restarting IIS or executing commands from remote

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Services.exe using high memory I have a Windows 2000 Server box (IIS 5) with 2GB RAM. It hosts 5 FTP sites (all of them with very light traffic), 1 Asp.net site (with about 10K hits per day), and 3 custom .Net windows services written in C#. Every few days, the FTP sites quit functioning. The box was rebooted yesterday, and it has been up for about 24hrs straight right now, and in task manager it shows that the two biggest memory users are services.exe with 116MB used, and aspnet_wp.exe with 93 MB used. It seems to me that services.exe may be leaking memory. Does that figure sound high to anyone else? Maybe the custom .net windows services have some problems. I also have a Windows Server 2003 box (IIS 6) with 40 sites or so, and services.exe on that box is only using 16 MB! Any ideas? TIA, -- Berry Morgan JSO Tag: restarting IIS or executing commands from remote Tag: 363335
  - 2
    - User domain is wrong Hi All, I have a problem with windows integrated authentication. This is how I want it to work: The user log in att his computer at the office, then opens Internet Explorer and goes to our SAP Portal and get logged in witht the same domain/username as when he logged in on the domain on his computer. Now, this works fine for everyone except for one user. He logs on his computer as everyone else. But when he opens his browser and gets to the Portal he gets prompted for username and password. When I check the log file on the IIS he gets logged as serverdomain/guest instead of domain_he_logged_in_on/username. Does anyone here know how to solve this? Another user had the same problem before, but he solved it by changing the setting to username/password and then logged in with domain/username and password, the changed back to windows integrated authentication and since then everything has worked for him. Of course I could do that for the current user too, but I'd like to understand what the problem is and how to solve that. Any ideas? --- Regards, Lennart Tag: restarting IIS or executing commands from remote Tag: 363332
  - 3
    - Dllhost.exe memory leak Good Day; We have a leak in dllhost.exe, I have downloaded and installed IISstate and I was wondering if I can attach it to a PID before an actual hang to see if the logs will point us in the right direction. Or do I have to wait for a hang before I run IISstate? Thanks. Tag: restarting IIS or executing commands from remote Tag: 363331
  - 4
    - validationsummary iis 6.0 doesn't work Hy to everybody , I have a problem regarding IIS5 to IIS6.0 migration: I am developing a web site on IIS5 on wxp machine and in an insert data pages i have put a ValidationSummary object for the submiting data. Everything has worked fine until i have decided to migrate the application on IIS6.0 on aWindow Server 2003 machine: here the validationsummary doesn't block the data posting (at leat it seems to me) Does someone help me? regards gelt75. Tag: restarting IIS or executing commands from remote Tag: 363330
  - 5
    - use specific ip address and not 0.0.0.0 Hi! I need to run several services on port80 on my server, and I have lots of ip addresses. The other services only uses one ip address, but IIS tries to get all ip adresses (0.0.0.0) In the following I have hidden ip adresses: When other service started: netstat -an | grep LISTEN 456.456.456.456:80 0.0.0.0:0 LISTENING 456.456.456.457:80 0.0.0.0:0 LISTENING when IIS is started: 0.0.0.0:80 0.0.0.0 LISTENING How do I get IIS only to listen on one ip ? I have tried some articles on microsoft.com: http://support.microsoft.com/default.aspx?scid=kb;EN-US;813368 http://support.microsoft.com/default.aspx?scid=kb;EN-US;238131 but it do not seem to have any effect... Any good advice ? -- Sune Tag: restarting IIS or executing commands from remote Tag: 363327
  - 6
    - IIS Install Hi, I am in the process of configuring my IIS server and have some questions. OS will be Win2k3 and will be hosting ASP.Net applications from the box. My server currently has two drive configurations Raid-1 and Raid-5. I have placed the OS in the Raid-1 configuration and will place IIS on the Raid-5 configuration. I will install IIS using a Unattended type installation, this way i can place the Inetpub in a location of my choosing. I want to keep the OS isolated from all applications. My question is can this be done with FrontPage Server 2002 Extensions as well? FPSE is installed in the following default location i would like to change this to a partition other than the root OS. C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\ Thanks, Ron Tag: restarting IIS or executing commands from remote Tag: 363324
  - 7
    - Unreasonably slow performance posting files to IIS I have a Web Service with a method that handles file uploads. The file is sent as a DIME attachment to the SOAP request. The post is successful, the file is received and the correct response is sent back to the client. The problem is that this is UNBELIEVEABLY slow! My last tests were with a 4MB file. The tests took between 30 and 40 seconds total. The web service code finished its work in 750-790 milliseconds. When monitoring the network interface the full 4MB of data were received in 1-2 seconds. The same is true when monitoring bytes received on the web service application. This would led me to the conclusion that a 4 MB post should take no more than 4 seconds to handle. Between the 1-2 seconds for the data to be received and the 790 millisecond code execution there is NO data received by the webservice and there is NO CPU use exept for what is normal when idle. My question is: why? And what can be done to deal with this? I have heard that this is an issue with newer versions of IIS caused by a built in delay when receiving large amounts of data in a single request, and that this is a non-configurable feature to limit the effects of attackers posting large amounts of data to "block" the server. Is there any truth to this? Thanks in advance for any help/hints/tips anyone has. Best regards Sven Thorsen Tag: restarting IIS or executing commands from remote Tag: 363322
  - 8
    - max size of Form? I have a rather large form, I want to post to an asp page, that works. But when I add a field to that form, no data is submitted. If I use GET, a click to the submit button simply does nothing. When I use POST, the form gets submitted but with no data in it. Where in SBS2003 (IIS 6) can I define the max Size of the data that is allowed in forms? TIA Markus Tag: restarting IIS or executing commands from remote Tag: 363321
  - 9
    - IIS Problem I elevated a server to be another domain server and caused another instance of Share Point Portal Server. As a result the web site will not run because it is trying to run 2 copies although it is only possible to se one. It won't even uninstall. Any ideas? The error message states: "The process can not access the file because it is being used by another process." Tag: restarting IIS or executing commands from remote Tag: 363320
  - 10
    - IIS permissions denied - folder read only and won't change Hi, I have an Intranet site that is being displayed okay for users who need to access it for information. However, those who need to update it cannot do so. It gives permision denied, when they either try to create a folder of or page directly into a folder, or when they try to publish in FrontPage 2003, they get: "Server error: The Server Extensions were unable to access the file "...._vti_pvt\service.lck". Please check file permissions" As far as I see the users belong to the group that has been granted modify permssions to the folders. Yet, when I look at permissions in Explorer on the Server itself, on the general tab, the Attributes, Read Only is ticked. It is greyed out, but I can untick it and it seems to apply the changes. Yet, when I look at it again it has been set back to Read Only. So, I'm assuming something is doing this and that is what is denying the users access to the folders? In case it's relevant the whole of this site was copied across from an old NT 4 box that was running IIS 4 (I think) What am I missing here? If it's something stupid please forgive my ignorance. i've been reading on this for several days now, but haven't found a solution. Thanks, Neil. Tag: restarting IIS or executing commands from remote Tag: 363319
  - 11
    - Error loading default page Hi, I just installed IIS on XP Pro SP2, and I get the following message when I try to view the default webpage of http://192.168.2.101. It comes up with a dialog box asking for a password first, but nothing works, I didn;t set any passwords and the windows ones don't work . You are not authorized to view this page You do not have permission to view this directory or page using the credentials you supplied. -------------------------------------------------------------------------- Please try the following: a.. Click the Refresh button to try again with different credentials. b.. If you believe you should be able to view this directory or page, please contact the Web site administrator by using the e-mail address or phone number listed on the 192.168.2.101 home page. HTTP 401.2 - Unauthorized: Logon failed due to server configuration Internet Information Services -------------------------------------------------------------------------- Technical Information (for support personnel) a.. Background: This is usually caused by a server-side script not sending the proper WWW-Authenticate header field. Using Active Server Pages scripting this is done by using the AddHeader method of the Response object to request that the client use a certain authentication method to access the resource. b.. More information: Microsoft Support When I go to http://localhost or http://127.0.0.1 I get the following errors The page cannot be found The page you are looking for might have been removed, had its name changed, or is temporarily unavailable. -------------------------------------------------------------------------- Please try the following: a.. If you typed the page address in the Address bar, make sure that it is spelled correctly. b.. Open the 127.0.0.1 home page, and then look for links to the information you want. c.. Click the Back button to try another link. d.. Click Search to look for information on the Internet. HTTP 404 - File not found Internet Explorer Thanks in advance for your help. Anthony Tag: restarting IIS or executing commands from remote Tag: 363318
  - 12
    - Error loading default page Hi, I just installed IIS on XP Pro SP2, and I get the following message when I try to view the default webpage of http://192.168.2.101. It comes up with a dialog box asking for a password first, but nothing works, I didn;t set any passwords and the windows ones don't work . You are not authorized to view this page You do not have permission to view this directory or page using the credentials you supplied. -------------------------------------------------------------------------- Please try the following: a.. Click the Refresh button to try again with different credentials. b.. If you believe you should be able to view this directory or page, please contact the Web site administrator by using the e-mail address or phone number listed on the 192.168.2.101 home page. HTTP 401.2 - Unauthorized: Logon failed due to server configuration Internet Information Services -------------------------------------------------------------------------- Technical Information (for support personnel) a.. Background: This is usually caused by a server-side script not sending the proper WWW-Authenticate header field. Using Active Server Pages scripting this is done by using the AddHeader method of the Response object to request that the client use a certain authentication method to access the resource. b.. More information: Microsoft Support Thanks in advance for your help. Anthony Tag: restarting IIS or executing commands from remote Tag: 363317
  - 13
    - Another log questions Another question from me. I got this log particulars that I couldn't understand. '220.255.109.97 - W3SVC1 PROPFIND /C$ 404 0' I know what 404 means. But what is the meaning of the word 'PROPFIND'? Thanks again. Tag: restarting IIS or executing commands from remote Tag: 363316
  - 14
    - You are not authorised to view this page Hi, I just installed IIS on XP Pro SP2, and I get the following message when I try to view the default webpage of http://192.168.2.101. It comes up with a dialog box asking for a password first, but nothing works, I didn;t set any passwords and the windows ones don't work . You are not authorized to view this page You do not have permission to view this directory or page using the credentials you supplied. -------------------------------------------------------------------------- Please try the following: a.. Click the Refresh button to try again with different credentials. b.. If you believe you should be able to view this directory or page, please contact the Web site administrator by using the e-mail address or phone number listed on the 192.168.2.101 home page. HTTP 401.2 - Unauthorized: Logon failed due to server configuration Internet Information Services -------------------------------------------------------------------------- Technical Information (for support personnel) a.. Background: This is usually caused by a server-side script not sending the proper WWW-Authenticate header field. Using Active Server Pages scripting this is done by using the AddHeader method of the Response object to request that the client use a certain authentication method to access the resource. b.. More information: Microsoft Support When I go to http://localhost or http://127.0.0.1 I get the following errors The page cannot be found The page you are looking for might have been removed, had its name changed, or is temporarily unavailable. -------------------------------------------------------------------------- Please try the following: a.. If you typed the page address in the Address bar, make sure that it is spelled correctly. b.. Open the 127.0.0.1 home page, and then look for links to the information you want. c.. Click the Back button to try another link. d.. Click Search to look for information on the Internet. HTTP 404 - File not found Internet Explorer Thanks in advance for your help. Anthony Tag: restarting IIS or executing commands from remote Tag: 363315
  - 15
    - Deleting your search bar How can you remove the option of viewing what you have previously searched for in a search engine? Tag: restarting IIS or executing commands from remote Tag: 363314
  - 16
    - asp pages return "page cannot be displayed" Hi, I installed IIS 6 on windows 2003 server sp1. Then installed SUS. when i browse susadmin getting "the page cannot be dislayed". if i replace default.asp with a htm file diplaying correctly. thanks Tag: restarting IIS or executing commands from remote Tag: 363313
  - 17
    - Problem with path in IIS - XP SP2 I have a html that calls an exe <form method="post" action="WebTest3.exe" name="LogonForm"> This exe is a VB application that uses the app.path - In Win XP without SP2 app.path = "c:\myvirtualfolder\" - In Win XP with SP2 app.path = "\\?\c:\myvirtualfolder\" The application can run, but it gets the "\\?\" Any ideas? Pedro Tag: restarting IIS or executing commands from remote Tag: 363309
  - 18
    - Controlling Connections -- OK -- I have seen a lot of other sites do it recently, now I want to know. How can I set my IIS 6.0 to only allow users to download no more than two files simultaneously? It would appear they can also not go back to any web pages and refresh until one of the active connections are closed. Tag: restarting IIS or executing commands from remote Tag: 363304
  - 19
    - iis unattended configuration Hi, In an unattended install of Windows XP SP2 using winnt.sif, is there a way to specify the ftproot directory permissions for an IIS installation. Normally it is set to read-only. I want to add write permissions. The [InternetServer] section allows you to specify the PathFTPRoot but not the permisssions. Alternatively is there a registry setting that can make this work? Also does the PathFTPRoot allow you to specify a path using %SystemDrive%\XXX. I notice that the IIS admin tool doesn't allow you to specify such a path. Tag: restarting IIS or executing commands from remote Tag: 363301
  - 20
    - iis 5.1 XPPro not serving Documentation content frame Just got laptop with XPPro. IIS server started and working. IIS documentation appears but with content pane not appearing. .asp files serve as normal. I've checked .asp file ( C:\WINDOWS\Help\iisHelp\iis\misc\contents.asp ) is present and works when opened using this path. .cab file ref in <OBJECT> tag ( C:\WINDOWS\Help\iisHelp\common\i386.cab ) present. Can anyone help get documentation working ? Thanks Chris Wrigley mailto:arthurthecat@tesco.net Tag: restarting IIS or executing commands from remote Tag: 363300
  - 21
    - How to access file on network share folder? Hi, I am setting up a IIS, I set it to use anonymous login, I want my dll to access shared folder in another machine. So I created a domain group, and give it full permission on the shared folder. And then add the IUsr_(myiismathcine) be member of the domain group. But I still get access denied error. Could anyone tell me how to setup IIS like this? Do I have to use domain user instead of IUsr_?? user in this case? Thanks! -- David WENG Tag: restarting IIS or executing commands from remote Tag: 363299
  - 22
    - Default Page Not Recognized I have a windows 2000 server running IIS 5 that has gone a little batty. It seems to be ignoring the default page that is listed. For instance one site on it has default.htm listed as the only default page. However when browsing to the site, you get a 404 Page not found error... however if you include the filname in the url to go to the page directly, its served up just fine. The site uses anonymous access.... Any ideas on what can cause it to ignore its default page list? Tag: restarting IIS or executing commands from remote Tag: 363297
  - 23
    - Debug Diagnostics Beta - Release Candidate 1 **Microsoft releases Debug Diagnostics 1.0 - Release Candidate 1** Microsoft is working diligently on a new tool designed to make the life easier for IIS administrators and developers who are tasked with solving complex problems such as crashes, hangs, or memory leaks. The tool, called Debug Diagnostics 1.0, is the next generation debugging utility that extends on the functionality of previous tools such as IIS Debug Toolkit 1.1, Debug Matrix, and IIS State. This tool will be the only fully supported tool for debugging applications that run on IIS upon release and is supported on the IIS 4.0, 5.0, 5.1, and 6.0 platforms. To join the beta and provide invaluable feedback to the designers, please do the following - 1. Go to http://beta.microsoft.com 2. Login in with your passport id. 3. Login using the guest ID "DebugDiag" (it's case sensitive) 4. Click on the "IIS Debug Diagnostic Tool" link. 5. On the left hand side expand survey and select "IIS Debug Diagnostic Tool Nomination Form" Note: if the customer only wants DebugDiag and doesn't want to sign up for the beta they can do this by selecting "Click here to download IIS Debug Diagnostic Tool" from the File Downloads section. *You may be prompted to install an activeX control This tool is also receiving full support via newsgroups which are available by doing the following - 1. Connect to http://webnews.microsoft.com 3. For account name, enter "<Your Beta ID>" 4. Enter your Newsgroup Password (if you do not have a Newsgroup password - you can create it on BetaPlace by selecting Modify Your Info from the top navigation bar). Click OK. 5. Select the Program Name or particular newsgroup on the left pane to access. To provide bug and customer feedback, please open bugs via the beta.microsoft.com using your Microsoft Passport. It would be incredibly powerful for us to get your feedback and make a true difference in your lives and Microsoft's. Thanks in advance, ~Chris Adams Web Platform Supportability Lead Tag: restarting IIS or executing commands from remote Tag: 363295
  - 24
    - partial get file size limit We are using IIS to server up large images. We have a java applet connected to IIS and it is making partial get requests to pull back pieces of the image. It has been working fine for years, but now we have passed the 2GB limit. Does anyone know if there is a problem with IIS and partial gets on files larger than 2GB? It seems that someone might have used an int instead of a long when coding the partial gets. We see the problem with a file that is 2,294,400,979 bytes, and an int is 2,147,483,647. Any help would be greatly appreciated! Rob Tag: restarting IIS or executing commands from remote Tag: 363290
  - 25
    - w3wp.exe Hanging - IISState log We are upgrading from W2K/IIS5 to Win2003/IIS6 Our web service methods on our web server use remoting to get data from components on our app server. This setup has been workgin fine in IIS5. In our new servers, we are getting a consistent hang of w3ws.exe. Typically it will have ~60 threads 80M memory at the time. W3WS.exe is raising this error in the system event log Application popup: w3wp.exe - Application Error : The instruction at "0x77bc6f76" referenced memory at "0x00000000". The memory could not be "read". Click on OK to terminate the program Click on CANCEL to debug the program I am appending the IISstate log for the w3wp process. (I have clipped some out to fit in th 30k line limit) Any ideas would be much appreciated Opened log file 'C:\IISState\output\IISState-1940.log' *********************** Starting new log output IISState version 3.3.1 Wed May 25 16:11:15 2005 OS = Windows 2003 Server Executable: w3wp.exe PID = 1940 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 884 Kernel Time: 0:0:0.78 User Time: 0:0:0.31 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0006fc08 7c822124 ntdll!KiFastSystemCallRet 01 0006fc0c 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0006fc7c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0006fc90 5a36467a kernel32!WaitForSingleObject+0x12 04 0006fca0 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10 05 0006fca8 5a3af41d w3dt!UlAtqStartListen+0x2d 06 0006fcb8 5a3bc259 w3core!W3_SERVER::StartListen+0xbd 07 0006ff0c 0100187c w3core!UlW3Start+0x26e 08 0006ff44 01001a23 w3wp!wmain+0x22a 09 0006ffc0 77e523cd w3wp!wmainCRTStartup+0x12b 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: bf8 Kernel Time: 0:0:0.46 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009eff9c 7c821364 ntdll!KiFastSystemCallRet 01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc 02 009effb8 77e66063 ntdll!RtlpTimerThread+0x47 03 009effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 840 Kernel Time: 0:0:0.31 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00a2ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 3 System Thread ID: 930 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00aafe18 7c821c54 ntdll!KiFastSystemCallRet 01 00aafe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 00aaff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 00aaff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 00aaffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 00aaffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 00aaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: 88c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00e2fcec 7c822114 ntdll!KiFastSystemCallRet 01 00e2fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 00e2ffb8 77e66063 ntdll!RtlpWaitThread+0x161 03 00e2ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: 98c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 017ffa84 7c822124 ntdll!KiFastSystemCallRet 01 017ffa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 017ffaf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 017ffb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 04 017fffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126 05 017fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: f1c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0183ff70 7c821364 ntdll!KiFastSystemCallRet 01 0183ff74 77c5fa28 ntdll!NtDelayExecution+0xc 02 0183ff8c 77c5f824 RPCRT4!TIMER::Wait+0x2b 03 0183ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0xe8 04 0183ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 05 0183ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: a98 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0187ff8c 7c821364 ntdll!KiFastSystemCallRet 01 0187ff90 7c815267 ntdll!NtDelayExecution+0xc 02 0187ffb8 77e66063 ntdll!RtlpIOWorkerThread+0x3f 03 0187ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: 54c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker succeeded Loaded Son of Strike data table version 5 from "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll" Thread 12 Not a managed thread. Begin System Thread Information # ChildEBP RetAddr 00 01a6fe70 7c822114 ntdll!KiFastSystemCallRet 01 01a6fe74 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 01a6ff1c 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 01a6ff38 791d283b kernel32!WaitForMultipleObjects+0x18 04 01a6ffa0 791d27b2 mscorwks!DebuggerRCThread::MainLoop+0x90 05 01a6ffb0 791d453a mscorwks!DebuggerRCThread::ThreadProc+0x68 06 01a6ffb8 77e66063 mscorwks!DebuggerRCThread::ThreadProcStatic+0xb 07 01a6ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: a18 Kernel Time: 0:0:0.62 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 13 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 01b4fdf8 7c822114 ntdll!KiFastSystemCallRet 01 01b4fdfc 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 01b4fea4 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 01b4fec0 792650ff kernel32!WaitForMultipleObjects+0x18 04 01b4fee0 791b9872 mscorwks!WaitForFinalizerEvent+0x5a 05 01b4ff24 791cede0 mscorwks!GCHeap::FinalizerThreadStart+0x96 06 01b4ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44 07 01b4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 14 System Thread ID: 9c0 Kernel Time: 0:0:0.78 User Time: 0:0:0.15 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 14 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 01ceff74 792ee237 mscorwks!ThreadpoolMgr::DeactivateNthWait+0x1 01 01ceff8c 792ee409 mscorwks!ThreadpoolMgr::ProcessWaitCompletion+0x17 02 01ceffb8 77e66063 mscorwks!ThreadpoolMgr::WaitThreadStart+0x7c 03 01ceffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 15 System Thread ID: d44 Kernel Time: 0:0:0.93 User Time: 0:0:0.93 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 15 Not a managed thread. Begin System Thread Information # ChildEBP RetAddr 00 0206feb0 7c821364 ntdll!KiFastSystemCallRet 01 0206feb4 77e42439 ntdll!NtDelayExecution+0xc 02 0206ff1c 77e424b7 kernel32!SleepEx+0x68 03 0206ff2c 792edf9e kernel32!Sleep+0xf 04 0206ffb8 77e66063 mscorwks!ThreadpoolMgr::GateThreadStart+0x54 05 0206ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 16 System Thread ID: 6c8 Kernel Time: 0:0:10.187 User Time: 0:0:4.453 IISState has detected that this thread has thrown an unhandled exception and is about to crash. IISState will now attempt to display the original faulting stack. .cxr 20af744 # ChildEBP RetAddr 00 020afa0c 5a39f9a2 msvcrt!_purecall+0xb 01 020afb50 5a32cf84 w3core!ISAPI_REQUEST::SendResponseHeaders+0x5d 02 020afb78 5a3218b5 w3isapi!SSFSendResponseHeader+0xe0 03 020afbe8 79e76100 w3isapi!ServerSupportFunction+0x351 04 020afc0c 79e7637c aspnet_isapi!HttpCompletion::ReportHttpError+0x3a 05 020afe50 79e7619c aspnet_isapi!HttpCompletion::ProcessRequestInManagedCode+0x1d1 06 020afe5c 79e8e244 aspnet_isapi!HttpCompletion::ProcessCompletion+0x24 07 020afe70 792ed3e2 aspnet_isapi!CorThreadPoolWorkitemCallback+0x13 08 020afe84 792ed5db mscorwks!ThreadpoolMgr::ExecuteWorkRequest+0x19 09 020afea4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x129 0a 020affb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 0b 020affec 00000000 kernel32!BaseThreadStart+0x34 **Current Stack State** Other information: Thread is throwing an exception. Checking for known issues. *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\MSVCR71.dll - *** WARNING: Unable to verify checksum for D:\PBWeb\Filters\UrlMapFilter.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for D:\PBWeb\Filters\UrlMapFilter.dll - *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\mscorlib.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\gac\system\1.0.5000.0__b77a5c561934e089\system.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\USER32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\VERSION.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ADVAPI32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\msi.dll - *** WARNING: Unable to verify checksum for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_eb2d8503\mscorlib.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_eb2d8503\mscorlib.dll *** WARNING: Unable to verify checksum for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\870d2a06\00b60a49_b24ac501\webqueries.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\870d2a06\00b60a49_b24ac501\webqueries.dll Thread Type: Other # ChildEBP RetAddr 00 020af3a4 7c821b74 ntdll!KiFastSystemCallRet 01 020af3a8 77e999ea ntdll!NtRaiseHardError+0xc 02 020af614 77e840a1 kernel32!UnhandledExceptionFilter+0x4b4 03 020af61c 77e6b7f9 kernel32!BaseThreadStart+0x4a 04 020af644 7c82eeb2 kernel32!_except_handler3+0x61 05 020af668 7c82ee84 ntdll!ExecuteHandler2+0x26 06 020af710 7c82ecc6 ntdll!ExecuteHandler+0x24 07 020af730 77bc6f76 ntdll!KiUserExceptionDispatcher+0xe 08 020af7f8 77bc6f76 msvcrt!_purecall+0xb Thread ID: 17 System Thread ID: 5b0 Kernel Time: 0:0:0.31 User Time: 0:0:0.15 Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 17 Not a managed thread. Begin System Thread Information # ChildEBP RetAddr 00 0428ff38 7c821364 ntdll!KiFastSystemCallRet 01 0428ff3c 77e42439 ntdll!NtDelayExecution+0xc 02 0428ffa4 792ee51d kernel32!SleepEx+0x68 03 0428ffb8 77e66063 mscorwks!ThreadpoolMgr::TimerThreadStart+0x30 04 0428ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 21 System Thread ID: af4 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 21 ESP EIP 00aefaf4 7c82ed54 [FRAME: ECallMethodFrame] [DEFAULT] Boolean System.Threading.WaitHandle.WaitOneNative(I,UI4,Boolean) 00aefb08 799e4bb1 [DEFAULT] [hasThis] Boolean System.Threading.WaitHandle.WaitOne(I4,Boolean) 00aefb3c 01f9ae60 [DEFAULT] Void System.EnterpriseServices.ServicedComponentProxy.QueueCleaner() 00aefd44 7923c069 [FRAME: GCFrame] Begin System Thread Information # ChildEBP RetAddr 00 00aef94c 7c822114 ntdll!KiFastSystemCallRet 01 00aef950 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 00aef9f8 7929a834 kernel32!WaitForMultipleObjectsEx+0x11a 03 00aefa28 7929ad95 mscorwks!Thread::DoAppropriateWaitWorker+0xc1 04 00aefa7c 79339ff6 mscorwks!Thread::DoAppropriateWait+0x46 05 00aefac4 01e74df0 mscorwks!WaitHandleNative::CorWaitOneNative+0x6f WARNING: Frame IP not in any known module. Following frames may be wrong. 06 00aefb30 01f9ae60 0x1e74df0 07 00aefb40 7923e0bc 0x1f9ae60 08 00aefc50 7923e2a7 mscorwks!MethodDesc::CallDescr+0x1b8 09 00aefd0c 7923e315 mscorwks!MethodDesc::CallDescr+0x4f 0a 00aefd34 792e9207 mscorwks!MethodDesc::Call+0x97 0b 00aefd80 792e92d6 mscorwks!ThreadNative::KickOffThread_Worker+0x9d 0c 00aefe24 791cede0 mscorwks!ThreadNative::KickOffThread+0xc2 0d 00aeffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44 0e 00aeffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 22 System Thread ID: 8fc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 22 ESP EIP 0598fa24 7c82ed54 [FRAME: ECallMethodFrame] [DEFAULT] Boolean System.Threading.WaitHandle.WaitOneNative(I,UI4,Boolean) 0598fa38 799e4bb1 [DEFAULT] [hasThis] Boolean System.Threading.WaitHandle.WaitOne(I4,Boolean) 0598fa6c 04be654f [DEFAULT] Void System.EnterpriseServices.ServicedComponentProxy.QueueCleaner() 0598fc74 7923c069 [FRAME: GCFrame] 0598fcbc 7923c069 [FRAME: ContextTransitionFrame] Begin System Thread Information # ChildEBP RetAddr 00 0598f87c 7c822114 ntdll!KiFastSystemCallRet 01 0598f880 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0598f928 7929a834 kernel32!WaitForMultipleObjectsEx+0x11a 03 0598f958 7929ad95 mscorwks!Thread::DoAppropriateWaitWorker+0xc1 04 0598f9ac 79339ff6 mscorwks!Thread::DoAppropriateWait+0x46 05 0598f9f4 01e74df0 mscorwks!WaitHandleNative::CorWaitOneNative+0x6f WARNING: Frame IP not in any known module. Following frames may be wrong. 06 0598fa60 04be654f 0x1e74df0 07 0598fa70 7923e0bc 0x4be654f 08 0598fb80 7923e2a7 mscorwks!MethodDesc::CallDescr+0x1b8 09 0598fc3c 7923e315 mscorwks!MethodDesc::CallDescr+0x4f 0a 0598fc64 792e9207 mscorwks!MethodDesc::Call+0x97 0b 0598fcb0 7929cc30 mscorwks!ThreadNative::KickOffThread_Worker+0x9d 0c 0598fcf8 792e92cf mscorwks!Thread::DoADCallBack+0x5c 0d 0598fda4 791cede0 mscorwks!ThreadNative::KickOffThread+0xbb 0e 0598ffb8 77e66063 mscorwks!Thread::intermediateThreadProc+0x44 0f 0598ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 23 System Thread ID: cc8 Kernel Time: 0:0:0.906 User Time: 0:0:0.765 *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\a39eb4bd\802dd7ff_5dc0c401\pdflib_dotnet.dll IISState has detected that this thread has thrown an unhandled exception and is about to crash. IISState will now attempt to display the original faulting stack. .cxr 6d7ed44 # ChildEBP RetAddr 00 06d7f00c 5a39f9a2 msvcrt!_purecall+0xb 01 06d7f150 5a32cf84 w3core!ISAPI_REQUEST::SendResponseHeaders+0x5d 02 06d7f178 5a3218b5 w3isapi!SSFSendResponseHeader+0xe0 03 06d7f1e8 79e76100 w3isapi!ServerSupportFunction+0x351 04 06d7f20c 79e7637c aspnet_isapi!HttpCompletion::ReportHttpError+0x3a 05 06d7f450 79e7619c aspnet_isapi!HttpCompletion::ProcessRequestInManagedCode+0x1d1 06 06d7f45c 79e8e244 aspnet_isapi!HttpCompletion::ProcessCompletion+0x24 07 06d7f470 792ed3e2 aspnet_isapi!CorThreadPoolWorkitemCallback+0x13 08 06d7f484 792ed5db mscorwks!ThreadpoolMgr::ExecuteWorkRequest+0x19 09 06d7f4a4 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x129 0a 06d7ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 0b 06d7ffec 00000000 kernel32!BaseThreadStart+0x34 **Current Stack State** Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 23 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 06d7e664 7c821b74 ntdll!KiFastSystemCallRet 01 06d7e668 77e999ea ntdll!NtRaiseHardError+0xc 02 06d7e8d4 01001623 kernel32!UnhandledExceptionFilter+0x4b4 03 06d7e8f0 7c35f0c3 w3wp!WpUnhandledExceptionFilter+0x3d WARNING: Stack unwind information not available. Following frames may be wrong. 04 06d7e9a0 792b0e99 MSVCR71!_unDNameEx+0x764 05 06d7e9b0 0466ae68 mscorwks!COMUnhandledExceptionFilter+0xd 06 06d7ec14 77e840a1 pdflib_dotnet+0xaae68 07 06d7ec1c 77e6b7f9 kernel32!BaseThreadStart+0x4a 08 06d7ec44 7c82eeb2 kernel32!_except_handler3+0x61 09 06d7ec68 7c82ee84 ntdll!ExecuteHandler2+0x26 0a 06d7ed10 7c82ecc6 ntdll!ExecuteHandler+0x24 0b 06d7ed30 77bc6f76 ntdll!KiUserExceptionDispatcher+0xe 0c 06d7edf8 77bc6f76 msvcrt!_purecall+0xb Thread ID: 24 System Thread ID: d30 Kernel Time: 0:0:0.93 User Time: 0:0:0.15 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01aaff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01aaff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01aaff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01aaff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01aaffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01aaffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01aaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 25 System Thread ID: 644 Kernel Time: 0:0:0.46 User Time: 0:0:0.62 IISState has detected that this thread has thrown an unhandled exception and is about to crash. IISState will now attempt to display the original faulting stack. .cxr 440f2c4 # ChildEBP RetAddr 00 0440f58c 5a39f9a2 msvcrt!_purecall+0xb 01 0440f6d0 5a32cf84 w3core!ISAPI_REQUEST::SendResponseHeaders+0x5d 02 0440f6f8 5a3218b5 w3isapi!SSFSendResponseHeader+0xe0 03 0440f768 79e76100 w3isapi!ServerSupportFunction+0x351 04 0440f78c 79e7637c aspnet_isapi!HttpCompletion::ReportHttpError+0x3a 05 0440f9d0 79e7619c aspnet_isapi!HttpCompletion::ProcessRequestInManagedCode+0x1d1 06 0440f9dc 79e8e244 aspnet_isapi!HttpCompletion::ProcessCompletion+0x24 07 0440f9f0 792ed3e2 aspnet_isapi!CorThreadPoolWorkitemCallback+0x13 08 0440fa04 792ed5db mscorwks!ThreadpoolMgr::ExecuteWorkRequest+0x19 09 0440fa24 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x129 0a 0440ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 0b 0440ffec 00000000 kernel32!BaseThreadStart+0x34 **Current Stack State** Other information: Thread is throwing an exception. Checking for known issues. *** WARNING: Unable to verify checksum for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\cf7ecd76\00d7125b_f850c501\portalui.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\microsoft.net\framework\v1.1.4322\temporary asp.net files\root\58d42327\990f262b\assembly\dl2\cf7ecd76\00d7125b_f850c501\portalui.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\OLEAUT32.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsn.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\mscoree.dll - *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\cryptnet.dll - Thread Type: Other # ChildEBP RetAddr 00 0440ef24 7c821b74 ntdll!KiFastSystemCallRet 01 0440ef28 77e999ea ntdll!NtRaiseHardError+0xc 02 0440f194 77e840a1 kernel32!UnhandledExceptionFilter+0x4b4 03 0440f19c 77e6b7f9 kernel32!BaseThreadStart+0x4a 04 0440f1c4 7c82eeb2 kernel32!_except_handler3+0x61 05 0440f1e8 7c82ee84 ntdll!ExecuteHandler2+0x26 06 0440f290 7c82ecc6 ntdll!ExecuteHandler+0x24 07 0440f2b0 77bc6f76 ntdll!KiUserExceptionDispatcher+0xe 08 0440f378 77bc6f76 msvcrt!_purecall+0xb Thread ID: 54 System Thread ID: f54 Kernel Time: 0:0:0.62 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker Thread 54 ESP EIP Begin System Thread Information # ChildEBP RetAddr 00 09b8f778 7c822124 ntdll!KiFastSystemCallRet 01 09b8f77c 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 09b8f7ec 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 09b8f800 792ed4ec kernel32!WaitForSingleObject+0x12 04 09b8f824 792eccf3 mscorwks!ThreadpoolMgr::WorkerThreadStart+0x3a 05 09b8ffb8 77e66063 mscorwks!ThreadpoolMgr::intermediateThreadProc+0x44 06 09b8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 55 System Thread ID: 484 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0990ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0990ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0990ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0990ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 56 System Thread ID: 940 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 09a4ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 09a4ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 09a4ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 09a4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 57 System Thread ID: a2c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0960ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0960ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0960ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0960ffec 00000000 kernel32!BaseThreadStart+0x34 *****SUMMARY***** -- Jonathan Steinberg Banc of America Securities Prime Brokerage Services Tag: restarting IIS or executing commands from remote Tag: 363285
- Next
  - 1
    - Administer IIS Hi everyone, is it true that to administer IIS you have to be a local administrator of the machine? Thanks a lot to everyone, Ivan Mckenzie Tag: restarting IIS or executing commands from remote Tag: 363282
  - 2
    - HostHeader Q I have a single IP and want to host 3 multiple sites on it www.a.com www.b.com www.c.com I can use host header value to distinguish them right? do I have to register all these domain names too??? Can someone throw an insight how to host 3 websites on a single IP and what needs to be done besides changing host records? TIA Tag: restarting IIS or executing commands from remote Tag: 363271
  - 3
    - LsaRegisterLogonProcess : Access Denied Hi all, I'm using the LSALogonUser (s4uLogon). I'm trying to connect with the LsaRegisterLogonProcess but this one fails (STATUS_PORT_CONNECTION_REFUSED) even if my calling process (account define in the Application Pool) have the SeTcbPrivilege (Act as part of operating system). I'm definetly need a token with SecurityImpersonation as Impersonation level (using LsaConnectUntrusted give me a SecurityIdentification, not enough for impersonation). The account is define in my AD (Service account), localy the SeTcbPrivilege is OK, this account is also domain controller. is running the w3s service. I'm using the Windows Authentication mode (IIS 6) and i'm running on a win2003 box. please tell me how to connect with LsaRegisterLogonProcess. Thanks a lot, FT Tag: restarting IIS or executing commands from remote Tag: 363270
  - 4
    - IISSTATE Log Any help will be greatly appreciated Opened log file 'D:\iisstate\output\IISState-1392.log' *********************** Starting new log output IISState version 3.3.1 Wed May 25 11:57:39 2005 OS = Windows 2003 Server Executable: inetinfo.exe PID = 1392 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: 718 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0006f99c 7c821b84 ntdll!KiFastSystemCallRet 01 0006f9a0 77e41942 ntdll!NtReadFile+0xc 02 0006fa08 77f795ab kernel32!ReadFile+0x16c 03 0006fa34 77f7943c ADVAPI32!ScGetPipeInput+0x2a 04 0006faa8 77fb2ec9 ADVAPI32!ScDispatcherLoop+0x51 05 0006fcec 010027be ADVAPI32!StartServiceCtrlDispatcherA+0x93 06 0006fe1c 01002969 inetinfo!StartDispatchTable+0x277 07 0006ff44 0100339d inetinfo!main+0x117 08 0006ffc0 77e523cd inetinfo!mainCRTStartup+0x12f 09 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: 6ec Kernel Time: 0:0:0.31 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0082fb3c 7c822124 ntdll!KiFastSystemCallRet 01 0082fb40 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0082fbb0 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0082fbc4 5a36467a kernel32!WaitForSingleObject+0x12 04 0082fbd4 5a366e63 w3dt!WP_CONTEXT::RunMainThreadLoop+0x10 05 0082fbdc 5a3af41d w3dt!UlAtqStartListen+0x2d 06 0082fbec 5a3bc259 w3core!W3_SERVER::StartListen+0xbd 07 0082fe40 01002c3c w3core!UlW3Start+0x26e 08 0082fea4 01002ed7 inetinfo!LaunchWorkerProcess+0x159 09 0082ffb8 77e66063 inetinfo!W3SVCThreadEntry+0x55 0a 0082ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 8dc Kernel Time: 0:0:0.15 User Time: 0:0:0.46 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0086fcb8 7c822124 ntdll!KiFastSystemCallRet 01 0086fcbc 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0086fd2c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0086fd40 649f26a4 kernel32!WaitForSingleObject+0x12 04 0086fd68 010024b3 iisadmin!ServiceEntry+0x28a 05 0086ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc 06 0086ffb8 77e66063 ADVAPI32!ScSvcctrlThreadA+0x21 07 0086ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 3 System Thread ID: bfc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00c3ff9c 7c821364 ntdll!KiFastSystemCallRet 01 00c3ffa0 7c81fe26 ntdll!NtDelayExecution+0xc 02 00c3ffb8 77e66063 ntdll!RtlpTimerThread+0x47 03 00c3ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 4 System Thread ID: 1d4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00d4feac 7c822114 ntdll!KiFastSystemCallRet 01 00d4feb0 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 00d4ff58 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 00d4ff74 56f951ef kernel32!WaitForMultipleObjects+0x18 04 00d4ffa0 56f96a06 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x67 05 00d4ffb8 77e66063 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x5f 06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 5 System Thread ID: 584 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0165fea4 7c822114 ntdll!KiFastSystemCallRet 01 0165fea8 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0165ff50 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 0165ff6c 620b4524 kernel32!WaitForMultipleObjects+0x18 04 0165ffac 620b48d0 metadata!CListenerController::Listen+0x29 05 0165ffb8 77e66063 metadata!StartListenerThread+0x1a 06 0165ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 6 System Thread ID: abc Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 017dfea8 7c822114 ntdll!KiFastSystemCallRet 01 017dfeac 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 017dff54 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 017dff70 6ee3a890 kernel32!WaitForMultipleObjects+0x18 04 017dffac 6ee3ab2f IISCFG!CListener::Listen+0x23 05 017dffb8 77e66063 IISCFG!CListener::ListenerThreadStart+0x36 06 017dffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 7 System Thread ID: 928 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0171fcb4 7c822124 ntdll!KiFastSystemCallRet 01 0171fcb8 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 0171fd28 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 0171fd3c 5a31201a kernel32!WaitForSingleObject+0x12 04 0171fd5c 5a3120eb w3ssl!HTTPFilterServiceMain+0x8a 05 0171fd68 010024b3 w3ssl!ServiceEntry+0x9 06 0171ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc 07 0171ffb8 77e66063 ADVAPI32!ScSvcctrlThreadA+0x21 08 0171ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: 8ac Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0175febc 7c822114 ntdll!KiFastSystemCallRet 01 0175fec0 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0175ff68 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a 03 0175ff84 5a312964 kernel32!WaitForMultipleObjects+0x18 04 0175ffb0 5a311f82 w3ssl!SCM_MANAGER::RunService+0xc4 05 0175ffb8 77e66063 w3ssl!HTTPFilterServiceThreadProc+0x39 06 0175ffc4 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: cbc Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a5ff20 7c822124 ntdll!KiFastSystemCallRet 01 01a5ff24 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 01a5ff94 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 01a5ffa8 5b64add1 kernel32!WaitForSingleObject+0x12 04 01a5ffb8 77e66063 strmfilt!CERT_STORE::DeletionWorkerThread+0x1a 05 01a5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: bc0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01a9fcec 7c822114 ntdll!KiFastSystemCallRet 01 01a9fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 01a9ffb8 77e66063 ntdll!RtlpWaitThread+0x161 03 01a9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: f08 Kernel Time: 0:0:8.593 User Time: 0:0:27.890 Thread Type: Other # ChildEBP RetAddr 00 01b5ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01b5ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01b5ff54 5b65160e kernel32!GetQueuedCompletionStatus+0x29 03 01b5ff8c 5b65182c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01b5ffa0 5b650f6c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01b5ffb8 77e66063 strmfilt!THREAD_MANAGER::ThreadManagerThread+0x39 06 01b5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: 280 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 01b9fbb8 7c822114 ntdll!KiFastSystemCallRet 01 01b9fbbc 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 01b9fc64 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a 03 01b9fcc0 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141 04 01b9fcdc 6c7d63d5 USER32!MsgWaitForMultipleObjects+0x1f 05 01b9fd28 6930e66a INFOCOMM!IIS_SERVICE::StartServiceOperation+0x231 06 01b9fd68 010024b3 ftpsvc2!ServiceEntry+0xae 07 01b9ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc 08 01b9ffb8 77e66063 ADVAPI32!ScSvcctrlThreadA+0x21 09 01b9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: eec Kernel Time: 0:0:0.687 User Time: 0:0:0.218 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01ecff50 7c821bf4 ntdll!KiFastSystemCallRet 01 01ecff54 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01ecff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29 03 01ecffb8 77e66063 ISATQ!AtqPoolThread+0x40 04 01ecffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 14 System Thread ID: d74 Kernel Time: 0:0:0.31 User Time: 0:0:0.93 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01f0ff50 7c821bf4 ntdll!KiFastSystemCallRet 01 01f0ff54 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 01f0ff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29 03 01f0ffb8 77e66063 ISATQ!AtqPoolThread+0x40 04 01f0ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 15 System Thread ID: 16c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0220fe18 7c821c54 ntdll!KiFastSystemCallRet 01 0220fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 0220ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 0220ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 0220ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 0220ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 0220ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 16 System Thread ID: cb8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 0224fec4 7c822114 ntdll!KiFastSystemCallRet 01 0224fec8 77e6711b ntdll!NtWaitForMultipleObjects+0xc 02 0224ff70 69308dc4 kernel32!WaitForMultipleObjectsEx+0x11a 03 0224ffb8 77e66063 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x33 04 0224ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 17 System Thread ID: 254 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Listener # ChildEBP RetAddr 00 022cfe0c 7c822124 ntdll!KiFastSystemCallRet 01 022cfe10 71b23a09 ntdll!NtWaitForSingleObject+0xc 02 022cfe4c 71b23a52 mswsock!SockWaitForSingleObject+0x19d 03 022cff3c 71c0470c mswsock!WSPSelect+0x380 04 022cff8c 63ec4696 WS2_32!select+0xb9 05 022cffb4 63ec4700 ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22 06 022cffb8 77e66063 ISATQ!BmonThreadFunc+0x9 07 63ec4700 8b575600 kernel32!BaseThreadStart+0x34 WARNING: Frame IP not in any known module. Following frames may be wrong. 08 04c2c033 00000000 0x8b575600 Thread ID: 18 System Thread ID: ff8 Kernel Time: 0:0:11.828 User Time: 0:0:3.531 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0240ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0240ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0240ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0240ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0240ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0240ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0240ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 19 System Thread ID: 410 Kernel Time: 0:0:0.453 User Time: 0:0:0.125 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0244ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0244ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0244ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0244ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0244ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0244ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0244ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 20 System Thread ID: 398 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0248ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0248ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0248ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0248ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0248ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0248ffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0248ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 21 System Thread ID: fa4 Kernel Time: 0:0:12.0 User Time: 0:0:3.796 Thread Type: HTTP Listener # ChildEBP RetAddr 00 024cff24 7c821bf4 ntdll!KiFastSystemCallRet 01 024cff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 024cff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 024cff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 024cffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 024cffb8 77e66063 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 024cffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 22 System Thread ID: 5d4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 02f5fa84 7c822124 ntdll!KiFastSystemCallRet 01 02f5fa88 77e6baa8 ntdll!NtWaitForSingleObject+0xc 02 02f5faf8 77e6ba12 kernel32!WaitForSingleObjectEx+0xac 03 02f5fb0c 5a3b8147 kernel32!WaitForSingleObject+0x12 04 02f5ffb8 77e66063 w3core!HTTP_COMPRESSION::CompressionThread+0x126 05 02f5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 23 System Thread ID: e1c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 021cfe18 7c821c54 ntdll!KiFastSystemCallRet 01 021cfe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 021cff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 021cff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 021cffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 021cffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 06 021cffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 24 System Thread ID: eb4 Kernel Time: 0:0:0.140 User Time: 0:0:0.375 Thread Type: Other # ChildEBP RetAddr 00 0234ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0234ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0234ff54 5b65160e kernel32!GetQueuedCompletionStatus+0x29 03 0234ff8c 5b65182c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0234ffa0 5b650f6c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0234ffb8 77e66063 strmfilt!THREAD_MANAGER::ThreadManagerThread+0x39 06 0234ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 25 System Thread ID: c78 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0179ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0179ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0179ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0179ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 26 System Thread ID: bd0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 0385feac 7c821bf4 ntdll!KiFastSystemCallRet 01 0385feb0 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0385fedc 77c604c3 kernel32!GetQueuedCompletionStatus+0x29 03 0385ff18 77c60655 RPCRT4!COMMON_ProcessCalls+0xa1 04 0385ff84 77c5f9f1 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x117 05 0385ff8c 77c5f7dd RPCRT4!ProcessIOEventsWrapper+0xd 06 0385ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 07 0385ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b 08 0385ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 27 System Thread ID: 8e0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00c7ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00c7ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00c7ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 00c7ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 28 System Thread ID: c1c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0230ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0230ff28 77e6611a ntdll!NtRemoveIoCompletion+0xc 02 0230ff54 5b65160e kernel32!GetQueuedCompletionStatus+0x29 03 0230ff8c 5b65182c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0230ffa0 5b650f6c strmfilt!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0230ffb8 77e66063 strmfilt!THREAD_MANAGER::ThreadManagerThread+0x39 06 0230ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 29 System Thread ID: f8c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0169ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0169ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0169ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0169ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 30 System Thread ID: cd8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0238ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0238ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0238ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 0238ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 31 System Thread ID: 9f4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 023cff70 7c821bf4 ntdll!KiFastSystemCallRet 01 023cff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 023cffb8 77e66063 ntdll!RtlpWorkerThread+0x3d 03 023cffec 00000000 kernel32!BaseThreadStart+0x34 ***** Dump name is formatted as: PID-Timestamp.dmp Creating D:\iisstate\output\1392-1117036670.dmp - mini user dump ***** Closing open log file D:\iisstate\output\IISState-1392.log Tag: restarting IIS or executing commands from remote Tag: 363269
  - 5
    - Display PHP page In the past our web site was php based. At that time a manual was produced that contained a link to one of the php pages. Our new web site is completely html/xml. Obviously the link to the php page no longer works. Is there a way I could place a file on this server with a php extension that match the link but would redirect to the current html file without installing php on the server? Thanks Tag: restarting IIS or executing commands from remote Tag: 363268
  - 6
    - How to redirect request to loadbalancer??? We will be distributing a webapp with a Tomcat appserver cluster. We wish to redirect requests sent to http://<client URL>/Acuity/* to http://<client URL>:<the load balancer port number> How do we redirect requests for a specific URL pattern to a port??? Tag: restarting IIS or executing commands from remote Tag: 363267
  - 7
    - Can't add ISAPI Extension to IIS 5, Windows XP I'm running IIS 5.1 on a Windows XP box. When I try to add an ISAPI extension (.*, aspnet_isapi.dll) the OK button is not enabled, and I can't determine how to enable it. My account is an administrator account on the machine. I replicated this on someone else's Windows XP box, and another developer on our team was able to add the extension running IIS on Win2K. Any help on how to add the ISAPI extension would be appreciated. Tag: restarting IIS or executing commands from remote Tag: 363263
  - 8
    - Where is the IIS migration utility? I need to migrate an IIS 4 to IIS 6 website. It is all FP 2002 extensions. I can't find the migration utility on the web. Can someone post the url where it is? Thanks. Tag: restarting IIS or executing commands from remote Tag: 363262
  - 9
    - Querying against catalogs created on a remote server Hi, I am using Microsoft's indexing service to search for content in my website. How can I query against remote server catalog? What is the path I need to use? I need to call a catalog which is created on a d/f sever and on my page which does the search. Here is the query I am using in my asp.net page Dim strCatalog As String strCatalog = "TextSearch" Dim strQuery As String strQuery = "Select doctitle, vpath, path, rank, characterization from SCOPE() where FREETEXT(Contents, '" + TextBox1.Text + "') order by rank desc " Dim connString As String = "Provider=MSIDXS.1;Integrated Security .='';Data Source='" & strCatalog & "'" Please help! Tag: restarting IIS or executing commands from remote Tag: 363261
  - 10
    - url scan in iis 6.0? I have an imaging web app that sends image files to an IE plug-in viewer as a url. When running the app in iis 5.0, the image would not show up in the viewer. I discovered that url scan was not allowing this action. I uninstalled url scan and the image file appeared in the viewer. Now we have upgraded to iis 6.0 and I'm having the same problem. Only, there is no url scan (that I'm aware of) running. Can someone tell me if some form of url scan is running behind the scenes and if so, how do I stop it? I have also looked into URL Authorization, but my application requires anonymous access, so this nullifies the use of URL auth..... any help would be appreciated thanks jay Tag: restarting IIS or executing commands from remote Tag: 363257
  - 11
    - Server stops responding on network I have a Win2K3 Enterprise server hosting a few ASP.NET apps. The server has 3 ethernet adapters. One adapter has a public address(static) that is tied to a domain name. I can access the server, but at random intervals, it will stop responding. I can not ping the server or access it THROUGH THAT ETHERNET ADAPTER. However, i can get to the computer via a router with port forwarding to another ethernet adapter. The ONLY way i can get the "websites/ASP.NET apps" back up is to disable/enable the adapter or do a repair on it. I have another server with similar configuration that this happens to on similar intervals. I have checked my code in the apps running and everything *seems* OK, but i would think that the system should be able to recover from faulty code. This has been going on for over a year now, i am getting desperate!!!! Any help is GREATLY appreciated! Tag: restarting IIS or executing commands from remote Tag: 363256
  - 12
    - is frontpage server extension a requirement for webdav? Hi, I posted a question earlier in this group regarding the authenication configuration of webdav. I am actually still working on the problem and would like to know if Frontpage server extension 2002 a requirement for webdav (using webfolder to access the virtual directory)? Thanks om Tag: restarting IIS or executing commands from remote Tag: 363255
  - 13
    - IIS / SQL Server impersonation Hi I am attempting to implement impersonation from a windows application to a SQL Server database via a remoting middleware application(hosted in IIS 6 on W2003 Server). I have configured the host virtual directory in IIS to require windows authentication, and anyonymous access is off. Web.config specifies the following: <system.web> <authentication mode="Windows" /> <identity impersonate="true"/> </system.web> (In addition to the remoting configuration.) On the clients app.config I have: <channel ref="http" useDefaultCredentials="true"> <clientProviders> <formatter ref="binary"/> </clientProviders> </channel> Finally, the database permits Windows Authentication. When I try and open a connection to SQL Server (2000): conn.ConnectionString = @"Trusted_Connection=Yes;Persist Security Info=False;Initial Catalog=xxxxxxx;Data Source=xxxxxxx"; conn.Open(); I have tried variations on this which include the "Integrated Security = SSPI" property. In all cases, I get the following: Login failed for user '(null)'. Reason: Not associated with a trusted SQL Server connection. (The SQL server machine is on a separate box, which may be relevant. I have seen a number of posts around this) I have tried a couple of other things including elevating the Trust level of the assembly to Full. Adding the 'Act as Part of the Operating System' privilege to the ASPNET account. These were pretty much grabbing at straws. I have seen some posts around creating mirrored user accounts with appropriate privileges on both the web and db server, then getting IIS to run under this account. But this kind of defeats the purpose, I think. Essentially I want to impersonate the authenticating Windows user seamlessly to the database. I am aware of the connection pooling inefficiency. This is not my desired solution. The client requires it.... I have tried programmatically forcing the impersonation: public string ImpersonateProcess() { string stemp = "Initial Identity: " + WindowsIdentity.GetCurrent().Name; System.Security.Principal.WindowsImpersonationContext impersonationContext; impersonationContext = ((System.Security.Principal.WindowsIdentity)HttpContext.Current.User.Identity).Impersonate(); stemp += " Now Impersonating " + WindowsIdentity.GetCurrent().Name; impersonationContext.Undo() ; return stemp ; } this test method returns the following: Initial Identity: xxx\xxxxxxxxx Now Impersonating xxx\xxxxxxxxx ( where xxx\xxxxxxxxx is my domain\logon. If i run the following method: public string GetServerString() { // Use the HttpContext to acquire what IIS thinks the client's identity is. string temp = HttpContext.Current.User.Identity.Name; temp +=WindowsIdentity.GetCurrent().Name; temp +=" "+WindowsIdentity.GetCurrent().AuthenticationType; temp +=" "+WindowsIdentity.GetCurrent().IsAuthenticated; temp +=" "+WindowsIdentity.GetCurrent().IsAnonymous; temp +=" "+WindowsIdentity.GetCurrent().Token; temp +=" "+WindowsIdentity.GetCurrent().IsSystem; if (temp == null || temp.Equals(string.Empty)) { temp = "**unavailable**"; } return "Hi there. You are being served by instance number: " + InstanceHash.ToString() + ". Your alias is: " + temp ; } I get this: Hi there. You are being served by instance number: 55. Your alias is: xxx\xxxxxxxxx xxx\xxxxxxxxx NTLM True False 1076 False It seems clear to me that my security token is flowing to the remoting application. It even looks like impersonation is occurring correctly (since the Initial WindowsIdentity is mine. However... no database access. If I run the remoting application locally in IIS (5, admittedly) I can access the database. <sigh> Any help gratefully received, Thanks Matthew Tag: restarting IIS or executing commands from remote Tag: 363254
  - 14
    - IIS Hangs... Hi, IIS hangs when my COM Object attempts to Connect to the SQL Database. This particular COM Object is being called from another COM Object and that is when IIS Hangs. This happens only on a Windows 2003 Server. IDE is unfortunately J++. Thanks in advance. Tag: restarting IIS or executing commands from remote Tag: 363253
  - 15
    - IISState questions Hello all, I am troubleshooting a problem with IIS. Basically a site is stopping during the middle of the day, once a day, and has been happening for about a week. I wanted to use IISState to monitor my IIS process and watch for a hard crash. I attempted to to do this, and my results are below. I am guessing that I am getting this because I have an ISAPI filter installed that does not have a Microft symbol available. Is this correct? If so, how do I get around this in my troubleshooting? The filter is required and is written by another department, and they have had difficulties producing a symbol for their DLL. I do have the Microsoft symbols installed. Thanks, Jay C:\iisstate>iisstate -p 2804 -hc Symbol search path is: SRV*C:\iisstate\symbols*http://msdl.microsoft.com/download/symbols Microsoft (R) Windows Debugger Version 6.2.0013.1 Copyright (c) Microsoft Corporation. All rights reserved. Cannot debug pid 2804, Win32 error 5 "Access is denied." sxd av WARNING: The debugger does not have a current process or thread WARNING: Many commands will not work WaitForEvent failed, 0x8000FFFF C:\iisstate> Tag: restarting IIS or executing commands from remote Tag: 363251
  - 16
    - iisadmpwd error page not found hi i have setup the iisadmpwd as described in microsoft article, but i receive: The page cannot be found The page you are looking for might have been removed, had its name changed, or is temporarily unavailable. -------------------------------------------------------------------------------- Please try the following: a.. Make sure that the Web site address displayed in the address bar of your browser is spelled and formatted correctly. b.. If you reached this page by clicking a link, contact the Web site administrator to alert them that the link is incorrectly formatted. c.. Click the Back button to try another link. HTTP Error 404 - File or directory not found. Internet Information Services (IIS) -------------------------------------------------------------------------------- Technical Information (for support personnel) a.. Go to Microsoft Product Support Services and perform a title search for the words HTTP and 404. b.. Open IIS Help, which is accessible in IIS Manager (inetmgr), and search for topics titled Web Site Setup, Common Administrative Tasks, and About Custom Error Messages. any idea on what to do? i can't find detailed info on how to setup the password change of domain from web thanks Tag: restarting IIS or executing commands from remote Tag: 363249
  - 17
    - Newbie: Fixing IIS and Installing PHP Sorry about this: crossposting from IISResources Alright I'm not at the server computer at the exact moment so I don't have any ability to take screenshots or give exact errors for a couple hours. I started this week working on trying to set up PHP and MySQL on a server that we have internally. The server already had a working IIS client running a website. The IP to the machine is 151.204.233.138. The website that was running is http://151.204.233.138/falmouthgis/default.htm located on the machine in d:\ArcGIS\Website\ or something like that. I attempted to install PHP and at first, it seemed alright. I could access a phpinfo(); command in my wwwroot directory (c:\Inetpub\wwwroot). Also, an index.html with something like 'Test' in it worked as well. Last night (yesterday afternoon), the website froze. I fixed that when I looked at the server because I put the wrong filename to the browscap file. That was fine. I then tried to fix the problem with authentication. I figured out (from reading this entire forum, heh) that the problem was that Anonymous Access was not working as I wanted it to. So I went in and tried to fix the problem. After going through maybe 5-10 forum posts on this website, all with different suggestions, I am now at the point where anonymous access seems to not work at all, and I'm not even getting a login screen anymore, just a 401 error. Sadly, I have Local Service at the moment for the Application Pool Identity, and would like to change it back to Network Services when possible (I tried a tip from another topic post to no avail. http://www.iis-resources.com/modules/newbb/viewtopic.php?topic_id=3149&forum=5) Currently, I'm totally 1000% confused on what's going on and I have no clue how to fix any of it. I currently have AuthDiag giving me a Kerberos error saying that the username has to be on the domain. I also had (until I did the above link) errors about IIS subauthentication. I'll post the AuthDiag information when I get back to the server as well as any other information anybody wants me to post. Thanks for the help and sorry for being such a newbie. *UPDATE 1* As of this moment: 1. wwwroot directory works fine (iisstart.htm and test.php) 2. all other websites (townsite and falmouthgis) are giving 401 errors **AuthDiag Log taken out due to post length** Thanks if you can help at all! Tag: restarting IIS or executing commands from remote Tag: 363248
  - 18
    - Cannot find iisadmin.mfl durring IIS 6.0 Install I have a clean W2K3 SP1 machine and via the Mange Your Server app, I am trying to install IIS. I keeps looking for several files that are not on the CD, or in the Service pack, one of which I have listed in the subject. I have searched Microsoft, MSN, and google with the only reference showing up to a probelm with mofcomp.exe and service pack 1: http://tinyurl.com/8k8mu. Has anyone else seen this, know where I can get some info, or have a fix? Thanks! Tag: restarting IIS or executing commands from remote Tag: 363245
  - 19
    - IIS 401 - Unauthorized to access the document Sometimes (wery rarely) the following error occurs on trying to access the ASP (the same ASP file in all cases). ========================================== FW-1 at prb001002: Unauthorized to access the document. Authorization is needed for FW-1 ========================================== This error occurs for different users in different times. For example, the link can be successfully opened for 200-300 times for the same user and then one time it will return the error. The authentication is set to Anonymous. The ASP file called has call to Server-side ActiveX in its code. Does anybody have any ideas of why that can happen? Thanks, Denis Tag: restarting IIS or executing commands from remote Tag: 363243
  - 20
    - Migrate IIS from C: to E: We'd like to migrate our c:\inetpub folder in it's entirety to e:\inetpub for disk space reasons. I know we can create a new site and re-publish the applications but that is a poor way to make a copy. Can we just use Robocopy to copy the entire folder structure with security and then change the home folder in IIS admin? What about shares on the wwwroot folder? What about virtual folders within the default web site? What about metadata? I noticed references to IISSYNC - could this be used for this purpose? Thanks, Rob. Tag: restarting IIS or executing commands from remote Tag: 363242
  - 21
    - IIS 6.0 Problem with a badly formed (but valid) http header Dear All, We are using a hardware that generates an http request with a custom header and sends it to an IIS 6.0 web server. Although the header seems to conform to http rfc, we can't extract a correct header on the IIS side. Please use the following to regenerate the problem: 1. Create form.asp with the following content and put it somewhere in the IIS: form.asp ------------------------------------------------------- <% Response.Write Request.ServerVariables("ALL_RAW") %> ------------------------------------------------------- 2. Download wfetch from http://support.microsoft.com/kb/284285/EN-US/ 3. Send an HTTP/1.1 request using GET method to the above form.asp with the following header Accept: */*\r\n HOST: 1.2.3.4\r\n Test_Header: 000...(64 characters)...0\r\n 111...(64 characters)...1\r\n 222...(64 characters)...2\r\n 333...(64 characters)...3\r\n 444...(64 characters)...4\r\n 555...(64 characters)...5\r\n 666...(64 characters)...6\r\n 777...(64 characters)...7\r\n 888...(64 characters)...8\r\n 999...(64 characters)...9\r\n AAA...(64 characters)...A\r\n BBB...(64 characters)...B\r\n CCC...(64 characters)...C\r\n DDD...(64 characters)...D\r\n EEE...(64 characters)...E\r\n FFF...(64 characters)...F\r\n 000...(64 characters)...0\r\n 111...(64 characters)...1\r\n 222...(64 characters)...2\r\n 333...(64 characters)...3\r\n 444...(64 characters)...4\r\n 555...(64 characters)...5\r\n 666...(64 characters)...6\r\n 777...(64 characters)...7\r\n 888...(64 characters)...8\r\n 999...(64 characters)...9\r\n AAA...(64 characters)...A\r\n BBB...(64 characters)...B\r\n CCC...(64 characters)...C\r\n DDD...(64 characters)...D\r\n EEE...(64 characters)...E\r\n FFF...(64 characters)...F\r\n \r\n Each line of the Test_Header value has an space then 64 repetitions of the same character and then \r\n (I didn't put the actual header here because I wasn't sure about the text formatting in the newgroups). 4. It seems that the above header conforms to HTTP standard (as it is claimed by the vendor of the hardware), you can refer to RFC of HTTP/1.1 (RFC2616), Section 2.2 "Basic Rules", third paragraph: .... HTTP/1.1 header field values can be folded onto multiple lines if the continuation line begins with a space or horizontal tab. All linear white space, including folding, has the same semantics as SP. A recipient MAY replace any linear white space with a single SP before interpreting the field value or forwarding the message downstream. .... 5. When the page is returned from IIS, there are extra bytes (in my case 40 bytes) inserted in the middle of the header (checking tcpdump it seems the problem happens whenever the http request is sent using more than one tcp packet and the extra bytes are inserted between the data from the two tcp packets). 6. Sending the same header as above but removing the \r\n and spaces seems to resolve the problem. A. Is this a known bug in IIS ? B. Is there any fix/patch for that ? C. Supposing that I can't change the way that the header is inserted, is there a way that I can change the header and remove the extra formatting before IIS handles the header incorrectly ? Sorry for the long post. Thanks in advance, Tag: restarting IIS or executing commands from remote Tag: 363241
  - 22
    - File Upload on IIS6 on Win 2003 I am migrating a web from NT 4.0 to win 2003. all of the asp use cpshost.dll to upload files to win2003. how can I get the cpshost.dll for win2003? Thank you in advance Tag: restarting IIS or executing commands from remote Tag: 363235
  - 23
    - Please review IIS State Dump I have IIS 6.0 W2K3 no SP1. I have a few instances that the app stops, with this type of error in event logs: A process serving application pool "DefaultAppPool" exceeded time limits during shut down." The appl makes connections to a SQL database which is located on another server. Please tell me whether it is a jet db similar to other posts or exceeded time limit from IIS configuration or bad code writing. I removed several threads (I think same data) due to post length restriction. Thank you. Opened log file 'D:\iisstate\output\IISState-996.log' Starting new log output IISState version 3.3.1 Tue May 24 13:02:48 2005 OS = Windows 2003 Server Executable: w3wp.exe PID = 996 Thread ID: 0 System Thread ID: f44 Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4 01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf 04 0006feec 5a364d7d w3dt!WP_CONTEXT::RunMainThreadLoop+0xe 05 0006fef4 5a3a1d98 w3dt!UlAtqStartListen+0x2d 06 0006ff00 5a3a5d54 w3core!W3_SERVER::StartListen+0x8e 07 0006ff0c 010017af w3core!UlW3Start+0xea 08 0006ff44 0100195e w3wp!wmain+0x236 09 0006ffc0 77e4f38c w3wp!wmainCRTStartup+0x12f 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23 Thread ID: 1 System Thread ID: 1290 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009fff9c 77f4262b SharedUserData!SystemCallStub+0x4 01 009fffa0 77f6b5b2 ntdll!NtDelayExecution+0xc 02 009fffb8 77e4a990 ntdll!RtlpTimerThread+0x45 03 009fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: 1594 Kernel Time: 0:0:0.0 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 00a3ff70 77f430c7 SharedUserData!SystemCallStub+0x4 01 00a3ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc 02 00a3ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b 03 00a3ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 4 System Thread ID: 1620 Kernel Time: 0:0:0.296 User Time: 0:0:0.406 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00ceff28 77f430c7 SharedUserData!SystemCallStub+0x4 01 00ceff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 00ceff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27 03 00ceff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31 04 00ceffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21 05 00ceffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35 06 00ceffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: 17e8 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: HTTP Compression Thread # ChildEBP RetAddr 00 0172ff14 77f43741 SharedUserData!SystemCallStub+0x4 01 0172ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0172ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0172ff98 5a3a51f7 kernel32!WaitForSingleObject+0xf 04 0172ffb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85 05 0172ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: 760 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 0176fe20 77f4313f SharedUserData!SystemCallStub+0x4 01 0176fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc 02 0176ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193 03 0176ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9 04 0176ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c 05 0176ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17 06 0176ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: d98 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 017aff8c 77f4262b SharedUserData!SystemCallStub+0x4 01 017aff90 77f6f0fc ntdll!NtDelayExecution+0xc 02 017affb8 77e4a990 ntdll!RtlpIOWorkerThread+0x3d 03 017affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: 1d4 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0191fe40 77f430c7 SharedUserData!SystemCallStub+0x4 01 0191fe44 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 0191fe70 791dbec4 kernel32!GetQueuedCompletionStatus+0x27 03 0191fea4 791dbe6e mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49 04 0191ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 05 0191ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: 1048 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0195feb4 77f4262b SharedUserData!SystemCallStub+0x4 01 0195feb8 77e418ea ntdll!NtDelayExecution+0xc 02 0195ff20 77e416ee kernel32!SleepEx+0x68 03 0195ff2c 791b1753 kernel32!Sleep+0xb 04 0195ffb8 77e4a990 mscorsvr!ThreadpoolMgr::GateThreadStart+0x54 05 0195ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: 164c Kernel Time: 0:0:2.187 User Time: 0:0:14.562 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0199f530 77f43741 SharedUserData!SystemCallStub+0x4 01 0199f534 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0199f570 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0199f578 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 0199f594 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 14 System Thread ID: 920 Kernel Time: 0:0:3.718 User Time: 0:0:17.890 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 019df51c 77f43741 SharedUserData!SystemCallStub+0x4 01 019df520 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 019df55c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 019df564 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 019df580 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 16 System Thread ID: 6f8 Kernel Time: 0:0:0.546 User Time: 0:0:37.437 Thread Type: Other # ChildEBP RetAddr 00 0c7aff10 77f43741 SharedUserData!SystemCallStub+0x4 01 0c7aff14 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c7aff84 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c7aff94 7920198c kernel32!WaitForSingleObject+0xf 04 0c7affac 79244fbe mscorsvr!gc_heap::gc_thread_function+0x22 05 0c7affb8 77e4a990 mscorsvr!gc_heap::gc_thread_stub+0x1e 06 0c7affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 17 System Thread ID: 1258 Kernel Time: 0:0:0.328 User Time: 0:0:31.250 Thread Type: Other # ChildEBP RetAddr 00 0c7efe10 77f43741 SharedUserData!SystemCallStub+0x4 01 0c7efe14 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c7efe84 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c7efe94 7920198c kernel32!WaitForSingleObject+0xf 04 0c7efeac 79244fbe mscorsvr!gc_heap::gc_thread_function+0x22 05 0c7effb8 77e4a990 mscorsvr!gc_heap::gc_thread_stub+0x1e 06 0c7effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 18 System Thread ID: 1288 Kernel Time: 0:0:0.140 User Time: 0:0:1.140 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0c82fbcc 77f43741 SharedUserData!SystemCallStub+0x4 01 0c82fbd0 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0c82fc0c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0c82fc14 70cff3b9 ntdll!RtlEnterCriticalSection+0x46 04 0c82fca8 7920841d gdiplus!GdipDeleteFontFamily+0x36 05 0c82fd34 792084e5 mscorsvr!MethodTable::CallFinalizer+0xee 06 0c82fd48 79207f69 mscorsvr!CallFinalizer+0x84 07 0c82fde0 7920857d mscorsvr!CallFinalizer+0x255 08 0c82fdf4 791b4de8 mscorsvr!GCHeap::RestartEE+0x73 09 0c82fe3c 79208550 mscorsvr!Thread::DoADCallBack+0x5c 0a 0c82fedc 79207d21 mscorsvr!CallFinalizer+0x2fa 0b 0c82ff24 7922d5e1 mscorsvr!GCHeap::FinalizerThreadStart+0xc2 0c 0c82ffb8 77e4a990 mscorsvr!Thread::intermediateThreadProc+0x44 0d 0c82ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 19 System Thread ID: 1408 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 0c87ff14 77f43741 SharedUserData!SystemCallStub+0x4 01 0c87ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c87ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c87ff98 70a05c99 kernel32!WaitForSingleObject+0xf 04 0c87ffb4 70a0625a asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x19 05 0c87ffb8 77e4a990 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa 06 0c87ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 21 System Thread ID: 68c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: ASP Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 0c9ffefc 77f43741 SharedUserData!SystemCallStub+0x4 01 0c9fff00 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0c9fff70 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0c9fff80 709f4800 kernel32!WaitForSingleObject+0xf 04 0c9fffb4 77f5cd6b asp!CViperReqManager::WatchThread+0x65 Thread ID: 28 System Thread ID: 176c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0ce8ff38 77f4262b SharedUserData!SystemCallStub+0x4 01 0ce8ff3c 77e418ea ntdll!NtDelayExecution+0xc 02 0ce8ffa4 791b4f99 kernel32!SleepEx+0x68 03 0ce8ffb8 77e4a990 mscorsvr!ThreadpoolMgr::TimerThreadStart+0x30 04 0ce8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 29 System Thread ID: 194 Kernel Time: 0:0:4.328 User Time: 0:0:30.640 Other information: Thread is waiting for a lock to be released. Looking for lock owner.Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0cf7f31c 77f43741 SharedUserData!SystemCallStub+0x4 01 0cf7f320 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0cf7f35c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0cf7f364 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 0cf7f380 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 30 System Thread ID: 7b4 Kernel Time: 0:0:2.437 User Time: 0:0:14.0 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 0d67f584 77f43741 SharedUserData!SystemCallStub+0x4 01 0d67f588 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 0d67f5c4 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 0d67f5cc 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 0d67f5e8 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 33 System Thread ID: af4 Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0e0fff24 77f4262b SharedUserData!SystemCallStub+0x4 01 0e0fff28 77e418ea ntdll!NtDelayExecution+0xc 02 0e0fff90 79230bfc kernel32!SleepEx+0x68 03 0e0fffb8 77e4a990 mscorsvr!ThreadpoolMgr::WaitThreadStart+0x45 04 0e0fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 37 System Thread ID: 17ec Kernel Time: 0:0:0.0 User Time: 0:0:0.31 Thread Type: Other # ChildEBP RetAddr 00 0eb1ff10 77f43741 SharedUserData!SystemCallStub+0x4 01 0eb1ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0eb1ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0eb1ff94 0e9338a9 kernel32!WaitForSingleObject+0xf 04 0eb1ffb8 77e4a990 oledb32!ReleaseResourceThread+0x54 05 0eb1ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 38 System Thread ID: 1690 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0eb5ff08 77f43741 SharedUserData!SystemCallStub+0x4 01 0eb5ff0c 77e41817 ntdll!ZwWaitForSingleObject+0xc 02 0eb5ff7c 77e4168f kernel32!WaitForSingleObjectEx+0xac 03 0eb5ff8c 0e9338b9 kernel32!WaitForSingleObject+0xf 04 0eb5ffb8 77e4a990 oledb32!ResetResourceThread+0x84 05 0eb5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 49 System Thread ID: 5fc Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0f9bff14 77d06718 SharedUserData!SystemCallStub+0x4 01 0f9bff34 771bb5a9 USER32!NtUserGetMessage+0xc 02 0f9bff74 771bb527 ole32!CDllHost::STAWorkerLoop+0x70 03 0f9bff90 771bb472 ole32!CDllHost::WorkerThread+0xc6 04 0f9bff94 771625ea ole32!DLLHostThreadEntry+0x9 05 0f9bff9c 77160000 ole32!CRpcThread::WorkerLoop+0x1e 06 0f9bffac 77162653 ole32!_imp__InstallApplication <PERF> (ole32+0x0) 07 0f9bffb8 77e4a990 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1f 08 0f9bffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 74 System Thread ID: ac8 Kernel Time: 0:0:1.953 User Time: 0:0:11.890 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 10a2f030 77f43741 SharedUserData!SystemCallStub+0x4 01 10a2f034 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 10a2f070 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 10a2f078 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 10a2f094 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 86 System Thread ID: 139c Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: Unable to locate ASP page No remote call being made # ChildEBP RetAddr 00 1272fe20 77f4313f SharedUserData!SystemCallStub+0x4 01 1272fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc 02 1272ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193 03 1272ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9 04 1272ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c 05 1272ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17 06 1272ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 87 System Thread ID: 13bc Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: Other # ChildEBP RetAddr 00 138cf4c0 77f430c7 SharedUserData!SystemCallStub+0x4 01 138cf4c4 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 138cf4f0 791dbec4 kernel32!GetQueuedCompletionStatus+0x27 03 138cf524 791dbe6e mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49 04 138cffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 05 138cffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 88 System Thread ID: f5c Kernel Time: 0:0:0.15 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 14fdf340 77f430c7 SharedUserData!SystemCallStub+0x4 01 14fdf344 77e430bc ntdll!ZwRemoveIoCompletion+0xc 02 14fdf370 791dbec4 kernel32!GetQueuedCompletionStatus+0x27 03 14fdf3a4 791dbe6e mscorsvr!ThreadpoolMgr::CompletionPortThreadStart+0x49 04 14fdffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 05 14fdffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 89 System Thread ID: 145c Kernel Time: 0:0:0.828 User Time: 0:0:5.62 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 155ae91c 77f43741 SharedUserData!SystemCallStub+0x4 01 155ae920 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 155ae95c 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 155ae964 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 155ae980 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 90 System Thread ID: 3b0 Kernel Time: 0:0:1.109 User Time: 0:0:5.671 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 16c7f630 77f43741 SharedUserData!SystemCallStub+0x4 01 16c7f634 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 16c7f670 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 16c7f6e8 71c0134f mswsock!WSPRecv+0x1f0 04 16c7f724 71bb1151 WS2_32!WSARecv+0x75 05 16c7f750 6d56130e WSOCK32!recv+0x31 06 16c7f790 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 16c7f83c 0dc037a1 0xdbe04a1 08 16c7f8e8 0dc0cc1a 0xdc037a1 09 16c7f900 0dc0c8c5 0xdc0cc1a 0a 16c7f968 0dafab9e 0xdc0c8c5 0b 16c7f998 0dafab1f 0xdafab9e 0c 16c7fa00 791b33ec 0xdafab1f 0d 16c7fa08 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 16c7fb18 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 16c7fbd4 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 16c7fbfc 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 16c7fcb0 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 16c7fcc4 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 16c7fd0c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 16c7fdc8 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 16c7fddc 791b59a5 mscorsvr!AddTimerCallback+0x10 16 16c7fdf0 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 16c7fe04 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 16c7fe24 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 16c7ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 16c7ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 91 System Thread ID: 16c4 Kernel Time: 0:0:0.687 User Time: 0:0:3.828 Other information: Thread is waiting for a lock to be released. Looking for lock owner. Owning thread System ID: 3b0 Thread Type: Other # ChildEBP RetAddr 00 16d8f39c 77f43741 SharedUserData!SystemCallStub+0x4 01 16d8f3a0 77f5d64e ntdll!ZwWaitForSingleObject+0xc 02 16d8f3dc 77f42044 ntdll!RtlpWaitForCriticalSection+0x126 03 16d8f3e4 70cff134 ntdll!RtlEnterCriticalSection+0x46 04 16d8f400 0dbe0ec4 gdiplus!GdipCreateFontFamilyFromName+0x5b WARNING: Frame IP not in any known module. Following frames may be wrong. 05 00000000 00000000 0xdbe0ec4 Thread ID: 116 System Thread ID: a24 Kernel Time: 0:0:0.93 User Time: 0:0:1.312 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1aade8b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1aade8b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1aade8f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1aade968 71c0134f mswsock!WSPRecv+0x1f0 04 1aade9a4 71bb1151 WS2_32!WSARecv+0x75 05 1aade9d0 6d56130e WSOCK32!recv+0x31 06 1aadea10 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1aadeabc 0dc037a1 0xdbe04a1 08 1aadeb68 0dc0cc1a 0xdc037a1 09 1aadeb80 0dc0c8c5 0xdc0cc1a 0a 1aadebe8 0dafab9e 0xdc0c8c5 0b 1aadec18 0dafab1f 0xdafab9e 0c 1aadec80 791b33ec 0xdafab1f 0d 1aadec88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1aaded98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1aadee54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1aadee7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1aadef30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1aadef44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1aadef8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1aadf048 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1aadf05c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1aadf070 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1aadf084 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1aadf0a4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1aadffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1aadffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 117 System Thread ID: 15e0 Kernel Time: 0:0:0.0 User Time: 0:0:0.187 *** WARNING: Unable to verify checksum for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_286988f9\mscorlib.dll *** ERROR: Module load completed but symbols could not be loaded for c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_286988f9\mscorlib.dll Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker succeeded. Loaded Son of Strike data table version 5 from "C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll" Thread 117 ESP EIP 1ae2e514 7999c073 [DEFAULT] [hasThis] Object System.Collections.Hashtable.get_Item(Object) c0000005 Exception in C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\sos.dll.ClrStack debugger extension. PC: 6028d1b4 VA: 00134000 R/W: 0 Parameter: 0001003f Begin System Thread Information # ChildEBP RetAddr WARNING: Stack unwind information not available. Following frames may be wrong. 00 06660398 0000002f mscorlib_79990000+0xc073 Thread ID: 118 System Thread ID: 1738 Kernel Time: 0:0:0.78 User Time: 0:0:0.218 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1ae8e7b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1ae8e7b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1ae8e7f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1ae8e868 71c0134f mswsock!WSPRecv+0x1f0 04 1ae8e8a4 71bb1151 WS2_32!WSARecv+0x75 05 1ae8e8d0 6d56130e WSOCK32!recv+0x31 06 1ae8e910 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1ae8e9bc 0dc037a1 0xdbe04a1 08 1ae8ea68 0dc0cc1a 0xdc037a1 09 1ae8ea80 0dc0c8c5 0xdc0cc1a 0a 1ae8eae8 0dafab9e 0xdc0c8c5 0b 1ae8eb18 0dafab1f 0xdafab9e 0c 1ae8eb80 791b33ec 0xdafab1f 0d 1ae8eb88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1ae8ec98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1ae8ed54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1ae8ed7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1ae8ee30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1ae8ee44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1ae8ee8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1ae8ef48 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1ae8ef5c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1ae8ef70 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1ae8ef84 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1ae8efa4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1ae8ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1ae8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 119 System Thread ID: 15a4 Kernel Time: 0:0:0.15 User Time: 0:0:0.31 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1abdf7b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1abdf7b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1abdf7f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1abdf868 71c0134f mswsock!WSPRecv+0x1f0 04 1abdf8a4 71bb1151 WS2_32!WSARecv+0x75 05 1abdf8d0 6d56130e WSOCK32!recv+0x31 06 1abdf910 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1abdf9bc 0dc037a1 0xdbe04a1 08 1abdfa68 0dc0cc1a 0xdc037a1 09 1abdfa80 0dc0c8c5 0xdc0cc1a 0a 1abdfae8 0dafab9e 0xdc0c8c5 0b 1abdfb18 0dafab1f 0xdafab9e 0c 1abdfb80 791b33ec 0xdafab1f 0d 1abdfb88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1abdfc98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1abdfd54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1abdfd7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1abdfe30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1abdfe44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1abdfe8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1abdff48 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1abdff5c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1abdff70 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1abdff84 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1abdffa4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1abdffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1abdffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 120 System Thread ID: 1294 Kernel Time: 0:0:0.0 User Time: 0:0:0.62 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1ac4f730 77f43741 SharedUserData!SystemCallStub+0x4 01 1ac4f734 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1ac4f770 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1ac4f7e8 71c0134f mswsock!WSPRecv+0x1f0 04 1ac4f824 71bb1151 WS2_32!WSARecv+0x75 05 1ac4f850 6d56130e WSOCK32!recv+0x31 06 1ac4f890 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1ac4f93c 0dc037a1 0xdbe04a1 08 1ac4f9e8 0dc0cc1a 0xdc037a1 09 1ac4fa00 0dc0c8c5 0xdc0cc1a 0a 1ac4fa68 0dafab9e 0xdc0c8c5 0b 1ac4fa98 0dafab1f 0xdafab9e 0c 1ac4fb00 791b33ec 0xdafab1f 0d 1ac4fb08 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1ac4fc18 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1ac4fcd4 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1ac4fcfc 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1ac4fdb0 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1ac4fdc4 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1ac4fe0c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1ac4fec8 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1ac4fedc 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1ac4fef0 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1ac4ff04 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1ac4ff24 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1ac4ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1ac4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 121 System Thread ID: 1284 Kernel Time: 0:0:0.0 User Time: 0:0:0.62 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1ad6f6b0 77f43741 SharedUserData!SystemCallStub+0x4 01 1ad6f6b4 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1ad6f6f0 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1ad6f768 71c0134f mswsock!WSPRecv+0x1f0 04 1ad6f7a4 71bb1151 WS2_32!WSARecv+0x75 05 1ad6f7d0 6d56130e WSOCK32!recv+0x31 06 1ad6f810 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1ad6f8bc 0dc037a1 0xdbe04a1 08 1ad6f968 0dc0cc1a 0xdc037a1 09 1ad6f980 0dc0c8c5 0xdc0cc1a 0a 1ad6f9e8 0dafab9e 0xdc0c8c5 0b 1ad6fa18 0dafab1f 0xdafab9e 0c 1ad6fa80 791b33ec 0xdafab1f 0d 1ad6fa88 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1ad6fb98 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1ad6fc54 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1ad6fc7c 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1ad6fd30 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1ad6fd44 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1ad6fd8c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1ad6fe48 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1ad6fe5c 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1ad6fe70 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1ad6fe84 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1ad6fea4 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1ad6ffb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1ad6ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 122 System Thread ID: 8c4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 1adaff70 77f430c7 SharedUserData!SystemCallStub+0x4 01 1adaff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc 02 1adaffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b 03 1adaffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 123 System Thread ID: 530 Kernel Time: 0:0:0.15 User Time: 0:0:0.15 Thread Type: SQL Query. Possible ASP page Executing Page: Unable to locate ASP page # ChildEBP RetAddr 00 1b0af630 77f43741 SharedUserData!SystemCallStub+0x4 01 1b0af634 71b23988 ntdll!ZwWaitForSingleObject+0xc 02 1b0af670 71b2b13e mswsock!SockWaitForSingleObject+0x38 03 1b0af6e8 71c0134f mswsock!WSPRecv+0x1f0 04 1b0af724 71bb1151 WS2_32!WSARecv+0x75 05 1b0af750 6d56130e WSOCK32!recv+0x31 06 1b0af790 0dbe04a1 dbnetlib!ConnectionRead+0x2ca WARNING: Frame IP not in any known module. Following frames may be wrong. 07 1b0af83c 0dc037a1 0xdbe04a1 08 1b0af8e8 0dc0cc1a 0xdc037a1 09 1b0af900 0dc0c8c5 0xdc0cc1a 0a 1b0af968 0dafab9e 0xdc0c8c5 0b 1b0af998 0dafab1f 0xdafab9e 0c 1b0afa00 791b33ec 0xdafab1f 0d 1b0afa08 791b3c96 mscorsvr!CallDescrWorker+0x30 0e 1b0afb18 791b5612 mscorsvr!MethodDesc::CallDescr+0x1b8 0f 1b0afbd4 791b56c6 mscorsvr!MethodDesc::CallDescr+0x4f 10 1b0afbfc 791b5c40 mscorsvr!MethodDesc::Call+0x97 11 1b0afcb0 791b5b97 mscorsvr!AddTimerCallbackEx+0x165 12 1b0afcc4 791b4de8 mscorsvr!AddTimerCallback_Wrapper+0x13 13 1b0afd0c 791b5ae5 mscorsvr!Thread::DoADCallBack+0x5c 14 1b0afdc8 791b59ce mscorsvr!AddTimerCallbackEx+0x165 15 1b0afddc 791b59a5 mscorsvr!AddTimerCallback+0x10 16 1b0afdf0 791b5802 mscorsvr!ThreadpoolMgr::AsyncTimerCallbackCompletion+0xf 17 1b0afe04 791b57c1 mscorsvr!ThreadpoolMgr::ExecuteWorkRequest+0x19 18 1b0afe24 791dbe6e mscorsvr!ThreadpoolMgr::WorkerThreadStart+0x129 19 1b0affb8 77e4a990 mscorsvr!ThreadpoolMgr::intermediateThreadProc+0x44 1a 1b0affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 124 System Thread ID: b34 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 1b11ff70 77f430c7 SharedUserData!SystemCallStub+0x4 01 1b11ff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc 02 1b11ffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b 03 1b11ffec 00000000 kernel32!BaseThreadStart+0x34 Tag: restarting IIS or executing commands from remote Tag: 363228
  - 24
    - IISState Question Any ideas, suggestion, etc. about what this snippet of an IISState log is trying to tell me? Basically, when I run IISState during a high processor/high Requests Queued event this type of thread seems to be holding a lock (other threads point to this one as the one holding a lock). For some reason it's user time is more than one minute. Earlier post today had no takers. Thanks Thread ID: 9 System Thread ID: 650 Kernel Time: 0:0:37.109 User Time: 0:1:8.328 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0110f6d8 769b245c INFOCOMM!FastFindAnonymousToken+0x24 01 0110f6ec 65f07611 INFOCOMM!TCP_AUTHENT::ClearTextLogon+0x16 02 0110f888 65f03977 w3svc!HTTP_REQ_BASE::LogonUserA+0x67e 03 0110fcac 65f0275a w3svc!HTTP_REQ_BASE::OnRestartRequest+0xa42 04 0110fcec 65f025a4 w3svc!HTTP_REQ_BASE::OnCompleteRequest+0x498 05 0110fd2c 65f02501 w3svc!HTTP_REQ_BASE::UnWrapRequest+0x1f4 06 0110fd4c 65f023b8 w3svc!HTTP_REQ_BASE::OnFillClientReq+0x7a 07 0110fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x99 08 0110fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa 09 0110ff08 65f06b58 w3svc!CreateClient+0x7b 0a 0110ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118 0b 0110ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e 0c 0110ffb4 7c57b388 ISATQ!AtqPoolThread+0x1a8 0d 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52 Tag: restarting IIS or executing commands from remote Tag: 363215
  - 25
    - Removing the web root application If I click the Remove button on the root web application for a site with only static HTML how does that affect IIS? Does the web site run in a different worker process? Cheers, Colin Tag: restarting IIS or executing commands from remote Tag: 363212

Hi all

what's the best way to manually restart IIS service or run a specific
command from remote?
Thanks in advance!

Re: restarting IIS or executing commands from remote by Kyle

Kyle
Thu May 26 15:52:03 CDT 2005

if you are remoted in
iisreset from the cmd prompt is a hndy tool
rebooting is easy enough

depends on what you mean by from remote?

"lellosplendor" <SPAMOUT@SPAMOUT.XX> wrote in message
news:wfnle.28127$795.857205@twister1.libero.it...
> Hi all
>
> what's the best way to manually restart IIS service or run a specific
> command from remote?
> Thanks in advance!

Top

Re: restarting IIS or executing commands from remote by lellosplendor

lellosplendor
Fri May 27 09:52:50 CDT 2005

Kyle Peterson ha scritto:
> if you are remoted in
> iisreset from the cmd prompt is a hndy tool
> rebooting is easy enough
>
> depends on what you mean by from remote?

thanks for the answer. No, I don't want to get into the the server from
remote.
I would like to simply restart IIS by connecting the browser to a web
page or installing a specific service.

Top

Re: restarting IIS or executing commands from remote by Kristofer

Kristofer
Sat May 28 10:43:32 CDT 2005

Hi,

You can probably find this functionality in the IIS Web Administration
(not installed by default, can be installed from Add/Remove Windows
Components). I do however not recommend this installed on a public
webserver.

Another way is to write custom code. Using WMI it should not be difficult
to restart the W3SVC Service. Examples to stop and start a service can be
found here:

http://www.microsoft.com/technet/scriptcenter/scripts/os/services/default.mspx

Note however that once you have stopped the W3SVC service, you cannot
invoke a start of the service from the webpage (since IIS will not
respond), so you need to start automatically.

I also did a quick search on support.microsoft.com and got this:

"IIS: How to Restart IIS Services by Using WSH with ADSI"
http://support.microsoft.com/default.aspx?scid=kb;EN-US;q247557

--
Regards,
Kristofer Gafvert (IIS MVP)
www.gafvert.info - My Articles and help
www.ilopia.com

lellosplendor wrote:

> Kyle Peterson ha scritto:
> > if you are remoted in
> > iisreset from the cmd prompt is a hndy tool
> > rebooting is easy enough
> >
> > depends on what you mean by from remote?
>
> thanks for the answer. No, I don't want to get into the the server from
> remote.
> I would like to simply restart IIS by connecting the browser to a web
> page or installing a specific service.

Top