spammer hacking asp and access files

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - Urgent - IIS ASP crashed or hacked ? Please can someone help. I have a server with about 50 websites. Most of them are giving errors on pages running ASP. for example : http://www.habatatgalleries.com/va/ http://www.kidsindistress.org/gallery.asp http://www.richleighyachts.com/yachtdetail.asp?id=35 http://www.cobbq.com/shopdisplayproducts.asp?id=22&cat=Cobb+Combos+and+Bundles These were all working fine 2 days ago and nothing has changed. Other sites that use ASP and databases on the same server, like : http://forum.cobbamerica.com/ http://www.cobbamerica.com/newsdetail.asp?id=17 Are working fine. What has happened here ?? I am at a complete loss. Thanks Tag: spammer hacking asp and access files Tag: 398399
  - 2
    - Unprocessed ASPX script by IIS I have Receiver.ASPX script which seems not to be processed by IIS, as the browser returns blank page with source containing aprocessed ASPX script (see below). Can you tell how can I find what is the reason and how can I fix it ? Regards, Maciej <%@ Page Language="C#" AutoEventWireup="true" CodeFile="Receiver.aspx.cs" Inherits="Receiver" %> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http:// www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head runat="server"> <title>Untitled Page</title> </head> <body> <form id="form1" runat="server"> <div> <asp:Label ID="Label1" runat=server Text="Agent name to call:"></asp:Label> <br /> <asp:TextBox ID="TextBox1" runat="server"></asp:TextBox> <asp:CheckBox ID="Checkbox1" runat="server" Checked=false Text="Is local?" /> <br /> <br /> <asp:Button ID="Button1" runat="server" Text="Start Receiver" OnClick="Button1_Click" /> <p> <asp:Literal ID="Literal1" runat="server"></ asp:Literal> </p> </div> </form> </body> </html> Tag: spammer hacking asp and access files Tag: 398398
  - 3
    - ERROR MESSAGE Hi; I am running Windows XP Professional w/ SP 2. I just tried to install and run IIS, which is required for a course I am taking. The program installed, I then double clicked on the icon in Administrative Tools and the IIS interface came up . I expanded the entry and navigated to Web Sites. The Default Website came up in the right side window. I highlighted the entry, then clicked on the RUN icon (the right facing triangle on the menu bar). An error message came up "Unexpected error 0x8ffe2740 occurred." I have not been able to find out what this error message indicates. What do I need to do to get IIS running? Thanks. Tag: spammer hacking asp and access files Tag: 398386
  - 4
    - permissions to some not domain users to access intranet Hi, I use IIS6 to publish our intranet , such IIS website is in a x.main.org AD childomain; there are no issues for x.main.org users to access such website. The AD domain is a multi-site AD windows2003 domain where there are a.b.c.d.e..main.org domains. What do I need to set to keep providing intranet access to all x.main.org users and at the same time grant access to "some" of the a.main.org and b.main.org users? thx Eric Tag: spammer hacking asp and access files Tag: 398384
  - 5
    - Connection reset by peer errors when downloading I'm running Windows Server 2003 Standard Edition SP2. Around the time I applied the SP2 update, users of my website who needed to download large-ish (4MB - 12MB) files consistently started getting "Posix error, connection reset by peer" errors. Please see the following thread which details more about the problem (it's limited to http downloads, and not ftp), and what I've tried so far: http://groups.google.com/group/microsoft.public.windows.server.general/browse_thread/thread/d93d65d87076a6a1/ Any and all ideas on how to solve and/or further debug would be greatly appreciated! Tag: spammer hacking asp and access files Tag: 398383
  - 6
    - Use 1 Static IP Address for multiple Websites I have 1 static IP address and I would like to use it for more than 1 website What's important is that I can't nest the websites in sub folders, e.g it has to be www.website1.com/ and not www.website.website1 I have win XP and IIS 5.1 Thank you, Samuel Tag: spammer hacking asp and access files Tag: 398374
  - 7
    - Help! IIS Website I am hoping someone can help me. I have a client using Gallery software. He is using Gallery software on his local computer, pictures that can be viewed from his Website hosted at another site, are actually on his local computer. When people visit his website, they can click on a photos button and are redirected to his local computer where the pictures are. Gallery software allows him to login and upload pictures to the Gallery software. He recently changed to another ISP, now has a different IP address. I had the website host redirect to the correct IP address. People checking his website can see the pictures, but on his local computer, when he goes to his website and clicks on the photo button, he gets connects to his DSL modem, not his gallery software.. I do not see anything in the gallery software, so I am thinking, may it is something in IIS that might be causing the problem. It is a big problem for my client, because he needs to upload pictures for the new tours he has just completed. Thank you for your HELP in advance! Candace Sparks Tag: spammer hacking asp and access files Tag: 398373
  - 8
    - IIS 7 and .NET Framework 3.5 Hello all! I have started testing IIS 7 under Windows Server 2008 (beta) and have installed .NET Framework v3.5 on the same machine. However, I'm unable to see .NET Framework v3.5 as a configuration option for the application pools in the IIS Manager. All I can use is .NET Framework v2.0.50727. In fact, the only trace of v3.5 in my system is that I can uninstall it from within the Control Panel. I would like to be able to test Orcas-developed (VS 2008 is installed on a client machine) web applications on the IIS 7. What to do? Thank you in advance, Hrvoje Tag: spammer hacking asp and access files Tag: 398371
  - 9
    - Advice needed on hosting multiple sites and applications within an II6 web farm Hi, I have been reading the posts as I am investigating using of HW Load balancing for our user access/requests to a new Web farm that we are looking to implement which will host Sharepoint / SQL, Citrix Web interfaces and other applications etc, I would like to know if it what are the limits of hosting multiple sites and applications within a Web farm which uses 3 IIS 6 servers with a HW load balancer. I understand that IIS7 makes this easier to implement but the business decision is to hold off from moving to IIS7. Thanks M Tag: spammer hacking asp and access files Tag: 398367
  - 10
    - IIS URL forward slash I have an customer facing website running under IIS 5 in loadblanced environment. my issue is one of the website is looking for "\" at the end of the URL the url look like this http:\\www.xyz.com\abc\ it works only with "\" at the end otherwise it doesnt work If i do not use the "\" at the end of the url it is not loading the default page configured under document of the virtual directory. but i want the URL without "\" at the end like http:\\www.xyz.com\abc abc is virtual directory under the root of the website I looking for some help in resolving this issue -- Message posted via WinServerKB.com http://www.winserverkb.com/Uwe/Forums.aspx/iis-general/200709/1 Tag: spammer hacking asp and access files Tag: 398357
  - 11
    - Help on scripting IIS 5.1 install. Hi. I'm trying to script an install of iis 5.1/win xp. - This works: manually installing iis rundll32 wamreg.dll, CreateIISPackage aspnet_regiis.exe /i for both .net 1.1 and 2.0 browse to localhost and it rocks. instead of manually installing I tried sysocmgr.exe /i:%SYSTEMROOT%\inf\sysoc.inf /u:%SYSTEMDRIVE%\iis51\IISInstall.TXT /l /w /c /x IIsInstall.txt contains: [Components] fp_extensions = On aspnet = on iis_common = on iis_doc = on iis_inetmgr = on iis_www = on iis_ftp = off iis_htmla = on [InternetServer] --------------------- I browse to localhost and it comes up with a login. I'm able to login and then it works, but I want anonymous authentication to work like my manual install method. I've messed with rights and process to Low and made everyone in the world Admins and gave Everyone full rights to the folder... Any ideas ? Something simple ? Thanks, Jon Tag: spammer hacking asp and access files Tag: 398355
  - 12
    - Server Variables I'm at an agency that is not permitted to let the internal IPs of the web servers get out. Since we support many different applications, its difficult to filter all the content being uploaded to the web servers (500+ apps). How can i block or set the return value to an empty string for a server variable such as LOCAL_ADDR PJ Tag: spammer hacking asp and access files Tag: 398354
  - 13
    - Referrals I have a website with some client banners, the problem is that they are not gerring the referral information when someone clics on any of the banners, they use different statistics services and none log those visits as referred from my website. I am just doing a response.redirect("http://www.clientswebsite.com") I dont know if this is something that has to do with IIS... TIA! Tag: spammer hacking asp and access files Tag: 398351
  - 14
    - Changing the domain membership of a IIS 5.0 Member Server Are there any issues with changing the domain membership of an IIS 5.0 server. We are undergoing an Active Directory migration to a new pristine forest using ADMT v3 and wanted to verify that there wouldn't be issues using the security translation wizard on IIS and moving it to the new domain. Tag: spammer hacking asp and access files Tag: 398350
  - 15
    - Unauthorized request while testing impersonation Hi there, I am testing impersonation in IIS 6.0 and server is returning 401. Let me explain the situation. https://my.server.com is the URL and have a virtual (test) that uses integrated windows authentication. The "test" app creates a instance of assembly from GAC and invokes a method to call web service that is physically located in "test" app. Before calling the web service, I impersonate the request with a domain level account to execute the getresponse from the web service. Credential are set properly but IIS still cannot proceed further. Any ideas? Tag: spammer hacking asp and access files Tag: 398348
  - 16
    - website address I am working on a sql reporting services project and would like to know how to rename a website address. The address for sql reports is http://localhost/reports, how can i make this something like http://ryan/reports or http://company/reports? I need to change the reference of the localhost (server name). Thanks, Ryan Tag: spammer hacking asp and access files Tag: 398345
  - 17
    - IIS Setup R2 64 bit prompting for iisback.vbs I'm trying to install iis using Windows Server Standar 2003 R2 64-bit. Add / Remove components, Application Server. The install is prompting for IISBack.vbs from the setup media. The only instance I can find is iisback.vb_ in the AMD64 directory on the install disk 1. Could that be the correct file even though it's in the AMD 64 directory? I did install SP2 and Windows Updates prior to the IIS install. Thx. Tag: spammer hacking asp and access files Tag: 398344
  - 18
    - Anyone using this for free certificates? https://www.cacert.org I just learned about them. They look relatively new. Could this be a good option? Mike Tag: spammer hacking asp and access files Tag: 398343
  - 19
    - first page load Hi group Running Windows 2003 R2 (intranet) in a NLB cluster and 2 webservers running MS CMS 2002 mixed mode with a SQL 2000 backend When I request the first page there's approx 30 sec. load time (somethimes longer) - any other pages after the first page serves up immediately. Some times I get the: 404 error and if I hit F5 the page are there instantly. If I let the browser alone for ½ hour and hit some link on the page there also approx. 30 sec load time Can anyone point me to a solution ? Tag: spammer hacking asp and access files Tag: 398341
  - 20
    - Additional hard drive I am hosting my own website, running win2k3. I want to add another hard drive . How can I transfer my website to the new hard drive (D:), knowing Inetpub is on C: drive? Tag: spammer hacking asp and access files Tag: 398327
  - 21
    - hosting 2 websites using 2 ip addresses on the same physical serve Hi all, I have been searching online but can't get a grip on this. It is my first time implementing this project and I'm stuck. Basically, I would like to know (1) how to config IIS 5 on Windows 2000 Server to support hosting 2 websites using 2 different IP addresses. (2) I look at the IIS consule -> Web Site Identification to see the current website configuration. I found that the IP Address is "(All Unassigned)" on TCP Port 80. Do I have to modify the IP address of the first website? (3) how the server/IIS can differentiate if a request is from which ip address/website? Below is my situation: The Windows 2000 server has 2 NIC cards: LAN and Internet. My understanding is I don't need to modify setting on LAN card, but I'm not sure if I should assign another static local IP address (to support a new website) to the Internet NIC card. Any advice would be greatly appreciated! Tag: spammer hacking asp and access files Tag: 398324
  - 22
    - Cannot view XML input using XSL style sheet I apologize in advance if I did not choose the appropriate place to post my query. I am so clueless when it comes to computers that I did not know what half the abbreviations of category choices even stood for. Today, for the first time, I received the following message on a website that I've accessed weekly for the past 6 months or so: The XML page cannot be displayed Cannot view XML input using XSL style sheet. Please correct the error and then click the Refresh button, or try again later. -------------------------------------------------------------------------------- The following tags were not closed: strs, itemTooltip, str. The website is http://www.wowarmory.com/ Nothing unusual about the site whatsoever, except possibly that I am now unable to access it and am at a total loss as to what steps to take next to rectify this (I did a system restore today back two days...it was the only thing i could think of, it didn't help). Thank you for your time/advice Tag: spammer hacking asp and access files Tag: 398322
  - 23
    - https works but http down intermittently I have several web sites on my server. One of them redirects to https. Often all my http sites goes down except https. Restarting IIS fixes problem but I want to know why and how to resolve this issue. Tag: spammer hacking asp and access files Tag: 398321
  - 24
    - What is a site identifier I'm reading KB 834141 but it keeps going on about site identifers in IIS 6 at the bottom of the page, I don't know what they mean do you? Tag: spammer hacking asp and access files Tag: 398316
  - 25
    - Debug Diagnostics - Web Service Hung One of our web services will hang occasionally, instead of band-aiding the problem with an IISRESET I would like to fix the real problem. In my debug diagnostics dump I've got four threads waiting on a winsock connection originated by 1f4a1c3 but don't know where to find what this is. Thanks for any insight you can provide. Warning The following threads in w3wp.exe__AppPool1__PID__3612__Date__09_07_2007__Time_09_38_42AM__539__IIS Hang Dump.dmp are waiting on data to be returned from another server via WinSock. The call to WinSock originated from 1f4a1c3 ( 15 27 31 32 ) 7.27% of threads blocked Ensure that any remote server this application may be calling is functioning properly and there are no network issues between the two servers. If the problem continues, please contact the application vendor for further assistance Warning The following threads in w3wp.exe__AppPool1__PID__3612__Date__09_07_2007__Time_09_38_42AM__539__IIS Hang Dump.dmp are calling the Sleep API. The call to this API originated from mscorwks!EESleepEx+a3. ( 47 ) 1.82% of threads blocked The duration of the Sleep call is 10 miliseconds. Short calls to the Sleep API often occur inside of a tight loop, which will delay the application and cause high CPU until the loop is exited. Please follow up with vendor Microsoft Corporation for problem resolution concerning the following file: C:\WINDOWS\Microsoft.NET \Framework\V2.0.50727\mscorwks.dll. Warning 328 client connection(s) in w3wp.exe__AppPool1__PID__3612__Date__09_07_2007__Time_09_38_42AM__539__IIS Hang Dump.dmp have been executing a request for more than 90 seconds. Report for w3wp.exe__AppPool1__PID__3612__Date__09_07_2007__Time_09_38_42AM__539__IIS Hang Dump.dmp Type of Analysis Performed Hang Analysis Machine Name ServFarm1 Operating System Windows Server 2003 Service Pack 2 Number Of Processors 4 Process ID 3612 Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe System Up-Time 128 day(s) 13:12:28 Process Up-Time 0 day(s) 00:13:56 Thread report Thread 0 - System ID 2036 Entry point w3wp!wmainCRTStartup Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.78 Time spent in kernel mode 0 Days 0:0:0.15 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac kernel32!WaitForSingleObject+12 w3dt!WP_CONTEXT::RunMainThreadLoop+10 w3dt!UlAtqStartListen+2d w3core!W3_SERVER::StartListen+bd w3core!UlW3Start+26e w3wp!wmain+22a w3wp!wmainCRTStartup+12f kernel32!BaseProcessStart+23 Back to Top Thread 1 - System ID 1452 Entry point ntdll!RtlpTimerThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtDelayExecution+c ntdll!RtlpTimerThread+47 kernel32!BaseThreadStart+34 Back to Top Thread 2 - System ID 3780 Entry point ntdll!RtlpWorkerThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c ntdll!RtlpWorkerThread+3d kernel32!BaseThreadStart+34 Back to Top Thread 3 - System ID 1516 Entry point rpcrt4!ThreadStartRoutine Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.15 Function Source ntdll!KiFastSystemCallRet ntdll!NtReplyWaitReceivePortEx+c rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198 rpcrt4!RecvLotsaCallsWrapper+d rpcrt4!BaseCachedThreadRoutine+9d rpcrt4!ThreadStartRoutine+1b kernel32!BaseThreadStart+34 Back to Top Thread 4 - System ID 4496 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:1.78 Time spent in kernel mode 0 Days 0:0:0.187 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 w3tp!THREAD_POOL_DATA::ThreadPoolThread+33 w3tp!THREAD_POOL_DATA::ThreadPoolThread+24 w3tp!THREAD_MANAGER::ThreadManagerThread+39 kernel32!BaseThreadStart+34 Back to Top Thread 5 - System ID 1872 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:1.46 Time spent in kernel mode 0 Days 0:0:0.265 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 w3tp!THREAD_POOL_DATA::ThreadPoolThread+33 w3tp!THREAD_POOL_DATA::ThreadPoolThread+24 w3tp!THREAD_MANAGER::ThreadManagerThread+39 kernel32!BaseThreadStart+34 Back to Top Thread 6 - System ID 3908 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.468 Time spent in kernel mode 0 Days 0:0:0.187 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 w3tp!THREAD_POOL_DATA::ThreadPoolThread+33 w3tp!THREAD_POOL_DATA::ThreadPoolThread+24 w3tp!THREAD_MANAGER::ThreadManagerThread+39 kernel32!BaseThreadStart+34 Back to Top Thread 7 - System ID 3808 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.265 Time spent in kernel mode 0 Days 0:0:0.125 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 w3tp!THREAD_POOL_DATA::ThreadPoolThread+33 w3tp!THREAD_POOL_DATA::ThreadPoolThread+24 w3tp!THREAD_MANAGER::ThreadManagerThread+39 kernel32!BaseThreadStart+34 Back to Top Thread 8 - System ID 3156 Entry point ntdll!RtlpWaitThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c ntdll!RtlpWaitThread+161 kernel32!BaseThreadStart+34 Back to Top Thread 9 - System ID 5984 Entry point w3core!HTTP_COMPRESSION::CompressionThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac kernel32!WaitForSingleObject+12 w3core!HTTP_COMPRESSION::CompressionThread+126 kernel32!BaseThreadStart+34 Back to Top Thread 10 - System ID 4280 Entry point rpcrt4!ThreadStartRoutine Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.15 Function Source ntdll!KiFastSystemCallRet ntdll!NtReplyWaitReceivePortEx+c rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198 rpcrt4!RecvLotsaCallsWrapper+d rpcrt4!BaseCachedThreadRoutine+9d rpcrt4!ThreadStartRoutine+1b kernel32!BaseThreadStart+34 Back to Top Thread 11 - System ID 2352 Entry point ntdll!RtlpIOWorkerThread Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtDelayExecution+c ntdll!RtlpIOWorkerThread+3f kernel32!BaseThreadStart+34 Back to Top Thread 12 - System ID 3136 Entry point XCompress+1b60 Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.15 Time spent in kernel mode 0 Days 0:0:0.0 This thread is calling an ISAPI Filter XCompress Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac kernel32!WaitForSingleObject+12 XCompress+1bca kernel32!BaseThreadStart+34 Back to Top Thread 13 - System ID 3932 Entry point mscorwks!ThreadpoolMgr::intermediateThreadProc Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.15 Time spent in kernel mode 0 Days 0:0:0.46 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 mscorwks!ThreadpoolMgr::CompletionPortThreadStart+11c mscorwks!ThreadpoolMgr::intermediateThreadProc+49 kernel32!BaseThreadStart+34 Back to Top Thread 14 - System ID 2196 Entry point mscorwks!ThreadpoolMgr::GateThreadStart Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtDelayExecution+c kernel32!SleepEx+68 mscorwks!EESleepEx+a3 mscorwks!__DangerousSwitchToThread+70 mscorwks!__SwitchToThread+b mscorwks!ThreadpoolMgr::GateThreadStart+a1 kernel32!BaseThreadStart+34 Back to Top Thread 15 - System ID 4488 Entry point mscorwks!ThreadpoolMgr::intermediateThreadProc Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:1:5.171 Time spent in kernel mode 0 Days 0:0:6.453 This thread is waiting on data to be returned from another server via WinSock. The call to WinSock originated from 1f4a1c3 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c mswsock!SockWaitForSingleObject+19d mswsock!WSPRecv+203 ws2_32!recv+83 1f4a1c3 System_ni+1c03fe System_ni+1c02ad System_ni+193658 System_ni+1b68df Back to Top Thread 16 - System ID 396 Entry point mscorwks!DebuggerRCThread::ThreadProcStatic Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a kernel32!WaitForMultipleObjects+18 mscorwks!DebuggerRCThread::MainLoop+cf mscorwks!DebuggerRCThread::ThreadProc+ca mscorwks!DebuggerRCThread::ThreadProcStatic+82 kernel32!BaseThreadStart+34 Back to Top Thread 17 - System ID 3008 Entry point mscorwks!SVR::gc_heap::gc_thread_stub Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:48.812 Time spent in kernel mode 0 Days 0:0:1.515 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac mscorwks!PEImage::LoadImage+199 mscorwks!CLREvent::WaitEx+117 mscorwks!CLREvent::Wait+17 mscorwks!SVR::gc_heap::gc_thread_function+2e mscorwks!SVR::gc_heap::gc_thread_stub+9b kernel32!BaseThreadStart+34 Back to Top Thread 18 - System ID 4060 Entry point mscorwks!SVR::gc_heap::gc_thread_stub Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:55.296 Time spent in kernel mode 0 Days 0:0:0.390 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac mscorwks!PEImage::LoadImage+199 mscorwks!CLREvent::WaitEx+117 mscorwks!CLREvent::Wait+17 mscorwks!SVR::gc_heap::gc_thread_function+57 mscorwks!SVR::gc_heap::gc_thread_stub+9b kernel32!BaseThreadStart+34 Back to Top Thread 19 - System ID 2344 Entry point mscorwks!SVR::gc_heap::gc_thread_stub Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:38.734 Time spent in kernel mode 0 Days 0:0:0.578 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac mscorwks!PEImage::LoadImage+199 mscorwks!CLREvent::WaitEx+117 mscorwks!CLREvent::Wait+17 mscorwks!SVR::gc_heap::gc_thread_function+57 mscorwks!SVR::gc_heap::gc_thread_stub+9b kernel32!BaseThreadStart+34 Back to Top Thread 20 - System ID 5324 Entry point mscorwks!SVR::gc_heap::gc_thread_stub Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:46.750 Time spent in kernel mode 0 Days 0:0:0.671 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac mscorwks!PEImage::LoadImage+199 mscorwks!CLREvent::WaitEx+117 mscorwks!CLREvent::Wait+17 mscorwks!SVR::gc_heap::gc_thread_function+57 mscorwks!SVR::gc_heap::gc_thread_stub+9b kernel32!BaseThreadStart+34 Back to Top Thread 21 - System ID 5552 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:24:50 AM Time spent in user mode 0 Days 0:0:0.296 Time spent in kernel mode 0 Days 0:0:0.31 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a kernel32!WaitForMultipleObjects+18 mscorwks!SVR::WaitForFinalizerEvent+7a mscorwks!SVR::GCHeap::FinalizerThreadWorker+75 mscorwks!Thread::UserResumeThread+fb mscorwks!Thread::DoADCallBack+355 mscorwks!Thread::DoADCallBack+541 mscorwks!ManagedThreadBase_NoADTransition+32 mscorwks!ManagedThreadBase::FinalizerBase+b mscorwks!SVR::GCHeap::FinalizerThreadStart+bb mscorwks!Thread::intermediateThreadProc+49 kernel32!BaseThreadStart+34 Back to Top Thread 22 - System ID 3256 Entry point mscorwks!ThreadpoolMgr::TimerThreadStart Create time 9/7/2007 9:24:51 AM Time spent in user mode 0 Days 0:0:0.31 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtDelayExecution+c kernel32!SleepEx+68 mscorwks!ThreadpoolMgr::TimerThreadFire+6d mscorwks!ThreadpoolMgr::TimerThreadStart+56 kernel32!BaseThreadStart+34 Back to Top Thread 23 - System ID 2772 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:24:51 AM Time spent in user mode 0 Days 0:0:0.15 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac mscorwks!PEImage::LoadImage+199 mscorwks!CLREvent::WaitEx+117 mscorwks!CLREvent::Wait+17 mscorwks!AppDomain::ADUnloadThreadStart+2fb mscorwks!Thread::intermediateThreadProc+49 kernel32!BaseThreadStart+34 Back to Top Thread 24 - System ID 4560 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:24:51 AM Time spent in user mode 0 Days 0:0:0.46 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 mscorwks!ThreadpoolMgr::CompletionPortThreadStart+11c mscorwks!Thread::intermediateThreadProc+49 kernel32!BaseThreadStart+34 Back to Top Thread 25 - System ID 5348 Entry point w3tp!THREAD_MANAGER::ThreadManagerThread Create time 9/7/2007 9:24:51 AM Time spent in user mode 0 Days 0:0:0.593 Time spent in kernel mode 0 Days 0:0:0.203 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 w3tp!THREAD_POOL_DATA::ThreadPoolThread+33 w3tp!THREAD_POOL_DATA::ThreadPoolThread+24 w3tp!THREAD_MANAGER::ThreadManagerThread+39 kernel32!BaseThreadStart+34 Back to Top Thread 26 - System ID 3588 Entry point System_Data!SNIAsyncWait Create time 9/7/2007 9:24:51 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c kernel32!GetQueuedCompletionStatus+29 System_Data!SNIAsyncWait+6c kernel32!BaseThreadStart+34 Back to Top Thread 27 - System ID 5912 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:24:51 AM Time spent in user mode 0 Days 0:1:9.328 Time spent in kernel mode 0 Days 0:0:6.656 This thread is waiting on data to be returned from another server via WinSock. The call to WinSock originated from 1f4a1c3 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c mswsock!SockWaitForSingleObject+19d mswsock!WSPRecv+203 ws2_32!recv+83 1f4a1c3 System_ni+1c03fe System_ni+1c02ad System_ni+193658 System_ni+1b68df Back to Top Thread 28 - System ID 3976 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:24:52 AM Time spent in user mode 0 Days 0:0:0.15 Time spent in kernel mode 0 Days 0:0:0.15 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a mscorwks!WaitForMultipleObjectsEx_SO_TOLERANT+6f mscorwks!Thread::DoAppropriateAptStateWait+3c mscorwks!Thread::DoAppropriateWaitWorker+144 mscorwks!Thread::DoAppropriateWait+40 mscorwks!WaitHandleNative::CorWaitMultipleNative+20a mscorlib_ni+314413 Back to Top Thread 29 - System ID 4880 Entry point userenv!NotificationThread Create time 9/7/2007 9:24:52 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a kernel32!WaitForMultipleObjects+18 userenv!NotificationThread+5f kernel32!BaseThreadStart+34 Back to Top Thread 30 - System ID 3016 Entry point rpcrt4!ThreadStartRoutine Create time 9/7/2007 9:24:53 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtReplyWaitReceivePortEx+c rpcrt4!LRPC_ADDRESS::ReceiveLotsaCalls+198 rpcrt4!RecvLotsaCallsWrapper+d rpcrt4!BaseCachedThreadRoutine+9d rpcrt4!ThreadStartRoutine+1b kernel32!BaseThreadStart+34 Back to Top Thread 31 - System ID 4776 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:24:53 AM Time spent in user mode 0 Days 0:1:10.812 Time spent in kernel mode 0 Days 0:0:7.62 This thread is waiting on data to be returned from another server via WinSock. The call to WinSock originated from 1f4a1c3 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c mswsock!SockWaitForSingleObject+19d mswsock!WSPRecv+203 ws2_32!recv+83 1f4a1c3 System_ni+1c03fe System_ni+1c02ad System_ni+193658 System_ni+1b68df Back to Top Thread 32 - System ID 5668 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:24:55 AM Time spent in user mode 0 Days 0:1:7.328 Time spent in kernel mode 0 Days 0:0:6.484 This thread is waiting on data to be returned from another server via WinSock. The call to WinSock originated from 1f4a1c3 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c mswsock!SockWaitForSingleObject+19d mswsock!WSPRecv+203 ws2_32!recv+83 1f4a1c3 System_ni+1c03fe System_ni+1c02ad System_ni+193658 System_ni+1b68df Back to Top Thread 33 - System ID 2412 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:25:05 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a mscorwks!WaitForMultipleObjectsEx_SO_TOLERANT+6f mscorwks!Thread::DoAppropriateAptStateWait+3c mscorwks!Thread::DoAppropriateWaitWorker+144 mscorwks!Thread::DoAppropriateWait+40 mscorwks!WaitHandleNative::CorWaitMultipleNative+20a mscorlib_ni+314413 Back to Top Thread 34 - System ID 5640 Entry point mscorwks!Thread::intermediateThreadProc Create time 9/7/2007 9:25:05 AM Time spent in user mode 0 Days 0:0:0.31 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a mscorwks!WaitForMultipleObjectsEx_SO_TOLERANT+6f mscorwks!Thread::DoAppropriateAptStateWait+3c mscorwks!Thread::DoAppropriateWaitWorker+144 mscorwks!Thread::DoAppropriateWait+40 mscorwks!WaitHandleNative::CorWaitMultipleNative+20a mscorlib_ni+314413 Back to Top Thread 35 - System ID 2588 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac kernel32!WaitForSingleObject+12 comsvcs!CSTAThreadPool::LoadBalanceThreadControlLoop+29 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 36 - System ID 6104 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac kernel32!WaitForSingleObject+12 comsvcs!CSTAThreadPool::KillThreadControlLoop+25 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 37 - System ID 4808 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:1.562 Time spent in kernel mode 0 Days 0:0:0.46 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 38 - System ID 4992 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.93 Time spent in kernel mode 0 Days 0:0:0.15 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 39 - System ID 4784 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.718 Time spent in kernel mode 0 Days 0:0:0.15 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 40 - System ID 5600 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 41 - System ID 4596 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.15 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 42 - System ID 4320 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 43 - System ID 5820 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.921 Time spent in kernel mode 0 Days 0:0:0.46 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 44 - System ID 3788 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:1.343 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 45 - System ID 2224 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.406 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 46 - System ID 4624 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.375 Time spent in kernel mode 0 Days 0:0:0.62 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f comsvcs!CSTAThread::WorkerLoop+1f9 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 47 - System ID 2004 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:25:40 AM Time spent in user mode 0 Days 0:0:0.171 Time spent in kernel mode 0 Days 0:0:0.62 This thread is calling the Sleep API. The call to this API originated from mscorwks!EESleepEx+a3. Function Source ntdll!KiFastSystemCallRet ntdll!NtDelayExecution+c kernel32!SleepEx+68 mscorwks!EESleepEx+a3 mscorwks!CExecutionEngine::ClrSleepEx+d mscorwks!ClrSleepEx+13 mscorwks!Thread::UserSleep+63 mscorwks!ThreadNative::Sleep+ce 9596b50 9596849 9596756 959aabf 959982f 9591185 System_Web_ni+20a5a4 System_Web_ni+21b521 System_Web_ni+21b487 System_Web_ni+35da2c System_Web_ni+35e105 System_Web_ni+35e1df 1cf633c mscorwks!UM2MThunk_WrapperHelper+1f mscorwks!UM2MThunk_WrapperWorker+60 mscorwks!UM2MThunk_Wrapper+12 mscorwks!Thread::DoADCallBack+d9 mscorwks!UM2MDoADCallBack+7c 1cf6380 webengine!AspCompatAsyncCall::OnCall+145 comsvcs!CSTAActivityWork::STAActivityWorkHelper+5e ole32!EnterForCallback+c4 ole32!SwitchForCallback+1a3 ole32!PerformCallback+54 ole32!CObjectContext::InternalContextCallback+159 ole32!CObjectContext::DoCallback+1c comsvcs!CSTAActivityWork::DoWork+fd comsvcs!CSTAThread::DoWork+18 comsvcs!CSTAThread::ProcessQueueWork+37 comsvcs!CSTAThread::WorkerLoop+190 msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 48 - System ID 6040 Entry point ole32!CRpcThreadCache::RpcWorkerThreadEntry Create time 9/7/2007 9:32:54 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtDelayExecution+c kernel32!SleepEx+68 kernel32!Sleep+f ole32!CROIDTable::WorkerThreadLoop+14 ole32!CRpcThread::WorkerLoop+26 ole32!CRpcThreadCache::RpcWorkerThreadEntry+20 kernel32!BaseThreadStart+34 Back to Top Thread 49 - System ID 5008 Entry point asp!CApplnCleanupMgr::ApplnCleanupThread Create time 9/7/2007 9:32:54 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac kernel32!WaitForSingleObject+12 asp!CApplnCleanupMgr::ApplnCleanupDoWork+1e asp!CApplnCleanupMgr::ApplnCleanupThread+a kernel32!BaseThreadStart+34 Back to Top Thread 50 - System ID 4796 Entry point msvcrt!_endthreadex+2f Create time 9/7/2007 9:32:54 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForMultipleObjects+c kernel32!WaitForMultipleObjectsEx+11a user32!RealMsgWaitForMultipleObjectsEx+141 user32!MsgWaitForMultipleObjects+1f asp!CMTACallbackThread::Thread+4f msvcrt!_endthreadex+a3 kernel32!BaseThreadStart+34 Back to Top Thread 51 - System ID 3428 Entry point asp!CViperReqManager::WatchThread Create time 9/7/2007 9:32:54 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!NtWaitForSingleObject+c kernel32!WaitForSingleObjectEx+ac kernel32!WaitForSingleObject+12 asp!CViperReqManager::WatchThread+68 kernel32!BaseThreadStart+34 Back to Top Thread 52 - System ID 3056 Entry point ntdll!RtlpWorkerThread Create time 9/7/2007 9:36:51 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c ntdll!RtlpWorkerThread+3d kernel32!BaseThreadStart+34 Back to Top Thread 53 - System ID 3088 Entry point ntdll!RtlpWorkerThread Create time 9/7/2007 9:36:51 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c ntdll!RtlpWorkerThread+3d kernel32!BaseThreadStart+34 Back to Top Thread 54 - System ID 2300 Entry point ntdll!RtlpWorkerThread Create time 9/7/2007 9:37:51 AM Time spent in user mode 0 Days 0:0:0.0 Time spent in kernel mode 0 Days 0:0:0.0 Function Source ntdll!KiFastSystemCallRet ntdll!ZwRemoveIoCompletion+c ntdll!RtlpWorkerThread+3d kernel32!BaseThreadStart+34 Back to Top COM+ STA ThreadPool Report Max STA Threads 100 Min STA Threads 4 Current STA Threads 11 g_activitiesPerThread 1 EmulateMTSBehavior True STA Threads In-Call 0 (none) Note: There was an error collecting details for the COM+ STA Threadpool threads. The internal COM+ data structures may have been corrupted. Well-Known COM STA Threads Report STA Name Thread ID Thread Status Call Status Main STA 15 In-Call (bad symbols) waiting on data to be returned from another server via WinSock HTTP report IIS ATQ worker thread count 5 Thread(s) Available ATQ worker thread count 5 Thread(s) Active client connections 515 client connection(s) 11 connection(s) waiting for the next request. ASP report Executing ASP requests 0 Request(s) ASP templates cached 1 Template(s) ASP template cache size 1,072.00 Bytes Loaded ASP applications 1 Application(s) ASP.DLL Version 6.0.3790.3959 ASP application report ASP application metabase key /LM/W3SVC/1074716464/Root Physical Path C:\REDIRECT\ Virtual Root / Session Count 0 Session(s) Request Count 0 Request(s) Session Timeout 20 minutes(s) Path to Global.asa Server side script debugging enabled False Client side script debugging enabled False Out of process COM servers allowed False Session state turned on True Write buffering turned on True Application restart enabled True Parent paths enabled True ASP Script error messages will be sent to browser True Tag: spammer hacking asp and access files Tag: 398313
- Next
  - 1
    - Login on screen appearing on hosted website I'm running IIS on a small business server R2. I'm running 2 websites. I local website for clients on port 80. And a external website on port 81 with the WAN router forwarding requests to port 80. I can access the site fine but it keeps popping up with the login screen and requires authentication to access the site. I have set full permission on the folder and IIS folder for guest and everyone and internet guest. Any suggestions??? EggHeadCafe - .NET Developer Portal of Choice http://www.eggheadcafe.com Tag: spammer hacking asp and access files Tag: 398311
  - 2
    - IIS in Vista Hi, Plz any1 can tell me that how to install IIS in windows Vista... thank u Very Much EggHeadCafe - .NET Developer Portal of Choice http://www.eggheadcafe.com Tag: spammer hacking asp and access files Tag: 398305
  - 3
    - Host Headers, one IP and two SSL Certs I have one IIS 6.0 Websever that hosts several sites using host headers. Our main "www" website's content management system is secured with SSL for the login. I have a new application that runs on "apps" and part of the project spec is that it is secured with SSL for our end users entering information. I have SSL certs for www and apps, but from what I understand you cannot have two SSLs on one IP. What are my options? I have heard that I need a wild-card SSL cert for my whole site, or I need to specify a different port for SSL for one of my sites. Could use host headers, and specify a different port (say 4433) to direct secure traffic to my new project's pages? Tag: spammer hacking asp and access files Tag: 398301
  - 4
    - Logging in to multiple sites with the same credentials Hello, I am not sure if this group is appropriate for this question. We are using ASP.Net and we have several unrelated sites running on a couple of web servers. Each site is linked to an SQL database. As it is, we keep a seperate table for each site to hold the login information. It was requested that we have one login page from the main company site that will direct the user directly to their site. How can this be done? Since each group of sites have their connection pool and i don't want to pass the login information in the Response.Redirect. We thought of passing the information encrypted along with the sessionid, so that even if the browser keeps the information in the history, the user would still have to login from the site. Any ideas? By the way, the idea is that the client gets a chance to look at our services from the main site. Our clients login from public places, so they have to type their username and password everytime. thanks Tag: spammer hacking asp and access files Tag: 398300
  - 5
    - IIS, iisback.vbs and iiscnfg.vbs Hi, While searching for a way to do an IIS configuration backup and restoration, I came across the following Microsoft website: http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/5e7e923c-b374-4872-a8f5-da85ec1315fd.mspx?mfr=true Which has this little gem on it: The metabase and schema of an IIS configuration include system- specific and session-specific properties. Do not copy or import the metabase or schema of one IIS server to another IIS server without modification. To copy all or part of a metabase configuration from one system to another, use Copying IIS Configurations Using Iiscnfg.vbs. ENDQUOTE I found this quite interesting, and took a look at the iiscnfg.vbs page it pointed to. However, iiscnfg.vbs is an immediate solution, there was no option to copy to another server from an existing backup (IE in the case of disaster recovery of a failed IIS system). So, since its a .vbs, I opened it in an editor and took a look at hte script to see what it does - see if I could put something together which did what I wanted. And I found something even more interesting. All iiscnfg.vbs does during the copy from one machine to another is the following: 1. backup the source system using iisback.vbs 2. copy the files across to the new system using a standard file copy 3. restore the files on the destination system using iisback.vbs This is the precise action you would take manually, and is exactly the action that MS warns you off of on the iisback.vbs page. So what gives?! Is it safe to backup and restore IIS configuration across machines like this or isn't it? Regards Richard Tag: spammer hacking asp and access files Tag: 398296
  - 6
    - 401 Access denied for content type html I have a Client server Application developed in .Net using .Net remoting I am not using IIS; I have my own customized web server. My server component connects few client applications at different locations. I have migrated Client application from Old VB 6 to. Net recently and deployed the client at all required locations I am getting error at one location "401 Access denied for content type html" for one of the locations. My client applications are same everywhere but I am not able to trace out the root cause of this error for one location only. If I replace OLD VB application at this particular place it works fine, it gives only when I replace .Net client application at that location. Please guide or suggest me in this regard. Is any other security is service settings required for this. Tag: spammer hacking asp and access files Tag: 398294
  - 7
    - IIS and Environment Variables Hi, Is it possible to get the updated environment variables in an IIS application (ISAPI for example) ? The problem is that IIS get the environment variables when the computer restarts and does not lookup for updated values. Thanks, Gilad. Tag: spammer hacking asp and access files Tag: 398290
  - 8
    - Web Site Access I have a local network of 3 XP Pro machines. I would like to set up one machine as a "web server" for testing purposes only. I have IIS installed and a site configured. How do I access that site from the browser from one of the other two machines? Thanks. Brett Tag: spammer hacking asp and access files Tag: 398287
  - 9
    - sharing root include files across many sites have a question. we have a large web site that uses ASP and virtual include files to piece pages together. so /includes/header.asp is used all over. What we want to do is set up subdomains of our site and make them their own site. For example, our main site is www.foo.edu and we want to set up admissions.foo.edu, financialaid.foo.edu, etc. so that when a user goes to these sites the name is the address bar of the browser. When you set up a site this way it seems it wants it own set of includes files. We want to be able to share the root include files for all these sites. Is there a way to do this? Can we set a path for shared files across many sites? Thanks. Tag: spammer hacking asp and access files Tag: 398279
  - 10
    - IIS 5.1 Limit Sessions Is it legal to use command adsutil set w3svc/MaxConnections 40 to increase IIS 5.1 on my XP pro from 10 to 40 Tag: spammer hacking asp and access files Tag: 398276
  - 11
    - Trouble with ISAPI Url rewrite and HTTP PUT and DELETE I am running into problems rewriting urls when the HTTP method is one of PUT or DELETE (case sensitive here) I have tried ISAPI Rewrite 3 and Ionic Rewrite Filter I am converting urls from /api/v1/customers/1 to /api/v1/customers/1.rails Everything works well except on PUT and DELETE. Variations of PUT and DELETE (Put, pUT,PUt,put etc) all work, it is only when the verb is passed all uppercase. When I view the logs of either rewriter they both indicate that the url has been rewritten correctly, but in the IIS log file it displays the unwritten url with a 500 status. It seems as though it must be some IIS setting not allowing PUT and DELETE, but I can't find anywhere else to enable it. My .rails extension is mapped to ASP.Net 2.0 and is set to allow all verbs. Any help with this is greatly appreciated. Thanks Chris Tag: spammer hacking asp and access files Tag: 398273
  - 12
    - Error 403 forbidden on remote machines I have a frustrating problem with IIS. We have a W2003R2 64 bit OS running with Exchange 2007 and Sharepoint Server 2007 running on it, and all was working fine. Then someone attempted to install Microsoft Data Protection Manager onto the server, and Removed all SSL requirements on the default web site in order to install it. The install failed and he then removed DPM. Since then, however, we have been unable to access OWA or sharepoint properly from remote machines, but it works fine on the machine itself. The error is HTTP Error 403.2 - Forbidden: Read access is denied. I've been looking in IIS trying to find what is blocked and where, but unable to find anything. I know its a IIS permissions problem, but its frustrating because I cannot find the cause although I know its the same error for both. From the IIS logs I have for the OWA error Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.0;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+InfoPath.1) 403 2 5 2007-09-18 11:22:11 W3SVC1 192.168.124.15 GET /owa/8.0.744.0/themes/base/bsd.gif - 443 bhl\j.ede XXX.XXX.XXX.XXX and for the sharepoint error 2007-09-18 10:33:04 W3SVC2129811787 192.168.124.16 GET /_themes/Obsidian/viewheadergrad_obsidian.gif - 80 BHL\j.ede 192.168.124.59 Mozilla/4.0+(compatible;+MSIE+7.0;+Windows+NT+5.1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.04506.30) 200 0 0 Tag: spammer hacking asp and access files Tag: 398263
  - 13
    - SSL Processes on IIS 6 Greetings. Hoepfully someone here can help me with this. I have an IIS server with multiple IP Addresses assigned: every site gets its' own IP Address. Additionally, I am also running Citrix Secure Gateway. It too is assigned a static IP Address and is listening on port 443. The secure gateway has its' own certificate that is not used by any other process. A new web application is going to be deployed to this server and it will require SSL. The problem I am having is that IIS 6 is completely ignoring the specific IP Address:Port binding I am assigning to the site. As it usually does right out of the box, IIS is attempting to take over all IP Addresses instead of those that are assigned. On IIS 5, the solution was simple: exceute adsutil.vbs and disable socket pooling. (I currenlty have a server running IIS 5 with Apache Tomcat and they both have SSL listeners attached only to the IP Addresses they are assigned to). I've tried the same trick with IIS 6 to no avail. I've also used httpcfg.exe to assign the available IP Addresses; however, nothing seems to work, IIS still keeps trying to attach and SSL listener on 0.0.0.0. Does anyone here have a solution to this problem? If worse comes to worst, I'll simply transplant the entire website to an IIS 5 server. Thank you. Tag: spammer hacking asp and access files Tag: 398250
  - 14
    - problems downloading certain types of files 've setup my website to allow directory browsing. I want our customers to be able to go in and drill down to the files they want. It works for the most part, but there are certain files that won't download. ONe if a "reg" file and the other is a "dpf" file. "exe" files work fine. I see the "reg" files, but when I click on them I get a webpage saying they don't exist. I believe a 404 error. If I right click on them I another error. Internet Explorer cannot download "filename" from wwww.website.com. Internet Explorer was not able to open this Internet site. The requested site is either unavailable or cannot be found. Please try again later. What do I need to do to allow these file to be downloaded? I know they are registry file. Our customers need them. They also need the dpf files. Thanks, Jeff Tag: spammer hacking asp and access files Tag: 398243
  - 15
    - Host Headers on Laptop running local I have two web sites I want to host on a laptop for demos. So my IP address will be the same and I just can't seem to get it work. I have set both to "All unasigned IPs" and I have tried "127.0.0.1" and that does not work. I gernally access the web sites on the laptop as http://127.0.0.1/appname based on what I have read on host headers it has to be the fully qualified name and it will only let me enter something like www.appname.com. And that won't work either. Do I need to add something to my lmhost ? I found that if I enter my "appname" as the header, it tries to resolve one of the sites but I get a 400 error because it does not resolve far enough down to get my login.asp. Tag: spammer hacking asp and access files Tag: 398238
  - 16
    - Problem with IIS 5.1 running on XP professioal Hi All, Have had no problems running PWS under Win98 or running IIS under Win 2000 pro. However, having installed IIS 5.1 under XP pro I find I am unable to get any pages to display. All that is returned is error http 500 (internal server error) or error http 403 (forbidden) which indicates that Internet Explorer (IE7) was able to connect to the website, but does not have permission to view the webpage. Can get directory listings but that is all. After re-installing and experiencing the same problems have played with all the settings that appear relevant but to no avail. Sure I must be missing something obvious. Any suggestions Regards Jim Tag: spammer hacking asp and access files Tag: 398237
  - 17
    - w3wp.exe Crash InitializeCulture Event Log We have an application (A) that is causing a crash in w3wp.exe. When this crashes, we are getting an error in another site (B) of "InitializeCulture" is not a member of... The crash is a result of a COM object in A. Site B inherits its pages from the MSDN.SessionPage and reports this error whenever it is running framework 2.0. I have been resetting B's Application Pool in order to fix this. The site is running framework 1.1 but after the w3wp crash, it thinks it is running 2.0 which causes the InitializeCulture error. This all started happening last week after the latest Microsoft Updates were applied to the server. Does anyone have an idea on why the site would think its running 2.0 when it is not? Is there a fix? Thanks Tim Tag: spammer hacking asp and access files Tag: 398236
  - 18
    - Accessing Shares Across the Network from an ASP page Folks.....I just posted this question to several Windows Server groups but forgot to include this IIS group. I have four Windows 2000 server boxes which as far as I can tell are identical. All are in the same Win2K Domain/Active Directory. All are full patched via Microsoft Update. One of these four servers is also a web server (call it Server A). I have created an ASP web page which via the "FileSystemObject" and "GetFolder" I am attempting to open a folder on each of the four servers. It works on ServerA and ServerB, but fails with a "Error Number is 76 / Path not found" error on the other two (Server C and Server D). The web server is running with the default Anonomous User Id. All four servers have identical Security Policies and the "Sharing and Security" settings for the Shares are identical. Can anyone help me debug this issue? Thanks.....RDK Tag: spammer hacking asp and access files Tag: 398235
  - 19
    - IIS admin service crashes here is a copy of the dump file, can anyone tell me why this is crashing? In inetinfo__PID__5980__Date__09_14_2007__Time_08_07_29PM__777__Second_Chance_Exception_C0000005.dmp the assembly instruction at MSV1_0!ReferenceUserContext+39 in C:\WINNT\system32\MSV1_0.DLL from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000018 on thread 21 Type of Analysis Performed Crash Analysis Machine Name OPUSSVR03 Operating System Windows 2000 Service Pack 4 Number Of Processors 1 Process ID 5980 Process Image C:\WINNT\system32\inetsrv\inetinfo.exe System Up-Time 3 day(s) 13:17:21 Process Up-Time 1 day(s) 05:04:25 Thread 21 - System ID 1908 Entry point ISATQ!AtqPoolThread Create time 9/13/2007 3:03:09 PM Time spent in user mode 0 Days 0:0:8.781 Time spent in kernel mode 0 Days 0:0:11.500 Function Arg 1 Arg 2 Arg 3 Source MSV1_0!ReferenceUserContext+39 0c602ea0 00000000 00000008 MSV1_0!SpQueryContextAttributes+1d 0c602ea0 00000008 0abaf8d4 secur32!LsaQueryContextAttributesA+f1 0abaf8b8 00000008 0abaf8d4 secur32!QueryContextAttributesA+3e 00d3774c 00000008 0abaf8d4 INFOCOMM!TCP_AUTHENT::QueryExpiry+21 0abafc7c 00000000 00d37008 W3SVC!HTTP_REQ_BASE::OnRestartRequest+3b8 004d06a8 00000000 0abaff30 W3SVC!HTTP_REQ_BASE::OnCompleteRequest+498 004d06a8 0000019f 0abaff30 W3SVC!HTTP_REQ_BASE::UnWrapRequest+1f4 0abafef8 0abaff30 0abaff0c W3SVC!HTTP_REQ_BASE::OnFillClientReq+7a 0abafef8 0abaff30 0abaff0c W3SVC!HTTP_REQUEST::DoWork+99 0abaff30 7c57b5d4 120c6520 W3SVC!CLIENT_CONN::DoWork+1aa 000001b4 00000000 00000001 W3SVC!W3Completion+43 120c6520 000001b4 00000000 ISATQ!AtqpProcessContext+266 00000000 000001b4 0aac7344 ISATQ!AtqPoolThread+1a8 abcdef01 00000000 00000000 KERNEL32!BaseThreadStart+52 6d709470 abcdef01 00000000 MSV1_0!REFERENCEUSERCONTEXT+39In inetinfo__PID__5980__Date__09_14_2007__Time_08_07_29PM__777__Second_Chance_Exception_C0000005.dmp the assembly instruction at MSV1_0!ReferenceUserContext+39 in C:\WINNT\system32\MSV1_0.DLL from Microsoft Corporation has caused an access violation exception (0xC0000005) when trying to read from memory location 0x00000018 on thread 21 Module Information Image Name: C:\WINNT\system32\MSV1_0.DLL Symbol Type: PDB Base address: 0x782d0000 Time Stamp: Fri Apr 01 21:23:32 2005 Checksum: 0x00029b9f Comments: COM DLL: False Company Name: Microsoft Corporation ISAPIExtension: False File Description: Microsoft Authentication Package v1.0 ISAPIFilter: False File Version: 5.00.2195.6926 Managed DLL: False Internal Name: MSV1_0.DLL VB DLL: False Legal Copyright: Copyright (C) Microsoft Corp. 1981-1999 Loaded Image Name: c:\symcache\MSV1_0.dbg\424DF41422000\MSV1_0.dbg Legal Trademarks: Mapped Image Name: Original filename: MSV1_0.DLL Module name: MSV1_0 Private Build: Single Threaded: False Product Name: Microsoft(R) Windows (R) 2000 Operating System Module Size: 136.00 KBytes Product Version: 5.00.2195.6926 Symbol File Name: c:\symcache\msv1_0.pdb\40983DD71\msv1_0.pdb Special Build: & -- A+, MCSE, CCNA, CCAI Tag: spammer hacking asp and access files Tag: 398232
  - 20
    - Web Service Extensions per Application Hello, is there any way to disable WebDAV extension just for my application? Running IIS6. Thanks, Jan Tag: spammer hacking asp and access files Tag: 398230
  - 21
    - Help with debugdiag analysis - w3wp hang and using a lot of memory Hi I've run debugdiag against a worker process that appears to hang and is also using a large amount of memory. The app pool this processs is serving is running WSS 2.0. The analysis is below but I'm not sure where to go next. Can anyone shed any light? Thanks Mike Analysis Summary Type Description Recommendation Information The following threads in Hang_Rule_Targets__Date__09_17_2007__Time_09_21_17AM__w3wp.exe__WSSAPP__PID__7320__465__Manual Dump.dmp are processing a client request and is/are not fully resolved. Further analysis of these threads is recommended in order to determine what may be blocking the request(s). ( 0 ) 12.50% of IIS worker threads blocked 100.00% of threads blocked Warning 2 client connection(s) in Hang_Rule_Targets__Date__09_17_2007__Time_09_21_17AM__w3wp.exe__WSSAPP__PID__7320__465__Manual Dump.dmp have been executing a request for more than 90 seconds. Please see the Client Connections section of this report for more detailed information about the connection(s). Analysis Details Your browser settings are currently prohibiting this report's scripts from running. This is preventing some features of this analysis report from displaying properly. To enable scripts to run, right-click the security warning above and choose "Allow Blocked Content..." or enable the "Allow active content to run in files on My Computer*" setting on the Advanced tab of your "Internet Options" dialog to avoid being prompted in the future Table Of Contents Hang_Rule_Targets__Date__09_17_2007__Time_09_21_17AM__w3wp.exe__WSSAPP__PID__7320__465__Manual Dump.dmp Top 5 threads by CPU time Thread report Well-Known COM STA Threads Report HTTP Report Report for Hang_Rule_Targets__Date__09_17_2007__Time_09_21_17AM__w3wp.exe__WSSAPP__PID__7320__465__Manual Dump.dmp Report for Hang_Rule_Targets__Date__09_17_2007__Time_09_21_17AM__w3wp.exe__WSSAPP__PID__7320__465__Manual Dump.dmp Type of Analysis Performed Hang Analysis Machine Name Server0119 Operating System Windows Server 2003 Number Of Processors 8 Process ID 7320 Process Image c:\WINNT\system32\inetsrv\w3wp.exe System Up-Time 16 day(s) 20:06:54 Process Up-Time 2 day(s) 15:57:59 Top 5 Threads by CPU time Note - Times include both user mode and kernel mode for each thread Thread ID: 0 Total CPU Time: 00:00:14.296 Entry Point for Thread: 0x00000000 Thread report Thread 0 - System ID 11520 Entry point 0x00000000 Create time 09/14/2007 17:24:02 Time spent in user mode 0 Days 00:00:10.390 Time spent in kernel mode 0 Days 00:00:03.906 This thread is processing a client request and is/are not fully resolved. Further analysis of these threads is recommended in order to determine what may be blocking the request(s). Function Source SharedUserData!SystemCallStub+4 ntdll!NtDelayExecution+c kernel32!SleepEx+68 kernel32!Sleep+b EntAPI+13b9 ntdll!LdrpCallInitRoutine+14 ntdll!LdrShutdownProcess+126 kernel32!_ExitProcess+37 kernel32!TerminateProcess mscorsvr!FailFast+114 mscorsvr!OutOfMemoryCallbackForEE+12 mscorsvr!UnlockedLoaderHeap::UnlockedAllocMem+57 mscorsvr!LoaderHeap::AllocMem+1e mscorsvr!EEJitManager::NewCodeHeap+8b mscorsvr!EEJitManager::NewCodeHeap+2c mscorsvr!EEJitManager::NewCodeHeap+2c mscorsvr!EEJitManager::allocCode+78 mscorsvr!CEEJitInfo::allocMem+8a mscorjit!eeAllocMem+1e mscorjit!emitter::emitEndCodeGen+10b mscorjit!Compiler::genGenerateCode+9f mscorjit!Compiler::compCompile+128 mscorjit!Compiler::compCompile+1e8 mscorjit!jitNativeCode+95 mscorjit!CILJit::compileMethod+a2 mscorsvr!CallCompileMethodWithSEHWrapper+52 mscorsvr!JITFunction+2c7 mscorsvr!MakeJitWorker+2bb mscorsvr!MethodDesc::DoPrestub+498 mscorsvr!PreStubWorker+42 0x001187fe mscorsvr!DoDeclarativeSecurity+1a Back to Top Well-Known COM STA Threads Report STA Name Thread ID Thread Status Call Status HTTP report IIS ATQ worker thread count 8 Thread(s) Available ATQ worker thread count 8 Thread(s) Active client connections 20 client connection(s) Client Connections Client connection from 10.245.139.194:4325 to 10.245.139.194:80 Host Header server0119-sp:80 GET request for /default.aspx HTTP Version HTTP/1.1 SSL Request False Time alive 2 day(s) 15:58:57 QueryString Request mapped to HTTP Request State Unknown Native Request State NREQ_STATE_PROCESS Client connection from 10.245.139.194:4339 to 10.245.139.194:9975 Host Header 10.245.139.194:9975 GET request for /default.aspx HTTP Version HTTP/1.1 SSL Request False Time alive 2 day(s) 15:58:34 QueryString Request mapped to HTTP Request State Unknown Native Request State NREQ_STATE_PROCESS 18 connection(s) waiting for the next request. Script Summary Script Name Status Error Code Error Source Error Description Source Line CrashHangAnalysis.asp Completed Tag: spammer hacking asp and access files Tag: 398226
  - 22
    - HTTPS while hosting several virtual sites I run an IIS6 server that hosts several virtual sites. I have a few sites that require SSL so I've bound a static IP address to the NIC and then to those particualr sites. My issue is this: CompanyA requires SSL. I've bound, for example, 192.168.100.100 to a NIC and the IP address for CompanqA's web site is 192.168.100.100. https://www.companya.com works fine. However, CompanyB does not require SSL so I've assigned it's web site address within IIS to All Unassigned. If I browse to http://www.companyb.com, everything works just fine. However, when I browse to https://www.companyb.com, it will bring up CompanyA's web site even though I've put no port number in the SSL port of Web site tab. Why does IIS go to an incorrect https web site if the one you're designating within your browse does not have an SSl port designated? How can I keep this from happening? Thanks in advance... Troy Tag: spammer hacking asp and access files Tag: 398222
  - 23
    - cant get IIS to run asp.net 2.0 SP1 applicatoin I have an asp.net 2.0 web application project, which used to run fine under the developement server in Visual Studio. Does anybody know how to get the application to run under IIS? The ISS is configured so it points at the right directory (I tested by entering the url localhost/images/banner.jpg in a browser, which showed a picture from that folder). If I enter the start.aspx I get this error message: Server Error in '/' Application. The resource cannot be found. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly. Requested URL: /start.aspx I have chosen the right version of the .net framework in the IIS I even get this message if I rightclick the file in IIS and choose"explore" (Just to assure that I dont misspell the URL) please help Bjarke Tag: spammer hacking asp and access files Tag: 398212
  - 24
    - cant get IIS to I have an asp.net 2.0 web application project, which used to run fine under the developement server in Visual Studio. Does anybody know how to get the application to run under IIS? The ISS is configured so it points at the right directory (I tested by entering the url localhost/images/banner.jpg in a browser, which showed a picture from that folder). If I enter the start.aspx I get this error message: Server Error in '/' Application. The resource cannot be found. Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly. Requested URL: /start.aspx I have chosen the right version of the .net framework in the IIS I even get this message if I rightclick the file in IIS and choose"explore" (Just to assure that I dont misspell the URL) please help Bjarke Tag: spammer hacking asp and access files Tag: 398211
  - 25
    - Images display only intermittently in browser (Cross posted in IE) I have a problem with our hosted web site where a page will load and the images will not display. This is not the case where a placeholder is displayed in lieu of the image, my problem is that there is a gap or blank spot where the images should be. The problem is random and intermittent, sometimes the images display and sometimes they do not. Sometimes I can get them to display by continually refreshing the page until they do. I do not know if this is a browser issue, an IIS issue or a network issue. The problem does not appear to exist in IE7 but it does in all other types of browsers. I have documented the issue with screenshots (hoepfully they will display) at http://www.frickcpa.com/TVOM/error.asp. If anyone has any thoughts on this, please let me know. Thanks Dave Tag: spammer hacking asp and access files Tag: 398210

I have had a couple of occasions where I found log entries like this :

2007-09-21 00:46:25 W3SVC849604990 PE2650 216.242.142.233 GET
/shopcontent.asp
type=%3ca+href%3d%22http%3a%2f%2fk2njydpenispumpgaga%2einfo%2fpenis%2benlargement%2bpill%2fpenis%2benlargement%2bpill%2btestimonys%2ehtm%22%3epenis+enlargement+pill%3c%2fa%3e
80 - 74.6.28.233 HTTP/1.0
Mozilla/5.0+(compatible;+Yahoo!+Slurp;+http://help.yahoo.com/help/us/ysearch/slurp) - - www.cobbq.com 200 0 0 16159 370 2264

They appear to be from Yahoo's web crawler but are obviously attempting to
hack or spam my server.

I have blocked all 74.6.x.x IPs for now, until I can figure this out.

any ideas

Top

Re: spammer hacking asp and access files by Ken

Ken
Sun Sep 23 20:05:03 PDT 2007

I don't think they're trying to "hack" anything. Just get their spam into
your log files. Some websites display their logfiles, and obviously if you
did that then this spammer's spam would show up.

Cheers
Ken

--
My IIS Blog: www.adOpenStatic.com/cs/blogs/ken

"riprod" <riprod@discussions.microsoft.com> wrote in message
news:87CE630F-95AC-44E4-B389-AA1F66215E5E@microsoft.com...
>I have had a couple of occasions where I found log entries like this :
>
> 2007-09-21 00:46:25 W3SVC849604990 PE2650 216.242.142.233 GET
> /shopcontent.asp
> type=%3ca+href%3d%22http%3a%2f%2fk2njydpenispumpgaga%2einfo%2fpenis%2benlargement%2bpill%2fpenis%2benlargement%2bpill%2btestimonys%2ehtm%22%3epenis+enlargement+pill%3c%2fa%3e
> 80 - 74.6.28.233 HTTP/1.0
> Mozilla/5.0+(compatible;+Yahoo!+Slurp;+http://help.yahoo.com/help/us/ysearch/slurp)
> - - www.cobbq.com 200 0 0 16159 370 2264
>
> They appear to be from Yahoo's web crawler but are obviously attempting to
> hack or spam my server.
>
> I have blocked all 74.6.x.x IPs for now, until I can figure this out.
>
> any ideas
>

Top