Opened log file 'C:\IISState\output\IISState-556.log'

***********************
Starting new log output
IISState version 3.3.1

Mon May 10 00:12:17 2004

OS = Windows 2000
Executable: inetinfo.exe
PID = 556

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: b20
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f89c 7c5785d1 ntdll!ZwReadFile+0xb
01 0006f910 7c2e4cd9 KERNEL32!ReadFile+0x181
02 0006f93c 7c2e4b5f ADVAPI32!ScGetPipeInput+0x28
03 0006f9b8 7c2e6632 ADVAPI32!ScDispatcherLoop+0x4a
04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
06 0006ff70 01002fbf inetinfo!main+0x654
07 0006ffc0 7c581af6 inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: a18
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 005afd1c 7c573b28 ntdll!ZwWaitForSingleObject+0xb
01 005afd44 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
02 005afd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
03 005afd70 01002440 iisadmin!ServiceEntry+0x156
04 005affa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
05 005affb4 7c57438b ADVAPI32!ScSvcctrlThreadW+0xe
06 005affec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: 6a0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 006efe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 006efeac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 006eff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 006eff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 006eff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 006effb4 7c57438b MSVCRT!_endthreadex+0xc1
06 006effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 930
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0072fe5c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0072feac 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0072ff08 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0072ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0072ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0072ffb4 7c57438b MSVCRT!_endthreadex+0xc1
06 0072ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 744
Kernel Time: 0:0:0.15
User Time: 0:0:0.718
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00bbfe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00bbff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00bbff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00bbffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 00bbffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
05 00bbffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: 89c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00bfff5c 7c573a4e ntdll!NtDelayExecution+0xb
01 00bfff7c 7c573a22 KERNEL32!SleepEx+0x32
02 00bfff88 77ab8ffb KERNEL32!Sleep+0xb
03 00bfff90 77ab50ee ole32!CROIDTable::WorkerThreadLoop+0xc
04 00bfffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
05 00bfffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 00bfffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: 998
Kernel Time: 0:0:0.46
User Time: 0:0:0.78
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00c4fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 00c4ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00c4ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00c4ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 00c4ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
05 00c4ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 60c
Kernel Time: 0:0:0.375
User Time: 0:0:1.31
Thread Type: Other
# ChildEBP RetAddr
00 0147fc1c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0147fc6c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0147fcc8 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 0147fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 0147fd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 0147fd70 01002440 w3svc!ServiceEntry+0x1b5
06 0147ffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
07 0147ffb4 7c57438b ADVAPI32!ScSvcctrlThreadW+0xe
08 0147ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 8
System Thread ID: 738
Kernel Time: 0:0:0.31
User Time: 0:0:0.437
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 014bfc1c 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 014bfc6c 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
02 014bfcc8 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
03 014bfce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 014bfd30 6b561a78 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 014bfd70 01002440 SMTPSVC!ServiceEntry+0x136
06 014bffa4 7c2e4e9b inetinfo!InetinfoStartService+0x2bd
07 014bffb4 7c57438b ADVAPI32!ScSvcctrlThreadW+0xe
08 014bffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: b48
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0157ff5c 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 0157ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
02 0157ffb4 7c57438b ISATQ!I_AtqOplockThreadFunc+0x32
03 0157ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: 3cc
Kernel Time: 0:0:5.203
User Time: 0:0:0.531
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 015bff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 015bff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 015bffb4 7c57438b ISATQ!AtqPoolThread+0x40
03 015bffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: a38
Kernel Time: 0:0:5.78
User Time: 0:0:0.640
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 015fff50 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
01 015fff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 015fffb4 7c57438b ISATQ!AtqPoolThread+0x40
03 015fffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: 46c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 0183fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
01 0183ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0183ff78 77d35924 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0183ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x4f
04 0183ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
05 0183ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: 860
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0187fd20 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
01 0187fd70 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
02 0187fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
03 0187ffb4 7c57438b RTUTILS!TraceServerThread+0xde
04 0187ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14