yet another...
Opened log file 'C:\iisstate\output\IISState-1760.log'
***********************
Starting new log output
IISState version 3.3.1
Fri Sep 10 06:11:16 2004
OS = Windows 2003 Server
Executable: inetinfo.exe
PID = 1760
Note: Thread times are formatted as HH:MM:SS.ms
***********************
IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed:
Thread ID: 32
System Thread ID: f9c
Kernel Time: 0:0:2.62
User Time: 0:0:0.609
Thread Type: Other
# ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be wrong.
00 010cfed8 6ddf9645 0x6adf9645
01 69df9645 00000000 0x6ddf9645
Closing open log file C:\iisstate\output\IISState-1760.log
Opened log file 'C:\iisstate\output\IISState-1760.log'
***********************
Starting new log output
IISState version 3.3.1
Fri Sep 10 06:11:16 2004
OS = Windows 2003 Server
Executable: inetinfo.exe
PID = 1760
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: 6e4
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f9a8 77f4303b SharedUserData!SystemCallStub+0x4
01 0006f9ac 77e4905d ntdll!NtReadFile+0xc
02 0006fa14 77db51f1 kernel32!ReadFile+0x16c
03 0006fa40 77db5297 ADVAPI32!ScGetPipeInput+0x28
04 0006fab0 77dfa7f1 ADVAPI32!ScDispatcherLoop+0x4c
05 0006fcec 01002655 ADVAPI32!StartServiceCtrlDispatcherA+0x91
06 0006fe1c 010027ea inetinfo!StartDispatchTable+0x214
07 0006ff44 01003160 inetinfo!main+0x104
08 0006ffc0 77e4f38c inetinfo!mainCRTStartup+0x12f
09 0006fff0 00000000 kernel32!BaseProcessStart+0x23
Thread ID: 1
System Thread ID: 6ec
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 007ffe18 77f43741 SharedUserData!SystemCallStub+0x4
01 007ffe1c 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 007ffe8c 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 007ffe9c 01002cf9 kernel32!WaitForSingleObject+0xf
04 007fffb8 77e4a990 inetinfo!W3SVCThreadEntry+0x3b
05 007fffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 2
System Thread ID: 6f0
Kernel Time: 0:0:0.15
User Time: 0:0:0.78
Thread Type: Other
# ChildEBP RetAddr
00 0083fcc4 77f43741 SharedUserData!SystemCallStub+0x4
01 0083fcc8 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 0083fd38 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 0083fd48 649f24ac kernel32!WaitForSingleObject+0xf
04 0083fd70 010023b6 iisadmin!ServiceEntry+0x214
05 0083ffa8 77db571b inetinfo!InetinfoStartService+0x2a6
06 0083ffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe
07 0083ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 3
System Thread ID: 700
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00a3ff9c 77f4262b SharedUserData!SystemCallStub+0x4
01 00a3ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc
02 00a3ffb8 77e4a990 ntdll!RtlpTimerThread+0x45
03 00a3ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 4
System Thread ID: 720
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00b4feb0 77f4372d SharedUserData!SystemCallStub+0x4
01 00b4feb4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 00b4ff5c 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 00b4ff74 6e0b377a kernel32!WaitForMultipleObjects+0x17
04 00b4ffa0 6e0b6012 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x68
05 00b4ffb8 77e4a990 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x62
06 00b4ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 5
System Thread ID: 74c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00f2feac 77f4372d SharedUserData!SystemCallStub+0x4
01 00f2feb0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 00f2ff58 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 00f2ff70 620b401a kernel32!WaitForMultipleObjects+0x17
04 00f2ffb0 620b4390 metadata!CListenerController::Listen+0x27
05 00f2ffb8 77e4a990 metadata!StartListenerThread+0x16
06 00f2ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 6
System Thread ID: 74c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00f2feac 77f4372d SharedUserData!SystemCallStub+0x4
01 00f2feb0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 00f2ff58 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 00f2ff70 620b401a kernel32!WaitForMultipleObjects+0x17
04 00f2ffb0 620b4390 metadata!CListenerController::Listen+0x27
05 00f2ffb8 77e4a990 metadata!StartListenerThread+0x16
06 00f2ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 7
System Thread ID: 780
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 014cfeac 77f4372d SharedUserData!SystemCallStub+0x4
01 014cfeb0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 014cff58 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 014cff70 648c95a4 kernel32!WaitForMultipleObjects+0x17
04 014cffac 648c983d IISCFG!CListener::Listen+0x21
05 014cffb8 77e4a990 IISCFG!CListener::ListenerThreadStart+0x35
06 014cffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 8
System Thread ID: 790
Kernel Time: 0:0:0.78
User Time: 0:0:0.46
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0148fbc0 77f4372d SharedUserData!SystemCallStub+0x4
01 0148fbc4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0148fc6c 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
03 0148fcc8 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
04 0148fce4 643f5723 USER32!MsgWaitForMultipleObjects+0x1d
05 0148fd30 6b77305d INFOCOMM!IIS_SERVICE::StartServiceOperation+0x22f
06 0148fd70 010023b6 SMTPSVC!ServiceEntry+0x129
07 0148ffa8 77db571b inetinfo!InetinfoStartService+0x2a6
08 0148ffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe
09 0148ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 9
System Thread ID: 7b4
Kernel Time: 0:0:0.328
User Time: 0:0:0.93
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 016eff50 77f430c7 SharedUserData!SystemCallStub+0x4
01 016eff54 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 016eff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x27
03 016effb8 77e4a990 ISATQ!AtqPoolThread+0x40
04 016effec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 10
System Thread ID: 7b8
Kernel Time: 0:0:0.109
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0172ff50 77f430c7 SharedUserData!SystemCallStub+0x4
01 0172ff54 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 0172ff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x27
03 0172ffb8 77e4a990 ISATQ!AtqPoolThread+0x40
04 0172ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 11
System Thread ID: 7c0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 01a2fe20 77f4313f SharedUserData!SystemCallStub+0x4
01 01a2fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
02 01a2ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
03 01a2ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
04 01a2ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
05 01a2ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
06 01a2ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 12
System Thread ID: 7c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 01a6feb4 77f430c7 SharedUserData!SystemCallStub+0x4
01 01a6feb8 77e430bc ntdll!ZwRemoveIoCompletion+0xc
02 01a6fee4 77c80bd1 kernel32!GetQueuedCompletionStatus+0x27
03 01a6ff20 77c80a78 RPCRT4!COMMON_ProcessCalls+0x9f
04 01a6ff8c 77c58159 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x115
05 01a6ff90 77c60771 RPCRT4!ProcessIOEventsWrapper+0x9
06 01a6ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
07 01a6ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
08 01a6ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 13
System Thread ID: 7c8
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01aafec8 77f4372d SharedUserData!SystemCallStub+0x4
01 01aafecc 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 01aaff74 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 01aaff8c 69532430 kernel32!WaitForMultipleObjects+0x17
04 01aaffb8 77e4a990 exstrace!RegNotifyThread+0x68
05 01aaffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 14
System Thread ID: 7cc
Kernel Time: 0:0:0.46
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01aefecc 77f4372d SharedUserData!SystemCallStub+0x4
01 01aefed0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 01aeff78 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 01aeff90 695319c0 kernel32!WaitForMultipleObjects+0x17
04 01aeffb8 77e4a990 exstrace!WriteTraceThread+0x2f
05 01aeffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 15
System Thread ID: 7f8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d2ff18 77f43741 SharedUserData!SystemCallStub+0x4
01 01d2ff1c 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 01d2ff8c 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 01d2ff9c 00f98673 kernel32!WaitForSingleObject+0xf
04 01d2ffb8 77e4a990 FCACHDLL!CScheduleThread::ScheduleThread+0x60
05 01d2ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 16
System Thread ID: 7fc
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 01e6fec0 77f4372d SharedUserData!SystemCallStub+0x4
01 01e6fec4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 01e6ff6c 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 01e6ff84 6b78b2d6 kernel32!WaitForMultipleObjects+0x17
04 01e6ffb8 77e4a990 SMTPSVC!TcpRegNotifyThread+0xdc
05 01e6ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 17
System Thread ID: 8c
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 01eaff20 77f43741 SharedUserData!SystemCallStub+0x4
01 01eaff24 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 01eaff94 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 01eaffa4 6b78b17a kernel32!WaitForSingleObject+0xf
04 01eaffb8 77e4a990 SMTPSVC!FreeLibThread+0x2c
05 01eaffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 18
System Thread ID: 90
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 01fefe20 77f4313f SharedUserData!SystemCallStub+0x4
01 01fefe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
02 01feff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
03 01feff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
04 01feffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
05 01feffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
06 01feffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 19
System Thread ID: 188
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0237fe20 77f4313f SharedUserData!SystemCallStub+0x4
01 0237fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
02 0237ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
03 0237ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
04 0237ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
05 0237ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
06 0237ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 20
System Thread ID: 1c8
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 023bff10 77f43741 SharedUserData!SystemCallStub+0x4
01 023bff14 77e41817 ntdll!ZwWaitForSingleObject+0xc
02 023bff84 77e4168f kernel32!WaitForSingleObjectEx+0xac
03 023bff94 01f6d064 kernel32!WaitForSingleObject+0xf
04 023bffb8 77e4a990 aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+0xc1
05 023bffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 21
System Thread ID: 20c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 023ffbc0 77f4372d SharedUserData!SystemCallStub+0x4
01 023ffbc4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 023ffc6c 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
03 023ffcc8 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
04 023ffce4 643f5723 USER32!MsgWaitForMultipleObjects+0x1d
05 023ffd30 6930d973 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x22f
06 023ffd70 010023b6 ftpsvc2!ServiceEntry+0xac
07 023fffa8 77db571b inetinfo!InetinfoStartService+0x2a6
08 023fffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe
09 023fffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 22
System Thread ID: 21c
Kernel Time: 0:0:0.250
User Time: 0:0:2.562
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0247fe84 77f4372d SharedUserData!SystemCallStub+0x4
01 0247fe88 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0247ff30 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
03 0247ff48 01f4c648 kernel32!WaitForMultipleObjects+0x17
04 0247ffa4 6b77e8ae aqueue!CConnMgr::GetNextConnection+0x1e1
05 0247ffb8 77e4a990 SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x21
06 0247ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 23
System Thread ID: 228
Kernel Time: 0:0:0.46
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0256fe38 77f43741 SharedUserData!SystemCallStub+0x4
01 0256fe3c 71b23ac3 ntdll!ZwWaitForSingleObject+0xc
02 0256fe78 71b239d1 mswsock!SockWaitForSingleObject+0x19b
03 0256ff3c 71c016c9 mswsock!WSPSelect+0x229
04 0256ff8c 63ec4696 WS2_32!select+0xb9
05 0256ffb4 63ec4700 ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
06 0256ffb8 77e4a990 ISATQ!BmonThreadFunc+0x9
07 0256ffc4 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 24
System Thread ID: 240
Kernel Time: 0:0:0.46
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0252fecc 77f4372d SharedUserData!SystemCallStub+0x4
01 0252fed0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0252ff78 6930882e kernel32!WaitForMultipleObjectsEx+0x11a
03 0252ffb0 77f4308b ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x32
04 0252ffb8 77e4a990 ntdll!NtRegisterThreadTerminatePort+0xc
05 0252ffc4 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 25
System Thread ID: 240
Kernel Time: 0:0:0.46
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0252fecc 77f4372d SharedUserData!SystemCallStub+0x4
01 0252fed0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
02 0252ff78 6930882e kernel32!WaitForMultipleObjectsEx+0x11a
03 0252ffb0 77f4308b ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x32
04 0252ffb8 77e4a990 ntdll!NtRegisterThreadTerminatePort+0xc
05 0252ffc4 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 26
System Thread ID: 260
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 025efcec 77f4372d SharedUserData!SystemCallStub+0x4
01 025efcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc
02 025effb8 77e4a990 ntdll!RtlpWaitThread+0x158
03 025effec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 27
System Thread ID: 260
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 025efcec 77f4372d SharedUserData!SystemCallStub+0x4
01 025efcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc
02 025effb8 77e4a990 ntdll!RtlpWaitThread+0x158
03 025effec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 28
System Thread ID: 94
Kernel Time: 0:0:0.15
User Time: 0:0:0.46
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 00f7fe20 77f4313f SharedUserData!SystemCallStub+0x4
01 00f7fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
02 00f7ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
03 00f7ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
04 00f7ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
05 00f7ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
06 00f7ffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 29
System Thread ID: 2b0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00feff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 00feff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 00feffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 00feffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 30
System Thread ID: 2b0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00feff70 77f430c7 SharedUserData!SystemCallStub+0x4
01 00feff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
02 00feffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
03 00feffec 00000000 kernel32!BaseThreadStart+0x34
Thread ID: 31
System Thread ID: cc8
Kernel Time: 0:0:0.31
User Time: 0:0:0.46
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0108fe20 77f4313f SharedUserData!SystemCallStub+0x4
01 0108fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
02 0108ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
03 0108ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
04 0108ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
05 0108ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
06 0108ffec 00000000 kernel32!BaseThreadStart+0x34
*****
Dump name is formatted as: PID-Timestamp.dmp
Creating C:\iisstate\output\1760-1094789485.dmp - mini user dump
*****
Closing open log file C:\iisstate\output\IISState-1760.log
"joun" <joun RemoveThis @nospam.com> ha scritto nel messaggio
news:NRi0d.87315$1V3.2121511@twister2.libero.it...
> My iis server is crashing continuosly... this is the log.
> Please help me,
> thanks
>
>
> Opened log file 'C:\iisstate\output\IISState-1760.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Fri Sep 10 06:11:16 2004
>
> OS = Windows 2003 Server
> Executable: inetinfo.exe
> PID = 1760
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
> IIS has crashed...
> Beginning Analysis
> DLL (!FunctionName) that failed:
>
>
>
>
> Thread ID: 32
> System Thread ID: f9c
> Kernel Time: 0:0:2.62
> User Time: 0:0:0.609
> Thread Type: Other
> # ChildEBP RetAddr
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 00 010cfed8 6ddf9645 0x6adf9645
> 01 69df9645 00000000 0x6ddf9645
> Closing open log file C:\iisstate\output\IISState-1760.log
> Opened log file 'C:\iisstate\output\IISState-1760.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Fri Sep 10 06:11:16 2004
>
> OS = Windows 2003 Server
> Executable: inetinfo.exe
> PID = 1760
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 6e4
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006f9a8 77f4303b SharedUserData!SystemCallStub+0x4
> 01 0006f9ac 77e4905d ntdll!NtReadFile+0xc
> 02 0006fa14 77db51f1 kernel32!ReadFile+0x16c
> 03 0006fa40 77db5297 ADVAPI32!ScGetPipeInput+0x28
> 04 0006fab0 77dfa7f1 ADVAPI32!ScDispatcherLoop+0x4c
> 05 0006fcec 01002655 ADVAPI32!StartServiceCtrlDispatcherA+0x91
> 06 0006fe1c 010027ea inetinfo!StartDispatchTable+0x214
> 07 0006ff44 01003160 inetinfo!main+0x104
> 08 0006ffc0 77e4f38c inetinfo!mainCRTStartup+0x12f
> 09 0006fff0 00000000 kernel32!BaseProcessStart+0x23
>
>
>
>
> Thread ID: 1
> System Thread ID: 6ec
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 007ffe18 77f43741 SharedUserData!SystemCallStub+0x4
> 01 007ffe1c 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 007ffe8c 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 007ffe9c 01002cf9 kernel32!WaitForSingleObject+0xf
> 04 007fffb8 77e4a990 inetinfo!W3SVCThreadEntry+0x3b
> 05 007fffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 2
> System Thread ID: 6f0
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.78
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0083fcc4 77f43741 SharedUserData!SystemCallStub+0x4
> 01 0083fcc8 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 0083fd38 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 0083fd48 649f24ac kernel32!WaitForSingleObject+0xf
> 04 0083fd70 010023b6 iisadmin!ServiceEntry+0x214
> 05 0083ffa8 77db571b inetinfo!InetinfoStartService+0x2a6
> 06 0083ffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe
> 07 0083ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 3
> System Thread ID: 700
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00a3ff9c 77f4262b SharedUserData!SystemCallStub+0x4
> 01 00a3ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc
> 02 00a3ffb8 77e4a990 ntdll!RtlpTimerThread+0x45
> 03 00a3ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 4
> System Thread ID: 720
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00b4feb0 77f4372d SharedUserData!SystemCallStub+0x4
> 01 00b4feb4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 00b4ff5c 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 00b4ff74 6e0b377a kernel32!WaitForMultipleObjects+0x17
> 04 00b4ffa0 6e0b6012 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x68
> 05 00b4ffb8 77e4a990 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x62
> 06 00b4ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 5
> System Thread ID: 74c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00f2feac 77f4372d SharedUserData!SystemCallStub+0x4
> 01 00f2feb0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 00f2ff58 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 00f2ff70 620b401a kernel32!WaitForMultipleObjects+0x17
> 04 00f2ffb0 620b4390 metadata!CListenerController::Listen+0x27
> 05 00f2ffb8 77e4a990 metadata!StartListenerThread+0x16
> 06 00f2ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 6
> System Thread ID: 74c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00f2feac 77f4372d SharedUserData!SystemCallStub+0x4
> 01 00f2feb0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 00f2ff58 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 00f2ff70 620b401a kernel32!WaitForMultipleObjects+0x17
> 04 00f2ffb0 620b4390 metadata!CListenerController::Listen+0x27
> 05 00f2ffb8 77e4a990 metadata!StartListenerThread+0x16
> 06 00f2ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 7
> System Thread ID: 780
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 014cfeac 77f4372d SharedUserData!SystemCallStub+0x4
> 01 014cfeb0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 014cff58 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 014cff70 648c95a4 kernel32!WaitForMultipleObjects+0x17
> 04 014cffac 648c983d IISCFG!CListener::Listen+0x21
> 05 014cffb8 77e4a990 IISCFG!CListener::ListenerThreadStart+0x35
> 06 014cffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 8
> System Thread ID: 790
> Kernel Time: 0:0:0.78
> User Time: 0:0:0.46
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0148fbc0 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0148fbc4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0148fc6c 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0148fcc8 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0148fce4 643f5723 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0148fd30 6b77305d INFOCOMM!IIS_SERVICE::StartServiceOperation+0x22f
> 06 0148fd70 010023b6 SMTPSVC!ServiceEntry+0x129
> 07 0148ffa8 77db571b inetinfo!InetinfoStartService+0x2a6
> 08 0148ffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe
> 09 0148ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 9
> System Thread ID: 7b4
> Kernel Time: 0:0:0.328
> User Time: 0:0:0.93
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 016eff50 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 016eff54 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 016eff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x27
> 03 016effb8 77e4a990 ISATQ!AtqPoolThread+0x40
> 04 016effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 10
> System Thread ID: 7b8
> Kernel Time: 0:0:0.109
> User Time: 0:0:0.15
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0172ff50 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 0172ff54 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 0172ff80 63ec7235 kernel32!GetQueuedCompletionStatus+0x27
> 03 0172ffb8 77e4a990 ISATQ!AtqPoolThread+0x40
> 04 0172ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 11
> System Thread ID: 7c0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 01a2fe20 77f4313f SharedUserData!SystemCallStub+0x4
> 01 01a2fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
> 02 01a2ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
> 03 01a2ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
> 04 01a2ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
> 05 01a2ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 06 01a2ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 12
> System Thread ID: 7c4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 01a6feb4 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 01a6feb8 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 01a6fee4 77c80bd1 kernel32!GetQueuedCompletionStatus+0x27
> 03 01a6ff20 77c80a78 RPCRT4!COMMON_ProcessCalls+0x9f
> 04 01a6ff8c 77c58159 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x115
> 05 01a6ff90 77c60771 RPCRT4!ProcessIOEventsWrapper+0x9
> 06 01a6ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
> 07 01a6ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 08 01a6ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 13
> System Thread ID: 7c8
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01aafec8 77f4372d SharedUserData!SystemCallStub+0x4
> 01 01aafecc 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 01aaff74 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 01aaff8c 69532430 kernel32!WaitForMultipleObjects+0x17
> 04 01aaffb8 77e4a990 exstrace!RegNotifyThread+0x68
> 05 01aaffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 14
> System Thread ID: 7cc
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01aefecc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 01aefed0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 01aeff78 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 01aeff90 695319c0 kernel32!WaitForMultipleObjects+0x17
> 04 01aeffb8 77e4a990 exstrace!WriteTraceThread+0x2f
> 05 01aeffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 15
> System Thread ID: 7f8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01d2ff18 77f43741 SharedUserData!SystemCallStub+0x4
> 01 01d2ff1c 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 01d2ff8c 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 01d2ff9c 00f98673 kernel32!WaitForSingleObject+0xf
> 04 01d2ffb8 77e4a990 FCACHDLL!CScheduleThread::ScheduleThread+0x60
> 05 01d2ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 16
> System Thread ID: 7fc
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 01e6fec0 77f4372d SharedUserData!SystemCallStub+0x4
> 01 01e6fec4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 01e6ff6c 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 01e6ff84 6b78b2d6 kernel32!WaitForMultipleObjects+0x17
> 04 01e6ffb8 77e4a990 SMTPSVC!TcpRegNotifyThread+0xdc
> 05 01e6ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 17
> System Thread ID: 8c
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 01eaff20 77f43741 SharedUserData!SystemCallStub+0x4
> 01 01eaff24 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 01eaff94 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 01eaffa4 6b78b17a kernel32!WaitForSingleObject+0xf
> 04 01eaffb8 77e4a990 SMTPSVC!FreeLibThread+0x2c
> 05 01eaffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 18
> System Thread ID: 90
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 01fefe20 77f4313f SharedUserData!SystemCallStub+0x4
> 01 01fefe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
> 02 01feff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
> 03 01feff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
> 04 01feffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
> 05 01feffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 06 01feffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 19
> System Thread ID: 188
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0237fe20 77f4313f SharedUserData!SystemCallStub+0x4
> 01 0237fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
> 02 0237ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
> 03 0237ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
> 04 0237ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
> 05 0237ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 06 0237ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 20
> System Thread ID: 1c8
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 023bff10 77f43741 SharedUserData!SystemCallStub+0x4
> 01 023bff14 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 023bff84 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 023bff94 01f6d064 kernel32!WaitForSingleObject+0xf
> 04 023bffb8 77e4a990 aqueue!CSMTP_RETRY_HANDLER::RetryThreadRoutine+0xc1
> 05 023bffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 21
> System Thread ID: 20c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 023ffbc0 77f4372d SharedUserData!SystemCallStub+0x4
> 01 023ffbc4 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 023ffc6c 77d076f5 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 023ffcc8 77d077f5 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 023ffce4 643f5723 USER32!MsgWaitForMultipleObjects+0x1d
> 05 023ffd30 6930d973 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x22f
> 06 023ffd70 010023b6 ftpsvc2!ServiceEntry+0xac
> 07 023fffa8 77db571b inetinfo!InetinfoStartService+0x2a6
> 08 023fffb8 77e4a990 ADVAPI32!ScSvcctrlThreadA+0xe
> 09 023fffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 22
> System Thread ID: 21c
> Kernel Time: 0:0:0.250
> User Time: 0:0:2.562
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0247fe84 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0247fe88 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0247ff30 77e4b0e4 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0247ff48 01f4c648 kernel32!WaitForMultipleObjects+0x17
> 04 0247ffa4 6b77e8ae aqueue!CConnMgr::GetNextConnection+0x1e1
> 05 0247ffb8 77e4a990 SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x21
> 06 0247ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 23
> System Thread ID: 228
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0256fe38 77f43741 SharedUserData!SystemCallStub+0x4
> 01 0256fe3c 71b23ac3 ntdll!ZwWaitForSingleObject+0xc
> 02 0256fe78 71b239d1 mswsock!SockWaitForSingleObject+0x19b
> 03 0256ff3c 71c016c9 mswsock!WSPSelect+0x229
> 04 0256ff8c 63ec4696 WS2_32!select+0xb9
> 05 0256ffb4 63ec4700 ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x22
> 06 0256ffb8 77e4a990 ISATQ!BmonThreadFunc+0x9
> 07 0256ffc4 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 24
> System Thread ID: 240
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0252fecc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0252fed0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0252ff78 6930882e kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0252ffb0 77f4308b ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x32
> 04 0252ffb8 77e4a990 ntdll!NtRegisterThreadTerminatePort+0xc
> 05 0252ffc4 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 25
> System Thread ID: 240
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0252fecc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0252fed0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0252ff78 6930882e kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0252ffb0 77f4308b ftpsvc2!PASV_ACCEPT_CONTEXT::AcceptThreadFunc+0x32
> 04 0252ffb8 77e4a990 ntdll!NtRegisterThreadTerminatePort+0xc
> 05 0252ffc4 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 26
> System Thread ID: 260
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 025efcec 77f4372d SharedUserData!SystemCallStub+0x4
> 01 025efcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc
> 02 025effb8 77e4a990 ntdll!RtlpWaitThread+0x158
> 03 025effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 27
> System Thread ID: 260
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 025efcec 77f4372d SharedUserData!SystemCallStub+0x4
> 01 025efcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc
> 02 025effb8 77e4a990 ntdll!RtlpWaitThread+0x158
> 03 025effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 28
> System Thread ID: 94
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.46
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00f7fe20 77f4313f SharedUserData!SystemCallStub+0x4
> 01 00f7fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
> 02 00f7ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
> 03 00f7ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
> 04 00f7ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
> 05 00f7ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 06 00f7ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 29
> System Thread ID: 2b0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00feff70 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00feff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
> 02 00feffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
> 03 00feffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 30
> System Thread ID: 2b0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00feff70 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00feff74 77f7e6ae ntdll!ZwRemoveIoCompletion+0xc
> 02 00feffb8 77e4a990 ntdll!RtlpWorkerThread+0x3b
> 03 00feffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 31
> System Thread ID: cc8
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.46
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0108fe20 77f4313f SharedUserData!SystemCallStub+0x4
> 01 0108fe24 77c57b85 ntdll!NtReplyWaitReceivePortEx+0xc
> 02 0108ff8c 77c60829 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
> 03 0108ff90 77c60771 RPCRT4!RecvLotsaCallsWrapper+0x9
> 04 0108ffb0 77c60857 RPCRT4!BaseCachedThreadRoutine+0x9c
> 05 0108ffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 06 0108ffec 00000000 kernel32!BaseThreadStart+0x34
>
> *****
>
> Dump name is formatted as: PID-Timestamp.dmp
>
> Creating C:\iisstate\output\1760-1094789485.dmp - mini user dump
>
> *****
>
> Closing open log file C:\iisstate\output\IISState-1760.log
>
><!-- ~MESSAGE_AFTER~ -->
FAQ
Profile
Private Messages
Log in
