Ok, it happened again ... here's the log:
Opened log file 'C:\iisstate\output\IISState-5548.log'
***********************
Starting new log output
IISState version 3.3.1
Wed Mar 26 13:04:52 2008
OS = Windows 2003 Server
Executable: w3wp.exe
PID = 5548
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: 15fc
Kernel Time: 0:0:0.46
User Time: 0:0:0.62
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 0006fc08 7c827d0b ntdll!KiFastSystemCallRet
01 0006fc0c 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0006fc7c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0006fc90 5a364662 kernel32!WaitForSingleObject+0x12
04 0006fca0 5a366e3f w3dt!WP_CONTEXT::RunMainThreadLoop+0x10
05 0006fca8 5a3af42d w3dt!UlAtqStartListen+0x2d
06 0006fcb8 5a3bc335 w3core!W3_SERVER::StartListen+0xbd
07 0006ff0c 0100187c w3core!UlW3Start+0x26e
08 0006ff44 01001a27 w3wp!wmain+0x22a
09 0006ffc0 77e6f23b w3wp!wmainCRTStartup+0x12f
0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23
Thread ID: 1
System Thread ID: 720
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00d0ff9c 7c826f4b ntdll!KiFastSystemCallRet
01 00d0ffa0 7c83d424 ntdll!NtDelayExecution+0xc
02 00d0ffb8 77e64829 ntdll!RtlpTimerThread+0x47
03 00d0ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 2
System Thread ID: 1794
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00d4ff70 7c8277db ntdll!KiFastSystemCallRet
01 00d4ff74 7c839f38 ntdll!ZwRemoveIoCompletion+0xc
02 00d4ffb8 77e64829 ntdll!RtlpWorkerThread+0x3d
03 00d4ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 3
System Thread ID: 17e8
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page
No remote call being made
# ChildEBP RetAddr
00 00dbfe18 7c82783b ntdll!KiFastSystemCallRet
01 00dbfe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 00dbff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 00dbff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 00dbffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 00dbffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 00dbffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 4
System Thread ID: 16f8
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fbff24 7c8277db ntdll!KiFastSystemCallRet
01 00fbff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00fbff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00fbff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00fbffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00fbffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00fbffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 5
System Thread ID: 1684
Kernel Time: 0:0:0.0
User Time: 0:0:0.62
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ffff24 7c8277db ntdll!KiFastSystemCallRet
01 00ffff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 00ffff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 00ffff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 00ffffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 00ffffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 00ffffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 6
System Thread ID: 674
Kernel Time: 0:0:0.171
User Time: 0:0:0.140
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0104ff24 7c8277db ntdll!KiFastSystemCallRet
01 0104ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0104ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 0104ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 0104ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 0104ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 0104ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 7
System Thread ID: 1580
Kernel Time: 0:0:0.78
User Time: 0:0:0.109
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0108ff24 7c8277db ntdll!KiFastSystemCallRet
01 0108ff28 77e5bea2 ntdll!ZwRemoveIoCompletion+0xc
02 0108ff54 5a30248e kernel32!GetQueuedCompletionStatus+0x29
03 0108ff8c 5a3026ac W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x33
04 0108ffa0 5a301da9 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x24
05 0108ffb8 77e64829 W3TP!THREAD_MANAGER::ThreadManagerThread+0x39
06 0108ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 8
System Thread ID: 11d8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0114fcec 7c827cfb ntdll!KiFastSystemCallRet
01 0114fcf0 7c83c78e ntdll!NtWaitForMultipleObjects+0xc
02 0114ffb8 77e64829 ntdll!RtlpWaitThread+0x161
03 0114ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 9
System Thread ID: 2c8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 01b1fa84 7c827d0b ntdll!KiFastSystemCallRet
01 01b1fa88 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 01b1faf8 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 01b1fb0c 5a3b820f kernel32!WaitForSingleObject+0x12
04 01b1ffb8 77e64829 w3core!HTTP_COMPRESSION::CompressionThread+0x126
05 01b1ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 10
System Thread ID: 11ac
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page
No remote call being made
# ChildEBP RetAddr
00 01b5fe18 7c82783b ntdll!KiFastSystemCallRet
01 01b5fe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 01b5ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 01b5ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 01b5ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 01b5ffb8 77e64829 RPCRT4!ThreadStartRoutine+0x1b
06 01b5ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 11
System Thread ID: fb8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01b9ff8c 7c826f4b ntdll!KiFastSystemCallRet
01 01b9ff90 7c81943a ntdll!NtDelayExecution+0xc
02 01b9ffb8 77e64829 ntdll!RtlpIOWorkerThread+0x3f
03 01b9ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 12
System Thread ID: a48
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: Unable to locate ASP page
# ChildEBP RetAddr
00 0279ff0c 7c827d0b ntdll!KiFastSystemCallRet
01 0279ff10 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 0279ff80 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0279ff94 709fc803 kernel32!WaitForSingleObject+0x12
04 0279ffb4 709fc7db asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x1e
05 0279ffb8 77e64829 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa
06 0279ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 13
System Thread ID: 14e4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: Unable to locate ASP page
# ChildEBP RetAddr
00 02a5fe1c 7c827cfb ntdll!KiFastSystemCallRet
01 02a5fe20 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 02a5fec8 7739bbd1 kernel32!WaitForMultipleObjectsEx+0x11a
03 02a5ff24 7739ce36 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 02a5ff40 709fb8be USER32!MsgWaitForMultipleObjects+0x1f
05 02a5ff84 77bcb530 asp!CMTACallbackThread::Thread+0x4f
06 02a5ffb8 77e64829 msvcrt!_endthreadex+0xa3
07 02a5ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 14
System Thread ID: 1640
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: Unable to locate ASP page
# ChildEBP RetAddr
00 02a9fe1c 7c827cfb ntdll!KiFastSystemCallRet
01 02a9fe20 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 02a9fec8 7739bbd1 kernel32!WaitForMultipleObjectsEx+0x11a
03 02a9ff24 7739ce36 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 02a9ff40 70a017e9 USER32!MsgWaitForMultipleObjects+0x1f
05 02a9ff84 77bcb3ca asp!Debugger+0x9e
06 02a9ffb8 77e64829 msvcrt!_endthread+0xab
07 02a9ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 15
System Thread ID: 123c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG
\PDM.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 02aefd84 7c827cfb ntdll!KiFastSystemCallRet
01 02aefd88 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 02aefe30 7739bbd1 kernel32!WaitForMultipleObjectsEx+0x11a
03 02aefe8c 7739ce36 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 02aefea8 5166694a USER32!MsgWaitForMultipleObjects+0x1f
WARNING: Stack unwind information not available. Following frames may
be wrong.
05 02aeff24 77e657fe PDM!DllGetClassObject+0x30a2
06 02aeff50 02aeff88 kernel32!CreateSemaphoreW+0x5e
07 02aa2010 00000000 0x2aeff88
Thread ID: 16
System Thread ID: 1350
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: Unable to locate ASP page
# ChildEBP RetAddr
00 02b3fef4 7c827d0b ntdll!KiFastSystemCallRet
01 02b3fef8 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 02b3ff68 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 02b3ff7c 709fe8ef kernel32!WaitForSingleObject+0x12
04 02b3ffb8 77e64829 asp!CViperReqManager::WatchThread+0x68
05 02b3ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 17
System Thread ID: b6c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02b9fee8 7c827d0b ntdll!KiFastSystemCallRet
01 02b9feec 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 02b9ff5c 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 02b9ff70 4a77921b kernel32!WaitForSingleObject+0x12
04 02b9ff84 77bcb530 comsvcs!
CSTAThreadPool::LoadBalanceThreadControlLoop+0x29
05 02b9ffb8 77e64829 msvcrt!_endthreadex+0xa3
06 02b9ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 18
System Thread ID: 1360
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02bdfee0 7c827d0b ntdll!KiFastSystemCallRet
01 02bdfee4 77e61d1e ntdll!NtWaitForSingleObject+0xc
02 02bdff54 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 02bdff68 4a778cb6 kernel32!WaitForSingleObject+0x12
04 02bdff84 77bcb530 comsvcs!CSTAThreadPool::KillThreadControlLoop
+0x25
05 02bdffb8 77e64829 msvcrt!_endthreadex+0xa3
06 02bdffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 19
System Thread ID: 1384
Kernel Time: 0:0:0.453
User Time: 0:0:0.343
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02c1fdcc 7c827cfb ntdll!KiFastSystemCallRet
01 02c1fdd0 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 02c1fe78 7739bbd1 kernel32!WaitForMultipleObjectsEx+0x11a
03 02c1fed4 7739ce36 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 02c1fef0 4a77cb28 USER32!MsgWaitForMultipleObjects+0x1f
05 02c1ff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1f9
06 02c1ffb8 77e64829 msvcrt!_endthreadex+0xa3
07 02c1ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 20
System Thread ID: 8f4
Kernel Time: 0:7:46.937
User Time: 0:7:52.421
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02c5fdcc 7c827cfb ntdll!KiFastSystemCallRet
01 02c5fdd0 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 02c5fe78 7739bbd1 kernel32!WaitForMultipleObjectsEx+0x11a
03 02c5fed4 7739ce36 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 02c5fef0 4a77cb28 USER32!MsgWaitForMultipleObjects+0x1f
05 02c5ff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1f9
06 02c5ffb8 77e64829 msvcrt!_endthreadex+0xa3
07 02c5ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 21
System Thread ID: 878
Kernel Time: 0:0:2.218
User Time: 0:0:3.46
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02c9fdcc 7c827cfb ntdll!KiFastSystemCallRet
01 02c9fdd0 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 02c9fe78 7739bbd1 kernel32!WaitForMultipleObjectsEx+0x11a
03 02c9fed4 7739ce36 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 02c9fef0 4a77cb28 USER32!MsgWaitForMultipleObjects+0x1f
05 02c9ff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1f9
06 02c9ffb8 77e64829 msvcrt!_endthreadex+0xa3
07 02c9ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 22
System Thread ID: 684
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 02cdfdcc 7c827cfb ntdll!KiFastSystemCallRet
01 02cdfdd0 77e6202c ntdll!NtWaitForMultipleObjects+0xc
02 02cdfe78 7739bbd1 kernel32!WaitForMultipleObjectsEx+0x11a
03 02cdfed4 7739ce36 USER32!RealMsgWaitForMultipleObjectsEx+0x141
04 02cdfef0 4a77cb28 USER32!MsgWaitForMultipleObjects+0x1f
05 02cdff84 77bcb530 comsvcs!CSTAThread::WorkerLoop+0x1f9
06 02cdffb8 77e64829 msvcrt!_endthreadex+0xa3
07 02cdffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 23
System Thread ID: 17dc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 040eff88 7c827cfb ntdll!KiFastSystemCallRet
01 040eff8c 71c51108 ntdll!NtWaitForMultipleObjects+0xc
02 040effb8 77e64829 NETAPI32!NetbiosWaiter+0x73
03 040effec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 24
System Thread ID: 110c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Managed Thread. Possible ASP.Net page or other .Net
worker
SaveModuleToMemory failed
Failed to load SOS data.
No valid SOS data table found.
Begin System Thread Information
# ChildEBP RetAddr
00 0421fedc 00000000 ntdll!KiFastSystemCallRet
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
GetContextState failed, 0x8007001F
Thread ID: 25
System Thread ID: 0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
GetContextState failed, 0x8007001F
On Feb 25, 3:21 pm, "Pat [MSFT]" <patfi....RemoveThis@online.MICROSOFT.COM>
wrote:
> The -sc flag tells IISState that you want it to attach to the process and
> wait for a crash to occur (i.e. process termination). From the log, it
> appears that IISState has successfully attached & is waiting for the crash.
>
> What you are describing is a 'hang'. For that scenario, you wait until the
> problem manifests itself then run IISState against the process w/out any
> flags except the -d (create dump file). Post the resulting log.
>
> Pat
>
> "Jake" <jakef....RemoveThis@gmail.com> wrote in message
>
> news:67574372-61e1-4a78-9aa4-06a9964104e2@71g2000hse.googlegroups.com...
>
> > Hi,
>
> > This is my first post here. I have a web service that runs on IIS.
> > For the past couple months, the processes that call the web service
> > suddenly find that it is unavailable after running fine for between 1
> > and 2 weeks. No one can access the web service after it becomes
> > unavailable and iisreset does not make it come back. Additionally,
> > w3wp.exe stops showing up in the process list on Task Mgr and a test
> > web page placed in the Virtual Directory housing the wsdl file cannot
> > be browed on localhost.
>
> > I tried IISState after seeing this post here:
> >http://groups.google.com/group/microsoft.public.inetserver.iis/browse...
>
> > I tried to use
>
> > iisstate -p [process id #] -sc
>
> > and got the following output. It looks like it's not running
> > correctly. Can anyone assist?
>
> > Thanks!
> > Jake
>
> > ____________________________________________________________________________
>
> > C:\iisstate>iisstate -p 2772 -sc
> > Symbol search path is: SRV*C:\iisstate\symbols*http://
> > msdl.microsoft.com/downloa
> > d/symbols
>
> > Microsoft (R) Windows Debugger Version 6.2.0013.1
> > Copyright (c) Microsoft Corporation. All rights reserved.
>
> > *** wait with pending attach
> > The call to LoadLibrary(exts) failed, Win32 error 2
> > "The system cannot find the file specified."
> > Please check your debugger configuration and/or network access.
> > Symbol search path is: SRV*C:\iisstate\symbols*http://
> > msdl.microsoft.com/downloa
> > d/symbols
> > Executable search path is:
> > ModLoad: 01000000 01005000 c:\windows\system32\inetsrv\w3wp.exe
> > ModLoad: 7c800000 7c8c0000 C:\WINDOWS\system32\ntdll.dll
> > ModLoad: 77e40000 77f42000 C:\WINDOWS\system32\kernel32.dll
> > ModLoad: 77ba0000 77bfa000 C:\WINDOWS\system32\msvcrt.dll
> > ModLoad: 77f50000 77feb000 C:\WINDOWS\system32\ADVAPI32.dll
> > ModLoad: 77c50000 77cef000 C:\WINDOWS\system32\RPCRT4.dll
> > ModLoad: 76f50000 76f63000 C:\WINDOWS\system32\Secur32.dll
> > ModLoad: 77380000 77411000 C:\WINDOWS\system32\USER32.dll
> > ModLoad: 77c00000 77c48000 C:\WINDOWS\system32\GDI32.dll
> > ModLoad: 77670000 777a9000 C:\WINDOWS\system32\ole32.dll
> > ModLoad: 64700000 6472d000 c:\windows\system32\inetsrv\IISUTIL.dll
> > ModLoad: 761b0000 76243000 C:\WINDOWS\system32\CRYPT32.dll
> > ModLoad: 76190000 761a2000 C:\WINDOWS\system32\MSASN1.dll
> > ModLoad: 00830000 00af5000 C:\WINDOWS\system32\xpsp2res.dll
> > ModLoad: 5a390000 5a3e8000 c:\windows\system32\inetsrv\w3core.dll
> > ModLoad: 77d00000 77d8b000 C:\WINDOWS\system32\OLEAUT32.dll
> > ModLoad: 71bb0000 71bb9000 C:\WINDOWS\system32\WSOCK32.dll
> > ModLoad: 71c00000 71c17000 C:\WINDOWS\system32\WS2_32.dll
> > ModLoad: 71bf0000 71bf8000 C:\WINDOWS\system32\WS2HELP.dll
> > ModLoad: 5a400000 5a408000 c:\windows\system32\inetsrv\W3CACHE.dll
> > ModLoad: 5a300000 5a307000 c:\windows\system32\inetsrv\W3TP.dll
> > ModLoad: 5a360000 5a36d000 c:\windows\system32\inetsrv\w3dt.dll
> > ModLoad: 67150000 67159000 C:\WINDOWS\system32\HTTPAPI.dll
> > ModLoad: 77da0000 77df2000 C:\WINDOWS\system32\SHLWAPI.dll
> > ModLoad: 5b640000 5b658000 C:\WINDOWS\system32\strmfilt.dll
> > ModLoad: 5a3f0000 5a3f6000 c:\windows\system32\inetsrv\W3COMLOG.dll
> > ModLoad: 62da0000 62da7000 c:\windows\system32\inetsrv\LONSINT.dll
> > ModLoad: 647b0000 647d7000 C:\WINDOWS\system32\IisRTL.DLL
> > ModLoad: 71c40000 71c97000 C:\WINDOWS\system32\NETAPI32.dll
> > ModLoad: 60ba0000 60bb1000 c:\windows\system32\inetsrv\wamreg.DLL
> > ModLoad: 5a420000 5a431000 C:\WINDOWS\system32\IISMAP.dll
> > ModLoad: 6d0f0000 6d110000 c:\windows\system32\inetsrv\iisres.dll
> > ModLoad: 777b0000 77833000 C:\WINDOWS\system32\CLBCatQ.DLL
> > ModLoad: 77010000 770d6000 C:\WINDOWS\system32\COMRes.dll
> > ModLoad: 77b90000 77b98000 C:\WINDOWS\system32\VERSION.dll
> > ModLoad: 608f0000 60901000 C:\WINDOWS\system32\ADMWPROX.DLL
> > ModLoad: 68000000 68035000 C:\WINDOWS\system32\rsaenh.dll
> > ModLoad: 76b70000 76b7b000 C:\WINDOWS\system32\PSAPI.DLL
> > ModLoad: 60060000 60066000 C:\WINDOWS\Microsoft.NET\Framework
> > \v2.0.50727\aspne
> > t_filter.dll
> > ModLoad: 78130000 781cb000 C:\WINDOWS\WinSxS
> > \x86_Microsoft.VC80.CRT_1fc8b3b9a1
> > e18e3b_8.0.50727.42_x-ww_0DE06ACD\MSVCR80.dll
> > ModLoad: 5a320000 5a332000 c:\windows\system32\inetsrv\w3isapi.dll
> > ModLoad: 71b20000 71b61000 C:\WINDOWS\System32\mswsock.dll
> > ModLoad: 76ed0000 76efa000 C:\WINDOWS\system32\DNSAPI.dll
> > ModLoad: 76f70000 76f77000 C:\WINDOWS\System32\winrnr.dll
> > ModLoad: 76f10000 76f3e000 C:\WINDOWS\system32\WLDAP32.dll
> > ModLoad: 76f80000 76f85000 C:\WINDOWS\system32\rasadhlp.dll
> > ModLoad: 685b0000 685ba000 C:\WINDOWS\system32\inetsrv\gzip.dll
> > ModLoad: 745e0000 7489e000 C:\WINDOWS\system32\msi.dll
> > ModLoad: 4b900000 4b905000 C:\Program Files\Common Files\Microsoft
> > Shared\Web
> > Server Extensions\50\bin\fpexedll.dll
> > ModLoad: 71bd0000 71be1000 C:\WINDOWS\system32\mpr.dll
> > ModLoad: 709e0000 70a43000 \\?\C:\WINDOWS\system32\inetsrv\asp.dll
> > ModLoad: 76a80000 76a98000 C:\WINDOWS\system32\ATL.DLL
> > ModLoad: 4a710000 4a855000 C:\WINDOWS\system32\comsvcs.dll
> > ModLoad: 10000000 100c8000 C:\WINDOWS\system32\ws03res.dll
> > ModLoad: 75da0000 75e5d000 C:\WINDOWS\system32\SXS.DLL
> > ModLoad: 73460000 734c2000 C:\WINDOWS\system32\VBScript.dll
> > ModLoad: 77e00000 77e21000 C:\WINDOWS\system32\NTMARTA.DLL
> > ModLoad: 7e020000 7e02f000 C:\WINDOWS\system32\SAMLIB.dll
> > ModLoad: 51660000 5168c000 C:\Program Files\Common Files\Microsoft
> > Shared\VS7D
> > EBUG\PDM.DLL
> > ModLoad: 51580000 515ab000 C:\Program Files\Common Files\Microsoft
> > Shared\VS7D
> > EBUG\MSDBG2.DLL
> > ModLoad: 02cf0000 02d5e000 C:\Program Files\Common Files\MSSoap
> > \Binaries\MSSOA
> > P30.dll
> > ModLoad: 772c0000 7736f000 C:\WINDOWS\system32\urlmon.dll
> > ModLoad: 77420000 77523000 C:\WINDOWS\WinSxS
> > \x86_Microsoft.Windows.Common-Cont
> > rols_6595b64144ccf1df_6.0.3790.3959_x-ww_D8713E55\comctl32.dll
> > ModLoad: 02d70000 02d7b000 C:\Program Files\Common Files\MSSoap
> > \Binaries\Resou
> > rces\1033\MSSOAPR3.DLL
> > ModLoad: 69b10000 69c4c000 c:\WINDOWS\system32\msxml4.dll
> > ModLoad: 762b0000 762f9000 C:\WINDOWS\system32\comdlg32.dll
> > ModLoad: 77530000 775c7000 C:\WINDOWS\WinSxS
> > \x86_Microsoft.Windows.Common-Cont
> > rols_6595b64144ccf1df_5.82.3790.3959_x-ww_78FCF8D0\COMCTL32.dll
> > ModLoad: 7c8d0000 7d0cf000 C:\WINDOWS\system32\SHELL32.dll
> > ModLoad: 76290000 762ad000 C:\WINDOWS\system32\IMM32.dll
> > ModLoad: 04010000 04027000 C:\WINDOWS\system32\odbcint.dll
> > ModLoad: 4d7a0000 4d7ba000 C:\WINDOWS\system32\odbccp32.dll
> > ModLoad: 76c90000 76cb7000 C:\WINDOWS\system32\msv1_0.dll
> > ModLoad: 76cf0000 76d0a000 C:\WINDOWS\system32\iphlpapi.dll
> > ModLoad: 5f270000 5f2ca000 C:\WINDOWS\system32\hnetcfg.dll
> > ModLoad: 71ae0000 71ae8000 C:\WINDOWS\System32\wshtcpip.dll
> > ModLoad: 79000000 79045000 C:\WINDOWS\system32\mscoree.dll
> > ModLoad: 79e70000 7a3d6000 C:\WINDOWS\Microsoft.NET\Framework
> > \v2.0.50727\mscor
> > wks.dll
> > ModLoad: 790c0000 79b90000 C:\WINDOWS\assembly
> > \NativeImages_v2.0.50727_32\msco
> > rlib\3b740e4b052b96d82f4620aaf61a382b\mscorlib.ni.dll
> > ModLoad: 11000000 11008000 C:\WINDOWS\assembly\GAC\AISSecurity
> > \1.0.2219.26050_
> > _620285648364a02d\AISSecurity.dll
> > ModLoad: 79060000 790b3000 C:\WINDOWS\Microsoft.NET\Framework
> > \v2.0.50727\mscor
> > jit.dll
> > ModLoad: 5e380000 5e409000 C:\WINDOWS\Microsoft.NET\Framework
> > \v2.0.50727\diasy
> > mreader.dll
> > ModLoad: 7a440000 7ac06000 C:\WINDOWS\assembly
> > \NativeImages_v2.0.50727_32\Syst
> > em\1baaadbdde4f0dd4721ab9dc92d54ed6\System.ni.dll
> > ModLoad: 67160000 6728e000 C:\WINDOWS\assembly
> > \NativeImages_v2.0.50727_32\Syst
> > em.DirectorySer#
> > \54bf4abd12c4a168968605947cbd7006\System.DirectoryServices.ni.dl
> > l
> > ModLoad: 76df0000 76e24000 C:\WINDOWS\system32\activeds.dll
> > ModLoad: 76dc0000 76de8000 C:\WINDOWS\system32\adsldpc.dll
> > ModLoad: 76b80000 76bae000 C:\WINDOWS\system32\credui.dll
> > ModLoad: 64890000 6498a000 C:\WINDOWS\assembly
> > \NativeImages_v2.0.50727_32\Syst
> > em.Configuration
> > \abe7960f84e3eb48929091bf286f7427\System.Configuration.ni.dll
> > ModLoad: 637a0000 63d02000 C:\WINDOWS\assembly
> > \NativeImages_v2.0.50727_32\Syst
> > em.Xml\b66dbe55bb853af7ddcce37af39b96e4\System.Xml.ni.dll
> > ModLoad: 766d0000 766d9000 C:\WINDOWS\system32\shfolder.dll >> Stay informed about: Using IISState