MTX 100% CPU, IISSTATE Log

External Since: Sep 23, 2004 Posts: 1

We're having a problem with a web site that is occasionally using 100%
CPU and eating all the memory. Yes, it's still on a NT4 server Wink

IISSTATE is downloading all the symbols except the asp symbols.
Because there are 200 web sites on this server it's almost impossible
to locate the web site with the problem without the asp symbols. The
date on the asp.dll is 05/06/2004.

As far as I can see it's a database problem. Most of the times these
problems are solved with a compact/repair of the database. May be
there is a loop in an asp script.

Can I download the asp.dll symbols manually? I can't find the link on
the Microsoft site to download the symbols for NT4.

Thanks in advance,
Robert

***********************
Starting new log output
IISState version 3.3.1

Thu Sep 23 09:53:46 2004

OS = NT4
Executable: mtx.exe
PID = 338

Note: Thread times are formatted as HH:MM:SS.ms

***********************

Thread ID: 0
System Thread ID: 201
Kernel Time: 0:0:0.20
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0006feb4 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0006fedc 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0006feec 00401837 KERNEL32!WaitForSingleObject+0xf
03 0006ff24 00402296 mtx!WinMain+0x141
04 0006ffc0 77f1bb7c mtx!WinMainCRTStartup+0x156
05 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40

Thread ID: 1
System Thread ID: 390
Kernel Time: 0:0:0.0
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 00d7ff30 77e85394 USER32!ZwUserGetMessage+0xb
01 00d7ff50 77b772bc USER32!GetMessageW+0x34
02 00d7ff94 77b77202 ole32!CDllHost::WorkerThread+0xb7
03 00d7ff98 77b73030 ole32!DLLHostThreadEntry+0x9
04 00d7ffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x15
05 00d7ffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 00d7ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 2
System Thread ID: 331
Kernel Time: 0:0:0.40
User Time: 0:0:0.20
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00e3ff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 00e3ff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 00e3ff9c 69d0b524 KERNEL32!WaitForSingleObject+0xf
03 00e3ffb8 77f04eeb MTSEvents!DispatchEvents+0x94
04 00e3ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 3
System Thread ID: 344
Kernel Time: 0:0:0.150
User Time: 0:0:0.410
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for MSVCRT.dll -
Thread Type: Other
# ChildEBP RetAddr
00 00e7ff24 77f1d1e8 ntdll!NtDelayExecution+0xb
01 00e7ff44 77f1d1b1 KERNEL32!SleepEx+0x34
02 00e7ff50 699c2756 KERNEL32!Sleep+0xb
03 00e7ff84 7800248d MTXTRK!PostData+0xea
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 00e7ffb8 77f04eeb MSVCRT!beginthreadex+0xb2
05 00e7ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 4
System Thread ID: 36e
Kernel Time: 0:0:0.10
User Time: 0:0:0.30
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for MtxDm.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 00ebff58 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 00ebff80 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 00ebff90 69a21998 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may
be wrong.
03 00ebffb8 77f04eeb MtxDm+0x1998
04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 5
System Thread ID: 421
Kernel Time: 0:0:0.711
User Time: 0:0:0.560
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for ISATQ.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f7fe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00f7fef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00f7ff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00f7ff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116

Thread ID: 6
System Thread ID: 3da
Kernel Time: 0:0:0.480
User Time: 0:0:0.410
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fbfe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00fbfef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00fbff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00fbff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116

Thread ID: 7
System Thread ID: 4ae
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ffff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 00ffff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may
be wrong.
02 00ffffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 00ffffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 8
System Thread ID: 3e2
Kernel Time: 0:0:1.602
User Time: 0:0:0.330
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0103ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0103ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may
be wrong.
02 0103ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0103ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 9
System Thread ID: 138
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0107ff0c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0107ff64 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0107ff80 697eca12 KERNEL32!WaitForMultipleObjects+0x16
03 0107ffb0 697ef0aa mtxex!CMTSPackage::PackageControl+0x4e
04 0107ffb8 77f04eeb mtxex!ControlThread+0x3e
05 0107ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 10
System Thread ID: 415
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for asp.dll -
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0117fe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0117fec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0117ff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0117ff40 680caa5c USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 0117ff84 7800bea1 asp!AspStatusHtmlDump+0x279f
05 0117ffb8 77f04eeb MSVCRT!beginthread+0xce
06 0117ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 11
System Thread ID: 17f
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 011bfe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 011bfec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 011bff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 011bff40 680bf3b0 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 011bff84 7800bea1 asp!DllCanUnloadNow+0x43c2
05 011bffb8 77f04eeb MSVCRT!beginthread+0xce
06 011bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 12
System Thread ID: 3db
Kernel Time: 0:0:0.300
User Time: 0:0:0.80
*** WARNING: Unable to verify checksum for pdm.dll
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for pdm.dll -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 011ffdd8 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 011ffe30 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 011ffe8c 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 011ffea8 4a003b19 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may
be wrong.
04 77e7ae7f 0110247c pdm+0x3b19
05 83ec8b55 00000000 MSASN1!ASN1BERDecZeroChar16String+0x57

Thread ID: 13
System Thread ID: 1f7
Kernel Time: 0:2:16.135
User Time: 0:6:56.128
Thread Type: Other
# ChildEBP RetAddr
00 0125fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0125feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0125ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0125ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 0125ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 0125ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 0125ff90 77b306de MSVCRT!beginthread+0xce
07 0125ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 0125ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 14
System Thread ID: 1d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01a6ff5c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 01a6ff84 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 01a6ff94 1f8945ab KERNEL32!WaitForSingleObject+0xf
03 01a6ffb8 77f04eeb oledb32!ReleaseResourceThread+0x54
04 01a6ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 15
System Thread ID: 2e1
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01aaff54 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 01aaff7c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 01aaff8c 1f8945bb KERNEL32!WaitForSingleObject+0xf
03 01aaffb8 77f04eeb oledb32!ResetResourceThread+0x84
04 01aaffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 16
System Thread ID: 487
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0738fefc 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0738ff54 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0738ff70 65352a46 KERNEL32!WaitForMultipleObjects+0x16
03 0738ffb8 77f04eeb OLEAUT32!RegistryWatchThread+0x86
04 0738ffc4 77f3fd50 KERNEL32!BaseThreadStart+0x51
05 77f4181f 416d6f74 KERNEL32!_NULL_IMPORT_DESCRIPTOR+0x1b28
WARNING: Frame IP not in any known module. Following frames may be
wrong.
06 41646441 00000000 0x416d6f74

Thread ID: 17
System Thread ID: 39c
Kernel Time: 0:0:51.974
User Time: 0:3:24.143
Thread Type: Other
# ChildEBP RetAddr
00 09d4fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 09d4feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 09d4ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 09d4ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 09d4ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 09d4ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 09d4ff90 77b306de MSVCRT!beginthread+0xce
07 09d4ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 09d4ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 18
System Thread ID: 4d7
Kernel Time: 0:1:17.190
User Time: 0:5:5.649
Thread Type: Other
# ChildEBP RetAddr
00 0e01fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0e01feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0e01ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0e01ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 0e01ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 0e01ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 0e01ff90 77b306de MSVCRT!beginthread+0xce
07 0e01ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 0e01ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 19
System Thread ID: 2b0
Kernel Time: 0:1:32.122
User Time: 0:4:54.473
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote endpoint located (probably not a DCOM call)

# ChildEBP RetAddr
00 079beb0c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 079beb64 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 079bebc0 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 079bebdc 77b2dc8e USER32!MsgWaitForMultipleObjects+0x1d
04 079bec04 77b2dbb9 ole32!CCliModalLoop::BlockFn+0x87
05 079bec0c 77e164e9 ole32!OleModalLoopBlockFn+0xd
06 079bed40 77e16665 RPCRT4!WMSG_CCALL::AsyncSendReceive+0x182
07 079bed50 77ba5d82 RPCRT4!I_RpcAsyncSendReceive+0x14
08 079bed74 77ba651d ole32!ThreadSendReceive+0x84
09 079bee04 77b6e5eb ole32!CRpcChannelBuffer::SendReceive2+0x166
0a 079bee1c 77b2db0e ole32!CCliModalLoop::SendReceive+0x1c
0b 079bee74 77e55898 ole32!CAptRpcChnl::SendReceive+0xb5
0c 079bee94 77e54457 RPCRT4!NdrProxySendReceive+0x50
0d 079bf094 77e55935 RPCRT4!NdrClientCall2+0x457
0e 079bf0b4 77e4e37b RPCRT4!ObjectStublessClient+0x65
0f 079bf0c4 77b6ee56 RPCRT4!ObjectStubless+0xf
10 079bf154 77b54842 ole32!CRpcResolver::GetClassObject+0xc0
11 079bf1c4 77b6366b ole32!ICoGetClassObject+0xdd
12 079bf1ec 6980335b ole32!CoGetClassObject+0x81
13 079bf220 6980380a mtxex!CContext::ActivateAndCreate+0x273
14 079bf240 697fc8bc mtxex!CContext::CreateInstance+0x10a
15 079bf268 69811303 mtxex!CContext::CreateInstance+0xa6
16 079bf27c 680e37f8 mtxex!CUserContext::CreateInstance+0x8b
WARNING: Stack unwind information not available. Following frames may
be wrong.
17 079bf2a0 680bb58a asp!DllUnregisterServer+0x17202
18 24553014 00000535 asp!DllCanUnloadNow+0x59c

Thread ID: 20
System Thread ID: 135
Kernel Time: 0:0:49.671
User Time: 0:3:29.130
Thread Type: Other
# ChildEBP RetAddr
00 1321fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 1321feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 1321ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 1321ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 1321ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 1321ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 1321ff90 77b306de MSVCRT!beginthread+0xce
07 1321ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 1321ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 21
System Thread ID: 208
Kernel Time: 0:0:22.602
User Time: 0:1:27.786
Thread Type: Other
# ChildEBP RetAddr
00 1325fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 1325feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 1325ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 1325ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 1325ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 1325ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 1325ff90 77b306de MSVCRT!beginthread+0xce
07 1325ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 1325ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 22
System Thread ID: 349
Kernel Time: 0:0:0.10
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 156aff60 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 156aff88 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 156aff98 776b1c06 KERNEL32!WaitForSingleObject+0xf
03 156affb8 77f04eeb WS2_32!SockAsyncThread+0x2c
04 156affec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 23
System Thread ID: 2c7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 156eff40 776689ce ntdll!NtWaitForSingleObject+0xb
01 156eff98 77661e92 msafd!SockWaitForSingleObject+0x204
02 156effb8 77f04eeb msafd!SockAsyncThread+0x2c
03 156effec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 24
System Thread ID: 398
Kernel Time: 0:0:56.691
User Time: 0:3:20.748
Thread Type: Other
# ChildEBP RetAddr
00 0246fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0246feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0246ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0246ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 0246ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 0246ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 0246ff90 77b306de MSVCRT!beginthread+0xce
07 0246ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 0246ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 25
System Thread ID: 19c
Kernel Time: 0:0:21.160
User Time: 0:1:22.658
Thread Type: Other
# ChildEBP RetAddr
00 064afe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 064afeb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 064aff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 064aff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 064aff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 064aff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 064aff90 77b306de MSVCRT!beginthread+0xce
07 064affb8 77f04eeb ole32!WriteObjRef+0x5f
08 064affcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 26
System Thread ID: 3e6
Kernel Time: 0:0:0.50
User Time: 0:0:0.20
Thread Type: Other
# ChildEBP RetAddr
00 09e1fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 09e1feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 09e1ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 09e1ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 09e1ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 09e1ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 09e1ff90 77b306de MSVCRT!beginthread+0xce
07 09e1ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 09e1ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 27
System Thread ID: 4be
Kernel Time: 0:0:0.50
User Time: 0:0:0.10
Thread Type: Other
# ChildEBP RetAddr
00 09e9fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 09e9feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 09e9ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 09e9ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 09e9ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 09e9ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may
be wrong.
06 09e9ff90 77b306de MSVCRT!beginthread+0xce
07 09e9ffb8 77f04eeb ole32!WriteObjRef+0x5f
08 09e9ffcc 77b306de KERNEL32!BaseThreadStart+0x51

Thread ID: 28
System Thread ID: 1c9
Kernel Time: 0:0:0.450
User Time: 0:0:0.250
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 0c86fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0c86ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0c86ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0c86ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0c86ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 0c86ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 29
System Thread ID: 4e7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0728fa80 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0728fad8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0728fb34 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0728fb50 1b10dcbd USER32!MsgWaitForMultipleObjects+0x1d
04 0728ff84 1b110a65 msjet40!COMCallThreadProc+0xdc
05 0728ffb8 77f04eeb msjet40!_beginthread+0xdd
06 0728ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 30
System Thread ID: 345
Kernel Time: 0:0:0.70
User Time: 0:0:0.100
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 010ffef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 010fff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 010fff28 1b009982 KERNEL32!WaitForSingleObject+0xf
03 010fff34 1b00994a msjet40!Semaphore::Wait+0xe
04 010fff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
05 010fffb8 77f04eeb msjet40!System::WorkerThread+0x41
06 010fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 31
System Thread ID: 1a6
Kernel Time: 0:0:0.40
User Time: 0:0:0.30
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0129fef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0129ff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0129ff28 1b009982 KERNEL32!WaitForSingleObject+0xf
03 0129ff34 1b00994a msjet40!Semaphore::Wait+0xe
04 0129ff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
05 0129ffb8 77f04eeb msjet40!System::WorkerThread+0x41
06 0129ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 32
System Thread ID: 4df
Kernel Time: 0:0:0.20
User Time: 0:0:0.50
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0652fef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0652ff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0652ff28 1b009982 KERNEL32!WaitForSingleObject+0xf
03 0652ff34 1b00994a msjet40!Semaphore::Wait+0xe
04 0652ff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
05 0652ffb8 77f04eeb msjet40!System::WorkerThread+0x41
06 0652ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 33
System Thread ID: 3e0
Kernel Time: 0:0:0.270
User Time: 0:0:0.230
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 1772fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 1772ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 1772ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 1772ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 1772ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 1772ffec 00000000 KERNEL32!BaseThreadStart+0x51

Closing open log file C:\iisstate\output\IISState-338.log

External Since: Aug 24, 2003 Posts: 1478

Thread 19 is the only activity going on. All other threads are idle.
Thread 19 looks like it is trying to make a DCOM call, but the DCOM
structures have not been populated yet, which implies that there is a loop
on the page that induces the problem (and likely the 100% CPU).

As you point out, without symbols, it IISState will be unable to identify
the ASP page that is the culprit without the symbols. You have a couple of
options:

1) Contact MS-Support and they can walk you through obtaining a dump file
and they can debug it for you and tell you where the problem is. This is
the most expedient option.
2) Use IISState to obtain a dump file (just add the -d option to the command
line) and we can try to debug it. This may take a while and may ultimately
fail.

Pat

"Robert" <stef0800ff RemoveThis @godmail.com> wrote in message
news:g725l0p929fc3l1ej83vuhvq5a36ah574p@4ax.com...
> We're having a problem with a web site that is occasionally using 100%
> CPU and eating all the memory. Yes, it's still on a NT4 server Wink

>
> IISSTATE is downloading all the symbols except the asp symbols.
> Because there are 200 web sites on this server it's almost impossible
> to locate the web site with the problem without the asp symbols. The
> date on the asp.dll is 05/06/2004.
>
> As far as I can see it's a database problem. Most of the times these
> problems are solved with a compact/repair of the database. May be
> there is a loop in an asp script.
>
> Can I download the asp.dll symbols manually? I can't find the link on
> the Microsoft site to download the symbols for NT4.
>
> Thanks in advance,
> Robert
>
>
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Thu Sep 23 09:53:46 2004
>
> OS = NT4
> Executable: mtx.exe
> PID = 338
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 201
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006feb4 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 0006fedc 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0006feec 00401837 KERNEL32!WaitForSingleObject+0xf
> 03 0006ff24 00402296 mtx!WinMain+0x141
> 04 0006ffc0 77f1bb7c mtx!WinMainCRTStartup+0x156
> 05 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40
>
>
>
>
> Thread ID: 1
> System Thread ID: 390
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.10
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00d7ff30 77e85394 USER32!ZwUserGetMessage+0xb
> 01 00d7ff50 77b772bc USER32!GetMessageW+0x34
> 02 00d7ff94 77b77202 ole32!CDllHost::WorkerThread+0xb7
> 03 00d7ff98 77b73030 ole32!DLLHostThreadEntry+0x9
> 04 00d7ffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x15
> 05 00d7ffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 00d7ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 2
> System Thread ID: 331
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.20
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e3ff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 00e3ff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 00e3ff9c 69d0b524 KERNEL32!WaitForSingleObject+0xf
> 03 00e3ffb8 77f04eeb MTSEvents!DispatchEvents+0x94
> 04 00e3ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 3
> System Thread ID: 344
> Kernel Time: 0:0:0.150
> User Time: 0:0:0.410
> *** ERROR: Symbol file could not be found. Defaulted to export
> symbols for MSVCRT.dll -
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e7ff24 77f1d1e8 ntdll!NtDelayExecution+0xb
> 01 00e7ff44 77f1d1b1 KERNEL32!SleepEx+0x34
> 02 00e7ff50 699c2756 KERNEL32!Sleep+0xb
> 03 00e7ff84 7800248d MTXTRK!PostData+0xea
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 00e7ffb8 77f04eeb MSVCRT!beginthreadex+0xb2
> 05 00e7ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 4
> System Thread ID: 36e
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.30
> *** ERROR: Symbol file could not be found. Defaulted to export
> symbols for MtxDm.dll -
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00ebff58 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 00ebff80 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 00ebff90 69a21998 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 03 00ebffb8 77f04eeb MtxDm+0x1998
> 04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 5
> System Thread ID: 421
> Kernel Time: 0:0:0.711
> User Time: 0:0:0.560
> *** ERROR: Symbol file could not be found. Defaulted to export
> symbols for ISATQ.dll -
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f7fe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 00f7fef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 00f7ff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 00f7ff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116
>
>
>
>
> Thread ID: 6
> System Thread ID: 3da
> Kernel Time: 0:0:0.480
> User Time: 0:0:0.410
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00fbfe9c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 00fbfef4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 00fbff50 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 00fbff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 00000001 00000000 ISATQ!ScheduleAdjustTime+0x116
>
>
>
>
> Thread ID: 7
> System Thread ID: 4ae
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00ffff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
> 01 00ffff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 02 00ffffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
> 03 00ffffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 8
> System Thread ID: 3e2
> Kernel Time: 0:0:1.602
> User Time: 0:0:0.330
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0103ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
> 01 0103ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 02 0103ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
> 03 0103ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 9
> System Thread ID: 138
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0107ff0c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0107ff64 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0107ff80 697eca12 KERNEL32!WaitForMultipleObjects+0x16
> 03 0107ffb0 697ef0aa mtxex!CMTSPackage::PackageControl+0x4e
> 04 0107ffb8 77f04eeb mtxex!ControlThread+0x3e
> 05 0107ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 10
> System Thread ID: 415
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> *** ERROR: Symbol file could not be found. Defaulted to export
> symbols for asp.dll -
> Thread Type: ASP
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 0117fe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0117fec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0117ff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0117ff40 680caa5c USER32!MsgWaitForMultipleObjects+0x1d
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 0117ff84 7800bea1 asp!AspStatusHtmlDump+0x279f
> 05 0117ffb8 77f04eeb MSVCRT!beginthread+0xce
> 06 0117ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 11
> System Thread ID: 17f
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 011bfe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 011bfec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 011bff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 011bff40 680bf3b0 USER32!MsgWaitForMultipleObjects+0x1d
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 011bff84 7800bea1 asp!DllCanUnloadNow+0x43c2
> 05 011bffb8 77f04eeb MSVCRT!beginthread+0xce
> 06 011bffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 12
> System Thread ID: 3db
> Kernel Time: 0:0:0.300
> User Time: 0:0:0.80
> *** WARNING: Unable to verify checksum for pdm.dll
> *** ERROR: Symbol file could not be found. Defaulted to export
> symbols for pdm.dll -
> Thread Type: PDM (Debugger) Thread.
> # ChildEBP RetAddr
> 00 011ffdd8 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 011ffe30 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 011ffe8c 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 011ffea8 4a003b19 USER32!MsgWaitForMultipleObjects+0x1d
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 04 77e7ae7f 0110247c pdm+0x3b19
> 05 83ec8b55 00000000 MSASN1!ASN1BERDecZeroChar16String+0x57
>
>
>
>
> Thread ID: 13
> System Thread ID: 1f7
> Kernel Time: 0:2:16.135
> User Time: 0:6:56.128
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0125fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0125feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0125ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0125ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0125ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0125ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 0125ff90 77b306de MSVCRT!beginthread+0xce
> 07 0125ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 0125ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 14
> System Thread ID: 1d4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01a6ff5c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 01a6ff84 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 01a6ff94 1f8945ab KERNEL32!WaitForSingleObject+0xf
> 03 01a6ffb8 77f04eeb oledb32!ReleaseResourceThread+0x54
> 04 01a6ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 15
> System Thread ID: 2e1
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01aaff54 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 01aaff7c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 01aaff8c 1f8945bb KERNEL32!WaitForSingleObject+0xf
> 03 01aaffb8 77f04eeb oledb32!ResetResourceThread+0x84
> 04 01aaffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 16
> System Thread ID: 487
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0738fefc 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0738ff54 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0738ff70 65352a46 KERNEL32!WaitForMultipleObjects+0x16
> 03 0738ffb8 77f04eeb OLEAUT32!RegistryWatchThread+0x86
> 04 0738ffc4 77f3fd50 KERNEL32!BaseThreadStart+0x51
> 05 77f4181f 416d6f74 KERNEL32!_NULL_IMPORT_DESCRIPTOR+0x1b28
> WARNING: Frame IP not in any known module. Following frames may be
> wrong.
> 06 41646441 00000000 0x416d6f74
>
>
>
>
> Thread ID: 17
> System Thread ID: 39c
> Kernel Time: 0:0:51.974
> User Time: 0:3:24.143
> Thread Type: Other
> # ChildEBP RetAddr
> 00 09d4fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 09d4feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 09d4ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 09d4ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 09d4ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 09d4ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 09d4ff90 77b306de MSVCRT!beginthread+0xce
> 07 09d4ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 09d4ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 18
> System Thread ID: 4d7
> Kernel Time: 0:1:17.190
> User Time: 0:5:5.649
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0e01fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0e01feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0e01ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0e01ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0e01ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0e01ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 0e01ff90 77b306de MSVCRT!beginthread+0xce
> 07 0e01ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 0e01ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 19
> System Thread ID: 2b0
> Kernel Time: 0:1:32.122
> User Time: 0:4:54.473
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote endpoint located (probably not a DCOM call)
>
> # ChildEBP RetAddr
> 00 079beb0c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 079beb64 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 079bebc0 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 079bebdc 77b2dc8e USER32!MsgWaitForMultipleObjects+0x1d
> 04 079bec04 77b2dbb9 ole32!CCliModalLoop::BlockFn+0x87
> 05 079bec0c 77e164e9 ole32!OleModalLoopBlockFn+0xd
> 06 079bed40 77e16665 RPCRT4!WMSG_CCALL::AsyncSendReceive+0x182
> 07 079bed50 77ba5d82 RPCRT4!I_RpcAsyncSendReceive+0x14
> 08 079bed74 77ba651d ole32!ThreadSendReceive+0x84
> 09 079bee04 77b6e5eb ole32!CRpcChannelBuffer::SendReceive2+0x166
> 0a 079bee1c 77b2db0e ole32!CCliModalLoop::SendReceive+0x1c
> 0b 079bee74 77e55898 ole32!CAptRpcChnl::SendReceive+0xb5
> 0c 079bee94 77e54457 RPCRT4!NdrProxySendReceive+0x50
> 0d 079bf094 77e55935 RPCRT4!NdrClientCall2+0x457
> 0e 079bf0b4 77e4e37b RPCRT4!ObjectStublessClient+0x65
> 0f 079bf0c4 77b6ee56 RPCRT4!ObjectStubless+0xf
> 10 079bf154 77b54842 ole32!CRpcResolver::GetClassObject+0xc0
> 11 079bf1c4 77b6366b ole32!ICoGetClassObject+0xdd
> 12 079bf1ec 6980335b ole32!CoGetClassObject+0x81
> 13 079bf220 6980380a mtxex!CContext::ActivateAndCreate+0x273
> 14 079bf240 697fc8bc mtxex!CContext::CreateInstance+0x10a
> 15 079bf268 69811303 mtxex!CContext::CreateInstance+0xa6
> 16 079bf27c 680e37f8 mtxex!CUserContext::CreateInstance+0x8b
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 17 079bf2a0 680bb58a asp!DllUnregisterServer+0x17202
> 18 24553014 00000535 asp!DllCanUnloadNow+0x59c
>
>
>
>
> Thread ID: 20
> System Thread ID: 135
> Kernel Time: 0:0:49.671
> User Time: 0:3:29.130
> Thread Type: Other
> # ChildEBP RetAddr
> 00 1321fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 1321feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 1321ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 1321ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 1321ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 1321ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 1321ff90 77b306de MSVCRT!beginthread+0xce
> 07 1321ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 1321ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 21
> System Thread ID: 208
> Kernel Time: 0:0:22.602
> User Time: 0:1:27.786
> Thread Type: Other
> # ChildEBP RetAddr
> 00 1325fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 1325feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 1325ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 1325ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 1325ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 1325ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 1325ff90 77b306de MSVCRT!beginthread+0xce
> 07 1325ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 1325ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 22
> System Thread ID: 349
> Kernel Time: 0:0:0.10
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 156aff60 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 156aff88 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 156aff98 776b1c06 KERNEL32!WaitForSingleObject+0xf
> 03 156affb8 77f04eeb WS2_32!SockAsyncThread+0x2c
> 04 156affec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 23
> System Thread ID: 2c7
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 156eff40 776689ce ntdll!NtWaitForSingleObject+0xb
> 01 156eff98 77661e92 msafd!SockWaitForSingleObject+0x204
> 02 156effb8 77f04eeb msafd!SockAsyncThread+0x2c
> 03 156effec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 24
> System Thread ID: 398
> Kernel Time: 0:0:56.691
> User Time: 0:3:20.748
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0246fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0246feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0246ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0246ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0246ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0246ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 0246ff90 77b306de MSVCRT!beginthread+0xce
> 07 0246ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 0246ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 25
> System Thread ID: 19c
> Kernel Time: 0:0:21.160
> User Time: 0:1:22.658
> Thread Type: Other
> # ChildEBP RetAddr
> 00 064afe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 064afeb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 064aff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 064aff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 064aff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 064aff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 064aff90 77b306de MSVCRT!beginthread+0xce
> 07 064affb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 064affcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 26
> System Thread ID: 3e6
> Kernel Time: 0:0:0.50
> User Time: 0:0:0.20
> Thread Type: Other
> # ChildEBP RetAddr
> 00 09e1fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 09e1feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 09e1ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 09e1ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 09e1ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 09e1ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 09e1ff90 77b306de MSVCRT!beginthread+0xce
> 07 09e1ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 09e1ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 27
> System Thread ID: 4be
> Kernel Time: 0:0:0.50
> User Time: 0:0:0.10
> Thread Type: Other
> # ChildEBP RetAddr
> 00 09e9fe5c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 09e9feb4 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 09e9ff10 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 09e9ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 09e9ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 09e9ff84 7800bea1 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may
> be wrong.
> 06 09e9ff90 77b306de MSVCRT!beginthread+0xce
> 07 09e9ffb8 77f04eeb ole32!WriteObjRef+0x5f
> 08 09e9ffcc 77b306de KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 28
> System Thread ID: 1c9
> Kernel Time: 0:0:0.450
> User Time: 0:0:0.250
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0c86fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
> 01 0c86ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
> 02 0c86ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0c86ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
> 04 0c86ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
> 05 0c86ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 29
> System Thread ID: 4e7
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Jet DB Query. Possible ASP Page
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 0728fa80 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0728fad8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0728fb34 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0728fb50 1b10dcbd USER32!MsgWaitForMultipleObjects+0x1d
> 04 0728ff84 1b110a65 msjet40!COMCallThreadProc+0xdc
> 05 0728ffb8 77f04eeb msjet40!_beginthread+0xdd
> 06 0728ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 30
> System Thread ID: 345
> Kernel Time: 0:0:0.70
> User Time: 0:0:0.100
> Thread Status: Thread is in a WAIT state.
> Thread Type: Jet DB Query. Possible ASP Page
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 010ffef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 010fff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 010fff28 1b009982 KERNEL32!WaitForSingleObject+0xf
> 03 010fff34 1b00994a msjet40!Semaphore::Wait+0xe
> 04 010fff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
> 05 010fffb8 77f04eeb msjet40!System::WorkerThread+0x41
> 06 010fffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 31
> System Thread ID: 1a6
> Kernel Time: 0:0:0.40
> User Time: 0:0:0.30
> Thread Status: Thread is in a WAIT state.
> Thread Type: Jet DB Query. Possible ASP Page
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 0129fef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 0129ff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0129ff28 1b009982 KERNEL32!WaitForSingleObject+0xf
> 03 0129ff34 1b00994a msjet40!Semaphore::Wait+0xe
> 04 0129ff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
> 05 0129ffb8 77f04eeb msjet40!System::WorkerThread+0x41
> 06 0129ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 32
> System Thread ID: 4df
> Kernel Time: 0:0:0.20
> User Time: 0:0:0.50
> Thread Status: Thread is in a WAIT state.
> Thread Type: Jet DB Query. Possible ASP Page
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> # ChildEBP RetAddr
> 00 0652fef0 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 0652ff18 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0652ff28 1b009982 KERNEL32!WaitForSingleObject+0xf
> 03 0652ff34 1b00994a msjet40!Semaphore::Wait+0xe
> 04 0652ff5c 1b003508 msjet40!Queue::GetMessageW+0xc5
> 05 0652ffb8 77f04eeb msjet40!System::WorkerThread+0x41
> 06 0652ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 33
> System Thread ID: 3e0
> Kernel Time: 0:0:0.270
> User Time: 0:0:0.230
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 1772fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
> 01 1772ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
> 02 1772ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 1772ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
> 04 1772ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
> 05 1772ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
> Closing open log file C:\iisstate\output\IISState-338.log
>