autl.dll - Thread Type: Front Page Authoring. # ChildEBP RetAddr 00 037efdc8 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 037efe18 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 037efe30 32e5dddf KERNEL32!WaitForMultipleObjects+0x17 WARNING: Stack unwind information not available. Following frames may be wrong. 03 037eff78 32e2366c fp5Autl!Ordinal1596+0xe58 04 037effb4 7c57b396 fp5Autl!Ordinal475+0x43b 05 037effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 38 System Thread ID: 3f8 Kernel Time: 0:0:13.78 User Time: 0:33:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\50\bin\fp5Awel.dll - Thread Type: Front Page Authoring. # ChildEBP RetAddr 00 0387ef64 32dc3f9c KERNEL32!InterlockedIncrement+0xd WARNING: Stack unwind information not available. Following frames may be wrong. 01 0387efac 32f663da fp5Autl!Ordinal432+0x14 02 0387f20c 32f661b5 fp5Awel!Ordinal371+0x496 03 0387f2b4 32f5e14c fp5Awel!Ordinal371+0x271 04 0387f334 32f5e202 fp5Awel!Ordinal241+0x1108 05 0387f35c 32f5fba3 fp5Awel!Ordinal241+0x11be 06 0387f3b8 32f77bf4 fp5Awel!Ordinal300+0x1cd 07 0387f3fc 32fc91fd fp5Awel!Ordinal356+0x17d 08 0387f460 32faceca fp5Awel!Ordinal289+0xfa3 09 0387f494 32fac83c fp5Awel!Ordinal243+0x8404 0a 0387f4ec 32fac0e9 fp5Awel!Ordinal243+0x7d76 0b 0387f58c 32fabcb2 fp5Awel!Ordinal243+0x7623 0c 0387f5ac 32fd7b7b fp5Awel!Ordinal243+0x71ec 0d 0387f848 32fc910e fp5Awel!Ordinal370+0x48dc 0e 0387faac 33053184 fp5Awel!Ordinal289+0xeb4 0f 0387fcb0 33052dea fp5Awel!Ordinal250+0x9c7 10 0387fccc 32db6602 fp5Awel!Ordinal250+0x62d 11 0387fd34 3306f78f fp5Autl!Ordinal1519+0x55 12 0387fe04 32d212f9 fp5Awel!VshtmlHttpExtensionProc+0xec 13 0387fe0c 32e5dee0 shtml!mainp1+0xa 14 0387fe40 32e5de01 fp5Autl!Ordinal1596+0xf59 15 0387ff78 32e2366c fp5Autl!Ordinal1596+0xe7a 16 0387ffb4 7c57b396 fp5Autl!Ordinal475+0x43b 17 0387ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 39 System Thread ID: 218 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\50\servsupp\fp5amsft.dll - Thread Type: Front Page Authoring. # ChildEBP RetAddr 00 0399fef8 7c59a072 ntdll!ZwWaitForSingleObject+0xb 01 0399ff20 7c57b3e9 KERNEL32!WaitForSingleObjectEx+0x71 02 0399ff30 32d48b57 KERNEL32!WaitForSingleObject+0xf WARNING: Stack unwind information not available. Following frames may be wrong. 03 0399ff70 32db651d fp5amsft!prepareToUnload+0xfc29 04 0399ffb4 7c57b396 fp5Autl!Ordinal587+0x19 05 0399ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 40 System Thread ID: 370 Kernel Time: 0:0:3.828 User Time: 0:0:0.296 Thread Type: HTTP Listener # ChildEBP RetAddr 00 04e5ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 04e5ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 04e5ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 04e5ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 41 System Thread ID: 30c Kernel Time: 0:1:14.875 User Time: 0:0:5.953 Thread Type: HTTP Listener # ChildEBP RetAddr 00 04e9ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 04e9ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 04e9ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 04e9ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 42 System Thread ID: 388 Kernel Time: 0:0:31.875 User Time: 0:0:2.484 Thread Type: HTTP Listener # ChildEBP RetAddr 00 04edf808 7c5862f5 ntdll!ZwReadFile+0xb 01 04edf87c 769b21cf KERNEL32!ReadFile+0x125 02 04edf8c0 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0xdc 03 04edfb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281 04 04edfb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73 05 04edfcc4 769b2028 INFOCOMM!TsCreateFile+0x142 06 04edfcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a 07 04edfd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4 08 04edfec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504 09 04edfee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa 0a 04edff08 65f06b58 w3svc!CreateClient+0x7b 0b 04edff4c 6d701ad2 w3svc!W3OnConnectEx+0x118 0c 04edff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e 0d 04edffb4 7c57b396 ISATQ!AtqPoolThread+0x1a8 0e 04edffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 43 System Thread ID: 398 Kernel Time: 0:0:3.78 User Time: 0:0:0.343 Thread Type: HTTP Listener # ChildEBP RetAddr 00 04f1ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 04f1ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 04f1ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 04f1ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 44 System Thread ID: 7f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 03fcff9c 77fa238a ntdll!ZwDelayExecution+0xb 01 03fcffb4 7c57b396 ntdll!RtlpTimerThread+0x42 02 03fcffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 45 System Thread ID: 164 Kernel Time: 0:0:38.468 User Time: 0:0:2.921 Thread Type: HTTP Listener # ChildEBP RetAddr 00 084fff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 084fff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 084fffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 084fffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 46 System Thread ID: 180 Kernel Time: 0:1:28.625 User Time: 0:0:6.671 Thread Type: HTTP Listener # ChildEBP RetAddr 00 085eff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 085eff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 085effb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 085effec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 47 System Thread ID: 408 Kernel Time: 0:1:45.796 User Time: 0:0:8.187 Thread Type: HTTP Listener # ChildEBP RetAddr 00 04ceff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 04ceff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 04ceffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 04ceffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 48 System Thread ID: 8a4 Kernel Time: 0:0:5.812 User Time: 0:0:0.234 Thread Type: HTTP Listener # ChildEBP RetAddr 00 04d2ff50 7c585433 ntdll!NtRemoveIoCompletion+0xb 01 04d2ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27 02 04d2ffb4 7c57b396 ISATQ!AtqPoolThread+0x40 03 04d2ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 49 System Thread ID: 8b0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0761ebe0 77fa0ff5 ntdll!ZwWaitForMultipleObjects+0xb 01 0761ffb4 7c57b396 ntdll!RtlpWaitThread+0x1b9 02 0761ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 50 System Thread ID: 224 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0765ff1c 7c59a23d ntdll!ZwWaitForMultipleObjects+0xb 01 0765ff6c 7c59a150 KERNEL32!WaitForMultipleObjectsEx+0xea 02 0765ff84 7c0f6a8b KERNEL32!WaitForMultipleObjects+0x17 03 0765ffb4 7c57b396 USERENV!NotificationThread+0x5f 04 0765ffec 00000000 KERNEL32!BaseThreadStart+0x52 Thread ID: 51 System Thread ID: 430 Kernel Time: 0:0:0.453 User Time: 0:0:0.640 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 05dcfe24 77d595d9 ntdll!ZwReplyWaitReceivePortEx+0xb 01 05dcff74 77d58e4a RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74 02 05dcff78 77d3aeed RPCRT4!RecvLotsaCallsWrapper+0x9 03 05dcffa8 77d37de8 RPCRT4!BaseCachedThreadRoutine+0x4f 04 05dcffb4 7c57b396 RPCRT4!ThreadStartRoutine+0x18 05 05dcffec 00000000 KERNEL32!BaseThreadStart+0x52 ***** Dump name is formatted as: PID-Timestamp.dmp Creating C:\iisstate\output\676-1158786592.dmp - mini user dump ***** Closing open log file C:\iisstate\output\IISState-676.log Tag: Search Link Problem Tag: 387800
      • 8
        • domain to virtual directory Hi, to all. I have a question is it possible to point domain (www.test.com) to virtual directory ? Thanks Tag: Search Link Problem Tag: 387790
      • 9
        • II6 SMTP mail is being held up in queue Greetings, I have a DC with IIS 6 and SMTP installed. All settings are default. I am using a 3rd party application that sends email out via localhost SMTP. Everytime the mail is sent it gets held up in the outbox. If I reboot the server all the mail will send. However restarting IIS or SMTP doesn't do anything. This is strange. If I drop a text file email into the Pickup folder it too, gets held up in the queue. Has anyone seen this or can advise me how to unstick my SMTP queue? Thanks! Tag: Search Link Problem Tag: 387788
      • 10
        • IIS 6 - Delete HttpCustomErrors Programatically How can I manage the HTTPHeaders via code (VBScript or .Net)? I want to clear the default "Powered by..." and add one. Thanks, -Will Tag: Search Link Problem Tag: 387787
      • 11
        • Stop Virtual Host? Is it possible to stop specific virtual hosts? I have several virtual hosts under the default web. I need to stop them but keep the default website running so I can install another product. Tag: Search Link Problem Tag: 387786
      • 12
        • Internet Printing with Network printers I have Windows 2000 Server, running IIS 5.0. I would like to use the Internet Printing, but when you browse to http://servername/Printers, it will not list the network printers on the server, only local printers. Is there a way to list the network printers as well as local printers with Internet Printing? Thank you Tag: Search Link Problem Tag: 387785
      • 13
        • HTTPCFG, IIS 6, Socket Pooling etc Hi, i've got a single machine with a single nic using multiple addresses configured as follows: (addresses changed to protect the guilty) 192.168.2.1 - Main IP - Apache, Primary Web Sites 192.168.2.2 - Secondary IP - Tomcat, Java Web Sites 192.168.2.3 - Secondary IP - Proprietary, Download / Transfer Server 192.168.2.4 - Secondary IP - IIS 6.0, ASP.NET Sites All services set to start automatically. On rebooting of machine, all come up except IIS which complains that the Listen List might be wrong. httpcfg set to only listen on 192.168.2.4 Stop all web servers, restart IIS and it comes up, now start the other servers and they come up, result, if you start IIS first then it all works. Is IIS trying to bind and then release other interfaces? All web sites have been carefully set to only listen on 192.168.2.4 HTTPCFG set to only listen on 192.168.2.4 After IIS is started (first), only 192.168.2.4:80 is being listened to. Start IIS after the others, and it won't come up. Any help appreciated. Matt. Tag: Search Link Problem Tag: 387782
      • 14
        • Extension Allowed but ASP not work This is a multi-part message in MIME format. ------=_NextPart_000_0044_01C6DCAF.2AFE6360 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi group My IIS server have the extension for ASP pages allowed and after import = all my Intranet Web Site the asp pages does not work Just send me this message. "The system cannot find the path specified." What is wrong?? --=20 Nadie hara por Ti lo que Tu puedes hacer por Ti mismo... ------=_NextPart_000_0044_01C6DCAF.2AFE6360 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"> <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; = charset=3Diso-8859-1"> <META content=3D"MSHTML 6.00.2800.1561" name=3DGENERATOR> <STYLE></STYLE> </HEAD> <BODY bgColor=3D#ffffff> <DIV>Hi group<BR><BR>My IIS server have the extension for ASP pages = allowed and=20 after import all<BR>my Intranet Web Site the asp pages does not = work<BR><BR>Just=20 send me this message.<BR>"The system cannot find the path=20 specified."<BR><BR>What is wrong??<BR><BR><BR></DIV> <DIV><FONT face=3DTahoma color=3D#0000ff size=3D2><BR>-- <BR>Nadie hara = por Ti lo que=20 Tu puedes hacer por Ti mismo...</FONT></DIV></BODY></HTML> ------=_NextPart_000_0044_01C6DCAF.2AFE6360-- Tag: Search Link Problem Tag: 387781
      • 15
        • Copy websites to different server I'm new to IIS and would appreciate any assistance on how to duplicate an IIS website from one server to another. I need to do this for purposes of setting up Doubletake. NIS has no instructions for getting the existing sites from the source server onto the target server. Thank you! Tag: Search Link Problem Tag: 387780
      • 16
        • Destrict Domain Admins full control Is there anyway of restricting the Domain Admins group from having full control of the wwwroot server? Tag: Search Link Problem Tag: 387779
      • 17
        • how to set IISRESET to run periodically without problem? Hi, for some reason (the bloody hell ASP.net app running) I want to set IISRESET to run each day at midnight. I create a batch file with only one "iisreset" runs at 23:59 in Scheduled Tasks But I noticed in 16:00 a new cmd window pops up and repeatly runnning: iisreset iisreset iisreset ... iisreset this happened for two consecutive days and I had to quickly close the cmd window (don't know why but seems the web users didn't get kicked off, perhaps iisresetS ran too quickly so non of them succeeded?) Is there a safe way to do IISRESET automatically? And in a manual stop/start IIS, I got this from event viewer:a process serving application pool "myapp" exceeds time limit during shutdown. How can I prevent this if it will affect an automatical IISRESET? Any ideas appreciated Tag: Search Link Problem Tag: 387777
      • 18
        • certificate server My company wants to get ~12 users certificates for digitally signing docs using adobe. They thought they would have to buy a certificate for each user. My question is can we set up a certificate server purchase a server certificate and then generate certificates to these users from the certificate server? Or am I totally missing the boat? Thanks Mike Tag: Search Link Problem Tag: 387773
      • 19
        • SSI including UTF-8 BOM Hi, I am using SSI to include UTF-8 encoded files into UTF-8 encoded web pages. The problem is that the Byte Order Mark (BOM) of the include file is not being parsed out by ssinc.dll, and is being inserted in the HTML output. Is there a solution to this problem? Removing the BOM from the files would be a problem since some editors (eg Notepad) don't allow you to remove it. Tag: Search Link Problem Tag: 387772
      • 20
        • IIS Load Balancing (Alteon with Hash Algorithm) - Connection Timeo Hey all, I've inherited the task of managing our IIS load balanced servers. The servers are not in a NLB or Clustered environment. The servers host multiple IIS site via IP address. The Alteon handles the load balancing by passing off traffic/sessions to each server based on the hash algorithm. The content for all hosted sites are replicated on each server through a scheduled robo-copy script. Our issue is that users within and outside our network get a time out error "the server at www.xxx.com is taking too long to respond" on a random interval when they hit one of our sites in IIS. This error comes up immediately when someone tries to hit the address, there is on waiting or loading time. A page refresh loads the page correctly. At first I thought it was an ASP.NET 1.1 issue, but I have created a static HTML page that gets the error also. Any ideas on a configuration change in IIS or should I look to the Alteon for this error. Thanks, Roger Tag: Search Link Problem Tag: 387771
      • 21
        • Changing the ASP.NET Version programmatically in IIS Hi everyone. Sorry for posting in here, but I tried the microsoft.public.dotnet.framework .aspnet group and didn't get any luck. I've got a class that programatically creates a WebSite in IIS, it allows me to set almost all the parameters in the metabase, but it doesn't seem to let me change the asp.net version or the application pool which will need to be set as the subsequent sites will run in .NET 2. I'm using c#, IIS 6 etc. e.g SetSite.Invoke("Put", "ServerAutoStart", 1); I've got these 2 links for the properties, but I can't see them on there. http://www.microsoft.com/windows2000/en/server/iis/default.asp?url=/w... http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Librar... If anyone can tell me how to do this, you'd make my day. Cheers Mark Tag: Search Link Problem Tag: 387766
      • 22
        • Free ASP Code Free shoping cart source code available at http://www50.brinskter.com/lamax Tag: Search Link Problem Tag: 387763
      • 23
        • Lost sessions issue Hi, We're experiencing random user sessions losses on our web applications, and are researching for any useful information which may shed light on this problem. Environment: In our company, we're developing a web product based on ASP.NET 2.0, in conjunction with Oracle database over ADO.NET and external COM objects running on the server, interacting with the database, and with external modules. Our servers are Windows Server 2003, running IIS 6.0, with all the latest patches and updates provided by Microsoft. Web application on the server is a precompiled version of our web solution. Users: Number of users on the system is currently minor, less than 10 concurrent users. Sessions: We use ASP.NET infrastructure for saving data into session variables. Our sessionState mode is InProc, and our application sometimes loads our sessions with heavy information variables (e.g. grids, DataSets etc). The problem: This problem is completely inconsistent, and has no specific scenario steps. Randomly, our sessions disappear. HttpContext.Current.Session.IsNewSession becomes true, and all session variables are lost. The Session Id is sometimes reset and replaced, and sometimes left unchanged. We know for sure that this is not a session time-out issue, as sessions are lost while they're active. Sometimes users lose their sessions right after logging in, and sometimes after a while of using the system, sometimes they're not lost at all. Our system has a handler for such failure (namely, directing the user to the main login page, in order to start a new session), but we need to research and find the root cause of this problem. The failure occurs on random pages, and in random scenarios. Repeating a scenario after a failure usually yields successful results (i.e. the failure does not repeat itself). Research: This gives us the impression that the problem is probably IIS internal, and/or depends on very specific status, or a fault in one of our modules. We do not know of any specific memory leaks in our product. We are not sure that this is an unhandled exception issue, which can be resolved by HttpContext.Current.ClearError. Any information about this topic would be appreciated as well. Also, it's quite unlikely that those session losses are caused by configuration files changes, or by changes to the environment/recompilation of ASPX files. Are there ways to monitor IIS in order to get a better idea about its session handling? Is there a way to follow a session and know what caused its closure? Any hint would be highly appreciated. Thank you, Alon. Tag: Search Link Problem Tag: 387762
      • 24
        • server hardware upgrade - migration Hello everyone. I have an old server with our company intranet on it. I need to migrate this to a new server. Both machines are running Server 2004 with IIS 6.0 migrating the contents seems easy with IIS Migration Tool, now comes the tricky bit. Question: How do I migrate all the users I have on the server 1:1 to the new server? Any wizards? I don't feel like recreating hundreds of accounts. Thanks in advance Flo Tag: Search Link Problem Tag: 387761
      • 25
        • Newbie: How to re-install certificate after the IIS 6 server is bu Hi, I have installed this SSL certificate onto IIS 6 on a Windows 2003 SP1 machine. Unfortunately, because of virus attack, I need to trash it and rebuild it again. Before I trash the machine, do I just backup the *.cer file out and re-install later? Or is there any special procedure to do first? Thanks in advance. Tag: Search Link Problem Tag: 387757
    • Next
      • 1
        • Cannot Find server after .net 2.0 Hello, I just installed Visual Studio 2005 and .net 2.0 on my test machine running windows XP. After I did this other computers on my network can no longer access my computer's web pages. If I am on my computer at put http://localhost, http://MYIP, or http://MYCOMPUTERNAME into a web browser it works perfectly, but if I go to another machine on my network and try to go to http://MYIP or http://MYCOMPUTERNAME I get an error stating that it Cannot find the server - The page cannot be displayed. This all used to work before I installed Visual Studio. I also double checked and made sure the windows firewall was not enabled. The remote computers that cannot access my computer's web pages can ping my computer without a problem. No log entries are being made when the remote computers try to access my web pages either. Tag: Search Link Problem Tag: 387754
      • 2
        • IIS Patches I am running IIS and FTP on the Windows 2000 Server. How do I check to make sure that my IIS server patches are up-to-date? Thanks. Tag: Search Link Problem Tag: 387753
      • 3
        • IIS 6 Recyle Time When you set a time for app pool recycling, what time zone does it occur in, local or GMT? Tag: Search Link Problem Tag: 387752
      • 4
        • IIS 5.0 & Broken Mime Types Hi, I have an IIS 5.0 server which I'm fairly sure is set up with the correct Mime Types. I'm nonly interested in .xls, .doc and .pdf (all are correctly configured using: http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/iis/maintain/featusability/mimeiis.mspx as a guide). My problem is this, when I paste the URL into the browser (e.g http://mydomain/download.asp?id=document.xls) - the browser does not recognise the MIME type and tries to download the download.asp page instead. Now, if I actually browse to a link, in the same site - that executes exactly the same URL it works.By this, I mean I click on a link in the website, rather than paste the link into the browser it works. Another point I should make, is that I don't have this problem at all with the .PDF files (just .doc and .xls) - so I'm sure the download.asp page is working. This has been working before, and we recently moved servers (same version of all server software), so I'm guessing it must be an issue in the MIME mapping of the IIS Server. Any ideas would be appreciated. Thanks Kevin Tag: Search Link Problem Tag: 387751
      • 5
        • IISState and Non-Windows DLLs I am debugging a problem in some VB components that seem to be causing an AppPool to hang under Windows 2003. I am trying to use IISState to determine where the crash is occuring. I have IISState running and resolving symbols that it downloads. Can anyone tell me how to get it to resolve symbols for my own DLL? I have the pdb file - I just don't know where to put it. Steve Tag: Search Link Problem Tag: 387749
      • 6
        • Really Frustrating IIS Problem Hello Everyone, I'm really hoping that someone can help me with a small problem that I'm having with IIS because I'm really at my wits end. Fair warning though, I'm fairly new to IIS, so I apologize if I say anything that even a newbie should know. :) I'm attempting to setup a website that uses ASP.NET 2.0 and SQL Server Express. When I setup the website using one directory, the website doesn't work. When I setup the website using a different directory, it works fine. I follow the same procedure each time. I've repeated the steps to setup the website from scratch a number of times with the same result so I *know* for sure that I'm following the same procedure each time. The directories in question are: C:\Inetpub\wwwroot\classifieds (this one doesn't work) C:\Inetpub\wwwroot\classifieds_new (this one works) The error that I get is: Cannot open user default database. Login failed. Login failed for user 'NT AUTHORITY\NETWORK SERVICE'. File activation failure. The physical file name "C:\Inetpub\wwwroot\classifieds\App_Data\aspnetdb_log.ldf" may be incorrect. I've even gone through the trouble of deleting all of the website under IIS and the associated folders in C:\Inetpub\wwwroot\ and reinstalling IIS with the same result. Thanks in advance for any help you can offer. Tag: Search Link Problem Tag: 387747
      • 7
        • send request for non-existent folder to ASP.NET? I need to be able to map a request for www.domain.com/school to www.domain.com/schools.aspx. If IIS passed the request through to ASP.NET 2.0, this would be simple, as I could set up a urlMappings in Web.Config: <urlMappings enabled="true"> <add url="~/school" mappedUrl="~/Schools.aspx" /> </urlMappings> In fact, this does work when running ASP.NET in Cassini during debugging. Creating a folder named 'school' just ends up with IIS returning a Directory Listing Denied msg. How can I resolve this, so that this is pass onto .NET(so that it can handle the mapping) - or mapped to the correct file in IIS itself? -- Thanks in advance, Les Caudle Tag: Search Link Problem Tag: 387746
      • 8
        • Bandwidth and IIS requirement for hosting video? Any know how to calculate numbers of files per second can be download for 5MB files? For 10 megabit if I divided by 5, look's like it's only able to serve 2 files download in one second? >From microsoft site, calculating bandwidth https://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/0d497783-f3df-4b06-92b2-07ffb4954755.mspx?mfr=true For 5kb file 10-megabit Ethernet (Up to) 136 pages/seconds 100-megabit Ethernet (Up to) 1,360 pages/seconds For 5MB file (Video, flash FLV) 10-megabit Ethernet (Up to) ??? files/seconds 100-megabit Ethernet (Up to) ??? files/seconds Thank you in advance, John Tag: Search Link Problem Tag: 387745
      • 9
        • Enterprise CA and Certificate replacement When I installed Windows Enterprise 2003 about a year ago, I imported a certificate from my Small Business Server 2003 and all my web sites worked fine. I wanted to implement RPC over HTTP for MS Exchange and Outlook and found that I should install a CA. I installed the CA and replaced my current certificate (I did export it first). Now, even though my web sites require SSL, the browser states that the Web page can't be displayed. When I uncheck the SSL requirement, and type in http:// instead of https:// the web site works. I don't know what to do now and need to fix this fast! Any/All your assistance is greatly appreciated! Thanks. JoeF Tag: Search Link Problem Tag: 387743
      • 10
        • Re: IIS 5.0 Default Page not showing "Jukka Pakkanen" <jukka.pakkanen@qnet.xdomain.fi> kirjoitti viestissä:... >I have a clean Windows 2000 Server SP4 + fixes installation and IIS 5.0. > > When I create virtual servers, the default page is not showing. Browser > gets "404, file not found". I can access the index.html (or default.htm) > page by writing the "index.html" after the server address in the browser. > In the server properties index.html and default.htm are defined as default > pages, and the "enable default page" check box is checked. > > Any ideas? Anyone? Tag: Search Link Problem Tag: 387741
      • 11
        • dual nic config what is the optimal use of dual nic? how about reserving one exclusively for VS traffic and the other for other normal traffic?. some say disable VMNS from primary, uncheck tcpip from the second that is for VS will do the trick. unfortunately that kicks Symantec client firewall into high gear of consuming 47% CPU. of dual core P4 3GHZ host PC furthermore, vs is actually using the primary connection 11/9/2005 7:59:04 PM Setting Change The setting "settings/notes" for the virtual network configuration "External Network (D-Link DFE-538TX 10_100 Adapter)" was changed from (no value) to "This virtual network is connected to the "D-Link DFE-538TX 10/100 Adapter" physical network adapter. Virtual machines attached to this virtual network can access the physical computer, the external network and other virtual machines also attached to this virtual network.". 11/9/2005 7:59:04 PM Setting Change The setting "settings/gateway" for the virtual network configuration "External Network (D-Link DFE-538TX 10_100 Adapter)" was changed from 0 to 16. Tag: Search Link Problem Tag: 387740
      • 12
        • IIS 6 Recyle Vs. Shutdown What is the difference between recylcing the workder process and shutting down the worker process? Tag: Search Link Problem Tag: 387738
      • 13
        • Lwww publishing service On my Xp pro www publishing service gets stuck at starting forever. (over 2 hours) and still no progress. I have tried uninstall reboot, install, reboot. the PC is XP pro with all the latest security update. what can I do? Tag: Search Link Problem Tag: 387722
      • 14
        • DCPromo made Sharepoint stop working!!! I have another tech that ran a dcpromo on a Windows 2003 server in a Windows 2000 environment. After that happened the server gave me a service unavailable message. So he thought that he was having an IIS issue and uninstalled and reinstall the IIS. Now when I look in the manager I don't see the information listed there. Is there a way to bring this back and did I lose any information? Tag: Search Link Problem Tag: 387717
      • 15
        • IIS Script Execution Order Hello All: I am running into a possible issue with ASP scripts executing on IIS 6. My question is, does IIS 6 require scripts to execute in a "first in, first out" fashion? My example is as follows. Page 1requests Page 2 via a WinHTTP object and adds a header to the HTTP request containing the session cookie. The request then times out. If I remove the session cookie header, Page 2 executes normally and Page 1 then completes onces page 2 has been executed. However, if the session cookie is passed from page 1 through the WinHTTP object to page 2, the HTTP request times out. Does this have to do with a script deadlock? Here is my theory: It seems that IIS processes scripts within a singular session in a first in, first out basis. In other words, page 1 must complete its execution before another page (page 2) is allowed to begin. Can anyone shed some light on this issue? Many Thanks! Mike Biang Cramer Development Tag: Search Link Problem Tag: 387714
      • 16
        • Password Restricted Websites I want to make a website, to which I submit work in progress to my employer. Because it contains intellectual property I need to have this website password protected. Ideally I need two passwords, one for my employer, and another guest password. How do I do this in IIS? I suspect that I need to make user accounts on the server? I don't really want to do that just for this purpose. Could I use .Net Passports? What are the options? Cheers ss. Tag: Search Link Problem Tag: 387708
      • 17
        • IIS 5.0 Default Page not showing I have a clean Windows 2000 Server SP4 + fixes installation and IIS 5.0. When I create virtual servers, the default page is not showing. Browser gets "404, file not found". I can access the index.html (or default.htm) page by writing the "index.html" after the server address in the browser. In the server properties index.html and default.htm are defined as default pages, and the "enable default page" check box is checked. Any ideas? Tag: Search Link Problem Tag: 387707
      • 18
        • Hosts File Issue Our Intranet Sites are controlled through hosts file (we do not have an internal dns server and management decided to use hosts as a temporary solution until a dns server is installed, at a later date) I have been switching the contents of the hosts file i.e. 111.111.111.001 MyWeb 111.111.111.002 MyTest or 111.111.111.111 MyWeb 111.111.111.112 MyTest or 111.111.111.221 MyWeb 111.111.111.222 MyTest Worked until for a couple of days then it stopped responding. Actually my hosts file does not work at all. The hosts file responds on other computers. The hosts file will also not respond when logging in as another user on my computer. Did dnsflush, confirmed flush with displaydns. Is there anything else I can do? Do I have to redo my system to get the hosts file to work again? Thanks in advance PJ Tag: Search Link Problem Tag: 387706
      • 19
        • IIS 5.0 (windows 2000 server) IP-based virtual hosts seems not to work. I want to have two different sites on my IIS server. One should to be opened when xxx.domain.com provided as URL, the other one when yyy.domain.com is provided - should be opened. I tried to use name-based virtual hosts strategy, but the first site was opening evry time. So I decided to try the IP-based virtual hosts strategy. I added the IP alias to the network card. Put the IP to the web sites they should stick to. Created a DNS A and PTR records for both of them, but the god damn first sites openes evry time. When i put yyy.domain.com it's redirect me to the xxx.domain.com . Seems like the xxx.domian.com is the only one web site, but thats not true. Has anyone any idea how this problem can be fixed, or what is the cause of this problem? Tag: Search Link Problem Tag: 387703
      • 20
        • INETINFO.EXE !!!! - what is this bugger doing???? Hello All, I broke my golden rule and now it seems I'm going to pay for it. I when and applied some MS updates last night without backing up my system and now my C drive is churnning away constantly and my comptuer has become sluggish. I have tracked all this disk activity and CPU usage to "INETINFO.EXE" I checked the web and found that this is an IIS ADMIN helper service. I have always used IIS on my computer for web site development but never had this problem before until the updates last night. What is this darn thing doing that it keeps my disk going constantly. If I go to task manager and kill it the disk activity stops. What can I do to fix this issue?? Any help or advice is greatly appreciated. Bill Tag: Search Link Problem Tag: 387700
      • 21
        • asp.net and wsus access denied headache Hello, I am trying to run wsus on a 2003 domain controller. It installs fine, but when I try to access the web site, it tells me that i have access denied to the .net temporary files. I have tried changing the permissions on this folder so that the network service has full control of the folder and it subfolders, but still no go. Any ideas to get this to work? Tag: Search Link Problem Tag: 387699
      • 22
        • IIS Log - 'Time Taken' value Hi, I have tested the same page from 2 machines, one machine with a Lan connection (100Mb) and one machine with a slow ADSL connection (150Kb) I was expecting to get the same 'Time Taken' values for both tested machines, but I found out that the 'Time Taken' value is much much faster on the Lan machine requests. Is the 'Time Taken' value refers to the period of time that it took to the IIS until sending the last byte, and thus the slower ADSL connection will affect the "Time Taken' value on the IIS? Thanks, Shif Tag: Search Link Problem Tag: 387697
      • 23
        • IIS AuthDiag I started to use the tool today, I launch AuthDiag, chose "Monitor URL Failures", IE displays a new page with the folowing message inside ------------------------------------------------- Monitor URL failures may not work on non-console terminal server session System time: Mon, 18 Sep 2006 09:07:40 GMT Initializing AuthMon, it might take awhile... ------------------------------------------- In the statsus bar, I have 'Initializing AuthMon, it make take a while And it keeps more than a while (1 hour) and don't know what should happen 2nd question, I chose to check permissions on the reporting services (sql 2000), I get a warning and pass as follows : ****************************** Server's response: HTTP/1.1 302 Found Learn about IIS status codesPath:W3SVC/1/ROOT/reports AuthType:Anonymous Test Authentication Path:W3SVC/1/ROOT/reports AuthType:NTLM ************************** In spite of the fact that the server works correctly and IUSR_mymachine has read/execute rights on the virtual server. By the way, any webcasts or tutorials regharding those tool would be appreciated Thanks for your help Tag: Search Link Problem Tag: 387695
      • 24
        • IIS hang running Sharepoint 2003 We have a problem with Application pool in Sharepoint hanging once at day. I attached the IISSTATE LOG File, maybe someone know the reasone of our problem. Opened log file 'C:\iisstate\output\IISState-6188.log' *********************** Starting new log output IISState version 3.3.1 Sun Sep 17 13:26:57 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 6188 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll - DLL (!FunctionName) that failed: mscorsvr!Ordinal74 Thread ID: 37 System Thread ID: 1b00 Kernel Time: 0:0:4.968 User Time: 0:2:48.578 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll - *** WARNING: Unable to verify checksum for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_4af0f46b\mscorlib.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_4af0f46b\mscorlib.dll Other information: Thread is throwing an exception. Checking for known issues. *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\aspnet_isapi.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\kernel32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ole32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\RPCRT4.dll - *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\ws_spfilehandler\52855364\aebf2eb4\assembly\dl2\c5c2709e\001960c7_6f75c401\microsoft.sharepoint.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ADVAPI32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3core.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\IISUTIL.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\60\BIN\onetutil.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\60\BIN\stswel.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\?\C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\isapi\owssvr.dll - *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\gac\system.enterpriseservices\1.0.5000.0__b03f5f7f11d50a3a\system.enterpriseservices.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\urlmon.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\TAPI32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\WINSTA.dll - Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker PDB symbol for mscorsvr.dll not loaded succeeded Loaded Son of Strike data table version 5 from "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll" Thread 37 ESP EIP 04fb40d0 791cfca0 [FRAME: HelperMethodFrame] 04fb40fc 79ad08b5 [DEFAULT] Void System.Runtime.Remoting.Contexts.Context.DoCallBackFromEE(I4,I4,I4) 04fb44b8 791b33cc [FRAME: GCFrame] 04fb48b4 791b33cc [FRAME: GCFrame] 04fb4cb0 791b33cc [FRAME: GCFrame] 04fb50ac 791b33cc [FRAME: GCFrame] 04fb54a8 791b33cc [FRAME: GCFrame] 04fb58a4 791b33cc [FRAME: GCFrame] 04fb5ca0 791b33cc [FRAME: GCFrame] 04fb609c 791b33cc [FRAME: GCFrame] 04fb6498 791b33cc [FRAME: GCFrame] 04fb6894 791b33cc [FRAME: GCFrame] 04fb6c90 791b33cc [FRAME: GCFrame] 04fb708c 791b33cc [FRAME: GCFrame] 04fb7488 791b33cc [FRAME: GCFrame] 04fb7884 791b33cc [FRAME: GCFrame] 04fb7c80 791b33cc [FRAME: GCFrame] 04fb807c 791b33cc [FRAME: GCFrame] 04fb8478 791b33cc [FRAME: GCFrame] 04fb8874 791b33cc [FRAME: GCFrame] 04fb8c70 791b33cc [FRAME: GCFrame] 04fb906c 791b33cc [FRAME: GCFrame] 04fb9468 791b33cc [FRAME: GCFrame] 04fb9864 791b33cc [FRAME: GCFrame] 04fb9c60 791b33cc [FRAME: GCFrame] 04fba05c 791b33cc [FRAME: GCFrame] 04fba458 791b33cc [FRAME: GCFrame] 04fba854 791b33cc [FRAME: GCFrame] 04fbac50 791b33cc [FRAME: GCFrame] 04fbb04c 791b33cc [FRAME: GCFrame] 04fbb448 791b33cc [FRAME: GCFrame] 04fbb844 791b33cc [FRAME: GCFrame] 04fbbc40 791b33cc [FRAME: GCFrame] 04fbc03c 791b33cc [FRAME: GCFrame] 04fbc438 791b33cc [FRAME: GCFrame] 04fbc834 791b33cc [FRAME: GCFrame] 04fbcc30 791b33cc [FRAME: GCFrame] 04fbd02c 791b33cc [FRAME: GCFrame] 04fbd428 791b33cc [FRAME: GCFrame] 04fbd824 791b33cc [FRAME: GCFrame] 04fbdc20 791b33cc [FRAME: GCFrame] 04fbe01c 791b33cc [FRAME: GCFrame] 04fbe418 791b33cc [FRAME: GCFrame] 04fbe814 791b33cc [FRAME: GCFrame] 04fbec10 791b33cc [FRAME: GCFrame] 04fbf00c 791b33cc [FRAME: GCFrame] 04fbf408 791b33cc [FRAME: GCFrame] 04fbf804 791b33cc [FRAME: GCFrame] 04fbfc00 791b33cc [FRAME: GCFrame] 04fbfffc 791b33cc [FRAME: GCFrame] 04fc03f8 791b33cc [FRAME: GCFrame] 04fc07f4 791b33cc [FRAME: GCFrame] 04fc0bf0 791b33cc [FRAME: GCFrame] 04fc0fec 791b33cc [FRAME: GCFrame] 04fc13e8 791b33cc [FRAME: GCFrame] 04fc17e4 791b33cc [FRAME: GCFrame] 04fc1be0 791b33cc [FRAME: GCFrame] 04fc1fdc 791b33cc [FRAME: GCFrame] 04fc23d8 791b33cc [FRAME: GCFrame] 04fc27d4 791b33cc [FRAME: GCFrame] 04fc2bd0 791b33cc [FRAME: GCFrame] 04fc2fcc 791b33cc [FRAME: GCFrame] 04fc33c8 791b33cc [FRAME: GCFrame] 04fc37c4 791b33cc [FRAME: GCFrame] 04fc3bc0 791b33cc [FRAME: GCFrame] 04fc3fbc 791b33cc [FRAME: GCFrame] 04fc43b8 791b33cc [FRAME: GCFrame] 04fc47b4 791b33cc [FRAME: GCFrame] 04fc4bb0 791b33cc [FRAME: GCFrame] 04fc4fac 791b33cc [FRAME: GCFrame] 04fc53a8 791b33cc [FRAME: GCFrame] 04fc57a4 791b33cc [FRAME: GCFrame] 04fc5ba0 791b33cc [FRAME: GCFrame] 04fc5f9c 791b33cc [FRAME: GCFrame] 04fc6398 791b33cc [FRAME: GCFrame] 04fc6794 791b33cc [FRAME: GCFrame] 04fc6b90 791b33cc [FRAME: GCFrame] 04fc6f8c 791b33cc [FRAME: GCFrame] 04fc7388 791b33cc [FRAME: GCFrame] 04fc7784 791b33cc [FRAME: GCFrame] 04fc7b80 791b33cc [FRAME: GCFrame] 04fc7f7c 791b33cc [FRAME: GCFrame] 04fc8378 791b33cc [FRAME: GCFrame] 04fc8774 791b33cc [FRAME: GCFrame] 04fc8b70 791b33cc [FRAME: GCFrame] 04fc8f6c 791b33cc [FRAME: GCFrame] 04fc9368 791b33cc [FRAME: GCFrame] 04fc9764 791b33cc [FRAME: GCFrame] 04fc9b60 791b33cc [FRAME: GCFrame] 04fc9f5c 791b33cc [FRAME: GCFrame] 04fca358 791b33cc [FRAME: GCFrame] 04fca754 791b33cc [FRAME: GCFrame] 04fcab50 791b33cc [FRAME: GCFrame] 04fcaf4c 791b33cc [FRAME: GCFrame] 04fcb348 791b33cc [FRAME: GCFrame] 04fcb6f4 791b33cc [FRAME: GCFrame] 04fcbaf0 791b33cc [FRAME: GCFrame] 04fcbeec 791b33cc [FRAME: GCFrame] 04fcc2e8 791b33cc [FRAME: GCFrame] 04fcc6e4 791b33cc [FRAME: GCFrame] 04fccae0 791b33cc [FRAME: GCFrame] 04fccedc 791b33cc [FRAME: GCFrame] 04fcd2d8 791b33cc [FRAME: GCFrame] 04fcd684 791b33cc [FRAME: GCFrame] 04fcda80 791b33cc [FRAME: GCFrame] 04fcde7c 791b33cc [FRAME: GCFrame] 04fce278 791b33cc [FRAME: GCFrame] 04fce674 791b33cc [FRAME: GCFrame] 04fcea70 791b33cc [FRAME: GCFrame] 04fcee6c 791b33cc [FRAME: GCFrame] 04fcf268 791b33cc [FRAME: GCFrame] 04fcf664 791b33cc [FRAME: GCFrame] 04fcfa60 791b33cc [FRAME: GCFrame] 04fcfe5c 791b33cc [FRAME: GCFrame] 04fd0258 791b33cc [FRAME: GCFrame] 04fd0654 791b33cc [FRAME: GCFrame] 04fd0a50 791b33cc [FRAME: GCFrame] 04fd0e4c 791b33cc [FRAME: GCFrame] 04fd1248 791b33cc [FRAME: GCFrame] 04fd1644 791b33cc [FRAME: GCFrame] 04fd1a40 791b33cc [FRAME: GCFrame] 04fd1e3c 791b33cc [FRAME: GCFrame] 04fd2238 791b33cc [FRAME: GCFrame] 04fd2634 791b33cc [FRAME: GCFrame] 04fd2a30 791b33cc [FRAME: GCFrame] 04fd2e2c 791b33cc [FRAME: GCFrame] 04fd3228 791b33cc [FRAME: GCFrame] 04fd3624 791b33cc [FRAME: GCFrame] 04fd3a20 791b33cc [FRAME: GCFrame] 04fd3e1c 791b33cc [FRAME: GCFrame] 04fd4218 791b33cc [FRAME: GCFrame] 04fd4614 791b33cc [FRAME: GCFrame] 04fd4a10 791b33cc [FRAME: GCFrame] 04fd4e0c 791b33cc [FRAME: GCFrame] 04fd5208 791b33cc [FRAME: GCFrame] 04fd5604 791b33cc [FRAME: GCFrame] 04fd5a00 791b33cc [FRAME: GCFrame] 04fd5dfc 791b33cc [FRAME: GCFrame] 04fd61f8 791b33cc [FRAME: GCFrame] 04fd65f4 791b33cc [FRAME: GCFrame] 04fd69f0 791b33cc [FRAME: GCFrame] 04fd6dec 791b33cc [FRAME: GCFrame] 04fd71e8 791b33cc [FRAME: GCFrame] 04fd75e4 791b33cc [FRAME: GCFrame] 04fd79e0 791b33cc [FRAME: GCFrame] 04fd7ddc 791b33cc [FRAME: GCFrame] 04fd81d8 791b33cc [FRAME: GCFrame] 04fd85d4 791b33cc [FRAME: GCFrame] 04fd89d0 791b33cc [FRAME: GCFrame] 04fd8dcc 791b33cc [FRAME: GCFrame] 04fd91c8 791b33cc [FRAME: GCFrame] 04fd95c4 791b33cc [FRAME: GCFrame] 04fd99c0 791b33cc [FRAME: GCFrame] 04fd9dbc 791b33cc [FRAME: GCFrame] 04fda1b8 791b33cc [FRAME: GCFrame] 04fda5b4 791b33cc [FRAME: GCFrame] 04fda9b0 791b33cc [FRAME: GCFrame] 04fdadac 791b33cc [FRAME: GCFrame] 04fdb1a8 791b33cc [FRAME: GCFrame] 04fdb5a4 791b33cc [FRAME: GCFrame] 04fdb9a0 791b33cc [FRAME: GCFrame] 04fdbd9c 791b33cc [FRAME: GCFrame] 04fdc198 791b33cc [FRAME: GCFrame] 04fdc594 791b33cc [FRAME: GCFrame] 04fdc990 791b33cc [FRAME: GCFrame] 04fdcd8c 791b33cc [FRAME: GCFrame] 04fdd188 791b33cc [FRAME: GCFrame] 04fdd584 791b33cc [FRAME: GCFrame] 04fdd980 791b33cc [FRAME: GCFrame] 04fddd7c 791b33cc [FRAME: GCFrame] 04fde178 791b33cc [FRAME: GCFrame] 04fde574 791b33cc [FRAME: GCFrame] 04fde970 791b33cc [FRAME: GCFrame] 04fded6c 791b33cc [FRAME: GCFrame] 04fdf168 791b33cc [FRAME: GCFrame] 04fdf564 791b33cc [FRAME: GCFrame] 04fdf960 791b33cc [FRAME: GCFrame] 04fdfd5c 791b33cc [FRAME: GCFrame] 04fe0158 791b33cc [FRAME: GCFrame] 04fe0554 791b33cc [FRAME: GCFrame] 04fe0950 791b33cc [FRAME: GCFrame] 04fe0d4c 791b33cc [FRAME: GCFrame] 04fe1148 791b33cc [FRAME: GCFrame] 04fe1544 791b33cc [FRAME: GCFrame] 04fe1940 791b33cc [FRAME: GCFrame] 04fe1d3c 791b33cc [FRAME: GCFrame] 04fe2138 791b33cc [FRAME: GCFrame] 04fe2534 791b33cc [FRAME: GCFrame] 04fe2930 791b33cc [FRAME: GCFrame] 04fe2d2c 791b33cc [FRAME: GCFrame] 04fe3128 791b33cc [FRAME: GCFrame] 04fe3524 791b33cc [FRAME: GCFrame] 04fe3920 791b33cc [FRAME: GCFrame] 04fe3d1c 791b33cc [FRAME: GCFrame] 04fe4118 791b33cc [FRAME: GCFrame] 04fe4514 791b33cc [FRAME: GCFrame] 04fe4910 791b33cc [FRAME: GCFrame] 04fe4d0c 791b33cc [FRAME: GCFrame] 04fe5108 791b33cc [FRAME: GCFrame] 04fe54a4 791b33cc [FRAME: GCFrame] 04fe58a0 791b33cc [FRAME: GCFrame] 04fe5c9c 791b33cc [FRAME: GCFrame] 04fe6098 791b33cc [FRAME: GCFrame] 04fe6494 791b33cc [FRAME: GCFrame] 04fe6890 791b33cc [FRAME: GCFrame] 04fe6c8c 791b33cc [FRAME: GCFrame] 04fe7088 791b33cc [FRAME: GCFrame] 04fe7484 791b33cc [FRAME: GCFrame] 04fe7880 791b33cc [FRAME: GCFrame] 04fe7c7c 791b33cc [FRAME: GCFrame] 04fe8078 791b33cc [FRAME: GCFrame] 04fe8474 791b33cc [FRAME: GCFrame] 04fe8870 791b33cc [FRAME: GCFrame] 04fe8c6c 791b33cc [FRAME: GCFrame] 04fe9068 791b33cc [FRAME: GCFrame] 04fe9464 791b33cc [FRAME: GCFrame] 04fe9860 791b33cc [FRAME: GCFrame] 04fe9c5c 791b33cc [FRAME: GCFrame] 04fea058 791b33cc [FRAME: GCFrame] 04fea454 791b33cc [FRAME: GCFrame] 04fea850 791b33cc [FRAME: GCFrame] 04feac4c 791b33cc [FRAME: GCFrame] 04feb048 791b33cc [FRAME: GCFrame] 04feb444 791b33cc [FRAME: GCFrame] 04feb840 791b33cc [FRAME: GCFrame] 04febc3c 791b33cc [FRAME: GCFrame] 04fec038 791b33cc [FRAME: GCFrame] 04fec434 791b33cc [FRAME: GCFrame] 04fec830 791b33cc [FRAME: GCFrame] 04fecc2c 791b33cc [FRAME: GCFrame] 04fed028 791b33cc [FRAME: GCFrame] 04fed424 791b33cc [FRAME: GCFrame] 04fed820 791b33cc [FRAME: GCFrame] 04fef180 791b33cc [FRAME: ComPlusMethodFrameGeneric] [DEFAULT] [hasThis] Void Microsoft.SharePoint.Library.SPRequestInternalClass.LookupIISInstance(Boolean,String,String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef I4,ByRef I4) 04fef1b4 0c00e28c [DEFAULT] [hasThis] Void Microsoft.SharePoint.Library.a.a(Boolean,String,String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef I4,ByRef I4) 04fef208 0c00df28 [DEFAULT] Void Microsoft.SharePoint.Administration.SPGlobalAdmin.a(Class Microsoft.SharePoint.Library.a,Class System.Uri,ByRef String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef I4) c0000005 Exception in C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\sos.dll.ClrStack debugger extension. PC: 6028d20b VA: 00135000 R/W: 0 Parameter: 0001003f Begin System Thread Information # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04fb2ffc 791cfcc9 mscorsvr!Ordinal74+0x1fca0 01 04fb3170 791cfc91 mscorsvr!Ordinal74+0x1fcc9 02 04fb3494 7924264b mscorsvr!Ordinal74+0x1fc91 03 04fb34ac 792436b2 mscorsvr!CoEEShutDownCOM+0x48f6 04 04fb3540 7924347b mscorsvr!CoEEShutDownCOM+0x595d 05 04fb3550 7c82eeb2 mscorsvr!CoEEShutDownCOM+0x5726 06 04fb3574 7c82ee84 ntdll!RtlRaiseStatus+0xda 07 04fb393c 7c342526 ntdll!RtlRaiseStatus+0xac 08 04fb3964 7c342482 MSVCR71!global_unwind2+0x18 09 04fb3988 7c82eeb2 MSVCR71!except_handler3+0x75 0a 04fb39ac 7c82ee84 ntdll!RtlRaiseStatus+0xda 0b 04fb3a54 7c82ecc6 ntdll!RtlRaiseStatus+0xac 0c 04fb3da0 7924511d ntdll!KiUserExceptionDispatcher+0xe 0d 04fb3df8 792450a0 mscorsvr!CoEEShutDownCOM+0x73c8 0e 04fb3e20 79245054 mscorsvr!CoEEShutDownCOM+0x734b 0f 04fb3e30 792b7548 mscorsvr!CoEEShutDownCOM+0x72ff 10 04fb4054 791b5411 mscorsvr!ReleaseFusionInterfaces+0x6a53 11 04fb4068 791b93c3 mscorsvr!Ordinal74+0x5411 12 04fb4088 791b9411 mscorsvr!Ordinal74+0x93c3 13 04fb40f4 79ad08b5 mscorsvr!Ordinal74+0x9411 14 00000001 00000000 mscorlib_79990000+0x1408b5 Closing open log file C:\iisstate\output\IISState-6188.log Opened log file 'C:\iisstate\output\IISState-6188.log' *********************** Starting new log output IISState version 3.3.1 Sun Sep 17 13:42:01 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 6188 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 2320 Kernel Time: 0:0:0.46 User Time: 0:0:0.31 *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\w3dt.dll - *** ERROR: Module load completed but symbols could not be loaded for c:\windows\system32\inetsrv\w3wp.exe Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0006fc7c 77e6ba12 ntdll!KiFastSystemCallRet 01 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12 02 0006ff0c 0100187c w3dt!IPM_MESSAGE_PIPE::operator=+0x1b31 03 0006ff44 01001a23 w3wp+0x187c 04 0006ffc0 77e523cd w3wp+0x1a23 05 0006fff0 00000000 kernel32!IsProcessorFeaturePresent+0x9e Thread ID: 1 System Thread ID: 23b8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 009fffb8 77e66063 ntdll!KiFastSystemCallRet 01 009fffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 2 System Thread ID: 17f8 Kernel Time: 0:0:0.46 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00a3ffb8 77e66063 ntdll!KiFastSystemCallRet 01 00a3ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 3 System Thread ID: 1da4 Kernel Time: 0:0:0.156 User Time: 0:0:0.218 *** ERROR: Symbol file could not be found. Defaulted to export symbols for c:\windows\system32\inetsrv\W3TP.dll - Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00c9ff54 5a30249e ntdll!KiFastSystemCallRet 01 00c9ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00c9ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00c9ffb8 77e66063 W3TP+0x1db9 04 00c9ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 4 System Thread ID: 1460 Kernel Time: 0:0:0.437 User Time: 0:0:0.750 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00cdff54 5a30249e ntdll!KiFastSystemCallRet 01 00cdff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00cdffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00cdffb8 77e66063 W3TP+0x1db9 04 00cdffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 5 System Thread ID: 2428 Kernel Time: 0:0:0.484 User Time: 0:0:0.437 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00d1ff54 5a30249e ntdll!KiFastSystemCallRet 01 00d1ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00d1ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00d1ffb8 77e66063 W3TP+0x1db9 04 00d1ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 6 System Thread ID: 218c Kernel Time: 0:0:0.218 User Time: 0:0:0.500 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00d5ff54 5a30249e ntdll!KiFastSystemCallRet 01 00d5ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 00d5ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 00d5ffb8 77e66063 W3TP+0x1db9 04 00d5ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 7 System Thread ID: 1c34 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 00e1ffb8 77e66063 ntdll!KiFastSystemCallRet 01 00e1ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 8 System Thread ID: 24b0 Kernel Time: 0:0:0.46 User Time: 0:0:0.0 Thread Type: HTTP Compression Thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 017efaf8 77e6ba12 ntdll!KiFastSystemCallRet 01 017efb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 02 017effb8 77e66063 w3core!W3_FILE_INFO_CACHE::GetFileCache+0xd784 03 017effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 9 System Thread ID: 1e68 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. OLE32.dll Symbols not found. Unable to proceed with DCOM check. Continuing other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0182ff84 77c5778f ntdll!KiFastSystemCallRet 01 0182ff8c 77c5f7dd RPCRT4!NdrOleFree+0x3c5 02 0182ffac 77c5de88 RPCRT4!I_RpcTransGetThreadEvent+0x188 03 0182ffb8 77e66063 RPCRT4!I_RpcLogEvent+0xe92 04 0182ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 10 System Thread ID: 234c Kernel Time: 0:0:0.46 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\60\bin\stsfltr.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0187ff6c 77e61075 ntdll!KiFastSystemCallRet 01 0187ff88 01831a4c kernel32!WaitForMultipleObjects+0x18 02 0187ffb8 77e66063 stsfltr+0x1a4c 03 0187ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 11 System Thread ID: 26f0 Kernel Time: 0:0:0.125 User Time: 0:0:0.500 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01a3fd14 7739cd08 ntdll!KiFastSystemCallRet 01 01a3fd70 77697483 USER32!PeekMessageW+0x244 02 01a3fd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 01a3fe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 01a3fe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 01a3ff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 01a3ffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 01a3ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 12 System Thread ID: 2764 Kernel Time: 0:0:0.156 User Time: 0:0:0.484 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01acfd14 7739cd08 ntdll!KiFastSystemCallRet 01 01acfd70 77697483 USER32!PeekMessageW+0x244 02 01acfd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 01acfe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 01acfe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 01acff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 01acffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 01acffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 13 System Thread ID: 10f4 Kernel Time: 0:0:0.156 User Time: 0:0:0.468 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01b5fd14 7739cd08 ntdll!KiFastSystemCallRet 01 01b5fd70 77697483 USER32!PeekMessageW+0x244 02 01b5fd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 01b5fe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 01b5fe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 01b5ff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 01b5ffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 01b5ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 14 System Thread ID: 2154 Kernel Time: 0:0:0.171 User Time: 0:0:0.578 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01befd14 7739cd08 ntdll!KiFastSystemCallRet 01 01befd70 77697483 USER32!PeekMessageW+0x244 02 01befd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 01befe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 01befe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 01beff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 01beffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 01beffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 15 System Thread ID: 1d88 Kernel Time: 0:0:0.93 User Time: 0:0:0.515 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01d0fd14 7739cd08 ntdll!KiFastSystemCallRet 01 01d0fd70 77697483 USER32!PeekMessageW+0x244 02 01d0fd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 01d0fe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 01d0fe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 01d0ff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 01d0ffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 01d0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 16 System Thread ID: 2384 Kernel Time: 0:0:0.218 User Time: 0:0:0.656 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 01d9fd14 7739cd08 ntdll!KiFastSystemCallRet 01 01d9fd70 77697483 USER32!PeekMessageW+0x244 02 01d9fd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 01d9fe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 01d9fe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 01d9ff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 01d9ffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 01d9ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 17 System Thread ID: 26cc Kernel Time: 0:0:0.31 User Time: 0:0:0.46 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0226fd28 7739cd08 ntdll!KiFastSystemCallRet 01 0226fd84 77697483 USER32!PeekMessageW+0x244 02 0226fdac 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 0226fe20 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 0226fe54 333a64ee onetutil!VwaitForMultipleObjects+0xa0 05 0226ff80 331cd87c stswel!VeventManager::ThreadHandlerProc+0xde 06 0226ffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 0226ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 18 System Thread ID: 2648 Kernel Time: 0:0:0.687 User Time: 0:0:5.250 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0231fef0 791f043a ntdll!KiFastSystemCallRet 01 0231ff24 791f03e4 mscorsvr!GetAssemblyMDImport+0x72ed 02 0231ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 03 0231ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 19 System Thread ID: 1d38 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0235febc 77e424b7 ntdll!KiFastSystemCallRet 01 0235fecc 791be1a1 kernel32!Sleep+0xf 02 0235ffb8 77e66063 mscorsvr!Ordinal74+0xe1a1 03 0235ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 20 System Thread ID: 23b0 Kernel Time: 0:0:3.937 User Time: 0:2:19.625 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0239fe6c 77e6ba12 ntdll!KiFastSystemCallRet 01 0239fe80 791ccdf0 kernel32!WaitForSingleObject+0x12 02 0239fea4 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 0239ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 0239ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 21 System Thread ID: 1a98 Kernel Time: 0:0:4.625 User Time: 0:2:27.484 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 023dfd6c 77e6ba12 ntdll!KiFastSystemCallRet 01 023dfd80 791ccdf0 kernel32!WaitForSingleObject+0x12 02 023dfda4 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 023dffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 023dffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 22 System Thread ID: 275c Kernel Time: 0:0:3.375 User Time: 0:1:41.609 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0241fdec 77e6ba12 ntdll!KiFastSystemCallRet 01 0241fe00 791ccdf0 kernel32!WaitForSingleObject+0x12 02 0241fe24 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 0241ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 0241ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 23 System Thread ID: 124c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0256ff1c 77e61075 ntdll!KiFastSystemCallRet 01 0256ff38 79228402 kernel32!WaitForMultipleObjects+0x18 02 0256ffa0 79228379 mscorsvr!CoInitializeCor+0x431d 03 0256ffb8 77e66063 mscorsvr!CoInitializeCor+0x4294 04 0256ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 24 System Thread ID: 1f28 Kernel Time: 0:0:2.718 User Time: 0:1:0.421 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 027fff70 77e6ba12 ntdll!KiFastSystemCallRet 01 027fff84 791f3206 kernel32!WaitForSingleObject+0x12 02 027fffac 79224ac3 mscorsvr!GetAssemblyMDImport+0xa0b9 03 027fffb8 77e66063 mscorsvr!CoInitializeCor+0x9de 04 027fffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 25 System Thread ID: 11e0 Kernel Time: 0:0:3.93 User Time: 0:1:3.953 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0283feac 79224ac3 mscorsvr!GetAssemblyMDImport+0xa045 01 0283ffb8 77e66063 mscorsvr!CoInitializeCor+0x9de 02 0283ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 26 System Thread ID: 17b4 Kernel Time: 0:0:2.265 User Time: 0:0:57.437 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0287fd70 77e6ba12 ntdll!KiFastSystemCallRet 01 0287fd84 791f3206 kernel32!WaitForSingleObject+0x12 02 0287fdac 79224ac3 mscorsvr!GetAssemblyMDImport+0xa0b9 03 0287ffb8 77e66063 mscorsvr!CoInitializeCor+0x9de 04 0287ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 27 System Thread ID: 1994 Kernel Time: 0:0:2.609 User Time: 0:1:3.359 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 028bfc70 77e6ba12 ntdll!KiFastSystemCallRet 01 028bfc84 791f3206 kernel32!WaitForSingleObject+0x12 02 028bfcac 79224ac3 mscorsvr!GetAssemblyMDImport+0xa0b9 03 028bffb8 77e66063 mscorsvr!CoInitializeCor+0x9de 04 028bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 28 System Thread ID: 14ec Kernel Time: 0:0:0.406 User Time: 0:0:1.218 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 028ffea4 77e61075 ntdll!KiFastSystemCallRet 01 028ffec0 7927343f kernel32!WaitForMultipleObjects+0x18 02 028ffee0 791f7ae3 mscorsvr!CoEEShutDownCOM+0x356ea 03 028fff24 79232717 mscorsvr!GetAssemblyMDImport+0xe996 04 028fffb8 77e66063 mscorsvr!DllGetClassObjectInternal+0x80b0 05 028fffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 29 System Thread ID: 1250 Kernel Time: 0:0:2.484 User Time: 0:1:9.765 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0294fcec 77e6ba12 ntdll!KiFastSystemCallRet 01 0294fd00 791ccdf0 kernel32!WaitForSingleObject+0x12 02 0294fd24 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 0294ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 0294ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 30 System Thread ID: 2654 Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 02c1ffac 791c6bd7 ntdll!KiFastSystemCallRet 01 02c1ffec 00000000 mscorsvr!Ordinal74+0x16bd7 Thread ID: 31 System Thread ID: 1eec Kernel Time: 0:0:0.375 User Time: 0:0:1.46 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0308fd14 7739cd08 ntdll!KiFastSystemCallRet 01 0308fd70 77697483 USER32!PeekMessageW+0x244 02 0308fd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 0308fe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 0308fe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 0308ff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 0308ffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 0308ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 32 System Thread ID: 1a5c Kernel Time: 0:0:0.187 User Time: 0:0:1.62 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0311fd14 7739cd08 ntdll!KiFastSystemCallRet 01 0311fd70 77697483 USER32!PeekMessageW+0x244 02 0311fd98 776c5fe1 ole32!CoUnmarshalInterface+0x141b 03 0311fe0c 3319aa05 ole32!CoWaitForMultipleHandles+0xe6 04 0311fe40 331ce004 onetutil!VwaitForMultipleObjects+0xa0 05 0311ff80 331cd87c onetutil!COWSThreadWithHeap::Uninitialize+0x2fa 06 0311ffb8 77e66063 onetutil!VthreadContext::release+0x16e 07 0311ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 33 System Thread ID: 184c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\comsvcs.dll - Thread Type: Idle ASP thread # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 032bfd74 77e6ba12 ntdll!KiFastSystemCallRet 01 032bfd88 75bb22b9 kernel32!WaitForSingleObject+0x12 02 032bffb8 77e66063 comsvcs!DispManGetContext+0x24e 03 032bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 34 System Thread ID: 1e64 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0419fea0 77e61075 ntdll!KiFastSystemCallRet 01 0419febc 333e63cb kernel32!WaitForMultipleObjects+0x18 02 0419ff00 00000004 stswel!VvirusCheckReport::getDownloadReportUrl+0x1ae Thread ID: 35 System Thread ID: 2160 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USERENV.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0455ff6c 77e61075 ntdll!KiFastSystemCallRet 01 0455ff88 76928415 kernel32!WaitForMultipleObjects+0x18 02 0455ffb8 77e66063 USERENV!GetProfilesDirectoryW+0x1de 03 0455ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 36 System Thread ID: 1f4c Kernel Time: 0:0:0.187 User Time: 0:0:0.328 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04beff54 5a30249e ntdll!KiFastSystemCallRet 01 04beff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 04beffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 04beffb8 77e66063 W3TP+0x1db9 04 04beffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 37 System Thread ID: 1b00 Kernel Time: 0:0:4.968 User Time: 0:2:48.578 Other information: Thread is throwing an exception. Checking for known issues. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 37 ESP EIP 04fb40d0 791cfca0 [FRAME: HelperMethodFrame] 04fb40fc 79ad08b5 [DEFAULT] Void System.Runtime.Remoting.Contexts.Context.DoCallBackFromEE(I4,I4,I4) 04fb44b8 791b33cc [FRAME: GCFrame] 04fb48b4 791b33cc [FRAME: GCFrame] 04fb4cb0 791b33cc [FRAME: GCFrame] 04fb50ac 791b33cc [FRAME: GCFrame] 04fb54a8 791b33cc [FRAME: GCFrame] 04fb58a4 791b33cc [FRAME: GCFrame] 04fb5ca0 791b33cc [FRAME: GCFrame] 04fb609c 791b33cc [FRAME: GCFrame] 04fb6498 791b33cc [FRAME: GCFrame] 04fb6894 791b33cc [FRAME: GCFrame] 04fb6c90 791b33cc [FRAME: GCFrame] 04fb708c 791b33cc [FRAME: GCFrame] 04fb7488 791b33cc [FRAME: GCFrame] 04fb7884 791b33cc [FRAME: GCFrame] 04fb7c80 791b33cc [FRAME: GCFrame] 04fb807c 791b33cc [FRAME: GCFrame] 04fb8478 791b33cc [FRAME: GCFrame] 04fb8874 791b33cc [FRAME: GCFrame] 04fb8c70 791b33cc [FRAME: GCFrame] 04fb906c 791b33cc [FRAME: GCFrame] 04fb9468 791b33cc [FRAME: GCFrame] 04fb9864 791b33cc [FRAME: GCFrame] 04fb9c60 791b33cc [FRAME: GCFrame] 04fba05c 791b33cc [FRAME: GCFrame] 04fba458 791b33cc [FRAME: GCFrame] 04fba854 791b33cc [FRAME: GCFrame] 04fbac50 791b33cc [FRAME: GCFrame] 04fbb04c 791b33cc [FRAME: GCFrame] 04fbb448 791b33cc [FRAME: GCFrame] 04fbb844 791b33cc [FRAME: GCFrame] 04fbbc40 791b33cc [FRAME: GCFrame] 04fbc03c 791b33cc [FRAME: GCFrame] 04fbc438 791b33cc [FRAME: GCFrame] 04fbc834 791b33cc [FRAME: GCFrame] 04fbcc30 791b33cc [FRAME: GCFrame] 04fbd02c 791b33cc [FRAME: GCFrame] 04fbd428 791b33cc [FRAME: GCFrame] 04fbd824 791b33cc [FRAME: GCFrame] 04fbdc20 791b33cc [FRAME: GCFrame] 04fbe01c 791b33cc [FRAME: GCFrame] 04fbe418 791b33cc [FRAME: GCFrame] 04fbe814 791b33cc [FRAME: GCFrame] 04fbec10 791b33cc [FRAME: GCFrame] 04fbf00c 791b33cc [FRAME: GCFrame] 04fbf408 791b33cc [FRAME: GCFrame] 04fbf804 791b33cc [FRAME: GCFrame] 04fbfc00 791b33cc [FRAME: GCFrame] 04fbfffc 791b33cc [FRAME: GCFrame] 04fc03f8 791b33cc [FRAME: GCFrame] 04fc07f4 791b33cc [FRAME: GCFrame] 04fc0bf0 791b33cc [FRAME: GCFrame] 04fc0fec 791b33cc [FRAME: GCFrame] 04fc13e8 791b33cc [FRAME: GCFrame] 04fc17e4 791b33cc [FRAME: GCFrame] 04fc1be0 791b33cc [FRAME: GCFrame] 04fc1fdc 791b33cc [FRAME: GCFrame] 04fc23d8 791b33cc [FRAME: GCFrame] 04fc27d4 791b33cc [FRAME: GCFrame] 04fc2bd0 791b33cc [FRAME: GCFrame] 04fc2fcc 791b33cc [FRAME: GCFrame] 04fc33c8 791b33cc [FRAME: GCFrame] 04fc37c4 791b33cc [FRAME: GCFrame] 04fc3bc0 791b33cc [FRAME: GCFrame] 04fc3fbc 791b33cc [FRAME: GCFrame] 04fc43b8 791b33cc [FRAME: GCFrame] 04fc47b4 791b33cc [FRAME: GCFrame] 04fc4bb0 791b33cc [FRAME: GCFrame] 04fc4fac 791b33cc [FRAME: GCFrame] 04fc53a8 791b33cc [FRAME: GCFrame] 04fc57a4 791b33cc [FRAME: GCFrame] 04fc5ba0 791b33cc [FRAME: GCFrame] 04fc5f9c 791b33cc [FRAME: GCFrame] 04fc6398 791b33cc [FRAME: GCFrame] 04fc6794 791b33cc [FRAME: GCFrame] 04fc6b90 791b33cc [FRAME: GCFrame] 04fc6f8c 791b33cc [FRAME: GCFrame] 04fc7388 791b33cc [FRAME: GCFrame] 04fc7784 791b33cc [FRAME: GCFrame] 04fc7b80 791b33cc [FRAME: GCFrame] 04fc7f7c 791b33cc [FRAME: GCFrame] 04fc8378 791b33cc [FRAME: GCFrame] 04fc8774 791b33cc [FRAME: GCFrame] 04fc8b70 791b33cc [FRAME: GCFrame] 04fc8f6c 791b33cc [FRAME: GCFrame] 04fc9368 791b33cc [FRAME: GCFrame] 04fc9764 791b33cc [FRAME: GCFrame] 04fc9b60 791b33cc [FRAME: GCFrame] 04fc9f5c 791b33cc [FRAME: GCFrame] 04fca358 791b33cc [FRAME: GCFrame] 04fca754 791b33cc [FRAME: GCFrame] 04fcab50 791b33cc [FRAME: GCFrame] 04fcaf4c 791b33cc [FRAME: GCFrame] 04fcb348 791b33cc [FRAME: GCFrame] 04fcb6f4 791b33cc [FRAME: GCFrame] 04fcbaf0 791b33cc [FRAME: GCFrame] 04fcbeec 791b33cc [FRAME: GCFrame] 04fcc2e8 791b33cc [FRAME: GCFrame] 04fcc6e4 791b33cc [FRAME: GCFrame] 04fccae0 791b33cc [FRAME: GCFrame] 04fccedc 791b33cc [FRAME: GCFrame] 04fcd2d8 791b33cc [FRAME: GCFrame] 04fcd684 791b33cc [FRAME: GCFrame] 04fcda80 791b33cc [FRAME: GCFrame] 04fcde7c 791b33cc [FRAME: GCFrame] 04fce278 791b33cc [FRAME: GCFrame] 04fce674 791b33cc [FRAME: GCFrame] 04fcea70 791b33cc [FRAME: GCFrame] 04fcee6c 791b33cc [FRAME: GCFrame] 04fcf268 791b33cc [FRAME: GCFrame] 04fcf664 791b33cc [FRAME: GCFrame] 04fcfa60 791b33cc [FRAME: GCFrame] 04fcfe5c 791b33cc [FRAME: GCFrame] 04fd0258 791b33cc [FRAME: GCFrame] 04fd0654 791b33cc [FRAME: GCFrame] 04fd0a50 791b33cc [FRAME: GCFrame] 04fd0e4c 791b33cc [FRAME: GCFrame] 04fd1248 791b33cc [FRAME: GCFrame] 04fd1644 791b33cc [FRAME: GCFrame] 04fd1a40 791b33cc [FRAME: GCFrame] 04fd1e3c 791b33cc [FRAME: GCFrame] 04fd2238 791b33cc [FRAME: GCFrame] 04fd2634 791b33cc [FRAME: GCFrame] 04fd2a30 791b33cc [FRAME: GCFrame] 04fd2e2c 791b33cc [FRAME: GCFrame] 04fd3228 791b33cc [FRAME: GCFrame] 04fd3624 791b33cc [FRAME: GCFrame] 04fd3a20 791b33cc [FRAME: GCFrame] 04fd3e1c 791b33cc [FRAME: GCFrame] 04fd4218 791b33cc [FRAME: GCFrame] 04fd4614 791b33cc [FRAME: GCFrame] 04fd4a10 791b33cc [FRAME: GCFrame] 04fd4e0c 791b33cc [FRAME: GCFrame] 04fd5208 791b33cc [FRAME: GCFrame] 04fd5604 791b33cc [FRAME: GCFrame] 04fd5a00 791b33cc [FRAME: GCFrame] 04fd5dfc 791b33cc [FRAME: GCFrame] 04fd61f8 791b33cc [FRAME: GCFrame] 04fd65f4 791b33cc [FRAME: GCFrame] 04fd69f0 791b33cc [FRAME: GCFrame] 04fd6dec 791b33cc [FRAME: GCFrame] 04fd71e8 791b33cc [FRAME: GCFrame] 04fd75e4 791b33cc [FRAME: GCFrame] 04fd79e0 791b33cc [FRAME: GCFrame] 04fd7ddc 791b33cc [FRAME: GCFrame] 04fd81d8 791b33cc [FRAME: GCFrame] 04fd85d4 791b33cc [FRAME: GCFrame] 04fd89d0 791b33cc [FRAME: GCFrame] 04fd8dcc 791b33cc [FRAME: GCFrame] 04fd91c8 791b33cc [FRAME: GCFrame] 04fd95c4 791b33cc [FRAME: GCFrame] 04fd99c0 791b33cc [FRAME: GCFrame] 04fd9dbc 791b33cc [FRAME: GCFrame] 04fda1b8 791b33cc [FRAME: GCFrame] 04fda5b4 791b33cc [FRAME: GCFrame] 04fda9b0 791b33cc [FRAME: GCFrame] 04fdadac 791b33cc [FRAME: GCFrame] 04fdb1a8 791b33cc [FRAME: GCFrame] 04fdb5a4 791b33cc [FRAME: GCFrame] 04fdb9a0 791b33cc [FRAME: GCFrame] 04fdbd9c 791b33cc [FRAME: GCFrame] 04fdc198 791b33cc [FRAME: GCFrame] 04fdc594 791b33cc [FRAME: GCFrame] 04fdc990 791b33cc [FRAME: GCFrame] 04fdcd8c 791b33cc [FRAME: GCFrame] 04fdd188 791b33cc [FRAME: GCFrame] 04fdd584 791b33cc [FRAME: GCFrame] 04fdd980 791b33cc [FRAME: GCFrame] 04fddd7c 791b33cc [FRAME: GCFrame] 04fde178 791b33cc [FRAME: GCFrame] 04fde574 791b33cc [FRAME: GCFrame] 04fde970 791b33cc [FRAME: GCFrame] 04fded6c 791b33cc [FRAME: GCFrame] 04fdf168 791b33cc [FRAME: GCFrame] 04fdf564 791b33cc [FRAME: GCFrame] 04fdf960 791b33cc [FRAME: GCFrame] 04fdfd5c 791b33cc [FRAME: GCFrame] 04fe0158 791b33cc [FRAME: GCFrame] 04fe0554 791b33cc [FRAME: GCFrame] 04fe0950 791b33cc [FRAME: GCFrame] 04fe0d4c 791b33cc [FRAME: GCFrame] 04fe1148 791b33cc [FRAME: GCFrame] 04fe1544 791b33cc [FRAME: GCFrame] 04fe1940 791b33cc [FRAME: GCFrame] 04fe1d3c 791b33cc [FRAME: GCFrame] 04fe2138 791b33cc [FRAME: GCFrame] 04fe2534 791b33cc [FRAME: GCFrame] 04fe2930 791b33cc [FRAME: GCFrame] 04fe2d2c 791b33cc [FRAME: GCFrame] 04fe3128 791b33cc [FRAME: GCFrame] 04fe3524 791b33cc [FRAME: GCFrame] 04fe3920 791b33cc [FRAME: GCFrame] 04fe3d1c 791b33cc [FRAME: GCFrame] 04fe4118 791b33cc [FRAME: GCFrame] 04fe4514 791b33cc [FRAME: GCFrame] 04fe4910 791b33cc [FRAME: GCFrame] 04fe4d0c 791b33cc [FRAME: GCFrame] 04fe5108 791b33cc [FRAME: GCFrame] 04fe54a4 791b33cc [FRAME: GCFrame] 04fe58a0 791b33cc [FRAME: GCFrame] 04fe5c9c 791b33cc [FRAME: GCFrame] 04fe6098 791b33cc [FRAME: GCFrame] 04fe6494 791b33cc [FRAME: GCFrame] 04fe6890 791b33cc [FRAME: GCFrame] 04fe6c8c 791b33cc [FRAME: GCFrame] 04fe7088 791b33cc [FRAME: GCFrame] 04fe7484 791b33cc [FRAME: GCFrame] 04fe7880 791b33cc [FRAME: GCFrame] 04fe7c7c 791b33cc [FRAME: GCFrame] 04fe8078 791b33cc [FRAME: GCFrame] 04fe8474 791b33cc [FRAME: GCFrame] 04fe8870 791b33cc [FRAME: GCFrame] 04fe8c6c 791b33cc [FRAME: GCFrame] 04fe9068 791b33cc [FRAME: GCFrame] 04fe9464 791b33cc [FRAME: GCFrame] 04fe9860 791b33cc [FRAME: GCFrame] 04fe9c5c 791b33cc [FRAME: GCFrame] 04fea058 791b33cc [FRAME: GCFrame] 04fea454 791b33cc [FRAME: GCFrame] 04fea850 791b33cc [FRAME: GCFrame] 04feac4c 791b33cc [FRAME: GCFrame] 04feb048 791b33cc [FRAME: GCFrame] 04feb444 791b33cc [FRAME: GCFrame] 04feb840 791b33cc [FRAME: GCFrame] 04febc3c 791b33cc [FRAME: GCFrame] 04fec038 791b33cc [FRAME: GCFrame] 04fec434 791b33cc [FRAME: GCFrame] 04fec830 791b33cc [FRAME: GCFrame] 04fecc2c 791b33cc [FRAME: GCFrame] 04fed028 791b33cc [FRAME: GCFrame] 04fed424 791b33cc [FRAME: GCFrame] 04fed820 791b33cc [FRAME: GCFrame] 04fef180 791b33cc [FRAME: ComPlusMethodFrameGeneric] [DEFAULT] [hasThis] Void Microsoft.SharePoint.Library.SPRequestInternalClass.LookupIISInstance(Boolean,String,String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef I4,ByRef I4) 04fef1b4 0c00e28c [DEFAULT] [hasThis] Void Microsoft.SharePoint.Library.a.a(Boolean,String,String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef I4,ByRef I4) 04fef208 0c00df28 [DEFAULT] Void Microsoft.SharePoint.Administration.SPGlobalAdmin.a(Class Microsoft.SharePoint.Library.a,Class System.Uri,ByRef String,ByRef String,ByRef String,ByRef String,ByRef String,ByRef I4) c0000005 Exception in C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\sos.dll.ClrStack debugger extension. PC: 6028d20b VA: 00135000 R/W: 0 Parameter: 0001003f Begin System Thread Information # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 04fb2ffc 791cfcc9 mscorsvr!Ordinal74+0x1fca0 01 04fb3170 791cfc91 mscorsvr!Ordinal74+0x1fcc9 02 04fb3494 7924264b mscorsvr!Ordinal74+0x1fc91 03 04fb34ac 792436b2 mscorsvr!CoEEShutDownCOM+0x48f6 04 04fb3540 7924347b mscorsvr!CoEEShutDownCOM+0x595d 05 04fb3550 7c82eeb2 mscorsvr!CoEEShutDownCOM+0x5726 06 04fb3574 7c82ee84 ntdll!RtlRaiseStatus+0xda 07 04fb393c 7c342526 ntdll!RtlRaiseStatus+0xac 08 04fb3964 7c342482 MSVCR71!global_unwind2+0x18 09 04fb3988 7c82eeb2 MSVCR71!except_handler3+0x75 0a 04fb39ac 7c82ee84 ntdll!RtlRaiseStatus+0xda 0b 04fb3a54 7c82ecc6 ntdll!RtlRaiseStatus+0xac 0c 04fb3da0 7924511d ntdll!KiUserExceptionDispatcher+0xe 0d 04fb3df8 792450a0 mscorsvr!CoEEShutDownCOM+0x73c8 0e 04fb3e20 79245054 mscorsvr!CoEEShutDownCOM+0x734b 0f 04fb3e30 792b7548 mscorsvr!CoEEShutDownCOM+0x72ff 10 04fb4054 791b5411 mscorsvr!ReleaseFusionInterfaces+0x6a53 11 04fb4068 791b93c3 mscorsvr!Ordinal74+0x5411 12 04fb4088 791b9411 mscorsvr!Ordinal74+0x93c3 13 04fb40f4 79ad08b5 mscorsvr!Ordinal74+0x9411 14 00000001 00000000 mscorlib_79990000+0x1408b5 Thread ID: 38 System Thread ID: 1f94 Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0511ff40 77e6ba12 ntdll!KiFastSystemCallRet 01 0511ff54 77723dde kernel32!WaitForSingleObject+0x12 02 0511ff70 776ec829 ole32!CoInstall+0xf8 03 0511ff90 776cf2a3 ole32!CreateClassMoniker+0x272 04 0511ff98 776b2307 ole32!OleDoAutoConvert+0x1036 05 0511ffb8 77e66063 ole32!IsValidInterface+0x4db 06 0511ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 39 System Thread ID: 11a4 Kernel Time: 0:0:2.843 User Time: 0:1:25.31 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 05ecfa6c 77e6ba12 ntdll!KiFastSystemCallRet 01 05ecfa80 791ccdf0 kernel32!WaitForSingleObject+0x12 02 05ecfaa4 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 05ecffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 05ecffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 40 System Thread ID: 96c Kernel Time: 0:0:5.875 User Time: 0:3:57.140 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 05f0f9ec 77e6ba12 ntdll!KiFastSystemCallRet 01 05f0fa00 791ccdf0 kernel32!WaitForSingleObject+0x12 02 05f0fa24 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 05f0ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 05f0ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 41 System Thread ID: f04 Kernel Time: 0:0:3.890 User Time: 0:2:20.187 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0628f96c 77e6ba12 ntdll!KiFastSystemCallRet 01 0628f980 791ccdf0 kernel32!WaitForSingleObject+0x12 02 0628f9a4 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 0628ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 0628ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 42 System Thread ID: 252c Kernel Time: 0:0:3.421 User Time: 0:1:45.46 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 062cf8ec 77e6ba12 ntdll!KiFastSystemCallRet 01 062cf900 791ccdf0 kernel32!WaitForSingleObject+0x12 02 062cf924 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 062cffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 062cffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 43 System Thread ID: 20a4 Kernel Time: 0:0:2.875 User Time: 0:1:36.546 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0630f86c 77e6ba12 ntdll!KiFastSystemCallRet 01 0630f880 791ccdf0 kernel32!WaitForSingleObject+0x12 02 0630f8a4 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 0630ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 0630ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 44 System Thread ID: 858 Kernel Time: 0:0:3.921 User Time: 0:2:22.656 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 068ef7ec 77e6ba12 ntdll!KiFastSystemCallRet 01 068ef800 791ccdf0 kernel32!WaitForSingleObject+0x12 02 068ef824 791f03e4 mscorsvr!Ordinal74+0x1cdf0 03 068effb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 04 068effec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 45 System Thread ID: 2308 Kernel Time: 0:0:0.750 User Time: 0:0:0.578 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0907ff90 792341e8 ntdll!KiFastSystemCallRet 01 0907ffb8 77e66063 mscorsvr!DllGetClassObjectInternal+0x9b81 02 0907ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 46 System Thread ID: 1fc0 Kernel Time: 0:0:2.734 User Time: 0:0:21.312 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0c71f670 791f043a ntdll!KiFastSystemCallRet 01 0c71f6a4 791f03e4 mscorsvr!GetAssemblyMDImport+0x72ed 02 0c71ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 03 0c71ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 47 System Thread ID: 2590 Kernel Time: 0:0:0.62 User Time: 0:0:0.0 *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.3790.1830_x-ww_24C40C58\gdiplus.dll - Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0cdcfef4 7739cd08 ntdll!KiFastSystemCallRet 01 0cdcff50 7738e381 USER32!PeekMessageW+0x244 02 0cdcff6c 4dda6ad4 USER32!MsgWaitForMultipleObjects+0x1f 03 0cdcffb8 77e66063 gdiplus!GdipCreateSolidFill+0x1fea 04 0cdcffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 48 System Thread ID: 1194 Kernel Time: 0:0:0.859 User Time: 0:0:6.234 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 0d05f270 791f043a ntdll!KiFastSystemCallRet 01 0d05f2a4 791f03e4 mscorsvr!GetAssemblyMDImport+0x72ed 02 0d05ffb8 77e66063 mscorsvr!GetAssemblyMDImport+0x7297 03 0d05ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 49 System Thread ID: 15d4 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 25a8ff34 77694ff1 ntdll!KiFastSystemCallRet 01 25a8ff74 776cf35b ole32!GetHGlobalFromStream+0x13c3 02 25a8ff90 776cf2a3 ole32!OleDoAutoConvert+0x10ee 03 25a8ff98 776b2307 ole32!OleDoAutoConvert+0x1036 04 25a8ffb8 77e66063 ole32!IsValidInterface+0x4db 05 25a8ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 50 System Thread ID: 13e4 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. OLE32.dll Symbols not found. Unable to proceed with DCOM check. Continuing other analysis. # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2637ff84 77c5778f ntdll!KiFastSystemCallRet 01 2637ff8c 77c5f7dd RPCRT4!NdrOleFree+0x3c5 02 2637ffac 77c5de88 RPCRT4!I_RpcTransGetThreadEvent+0x188 03 2637ffb8 77e66063 RPCRT4!I_RpcLogEvent+0xe92 04 2637ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 51 System Thread ID: 1cd0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2645ffb8 77e66063 ntdll!KiFastSystemCallRet 01 2645ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 52 System Thread ID: d20 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 264dffb8 77e66063 ntdll!KiFastSystemCallRet 01 264dffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 53 System Thread ID: 2004 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2d22ffb8 77e66063 ntdll!KiFastSystemCallRet 01 2d22ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 54 System Thread ID: 16bc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2d0affb8 77e66063 ntdll!KiFastSystemCallRet 01 2d0affec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 55 System Thread ID: 185c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2d16ffb8 77e66063 ntdll!KiFastSystemCallRet 01 2d16ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 56 System Thread ID: 20dc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2d3bffb8 77e66063 ntdll!KiFastSystemCallRet 01 2d3bffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 57 System Thread ID: 21a0 Kernel Time: 0:0:0.31 User Time: 0:0:0.31 Thread Type: HTTP Listener # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2659ff54 5a30249e ntdll!KiFastSystemCallRet 01 2659ff8c 5a3026bc W3TP!THREAD_POOL::PostCompletion+0x89 02 2659ffa0 5a301db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153 03 2659ffb8 77e66063 W3TP+0x1db9 04 2659ffec 00000000 kernel32!GetModuleFileNameA+0xeb Thread ID: 58 System Thread ID: 22fc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 2d55ffb8 77e66063 ntdll!KiFastSystemCallRet 01 2d55ffec 00000000 kernel32!GetModuleFileNameA+0xeb Closing open log file C:\iisstate\output\IISState-6188.log Tag: Search Link Problem Tag: 387684
      • 25
        • WebSite Creation Script and Caching Static Pages Issue Hello All, I have a web site creation script that I wrote for IIS 5.0 and am using a tweaked version it in IIS 6.0. The web site is created and works fine except for static pages are being cached. If I do a IISRESET the caching issue is gone until I make a change to the static page again. The weird things is that when a site is created manually in IIS 6.0 the caching issue does not happen. I have been able to reproduce this issue on 2 different 2003 Server Web Edition and 2003 Enterprise Edition. Anyone have a idea's? Yes, I have tried the no-cache meta tag in the html file, no good. I have also tried the no-cache custom header in IIS but still no good. I tried the following reg edit, UriEnableCache from a MS KB, http://support.microsoft.com/?id=820129 . The only IIS Caching that I am aware of in IIS 6.0 is for ASP and I turned that option off as well and still no good. I have rebooted after each fix I tried as well. I have even gone as far as looking and comparing the metabase info for the sites and the differences I copied into the scripted site settings, did a iisreset and still no go. Below is the bulk of the code that is used to create the site. Remember this issue is only with users created by the script. Function createSite '// Creates web site Dim ServerComment,RootDirectory,IpAddress,PortNum,HostName Dim BindingString Dim aryBindings(1) ServerComment = domain RootDirectory = websitesdir & domain & "\" IpAddress = "172.16.4.35" PortNum = "80" HostName = domain aryBindings(0)= IpAddress & ":" & PortNum & ":" & HostName aryBindings(1)= IpAddress & ":" & PortNum & ":www." & HostName 'SiteNumber = 500 Set w3svc = GetObject("IIS://" & computer & "/w3svc") Set NewWebServer = w3svc.Create("IIsWebServer", N