Hello,
I would appreciate some help or pointer -- as I am left with no clue
on how to proceed.
Environment: Windows Server 2003. ASP application
I get a constant popups -- "IIS Worker Process encountered an error
and needed to close"
I look at the Application Event File and there are several errors --
more or less the same:
"Faulting application w3wp.exe, version 6.0.3790.1830, faulting module
unknown, version 0.0.0.0, fault address 0x06ba75b4."
The following is IISState Log:
Opened log file 'C:\iisstate\output\IISState-1896.log'
***********************
Starting new log output
IISState version 3.3.1
Thu Apr 19 16:20:12 2007
OS = Windows 2003 Server
Executable: inetinfo.exe
PID = 1896
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: 76c
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f99c 7c821b84 ntdll!KiFastSystemCallRet
01 0006f9a0 77e4189f ntdll!NtReadFile+0xc
02 0006fa08 77f795ab kernel32!ReadFile+0x16c
03 0006fa34 77f7943c ADVAPI32!ScGetPipeInput+0x2a
04 0006faa8 77fb2ec9 ADVAPI32!ScDispatcherLoop+0x51
05 0006fcec 010027be ADVAPI32!StartServiceCtrlDispatcherA+0x93
06 0006fe1c 01002969 inetinfo!StartDispatchTable+0x277
07 0006ff44 0100339d inetinfo!main+0x117
08 0006ffc0 77e523e5 inetinfo!mainCRTStartup+0x12f
09 0006fff0 00000000 kernel32!BaseProcessStart+0x23
Thread ID: 1
System Thread ID: 770
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 007efe14 7c822124 ntdll!KiFastSystemCallRet
01 007efe18 77e6bb18 ntdll!NtWaitForSingleObject+0xc
02 007efe88 77e6ba82 kernel32!WaitForSingleObjectEx+0xac
03 007efe9c 01002ebf kernel32!WaitForSingleObject+0x12
04 007effb8 77e660c3 inetinfo!W3SVCThreadEntry+0x3d
05 007effec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 2
System Thread ID: 774
Kernel Time: 0:0:0.62
User Time: 0:0:0.93
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0082fcb8 7c822124 ntdll!KiFastSystemCallRet
01 0082fcbc 77e6bb18 ntdll!NtWaitForSingleObject+0xc
02 0082fd2c 77e6ba82 kernel32!WaitForSingleObjectEx+0xac
03 0082fd40 649f26a4 kernel32!WaitForSingleObject+0x12
04 0082fd68 010024b3 iisadmin!ServiceEntry+0x28a
05 0082ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc
06 0082ffb8 77e660c3 ADVAPI32!ScSvcctrlThreadA+0x21
07 0082ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 3
System Thread ID: 7a0
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 00bfff9c 7c821364 ntdll!KiFastSystemCallRet
01 00bfffa0 7c81fe26 ntdll!NtDelayExecution+0xc
02 00bfffb8 77e660c3 ntdll!RtlpTimerThread+0x47
03 00bfffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 4
System Thread ID: 7ac
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00d0feac 7c822114 ntdll!KiFastSystemCallRet
01 00d0feb0 77e6717b ntdll!NtWaitForMultipleObjects+0xc
02 00d0ff58 77e6109d kernel32!WaitForMultipleObjectsEx+0x11a
03 00d0ff74 56f951ef kernel32!WaitForMultipleObjects+0x18
04 00d0ffa0 56f96a06 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x67
05 00d0ffb8 77e660c3 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x5f
06 00d0ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 5
System Thread ID: 7f0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0160fea4 7c822114 ntdll!KiFastSystemCallRet
01 0160fea8 77e6717b ntdll!NtWaitForMultipleObjects+0xc
02 0160ff50 77e6109d kernel32!WaitForMultipleObjectsEx+0x11a
03 0160ff6c 620b4524 kernel32!WaitForMultipleObjects+0x18
04 0160ffac 620b48d0 metadata!CListenerController::Listen+0x29
05 0160ffb8 77e660c3 metadata!StartListenerThread+0x1a
06 0160ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 6
System Thread ID: 7f4
Kernel Time: 0:0:0.62
User Time: 0:0:0.171
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0164fe18 7c821c54 ntdll!KiFastSystemCallRet
01 0164fe1c 77c753ac ntdll!ZwReplyWaitReceivePortEx+0xc
02 0164ff84 77c5778c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0164ff8c 77c5f7e3 RPCRT4!RecvLotsaCallsWrapper+0xd
04 0164ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0164ffb8 77e660c3 RPCRT4!ThreadStartRoutine+0x1b
06 0164ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 7
System Thread ID: b8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 016cfea8 7c822114 ntdll!KiFastSystemCallRet
01 016cfeac 77e6717b ntdll!NtWaitForMultipleObjects+0xc
02 016cff54 77e6109d kernel32!WaitForMultipleObjectsEx+0x11a
03 016cff70 6ee3a890 kernel32!WaitForMultipleObjects+0x18
04 016cffac 6ee3ab2f IISCFG!CListener::Listen+0x23
05 016cffb8 77e660c3 IISCFG!CListener::ListenerThreadStart+0x36
06 016cffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 8
System Thread ID: 5cc
Kernel Time: 0:0:0.62
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0170fbb8 7c822114 ntdll!KiFastSystemCallRet
01 0170fbbc 77e6717b ntdll!NtWaitForMultipleObjects+0xc
02 0170fc64 7739cd08 kernel32!WaitForMultipleObjectsEx+0x11a
03 0170fcc0 7738e381 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 0170fcdc 6c7d63d5 USER32!MsgWaitForMultipleObjects+0x1f
05 0170fd28 6930e66a INFOCOMM!IIS_SERVICE::StartServiceOperation+0x231
06 0170fd68 010024b3 ftpsvc2!ServiceEntry+0xae
07 0170ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc
08 0170ffb8 77e660c3 ADVAPI32!ScSvcctrlThreadA+0x21
09 0170ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 9
System Thread ID: 5f0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 018fff50 7c821bf4 ntdll!KiFastSystemCallRet
01 018fff54 77e6617a ntdll!NtRemoveIoCompletion+0xc
02 018fff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29
03 018fffb8 77e660c3 ISATQ!AtqPoolThread+0x40
04 018fffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 10
System Thread ID: 31c
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0193ff50 7c821bf4 ntdll!KiFastSystemCallRet
01 0193ff54 77e6617a ntdll!NtRemoveIoCompletion+0xc
02 0193ff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29
03 0193ffb8 77e660c3 ISATQ!AtqPoolThread+0x40
04 0193ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 11
System Thread ID: 608
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 01b3fe18 7c821c54 ntdll!KiFastSystemCallRet
01 01b3fe1c 77c753ac ntdll!ZwReplyWaitReceivePortEx+0xc
02 01b3ff84 77c5778c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 01b3ff8c 77c5f7e3 RPCRT4!RecvLotsaCallsWrapper+0xd
04 01b3ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 01b3ffb8 77e660c3 RPCRT4!ThreadStartRoutine+0x1b
06 01b3ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 12
System Thread ID: 610
Kernel Time: 0:0:0.15
User Time: 0:0:0.62
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0197fe18 7c821c54 ntdll!KiFastSystemCallRet
01 0197fe1c 77c753ac ntdll!ZwReplyWaitReceivePortEx+0xc
02 0197ff84 77c5778c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0197ff8c 77c5f7e3 RPCRT4!RecvLotsaCallsWrapper+0xd
04 0197ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0197ffb8 77e660c3 RPCRT4!ThreadStartRoutine+0x1b
06 0197ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 13
System Thread ID: 5a4
Kernel Time: 0:0:0.109
User Time: 0:0:0.46
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 01bbfe18 7c821c54 ntdll!KiFastSystemCallRet
01 01bbfe1c 77c753ac ntdll!ZwReplyWaitReceivePortEx+0xc
02 01bbff84 77c5778c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 01bbff8c 77c5f7e3 RPCRT4!RecvLotsaCallsWrapper+0xd
04 01bbffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 01bbffb8 77e660c3 RPCRT4!ThreadStartRoutine+0x1b
06 01bbffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 14
System Thread ID: 4e8
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01bffcec 7c822114 ntdll!KiFastSystemCallRet
01 01bffcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
02 01bfffb8 77e660c3 ntdll!RtlpWaitThread+0x161
03 01bfffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 15
System Thread ID: 650
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01c3fec4 7c822114 ntdll!KiFastSystemCallRet
01 01c3fec8 77e6717b ntdll!NtWaitForMultipleObjects+0xc
02 01c3ff70 69308dc4 kernel32!WaitForMultipleObjectsEx+0x11a
03 01c3ffb8 77e660c3 ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc
+0x33
04 01c3ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 16
System Thread ID: 664
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 01ccfe0c 7c822124 ntdll!KiFastSystemCallRet
01 01ccfe10 71b23a09 ntdll!NtWaitForSingleObject+0xc
02 01ccfe4c 71b23a52 mswsock!SockWaitForSingleObject+0x19d
03 01ccff3c 71c0470c mswsock!WSPSelect+0x380
04 01ccff8c 63ec4696 WS2_32!select+0xb9
05 01ccffb4 63ec4700 ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
06 01ccffb8 77e660c3 ISATQ!BmonThreadFunc+0x9
07 63ec4700 8b575600 kernel32!BaseThreadStart+0x34
WARNING: Frame IP not in any known module. Following frames may be
wrong.
08 04c2c033 00000000 0x8b575600
Thread ID: 17
System Thread ID: 3cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 01dffeac 7c821bf4 ntdll!KiFastSystemCallRet
01 01dffeb0 77e6617a ntdll!NtRemoveIoCompletion+0xc
02 01dffedc 77c604c3 kernel32!GetQueuedCompletionStatus+0x29
03 01dfff18 77c60655 RPCRT4!COMMON_ProcessCalls+0xa1
04 01dfff84 77c5f9f7 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x117
05 01dfff8c 77c5f7e3 RPCRT4!ProcessIOEventsWrapper+0xd
06 01dfffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
07 01dfffb8 77e660c3 RPCRT4!ThreadStartRoutine+0x1b
08 01dfffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 18
System Thread ID: 19c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00bbff50 7c821bf4 ntdll!KiFastSystemCallRet
01 00bbff54 77e6617a ntdll!NtRemoveIoCompletion+0xc
02 00bbff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29
03 00bbffb8 77e660c3 ISATQ!AtqPoolThread+0x40
04 00bbffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 19
System Thread ID: c18
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c3ff50 7c821bf4 ntdll!KiFastSystemCallRet
01 00c3ff54 77e6617a ntdll!NtRemoveIoCompletion+0xc
02 00c3ff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x29
03 00c3ffb8 77e660c3 ISATQ!AtqPoolThread+0x40
04 00c3ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 20
System Thread ID: cc8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01e3ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 01e3ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 01e3ffb8 77e660c3 ntdll!RtlpWorkerThread+0x3d
03 01e3ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 21
System Thread ID: ae0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0168ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 0168ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 0168ffb8 77e660c3 ntdll!RtlpWorkerThread+0x3d
03 0168ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 22
System Thread ID: 1fc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b7ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 01b7ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 01b7ffb8 77e660c3 ntdll!RtlpWorkerThread+0x3d
03 01b7ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 23
System Thread ID: f94
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d1ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 01d1ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 01d1ffb8 77e660c3 ntdll!RtlpWorkerThread+0x3d
03 01d1ffec 00000000 kernel32!BaseThreadStart+0x34
Closing open log file C:\iisstate\output\IISState-1896.log
>> Stay informed about: IIS Worker Process need to close problem