virus on iis files

TheMSsForum.com: The Microsoft Software Forum

The MSS Forum ‹ IIS
- Archive
  - Biz
  - MCSE
  - CRM
  - Drivers
  - Framework
  - ADO
  - ASP
  - Compact
  - Forms
  - Dotnet
  - C#
  - VB
  - FontpageGen
  - Excel
  - WorkSheet
  - Exchange
  - Setup
  - Fox
  - Fontpage
  - ASP
  - IIS
  - Entourage
  - Money
  - Messanger
  - PocketPC
  - Powerpoint
  - Project
  - Publisher
  - Excel
  - VB
  - Security
  - Portal
  - Services
  - SQLServerDev
  - SVCS
  - SQLServer
  - VB
  - VC
  - MFC
  - ExcelGen

- Previous
  - 1
    - freehosting freehosting http://WWW.nongcunren.cn/freehosting/ Tag: virus on iis files Tag: 389951
  - 2
    - Why does it take 10 seconds to dish up a file? On a new Win 2003 Server with IIS6, it typically takes 10 seconds to serve an HTML file. Even when I point the browser to just an image, it takes 10 seconds. But once I've pulled something from the site, it then runs fast/normally for subsequent pages. Why? It is part of the shared site pool. I understand that with ASP.NET applications, it has to compile the app the first time, but here I am talking about a ".html" or ".jpg" file that takes this long. Again, why? Tag: virus on iis files Tag: 389936
  - 3
    - IIS conflicting with two network adaptor IIS conflicting with two network adaptors I am running 2003 advanced server using IIS to host a site. I have two network cards installed. one card is used for IIS and has a static outside ip address. The other card is assigned an ip address but is the local area connection with in the local network. If I have the local connection disabled guests can access the site no problem. As son as i enable the local area connection, guests no longer have access. They get the error page can not be found. I have the web site properties set to the correct static ip address of the outside connection. Any ideas on what may be causing this? Tag: virus on iis files Tag: 389931
  - 4
    - 503 Service unavailable Hi, I installed Exchange 2003/SP1 on a new W2K3/SP1 box as a Front End server. When I connect to this server a always receive the 503 error. The httperr#.log file should contain more info, but I can't find this file neither the dir ..\system32\LogFiles\HTTPERR. What should I do to see this file? Thx, Dihe Tag: virus on iis files Tag: 389930
  - 5
    - Default setting for exchange and remote Where can I get a list of the settings for the defalt settings for exchange & remote IIS6. We have PHP running now but have screwed the other 2. Cheers SteveW Tag: virus on iis files Tag: 389929
  - 6
    - Monitor CPU load for a given Web site on a given application pool Hi, In the IIS 6.0, worker process isolation mode, one can specify same application pool for different- different web applications. Individual application pool has property to enable CPU monitoring and do some action on high CPU. But I want to go one level below, at that higher CPU stage; I want to find out that really which web application is consuming what CPU? How do I do that on demand basis or continuous? Can I do this with some ISAPI filter/HTTPModule something? I don't think any straight API/method to do so but i am sure there must be some way to measure by performance counter or some other? Any thoughts? Thanks, --Amish Tag: virus on iis files Tag: 389928
  - 7
    - IIS application problem I have windows server 2003 sbs premium. I have 2 ethernet with internal ip (172.18.81.116 and 172.18.81.114 ) and 1 ethernet for external. I want use the second internal ethernet for web application over IIS (172.18.81.114). I can't set the second ip adress to any application or virtual directory of IIS. If i run netstat -ano i see bind 80 only 127.0.0.1; 172.18.81.116 and ethernet ip external. How can i do? I want iis application respond from 172.18.81.114. If i open iis manager and i go to specific virtual directory and try set ip 172.18.81.114 when i click to apply or ok error appear and i cant do it. Error say (in italiano ..impossibile raggiungere il percorso di destinazione..) that is it impossible find the network destination path. Tag: virus on iis files Tag: 389923
  - 8
    - Sending Email/Attachment .NET app hangs When sending an attachment with this page the application hangs. The is placed on the server but it's never sent and deleted. All the permissions seem to ok but I cant seem to find out why this app hangs. Thanks <%@ Page Language="C#" %> <%@ Import Namespace="System.Web.Mail" %> <%@ Import Namespace="System.IO" %> <script language = "javascript"> function Tocheck(frmemail) { if(frmemail.txtFile.value == "") { alert("Please attach a file"); frmemail.txtFile.focus(); return(false); } } </script> <script runat="server"> void btnSubmit_Click(Object sender, EventArgs e) { MailMessage mail = new MailMessage(); mail.From = txtFrom.Text; mail.To = txtTo.Text; mail.Subject = txtSubject.Text; mail.Body = txtMsg.Text; mail.BodyFormat = MailFormat.Html; string strdir = "f:\\inetpub\\webtools\\emailtest\\files\\"; //string strdir = "c:\\temp\\"; string strfilename = Path.GetFileName(txtFile.PostedFile.FileName); txtFile.PostedFile.SaveAs(strdir+strfilename); mail.Attachments.Add(new MailAttachment(strdir+strfilename)); try { SmtpMail.SmtpServer = "mail.fmr.com"; SmtpMail.Send(mail); } catch(Exception ex) { Response.Write("<b>Exception Occured:</b> " +ex); } finally { Response.Write("Your E-mail has been sent sucessfully"); } // Uploaded file deleted after sending e-mail File.Delete(strdir+strfilename); } </script> <html> <head> <meta http-equiv="Content-Language" content="en-us"> <meta http-equiv="Content-Type" content="text/html; charset=windows-1252"> <title>Using ASP.NET To Send Email - Part 2</title> </head> <body> <div align="center"> <form method = "post" name = "frmemail" runat = "server" enctype="multipart/form-data" onSubmit = "return Tocheck(this)"> <table border="1" width="637" height="196"> <tr> <td height="196" width="637" valign="top"> From : <asp:TextBox ID = "txtFrom" Runat =server></asp:TextBox> <p>To: <asp:TextBox ID = "txtTo" Runat = server></asp:TextBox> <p>Subject:<asp:TextBox ID = "txtSubject" Runat = server></asp:TextBox> <p>Message:<asp:TextBox runat="server" Height="57px" TextMode="MultiLine" Width="212px" ID="txtMsg"></asp:TextBox> <p>Attach:<input type = "file" id = "txtFile" runat = "server"> <p align="center"><asp:Button Runat = server ID = "btnSubmit" Text = "SEND" OnClick = "btnSubmit_Click"></asp:Button></td> </tr> </table> </form> </div> </body> </html> Tag: virus on iis files Tag: 389915
  - 9
    - Access files in my Documents And Settings tree with hidden folders Using asp and running localhost is there any way of setting up the session so that I can read/write files which are in a folder off a hidden folder. I understand the basic reason I haven't been able is because the server sets up a temp 'user account' for the duration of the browser session. Can I give this account the permissions to access such files. Thanks Dennis Tag: virus on iis files Tag: 389914
  - 10
    - Disabling Debug Exception Handling in IIS 6.0 Hello, in IIS 5.x it is possible to configure IIS to return the native error message when an error occurs due to a Server.CreateObject call. This is done via the check box "Enable Debug Exception Handling" on the tab Home Directory/Configuration/Process Options. I cannot find the equivalent in IIS 6. I have tried searching the web and reading the help files but cannot find anything relevant. Does this feature still exist? The problem I am trying to solve is that when Server.CreateObject is called I get the standard ASP error message " ...Unexpected error. A trappable error (C0000005) occurred in an external object. The script cannot continue running. ..." rather that the more useful component message. Any help or ideas appreciated. Regards Paul Tag: virus on iis files Tag: 389912
  - 11
    - Assign different virtual directory to different ip.. I have a windows server 2003 sbs with an iss (Internet Information Service) application. I have 3 ethernet and naturally 3 different ip. I want assign a virtual directory about iis with a first ip and another virtual directory to secondary ethernet ip. A third ip is used for manage file server. (All ip's are internal ip) If i try to change in iis manager configuration, ip configuration about virtual directory the system give error. It suggest to consult windows help. I can access all virtual directory only the first ip used. How can i do ?? Tag: virus on iis files Tag: 389911
  - 12
    - IIS log error Hi all, I am getting wrong information from the IIS log file for sc-bytes when client is accessing a file from my server which is less than 40K. This is happening only when the file size is less than 40k but when the size is more than 40k it is giving the correct information i.e., header size + file size. Can any one guide me to solve this problem?? Advanced thanks, Tag: virus on iis files Tag: 389900
  - 13
    - Programmatic approach to detecting IIS Version using C# The Environment class provides a rich source of accessing environment variables on a machine. The code is compatible with any OS and it can be a good way of finding IIS Version try { FileVersionInfo fvi = FileVersionInfo.GetVersionInfo(Environment.SystemDirectory + @"\inetsrv\inetinfo.exe"); MessageBox.Show("Version:" + fvi.FileVersion +"\nMajor Part: " + fvi.FileMajorPart); } catch (FileNotFoundException ex) { MessageBox.Show("Cannot find specified file at " + ex.Message); } PS: Suggestion and other approaches are welcome. EggHeadCafe.com - .NET Developer Portal of Choice http://www.eggheadcafe.com Tag: virus on iis files Tag: 389890
  - 14
    - can view .aspx but not .asp on IIS Hi, In my office the network is managed by a software called 602LanSuite. My computer is a part of the workgroup. I installed IIS followed by Visual Studio 2005. When I typed http://localhost in the address bar of my browser it took me to a page that is not stored in the wwwroot folder on my computer but a page hosted by 602LanSuite across the entire office network. I then tried http://127.0.0.1/iisstart.asp but a standard windows logon screen was thrown at me. Inspite of entering the correct user name and password(and selecting the "save my password" checkbox) the screen reappears exactly 2 more times after which the browser is redirected to "you are not authorized to view this page" page. However when I created a simple hello.aspx file in my wwwroot folder and type http://127.0.0.1/hello.aspx in the address bar the page is displayed without asking me to submit any credentials. So why is there this difference in hosting a .asp and a .aspx file ? And why is the browser treating localhost and 127.0.0.1 as different addresses ?? Thanks Parikshit Tag: virus on iis files Tag: 389888
  - 15
    - iis installation problems on xp Pro SP2 Have read lots of articles and posts and can't seem to find someone with the same problem. Eventually suceeded in installing iis on xp Pro SP2 - but that's another story. IIS appears in management console but as soon as I click on it, it freezes up. Any suggestions?? The more I look the more I seem to be hearing about people having troubles installing iis on xp pro sp2. Is it possible? If not what are the alternatives. Tag: virus on iis files Tag: 389880
  - 16
    - IIS Host Header not Working I have an Win2k3 box running IIS 6 with PHP ISAPI installed. It runs two sites. Default site listens to port 80 on all unassigned addresses. Site 2 listens on 80 to the specific IP address. When visting site 2, it will display the default index page the first & second time, but sometimes - and this is intermittent - the index page of the default website is presented. Does anyone have any suggestions as to what is causing this problem? I don't think it is the PHP ISAPI, and the settings in the IIS config are as specific as I can make. Are there any other settings that should be properly set to rectify this? Is there a caching issue on the server, that is ignoring the Host Header? Thanks for any suggestions. John Tag: virus on iis files Tag: 389878
  - 17
    - Add 301 redirect in Custom Errors Is it possible to add a Custom Errors? I have the option of editing existing errors but not adding. I'm trying to add a 301 redirect error. This is using an NT server and Windows 2003. Thanks, NS Tag: virus on iis files Tag: 389877
  - 18
    - Ports and services We have a single IP address We run Sharepoint and Activesync Sharpoint is installed twice, a non-used version on 443 and a functioning version on 444. Activesync uses 443 and coexists with Sharepoint. Our functioning version of Sharepoint (444) needs to be used on 443. Wouldn't it makes sense to assume that if Sharepoint is already running an (unused) version on 443, that the other can be made to run in its place on 443? Is there any reason these sites/services shouldn't use the same port? Nick Tag: virus on iis files Tag: 389876
  - 19
    - IIS/PWS works only for IE ??? hello i have recently switched to another pc with a fresh new windows XP installation . i have also installed Firefox 2.0 on the machine along with IE7. when i start the localhost homepage in Firefox i get prompted for a username and password. Note that this happens only with FireFox , IE is ok ! now i have checked the permissions on the IIS management console , i have anonymous access and integrated windows authentication both checked. so i unchecked the windows authentication and haha now IE does not display the page as well even if i set the permissions back !! any ideas on that ? Tag: virus on iis files Tag: 389875
  - 20
    - i need to retrieve a conversation i had with my contact help EggHeadCafe.com - .NET Developer Portal of Choice http://www.eggheadcafe.com Tag: virus on iis files Tag: 389874
  - 21
    - Some IIS error messages, they happen every day... Win2003 Server (SP 1), IIS 6.0 The error occurs several times every day. We have 2 websites in IIS. Both of them are ISAPI applications. Let's look what happens. 1. "w3core.dll" or "w3cache.dll" error message. This kind of error happens very often. You can review the eventlog. I think it might be relative to IIS system. 2. "DBLibrary.bpl" error message. It happens every 3-5 days. This file is my dll. When it happens, the website will slow down, even no response. The message is similar to "w3core.dll". But it is strange that I cannot find this error log from the event log. I have researched this error for 10 days. But I got nothing. Maybe it is also relative to IIS. Does anyone know the errors? If you want to know more informaitons, Please let me know. Thanks in advance. eventlog: 11/21/2006 10:10:25 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/21/2006 10:10:21 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/21/2006 10:10:16 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/21/2006 10:10:08 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/21/2006 10:09:36 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/21/2006 10:09:30 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/21/2006 10:09:25 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/21/2006 10:09:20 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/21/2006 10:09:14 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/21/2006 10:08:52 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/21/2006 8:25:38 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/19/2006 9:43:35 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/17/2006 5:38:35 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/17/2006 5:10:13 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/17/2006 11:48:31 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/17/2006 10:04:22 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/17/2006 9:27:10 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/17/2006 6:25:54 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/17/2006 1:05:51 AM Ci Information CI Service 4103 N/A RL-HAN Master merge has completed on c:\inetpub\catalog.wci. 11/16/2006 11:51:43 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 10:12:00 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/16/2006 6:58:48 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 5:26:02 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/16/2006 4:23:26 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/16/2006 3:46:04 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/16/2006 2:09:55 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 2:09:54 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 2:09:54 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 2:09:53 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 2:09:52 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 2:09:52 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 2:09:51 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 2:09:51 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/16/2006 2:09:49 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/16/2006 2:09:44 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 1:11:42 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 11:53:21 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 11:53:03 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/16/2006 10:37:40 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 6:17:38 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 5:13:44 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 4:08:43 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 2:22:25 PM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 12:43:25 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/15/2006 12:07:21 PM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/15/2006 11:26:01 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:45:40 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/15/2006 10:45:38 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:45:37 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/15/2006 10:45:36 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:45:35 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:45:34 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:45:33 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:45:31 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/15/2006 10:45:30 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:45:24 AM Application Error Information (100) 1004 N/A RL-HAN Reporting queued error: faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000201cc. 11/15/2006 10:43:17 AM Application Error Error (100) 1000 N/A RL-HAN Faulting application w3wp.exe, version 6.0.3790.1830, faulting module w3cache.dll, version 6.0.3790.1830, fault address 0x0000342a. 11/15/2006 1:03:53 AM Ci Information CI Service 4103 N/A RL-HAN Master merge has completed on c:\inetpub\catalog.wci. Tag: virus on iis files Tag: 389873
  - 22
    - Session variables problem on Win 2003 R2 Hello, I am having some session problems with a mixed asp/asp.net application. My application works well on Win 2000 Server (all versions) and on Win 2003 (first edition), but on Win 2003 R2 I've a lot of problem. On specific ASP pages my application looses all the session variables.In other cases it looses the session varables at random. I checked all settings, IIS permissions, app pools, turned off recycling, etc. This configuration is the same as different servers run Win 2003 (first edition) where the application works well. I'm not using global.asa. Where else can I look? What else can I do? Thanks, Roberto Tag: virus on iis files Tag: 389872
  - 23
    - Using (and wrting) external DLL for use with ASP.NET (This question might not belong to this newsgroup, please advice where to redirect.) Along with our ASP.NET website we need to create an external application which does some custom processing like processing image files for the web user. We might be looking for a CGI like solution. Q: What is the best way; using Visual Studio Pro to incorparate custom C based code to be used with the ASP.NET website? We want to call the external application and receive information back in a stream or file. Thanks 4 ur help. Paul. Tag: virus on iis files Tag: 389864
  - 24
    - idiot's guide to IIS FTP :) guys, would welcome it if somebody could help me out with this. basically, i do not want to install an extra piece of software to have an FTP server, and want to use the windows xp pro sp2 inbuilt one. i would like to be able to create an FTP username and password (which should not be related to a username and password in use with windows). how can i do this? i have tried setting up a server, but can never log in. i have the 'allow anonymous connections' tab selected, but just can't log in with the username and password i have put in. my FTP software (cuteFTP) just tells me that the user can't log in, with no further info. what could the problems be? would appreciate any help on this! Tag: virus on iis files Tag: 389855
  - 25
    - Webdav issue on IIS5 Maybe someone can help me with this issue: I'm running a website on IIS 5. I want to use webdav, so I enabled directory browsing and granted write access in IIS. All authenticated users have ntfs modify permissions. However when I try to open the site as a web folder (using IE) I receive the message "Internet Explorer could not open http://blabla" as a Web Folder. Would you like to see its default view instead?" When I check wecerr.txt in C:\Documents and Settings\myaccount\Local Settings\Temp\d there is a "HTTP 405 - Resource not allowed" error message. My guess is there's something weird going on inside IIS (e.g. related to MIME types? or verbs/HTTP headers?) but haven't got a clue what to check and how. Someone any ideas or hints? Gr. Ard Tag: virus on iis files Tag: 389854
- Next
  - 1
    - Citrix Web Access on IIS 6 2 network cards no external access Hello, I'm coming at this from a state of relative ignorance. Our senior network admin up and quit with a project half done. I was nominated to complete the project and I've hit a wall. Specs: Win2k3 server, running IIS 6, Citrix Presentation Server 4 We are in the middle of the project and really just trying to make sure everything works/will work for our needs as a company. IIS is up and running on a server with two network cards, one connected to a cheap firewall that is set to forward all web/citrix port traffic to the internal server. This line is a stand alone DSL. The other card is connected to our internal network here which is connected to a T1. I am not trying to use web access within the building so I didn't bind the Citrix site to the internal card. When I attempt to access the site externally via IP 75.*.*.*/citrix/metaframe it just hangs, no time out, no error message, just hangs. However, if I disable the internal network card, I am able to connect to the Citrix Web Access site by IP with no problems at all. This leaves me thinking this is an IIS configuration issue. I need to have the internal card active so my hosted applications are available internally. Again, I just got stuck with this, I've never configured IIS before and am pretty much the help desk guy here. Please forgive any ommisions. I will answer any followup questions promptly. Thanks in advance, JD Tag: virus on iis files Tag: 389853
  - 2
    - Classic ASP + ASP.NET 2.0 on Windows Server 2003 64 bit: possible? Hello, I have got a Windows Server 2003 64 bit that is running a Classic ASP application. The application uses COM objects (AspUpload, ChartDirector, just to mention a few). The IIS web site with the existing Classic ASP application is slowly migrating into ASP.NET 2.0 but in the meantime the two applications need to coexist. Everything works perfectly in the development environment (32 bit) but now that we are going into production a number of questions (and problems) arise. 1) How can I tell if IIS is running in 32 bit or 64 bit mode? 2) Is it possible to have a Classic ASP application running in 64 bit mode? 3) If 2) is possible, what happens with the COM components? Do I need a 64 bit version or the 32 bit version will work? 4) If 2) is not possible, will the only solution be to run both portions of the application (Classic ASP and ASP.NET 2.0) in 32 bit mode or it is possible to have Classic ASP in 32 bit mode and ASP.NET 2.0 in 64 bit mode (same server, same website)? Quoting from http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/13f991a5-45eb-496c-8618-2179c3753bb0.mspx "On 64-bit Windows, the World Wide Web Publishing service does not support running 32-bit and 64-bit worker processes concurrently on the same server." This is probably the answer. I have tried a few configurations, i.e. activating the ASP.NET 2.0 64 bit following the guide at http://support.microsoft.com/kb/894435 but the result was that the Classic ASP application was not working at all, or trying to create an instance of a COM object resulted in an error. Any help will be greatly appreciated. Thanks, Paolo Tag: virus on iis files Tag: 389852
  - 3
    - Web Server Version Revealed (IIS) During a recent penetration test we were notifed that the following was happening. Web Server Version Revealed (IIS) and the recommendation was to use a generic webserver name so as the server is not targeted for known vulnerabilities. These are on Windows Server 2003. The question I have is how do I do this. Anyone that can help please let me know. Tag: virus on iis files Tag: 389850
  - 4
    - 304 + .ASP in IIS 6 Hello, how can I send a 304 back to the browser for an .asp in IIS 6.0? Images are getting cached without any trouble - but the .asp - even though it does not change still returns a 200. Tag: virus on iis files Tag: 389848
  - 5
    - IIS virtual directory local path is greyed out I have an application that installs a virtual directory under the default webserver. In the local path it displays /peopleupdate and it is greyed out so i cannot change it. I know i can create a new vdir that doesnt have this behavior but why is it greyed out? Why can I not change it? This seems to be the default behavior of the installer... Tag: virus on iis files Tag: 389841
  - 6
    - COM+ Base Service I had a service running on my Windows 2003 server - COM+ Base Service - path to executable C:\WINNT\system32\csrsrv.exe Anyone know what this is please? Tag: virus on iis files Tag: 389840
  - 7
    - Metabase replication for multiple sites Hi, I am looking for a solution that will provide IIS metabase replication among 3 servers at seperate locations. The requirement is that the metabase could be updated on any of the three servers and then the changes would need to be automatically replicated to the other two. I am not worried about content replication as the files are stored on AFS which is already being replicated among the 3 sites. Is it possible to do this with IISCNFG? Commercial solutions are also acceptable. thanks, Hugh Tag: virus on iis files Tag: 389836
  - 8
    - http request for *.dll files returns server error code 500 hi im using IIS/PWS 5.1 on WinXP Pro. i have a page that loads a java applet in it, in order for the applet to work properly, a dll files is sent back to the Windows/IE client along with the requested URL.But when the page is requested i get "Server returned HTTP response code: 500 for URL: http://localhost/sign/admin/dl_admin.dll " error . I checked the IIS log for this and i also found a 401 unauthorized access error just before the 500' line ! the page loads smoothly when using file:// protocol.So i guess its an IIS permissions issue right ? any ideas on how to resolve this ? Tag: virus on iis files Tag: 389831
  - 9
    - global.asa Problem Hi! I have a problem, while migration an older webapplication from Windows 2000 to Windows 2003. This software is a webfrontend of an helpdesk system. The user database is an sql server which is defined in the odbc drivers. So everybody has to log on to this webpage. But on the new server the following error ist displayed when someone wants to log on: Active Server Pages error '00000000' Create object failed ? An error occurred while creating object 'LicMan'. Microsoft VBScript runtime error '800a01ae' Class doesn't support Automation: 'LicMan' /LM/W3SVC/XXXXXXX/Root/in2desk/global.asa, line 34 I doen't have found any useful hint to solv this problem. Can someone help? So long Peter Tag: virus on iis files Tag: 389828
  - 10
    - Web application works very well on IIS 6, with 'Integrated Windows Authentication'. But user is not authenticated on IIS5. Hi All, We have implemented single sign-on in our web application. The application works well on IIS6 with 'Integrated Windows Authentication'. The user is very well authenticated on IIS6. But when this application runs on IIS5 with the same 'Integrated Windows Authentication', the user is not authenticated. Is anybody having the solution to make my application workion IIS5? Thanks Banty Nigam Tag: virus on iis files Tag: 389826
  - 11
    - 'Integrated Windows Authentication' does not work on IIS5, but it very well works on IIS6. Hi All, My application is working fine on IIS6 W2K3, with 'integrated windows authentication'. We have implemented single sign-on functionality in our web-application. But it does'nt authenticate the user when application runs on IIS5 W2K. Can anybody tell me what is the problem, and what all things I will need to put in place, to make this application working. Thanks in advance. Banty Nigam Tag: virus on iis files Tag: 389825
  - 12
    - IIS Admin Service service terminated Hi, anybody can advise at this issue. Error message â??IIS Admin Service service terminated with service-specific error 2148073478 (0x80090006)â?? Appreciate anybody can help me. Regards. Victor.. Tag: virus on iis files Tag: 389823
  - 13
    - asking again - how do I tell if SMTP is installed/enabled Hi; 1) How can I tell if the IIS SMTP server is installed? 2) If not installed, how can I start the Add/Remove applet in the Windows mode with the SMTP server selected? 3) If not enabled, how do I enable it? Yes, to test if it's live I can connect on port 25 and see if I get a HELO. But I still need the above to get everything configured. -- thanks - dave david_at_windward_dot_net http://www.windwardreports.com Cubicle Wars - http://www.windwardreports.com/film.htm Tag: virus on iis files Tag: 389821
  - 14
    - Asking again - how do I tell if IIS is installed & enabled Hi; Note: I looked at http://www.microsoft.com/technet/scriptcenter/scripts/iis/default.mspx?mfr=true and I could not find solutions to any of the below: I know this can be done because the pre-install for SqlServer does all this. 1) How can I tell if IIS is installed? 2) If not installed, how can I kick off the installation - I know this uses the Add/Remove applet but how do I kick this off so it starts with install IIS selected? Note: I do NOT want to do an unattended install as most users want to know what is being installed and may want to change the location of c:\inetpub\wwwroot. I need to just start the install. 3) If installed, how do I tell if IIS is enabled and if not enabled, how do I enable it? -- thanks - dave david_at_windward_dot_net http://www.windwardreports.com Cubicle Wars - http://www.windwardreports.com/film.htm Tag: virus on iis files Tag: 389820
  - 15
    - Not all images loading on localhost IIS 5 / XP development machine - too many connections? There's two of us developers, each with a different laptop, both running XP Pro / IIS 5 / VS 2005 with the same problem. We have a web page on localhost that repeatedly calls a localhost ASPX to pull in images (approx 100-200 calls per page), and many of the images will not load. If we refresh the browser, a few more images will come down the line, and so on. The same code works perfectly when running on Windows 2003 / IIS 6. I suspect that the limited connection count (10?) in IIS 5 on XP is killing the extra image loads but don't know how to diagnose this or fix it.... -- Paul Tag: virus on iis files Tag: 389809
  - 16
    - Making IIS use only one netcard of two I have a server with to netcard . One with intern ip number 192.168.1.101 and the other with ip 192.168.1.102. If i set the default web site in IIS to listen to ip adress 192.168.1.101 (not all unassigned) and tcp port 80 , i would exspect port 80 of 192.168.1.102 to be avaliable for me to listen on with my own service program. But it seems not to work out that way, instead it seems like IIS is occupiend both ports when I try to start the tcp service listening to 192.168.1.102:80 . How can I make the IIS not have any acces at all to one of the netcards ? Tag: virus on iis files Tag: 389807
  - 17
    - NLB SSL RPC HTTP !!!!!!!!! Hello I need some advice, I am trying to set up the following test environment, I have the following Single DC (with GC, DNS, WINS) - Functioning fine 4-node backend exchange 2003 - Functioning fine Backend Firewall (PIX) - totally open to inbound and outbound traffic (will be locked down after everything is working) - firewall is between the front end and back end servers 2 Front end Servers running Exchange 2003 - for OWA access Front end Firewall (PIX) to be implemented - only allowing 443 inbound - will be placed to protect from Internet All my servers are running Windows 2003 Sp1 (all critical updates), all my exchange builds include SP2 plus 4 post updates since SP2 I followed this article below to deploy RPC over HTTP - only steps 1-3 How to Deploy RPC over HTTP for the First Time on Exchange Server 2003 SP1 (Front-End/Back-End Scenario) http://www.microsoft.com/technet/prodtechnol/exchange/guides/E2k3RPCHTTPDep/7215c4c3-e465-4000-817b-17f20706fbed.mspx?mfr=true What I need to do is how to implement SSL on my Exchange front-end servers for RPC over HTTP to work. Also want to have the front end setup in NLB I need advise on how to do this, I seen many articles about doing it for a single front end server with either a 3rd party certificates or implementing your own CA. I intend to use certificate from a 3rd Party which is free!! (Remember this is a test environment!!) http://www.msexchange.org/tutorials/SSL-Enabling-OWA-2003-Using-Free-3rdParty-Certificate.html# from these guys at Startcom mentioned in this article I need know the best practice to implement in the setup I am trying to configure 1) Shall I setup the NLB first - good articles for this please? Any catches etc I need to be aware of? 2) How do I implement SSL in NLB Or 1) Do I implement SSL on each front node first and how? Other option is shall I implement my own CA for this test environment? How do I do this? And then setup NLB and SSL I at a crossroads on how to purse this and there is so much information out there that I have read that I am now confused!!! ( two much reading is a bad thing!! ) Confused Tony Tag: virus on iis files Tag: 389805
  - 18
    - IIS 5.1 - users cannot access site ?I set up a simple website on my WinXP Pro system to enable access to a commonly used database file that is in an ASPX format... I can view the website from the computer is it was created on, but anyone outside the computer on the same network cannot. Where am I missing permission issues.. ? I have the default Allow Anonymous users, the IUSR_WGM172 account has proper permissions... I can enter: Http://WGM172/BizTabs/Default.html on my system, and can access the files.... (WGM172 is my computer name). Any suggestions? Jill -- jilltre Tag: virus on iis files Tag: 389804
  - 19
    - How many IP address support IIS 5 I have a problems with IIS 5, I need to know how many Ip address support IIS 5, becasue the services cannot start when I have more the 25 IP, If someone know the solution please send me the fix. Thanks. Tag: virus on iis files Tag: 389803
  - 20
    - IIS InetServ Crashing when Password Change trying to be called. Below is the message that is showing in my event logs. I am running IIS 6.0 Windows 2003 Service Pak 1. When I try and log in with an account that has the must change password flag set IIS disconnects the web site and the password change never comes up. I've registed the password change dll and the metabase looks ok to me. But here is the event log error. Event Type: Error Event Source: Application Error Event Category: (100) Event ID: 1000 Date: 11/21/2006 Time: 2:37:02 PM User: N/A Computer: MDWS1 Description: Faulting application inetinfo.exe, version 6.0.3790.1830, faulting module w3core.dll, version 6.0.3790.1830, fault address 0x000082a0. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. Data: 0000: 41 70 70 6c 69 63 61 74 Applicat 0008: 69 6f 6e 20 46 61 69 6c ion Fail 0010: 75 72 65 20 20 69 6e 65 ure ine 0018: 74 69 6e 66 6f 2e 65 78 tinfo.ex 0020: 65 20 36 2e 30 2e 33 37 e 6.0.37 0028: 39 30 2e 31 38 33 30 20 90.1830 0030: 69 6e 20 77 33 63 6f 72 in w3cor 0038: 65 2e 64 6c 6c 20 36 2e e.dll 6. 0040: 30 2e 33 37 39 30 2e 31 0.3790.1 0048: 38 33 30 20 61 74 20 6f 830 at o 0050: 66 66 73 65 74 20 30 30 ffset 00 0058: 30 30 38 32 61 30 0082a0 Tag: virus on iis files Tag: 389794
  - 21
    - SSL on a hosting Web server.... hi all... i have 2 servers, a web one and an exchange one. the exchange server has an SSL cert that i bought. but now i have some web hosting clients that want to use the SSL key so i would like to share the SSL for them. so i'm assuming that i need to have the SSL on the exchange and then have a Virtual Directory pointing to a share on the other computer for the domains that i would like to have under SSL. but when i try that, i get that the page cannot be displayed when i try to access any page under the SSL machine and the virtual directory in IE. can someone suggest a good way of doing this set up? should it all be on one machine? any help would be great! thanks Tag: virus on iis files Tag: 389793
  - 22
    - IIS 7: How to determine which version of .NET? I would like to run an ASP.NET v1.1 app on IIS7. I have other ASP.NET apps that are .NET v2 so I can't just run aspnet_regiis.exe for v1.1 again. How do I toggle the switch for this? Unlike in IIS6, there is no Properties window with an "ASP.NET" tab where you can switch the version. It seems I am a little overwhelmed by the multitude of options available now via control panel-like icons and I don't know where to find what I'm looking for. Jon Tag: virus on iis files Tag: 389789
  - 23
    - IIS Worker Crashing In my event logs on my 3 identical web servers, I keep getting this error message: Faulting application w3wp.exe, version 6.0.3790.1830, faulting module ntdll. dll, version 5.2.3790.1830, fault address 0x0002f585. When I run IISState on that worker process, the dump file looks like this: Opened log file 'E:\wbapps\iisstate\output\IISState-3868.log' *********************** Starting new log output IISState version 3.3.1 Tue Nov 21 11:28:13 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 3868 Note: Thread times are formatted as HH:MM:SS.ms *********************** IIS has crashed... Beginning Analysis DLL (!FunctionName) that failed: ntdll!RtlpCoalesceFreeBlocks Thread ID: 0 System Thread ID: c8 Kernel Time: 0:0:0.46 User Time: 0:0:0.78 *** WARNING: Unable to verify checksum for \\?\E:\wbdata\jrun-prod03\wsconfig\ 1\jrun_iis6_wildcard.dll *** ERROR: Symbol file could not be found. Defaulted to export symbols for \\ ?\E:\wbdata\jrun-prod03\wsconfig\1\jrun_iis6_wildcard.dll - Thread Type: Other # ChildEBP RetAddr 00 0006f73c 7c82ff8a ntdll!RtlpCoalesceFreeBlocks+0x36e 01 0006f824 77bbcef6 ntdll!RtlFreeHeap+0x38e 02 0006f86c 01e2aa93 msvcrt!free+0xc3 WARNING: Stack unwind information not available. Following frames may be wrong. 03 01692560 0169af10 jrun_iis6_wildcard_1e20000!TerminateExtension+0x8e33 04 01646d10 0169dec0 0x169af10 05 01a6e028 01646d10 0x169dec0 06 002501a0 01a6e028 0x1646d10 07 01a63678 002501a0 0x1a6e028 08 0169f6a8 01a63678 0x2501a0 09 016c4a20 0169f6a8 0x1a63678 0a 0169dec0 016c4a20 0x169f6a8 0b 01646d10 0169dec0 0x16c4a20 0c 01a6e028 01646d10 0x169dec0 0d 002501a0 01a6e028 0x1646d10 0e 01a63678 002501a0 0x1a6e028 0f 0169f6a8 01a63678 0x2501a0 10 016c4a20 0169f6a8 0x1a63678 11 0169dec0 016c4a20 0x169f6a8 12 01646d10 0169dec0 0x16c4a20 13 01a6e028 01646d10 0x169dec0 14 002501a0 01a6e028 0x1646d10 15 01a63678 002501a0 0x1a6e028 16 0169f6a8 01a63678 0x2501a0 17 016c4a20 0169f6a8 0x1a63678 18 0169dec0 016c4a20 0x169f6a8 19 01646d10 0169dec0 0x16c4a20 1a 01a6e028 01646d10 0x169dec0 1b 002501a0 01a6e028 0x1646d10 1c 01a63678 002501a0 0x1a6e028 1d 0169f6a8 01a63678 0x2501a0 1e 016c4a20 0169f6a8 0x1a63678 1f 0169dec0 016c4a20 0x169f6a8 20 01646d10 0169dec0 0x16c4a20 21 01a6e028 01646d10 0x169dec0 22 002501a0 01a6e028 0x1646d10 23 01a63678 002501a0 0x1a6e028 24 0169f6a8 01a63678 0x2501a0 25 016c4a20 0169f6a8 0x1a63678 26 0169dec0 016c4a20 0x169f6a8 27 01646d10 0169dec0 0x16c4a20 28 01a6e028 01646d10 0x169dec0 29 002501a0 01a6e028 0x1646d10 2a 01a63678 002501a0 0x1a6e028 2b 0169f6a8 01a63678 0x2501a0 2c 016c4a20 0169f6a8 0x1a63678 2d 0169dec0 016c4a20 0x169f6a8 2e 01646d10 0169dec0 0x16c4a20 2f 01a6e028 01646d10 0x169dec0 30 002501a0 01a6e028 0x1646d10 31 01a63678 002501a0 0x1a6e028 Closing open log file E:\wbapps\iisstate\output\IISState-3868.log Opened log file 'E:\wbapps\iisstate\output\IISState-3868.log' *********************** Starting new log output IISState version 3.3.1 Tue Nov 21 11:28:15 2006 OS = Windows 2003 Server Executable: w3wp.exe PID = 3868 Note: Thread times are formatted as HH:MM:SS.ms *********************** Thread ID: 0 System Thread ID: c8 Kernel Time: 0:0:0.46 User Time: 0:0:0.78 Thread Type: Other # ChildEBP RetAddr 00 0006f73c 7c82ff8a ntdll!RtlpCoalesceFreeBlocks+0x36e 01 0006f824 77bbcef6 ntdll!RtlFreeHeap+0x38e 02 0006f86c 01e2aa93 msvcrt!free+0xc3 WARNING: Stack unwind information not available. Following frames may be wrong. 03 01692560 0169af10 jrun_iis6_wildcard_1e20000!TerminateExtension+0x8e33 04 01646d10 0169dec0 0x169af10 05 01a6e028 01646d10 0x169dec0 06 002501a0 01a6e028 0x1646d10 07 01a63678 002501a0 0x1a6e028 08 0169f6a8 01a63678 0x2501a0 09 016c4a20 0169f6a8 0x1a63678 0a 0169dec0 016c4a20 0x169f6a8 0b 01646d10 0169dec0 0x16c4a20 0c 01a6e028 01646d10 0x169dec0 0d 002501a0 01a6e028 0x1646d10 0e 01a63678 002501a0 0x1a6e028 0f 0169f6a8 01a63678 0x2501a0 10 016c4a20 0169f6a8 0x1a63678 11 0169dec0 016c4a20 0x169f6a8 12 01646d10 0169dec0 0x16c4a20 13 01a6e028 01646d10 0x169dec0 14 002501a0 01a6e028 0x1646d10 15 01a63678 002501a0 0x1a6e028 16 0169f6a8 01a63678 0x2501a0 17 016c4a20 0169f6a8 0x1a63678 18 0169dec0 016c4a20 0x169f6a8 19 01646d10 0169dec0 0x16c4a20 1a 01a6e028 01646d10 0x169dec0 1b 002501a0 01a6e028 0x1646d10 1c 01a63678 002501a0 0x1a6e028 1d 0169f6a8 01a63678 0x2501a0 1e 016c4a20 0169f6a8 0x1a63678 1f 0169dec0 016c4a20 0x169f6a8 20 01646d10 0169dec0 0x16c4a20 21 01a6e028 01646d10 0x169dec0 22 002501a0 01a6e028 0x1646d10 23 01a63678 002501a0 0x1a6e028 24 0169f6a8 01a63678 0x2501a0 25 016c4a20 0169f6a8 0x1a63678 26 0169dec0 016c4a20 0x169f6a8 27 01646d10 0169dec0 0x16c4a20 28 01a6e028 01646d10 0x169dec0 29 002501a0 01a6e028 0x1646d10 2a 01a63678 002501a0 0x1a6e028 2b 0169f6a8 01a63678 0x2501a0 2c 016c4a20 0169f6a8 0x1a63678 2d 0169dec0 016c4a20 0x169f6a8 2e 01646d10 0169dec0 0x16c4a20 2f 01a6e028 01646d10 0x169dec0 30 002501a0 01a6e028 0x1646d10 31 01a63678 002501a0 0x1a6e028 Thread ID: 1 System Thread ID: 1a4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009eff9c 7c821364 ntdll!KiFastSystemCallRet 01 009effa0 7c81fe26 ntdll!NtDelayExecution+0xc 02 009effb8 77e6608b ntdll!RtlpTimerThread+0x47 03 009effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 2 System Thread ID: c84 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 00a2ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 00a2ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 00a2ffb8 77e6608b ntdll!RtlpWorkerThread+0x3d 03 00a2ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 3 System Thread ID: db4 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Possible ASP page. Possible DCOM activity Executing Page: ASP.dll symbols not found. Unable to locate ASP page. Continuing with other analysis. No remote call being made # ChildEBP RetAddr 00 00a8fe18 7c821c54 ntdll!KiFastSystemCallRet 01 00a8fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc 02 00a8ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198 03 00a8ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd 04 00a8ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d 05 00a8ffb8 77e6608b RPCRT4!ThreadStartRoutine+0x1b 06 00a8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 4 System Thread ID: 7f0 Kernel Time: 0:0:6.187 User Time: 0:0:1.296 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00c8ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00c8ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 00c8ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00c8ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00c8ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00c8ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00c8ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 5 System Thread ID: 378 Kernel Time: 0:0:13.468 User Time: 0:0:3.687 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00ccff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00ccff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 00ccff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00ccff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00ccffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00ccffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00ccffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 6 System Thread ID: ea4 Kernel Time: 0:0:4.296 User Time: 0:0:1.125 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00d0ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00d0ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 00d0ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00d0ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00d0ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00d0ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00d0ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 7 System Thread ID: f9c Kernel Time: 0:0:10.359 User Time: 0:0:3.156 Thread Type: HTTP Listener # ChildEBP RetAddr 00 00d4ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 00d4ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 00d4ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 00d4ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 00d4ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 00d4ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 8 System Thread ID: da0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00e0fcec 7c822114 ntdll!KiFastSystemCallRet 01 00e0fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 00e0ffb8 77e6608b ntdll!RtlpWaitThread+0x161 03 00e0ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 9 System Thread ID: da0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Status: Thread is in a WAIT state. Thread Type: Other # ChildEBP RetAddr 00 00e0fcec 7c822114 ntdll!KiFastSystemCallRet 01 00e0fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc 02 00e0ffb8 77e6608b ntdll!RtlpWaitThread+0x161 03 00e0ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 10 System Thread ID: f44 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0186ff8c 7c821364 ntdll!KiFastSystemCallRet 01 0186ff90 7c815267 ntdll!NtDelayExecution+0xc 02 0186ffb8 77e6608b ntdll!RtlpIOWorkerThread+0x3f 03 0186ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 11 System Thread ID: 2f4 Kernel Time: 0:0:5.843 User Time: 0:0:1.468 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0199ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0199ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 0199ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0199ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0199ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0199ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0199ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 12 System Thread ID: d78 Kernel Time: 0:0:13.31 User Time: 0:0:3.109 Thread Type: HTTP Listener # ChildEBP RetAddr 00 019eff24 7c821bf4 ntdll!KiFastSystemCallRet 01 019eff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 019eff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 019eff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 019effa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 019effb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 019effec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 13 System Thread ID: 98c Kernel Time: 0:0:5.187 User Time: 0:0:1.156 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01a5ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01a5ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 01a5ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01a5ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01a5ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01a5ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01a5ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 14 System Thread ID: e9c Kernel Time: 0:0:7.437 User Time: 0:0:2.203 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01c9ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01c9ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 01c9ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01c9ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01c9ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01c9ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01c9ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 15 System Thread ID: 50c Kernel Time: 0:0:7.609 User Time: 0:0:2.343 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01efff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01efff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 01efff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01efff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01efffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01efffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01efffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 16 System Thread ID: b10 Kernel Time: 0:0:10.78 User Time: 0:0:2.687 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01ebff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01ebff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 01ebff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01ebff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01ebffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01ebffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01ebffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 17 System Thread ID: ea0 Kernel Time: 0:0:4.921 User Time: 0:0:1.218 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01cdff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01cdff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 01cdff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01cdff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01cdffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01cdffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01cdffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 18 System Thread ID: f84 Kernel Time: 0:0:2.859 User Time: 0:0:0.734 Thread Type: HTTP Listener # ChildEBP RetAddr 00 01e7ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 01e7ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 01e7ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 01e7ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 01e7ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 01e7ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 01e7ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 19 System Thread ID: be4 Kernel Time: 0:0:1.531 User Time: 0:0:0.328 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0207ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0207ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 0207ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0207ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0207ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0207ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0207ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 20 System Thread ID: 318 Kernel Time: 0:0:7.750 User Time: 0:0:2.234 Thread Type: HTTP Listener # ChildEBP RetAddr 00 020fff24 7c821bf4 ntdll!KiFastSystemCallRet 01 020fff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 020fff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 020fff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 020fffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 020fffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 020fffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 21 System Thread ID: e74 Kernel Time: 0:0:4.625 User Time: 0:0:1.421 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0213ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0213ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 0213ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0213ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0213ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0213ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0213ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 22 System Thread ID: 904 Kernel Time: 0:0:0.609 User Time: 0:0:0.187 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0217ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0217ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 0217ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0217ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0217ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0217ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0217ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 23 System Thread ID: 330 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 009aff7c 7c821bf4 ntdll!KiFastSystemCallRet 01 009aff80 71b23eb4 ntdll!NtRemoveIoCompletion+0xc 02 009affb8 77e6608b mswsock!SockAsyncThread+0x69 03 009affec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 24 System Thread ID: ad0 Kernel Time: 0:0:0.0 User Time: 0:0:0.62 Thread Type: HTTP Listener # ChildEBP RetAddr 00 0233ff24 7c821bf4 ntdll!KiFastSystemCallRet 01 0233ff28 77e66142 ntdll!NtRemoveIoCompletion+0xc 02 0233ff54 5a30249e kernel32!GetQueuedCompletionStatus+0x29 03 0233ff8c 5a3026bc W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33 04 0233ffa0 5a301db9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24 05 0233ffb8 77e6608b W3TP!THREAD_MANAGER::ThreadManagerThread+0x39 06 0233ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 25 System Thread ID: af0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0203ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0203ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0203ffb8 77e6608b ntdll!RtlpWorkerThread+0x3d 03 0203ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 26 System Thread ID: 9b0 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0182ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0182ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0182ffb8 77e6608b ntdll!RtlpWorkerThread+0x3d 03 0182ffec 00000000 kernel32!BaseThreadStart+0x34 Thread ID: 27 System Thread ID: f28 Kernel Time: 0:0:0.0 User Time: 0:0:0.0 Thread Type: Other # ChildEBP RetAddr 00 0190ff70 7c821bf4 ntdll!KiFastSystemCallRet 01 0190ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc 02 0190ffb8 77e6608b ntdll!RtlpWorkerThread+0x3d 03 0190ffec 00000000 kernel32!BaseThreadStart+0x34 Closing open log file E:\wbapps\iisstate\output\IISState-3868.log ==================== Anyone got any ideas? It looks to me like the JRun connectors could be the cause of the problem, but I'm not sure what would cause all three to start acting the same way all of a sudden. Thanks in advance for any help. -Dan Tag: virus on iis files Tag: 389784
  - 24
    - SOAP Monitor I don't know if this is the right newsgroup, but I don't know a better one. I've got a client-software and a web service. And now I need to read the SOAP-messages transmitted. I couldn't find something with Google etc. but a friend had shown me the SOAPmonitor for TOMCAT/axis. Does anyone know something similar to this for IIS? Thanks in advance. Sebastian Tag: virus on iis files Tag: 389783
  - 25
    - AWStats and plugin I don't know the best place to ask a question such as this, but this group seemed like a fitting place. I set up my log files in AWStats to what was specified, but also included cs(Cookie). The point of this is that I am intending to write a extra functionality, perhaps in the way of a plugin, to parse the cookie value of web requests, and if they belong in some database/file, to do something specific. Anyway, in the .conf file, I set the following: LogFormat="date time c-ip cs-username cs-method cs-uri-stem cs-uri-query sc-status sc-bytes cs-version cs(User-Agent) cs(Cookie) cs(Referer)" This is everything that's there, plus the cookie field. Now... how to I read in the cookie information in a plugin file? Or does AWStats just ignore the cookie section, and I'll have to end up reparsing the the log files for this information? Tag: virus on iis files Tag: 389782

Hi,
Kaspersky found a lot of viruses in folder C:/WINDOWS/Help/iisHelp/common;
i.e. in 401-1.htm it founds virus Trojan-Downloader.HTML.Agent.bk.
I absent-mindedly deleted 1 file: 403-5.htm, could you please send me a link
to download it?
(this email doesn't work)

Thanx

Top

RE: virus on iis files by LeonMayne

LeonMayne
Tue Nov 28 07:26:01 CST 2006

"Giorgio" wrote:
> I absent-mindedly deleted 1 file: 403-5.htm, could you please send me a link
> to download it?

You should be able to find it on your Windows setup disk

Top