IISSTATE Analysis Please...Take Two

External Since: Jan 26, 2004 Posts: 6

Here is the one from the website.

Opened log file 'C:\iisstate\output\IISState-4164.log'

***********************
Starting new log output
IISState version 3.3.1

Tue Feb 03 08:43:14 2004

OS = Windows 2000
Executable: dllhost.exe
PID = 4164

Note: Thread times are formatted as HH:MM:SS.ms

***********************

Thread ID: 0
System Thread ID: 1090
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\System32\ntdll.dll -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\KERNEL32.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0006fd50 77e86a3d ntdll!NtWaitForSingleObject+0xb
01 00000000 00000000 KERNEL32!WaitForSingleObject+0xf

Thread ID: 1
System Thread ID: 1818
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\USER32.DLL -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\ole32.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0095ff30 77abaf4d USER32!TranslateMessageEx+0x4a
01 0095ff70 77abae9b ole32!CoInstall+0x7cd
02 0095ff8c 77abadd6 ole32!CoInstall+0x71b
03 00007530 00000000 ole32!CoInstall+0x656

Thread ID: 2
System Thread ID: 19bc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\System32\TxfAux.Dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 00a6fc98 6de8b953 ntdll!ZwRemoveIoCompletion+0xb
01 00a6fd94 6de8b8a8 TxfAux!Log+0x5e3
02 00a6ffb4 77e8758a TxfAux!Log+0x538
03 00a6ffec 00000000 KERNEL32!SetFilePointer+0x18a

Thread ID: 3
System Thread ID: ad0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 00e2ff58 77e86e1a ntdll!NtWaitForMultipleObjects+0xb
01 00e2ffec 00000000 KERNEL32!WaitForMultipleObjects+0x17

Thread ID: 4
System Thread ID: 187c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\RPCRT4.DLL -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\System32\COMSVCS.DLL -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\System32\NETAPI32.dll -
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: *** ERROR: Symbol file could not be
found. Defaulted to export symbols for C:\WINNT\System32
\inetsrv\asp.dll -
ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 00e6fb94 77d3a2c7 ntdll!NtRequestWaitReplyPort+0xb
01 00e6fba0 77b23b2c RPCRT4!I_RpcSendReceive+0x2c
02 00e6fbc0 77b239f7 ole32!DllDebugObjectRPCHook+0x12a
03 00e6fbd8 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
04 00e6fc18 77b23870 ole32!
StgGetIFillLockBytesOnFile+0x19f30
05 00e6fc88 77ab6ac3 ole32!
WdtpInterfacePointer_UserSize+0x19cd
06 00e6fce0 77d90328 ole32!UpdateDCOMSettings+0xad78
07 00e6fcfc 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
08 00e6ff44 77d95f85 RPCRT4!NdrClientCall2+0x4f5
09 00e6ff60 77d77fcb RPCRT4!NdrStubCall2+0xb03
0a 00e6ff70 787f002e RPCRT4!NdrServerMarshall+0x1311
0b 78863e54 ffffffff COMSVCS!RegisterComEvents+0x6498
0c 0008acb0 78863e54 0xffffffff
0d 00000000 00000000 COMSVCS!RegisterComEvents+0x7a2be

Thread ID: 5
System Thread ID: b38
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 00eaff04 77e86784 ntdll!ZwDelayExecution+0xb
01 77f82207 4affc033 KERNEL32!Sleep+0xb
02 0424548b 00000000 0x4affc033

Thread ID: 6
System Thread ID: a4c
Kernel Time: 0:3:9.375
User Time: 0:0:26.578
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\IisRTL.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0110feb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0110ff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0110ff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00406bc8 000003e9 IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 7
System Thread ID: 6ec
Kernel Time: 0:3:7.500
User Time: 0:0:26.140
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0114feb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0114ff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0114ff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00406c78 000003ea IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 8
System Thread ID: aac
Kernel Time: 0:3:32.859
User Time: 0:0:29.375
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0118feb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0118ff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0118ff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00406d28 000003eb IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 9
System Thread ID: ab4
Kernel Time: 0:3:11.531
User Time: 0:0:25.718
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 011cfeb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 011cff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 011cff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00406dd8 000003ec IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 10
System Thread ID: ab0
Kernel Time: 0:3:11.593
User Time: 0:0:25.546
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0120feb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0120ff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0120ff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00406e88 000003ed IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 11
System Thread ID: af0
Kernel Time: 0:3:9.671
User Time: 0:0:25.546
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0124feb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0124ff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0124ff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00406f38 000003ee IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 12
System Thread ID: 11f0
Kernel Time: 0:3:7.828
User Time: 0:0:32.328
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0128feb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0128ff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0128ff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00406fe8 000003ef IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 13
System Thread ID: 1148
Kernel Time: 0:3:9.890
User Time: 0:0:26.406
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 012cfeb0 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 012cff0c 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 012cff28 6e5abc1d USER32!MsgWaitForMultipleObjects+0x1e
03 00407098 000003f0 IisRTL!ScheduleAdjustTime+0x1dd

Thread ID: 14
System Thread ID: 1130
Kernel Time: 0:0:0.31
User Time: 0:0:0.78
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\System32\inetsrv\ISATQ.DLL -
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0140ff7c 6d7088bd ntdll!ZwRemoveIoCompletion+0xb
01 77debff9 c4c868ff ISATQ!AtqGetCapTraceInfo+0x7cc
02 6aec8b55 00000000 0xc4c868ff

Thread ID: 15
System Thread ID: d84
Kernel Time: 0:0:0.31
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0144ff7c 6d7088bd ntdll!ZwRemoveIoCompletion+0xb
01 77debff9 c4c868ff ISATQ!AtqGetCapTraceInfo+0x7cc
02 6aec8b55 00000000 0xc4c868ff

Thread ID: 16
System Thread ID: ff4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 015cfee4 77d809da ntdll!ZwRemoveIoCompletion+0xb
01 015cff20 77d50ede RPCRT4!
I_RpcTransGetAddressList+0x304c
02 015cff74 77d50d17 RPCRT4!TowerConstruct+0x4abd
03 015cffa8 77d41c6c RPCRT4!TowerConstruct+0x48f6
04 015cffb4 77e8758a RPCRT4!
I_RpcServerInqTransportType+0x1a0
05 015cffec 00000000 KERNEL32!SetFilePointer+0x18a

Thread ID: 17
System Thread ID: 850
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for -
Thread Status: Thread is in a WAIT state.
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 022afec4 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 022aff20 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 022aff3c 74a10c03 USER32!MsgWaitForMultipleObjects+0x1e
03 022aff80 7800a27b asp!AspStatusHtmlDump+0x2f8a
04 022affb4 77e8758a MSVCRT!beginthread+0xce
05 022affec 00000000 KERNEL32!SetFilePointer+0x18a

Thread ID: 18
System Thread ID: a90
Kernel Time: 0:0:0.46
User Time: 0:0:0.0
*** WARNING: Unable to verify checksum for
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for -
Thread Status: Thread is in a WAIT state.
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0232fe2c 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0232fe88 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0232fea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1e
03 0232ff7c 77e88330 pdm+0x886c
04 0232ffb0 4a008a09 KERNEL32!ReleaseSemaphore+0x12
05 0232ffb4 77e8758a pdm+0x8a09
06 0232ffc0 00000000 KERNEL32!SetFilePointer+0x18a

Thread ID: 19
System Thread ID: f60
Kernel Time: 0:0:19.625
User Time: 0:1:15.656
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0236fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0236fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0236fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 20
System Thread ID: 79c
Kernel Time: 0:0:19.968
User Time: 0:1:14.109
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 023afe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 023afed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 023afef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 21
System Thread ID: 1020
Kernel Time: 0:0:21.31
User Time: 0:1:17.515
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 023efe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 023efed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 023efef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 22
System Thread ID: f98
Kernel Time: 0:0:19.156
User Time: 0:1:15.234
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\MSVBVM60.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0242da38 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0242da94 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0242dabc 77ab32d5 ole32!CoGetPSClsid+0xd96
03 0242dae4 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 0242db04 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 0242db1c 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 0242db5c 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 0242dbd4 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 0242dc2c 77d90328 ole32!UpdateDCOMSettings+0xad78
09 0242dc48 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 0242de90 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 0242deac 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 0242debc 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 0242df14 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 0242e15c 77b0e45a ole32!CoInstall+0x46ec
0f 0242e178 77ac06b3 ole32!
StgGetIFillLockBytesOnFile+0x78e5
10 0242e8f0 77a6be58 ole32!CoInstall+0x5f33
11 0242e918 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 0242e948 787a377b ole32!CoCreateInstance+0x35
13 0242ea94 6601d763 COMSVCS!CoCreateStdTrustable+0x137bb
14 0242eaf0 6601cddd MSVBVM60!EVENT_SINK_AddRef+0x11c
15 0242eb24 6601c7f8 MSVBVM60!_vbaNew2+0x861
16 0242eba4 6602952f MSVBVM60!_vbaNew2+0x27c
17 0242ee58 66029457 MSVBVM60!TipCreateInstanceEx+0x9f
18 0242ee94 66029391 MSVBVM60!_vbaStrVarCopy+0x56d
19 0242ef90 66029331 MSVBVM60!_vbaStrVarCopy+0x4a7
1a 0242efcc 77ac0508 MSVBVM60!_vbaStrVarCopy+0x447
1b 0242f088 77a6be58 ole32!CoInstall+0x5d88
1c 0242f0b0 77a6be23 ole32!CoCreateInstanceEx+0x2b
1d 0242f0e0 74a2c81a ole32!CoCreateInstance+0x35
1e 019f69d4 eb955b15 asp!DllUnregisterServer+0x1aaf6
1f 00000000 00000000 0xeb955b15

Thread ID: 23
System Thread ID: 1250
Kernel Time: 0:0:19.0
User Time: 0:1:18.265
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0246fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0246fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0246fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 24
System Thread ID: a68
Kernel Time: 0:0:17.984
User Time: 0:2:7.78
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 024afe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 024afed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 024afef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 25
System Thread ID: ff0
Kernel Time: 0:0:20.359
User Time: 0:1:23.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 024efe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 024efed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 024efef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 26
System Thread ID: e58
Kernel Time: 0:0:17.750
User Time: 0:1:20.250
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0252fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0252fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0252fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 27
System Thread ID: 680
Kernel Time: 0:0:18.671
User Time: 0:1:16.93
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0256fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0256fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0256fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 28
System Thread ID: 11e4
Kernel Time: 0:0:18.921
User Time: 0:1:14.93
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 025afe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 025afed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 025afef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 29
System Thread ID: f88
Kernel Time: 0:0:18.593
User Time: 0:2:7.453
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 025eda38 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 025eda94 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 025edabc 77ab32d5 ole32!CoGetPSClsid+0xd96
03 025edae4 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 025edb04 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 025edb1c 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 025edb5c 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 025edbd4 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 025edc2c 77d90328 ole32!UpdateDCOMSettings+0xad78
09 025edc48 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 025ede90 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 025edeac 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 025edebc 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 025edf14 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 025ee15c 77b0e45a ole32!CoInstall+0x46ec
0f 025ee178 77ac06b3 ole32!
StgGetIFillLockBytesOnFile+0x78e5
10 025ee8f0 77a6be58 ole32!CoInstall+0x5f33
11 025ee918 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 025ee948 787a377b ole32!CoCreateInstance+0x35
13 025eea94 6601d763 COMSVCS!CoCreateStdTrustable+0x137bb
14 025eeaf0 6601cddd MSVBVM60!EVENT_SINK_AddRef+0x11c
15 025eeb24 6601c7f8 MSVBVM60!_vbaNew2+0x861
16 025eeba4 6602952f MSVBVM60!_vbaNew2+0x27c
17 025eee58 66029457 MSVBVM60!TipCreateInstanceEx+0x9f
18 025eee94 66029391 MSVBVM60!_vbaStrVarCopy+0x56d
19 025eef90 66029331 MSVBVM60!_vbaStrVarCopy+0x4a7
1a 025eefcc 77ac0508 MSVBVM60!_vbaStrVarCopy+0x447
1b 025ef088 77a6be58 ole32!CoInstall+0x5d88
1c 025ef0b0 77a6be23 ole32!CoCreateInstanceEx+0x2b
1d 025ef0e0 74a2c81a ole32!CoCreateInstance+0x35
1e 019f6b24 eb955b15 asp!DllUnregisterServer+0x1aaf6
1f 00000000 00000000 0xeb955b15

Thread ID: 30
System Thread ID: 1194
Kernel Time: 0:0:18.843
User Time: 0:1:17.656
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0262fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0262fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0262fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 31
System Thread ID: b00
Kernel Time: 0:0:18.859
User Time: 0:1:20.265
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0266da38 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0266da94 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0266dabc 77ab32d5 ole32!CoGetPSClsid+0xd96
03 0266dae4 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 0266db04 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 0266db1c 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 0266db5c 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 0266dbd4 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 0266dc2c 77d90328 ole32!UpdateDCOMSettings+0xad78
09 0266dc48 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 0266de90 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 0266deac 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 0266debc 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 0266df14 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 0266e15c 77b0e45a ole32!CoInstall+0x46ec
0f 0266e178 77ac06b3 ole32!
StgGetIFillLockBytesOnFile+0x78e5
10 0266e8f0 77a6be58 ole32!CoInstall+0x5f33
11 0266e918 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 0266e948 787a377b ole32!CoCreateInstance+0x35
13 0266ea94 6601d763 COMSVCS!CoCreateStdTrustable+0x137bb
14 0266eaf0 6601cddd MSVBVM60!EVENT_SINK_AddRef+0x11c
15 0266eb24 6601c7f8 MSVBVM60!_vbaNew2+0x861
16 0266eba4 6602952f MSVBVM60!_vbaNew2+0x27c
17 0266ee58 66029457 MSVBVM60!TipCreateInstanceEx+0x9f
18 0266ee94 66029391 MSVBVM60!_vbaStrVarCopy+0x56d
19 0266ef90 66029331 MSVBVM60!_vbaStrVarCopy+0x4a7
1a 0266efcc 77ac0508 MSVBVM60!_vbaStrVarCopy+0x447
1b 0266f088 77a6be58 ole32!CoInstall+0x5d88
1c 0266f0b0 77a6be23 ole32!CoCreateInstanceEx+0x2b
1d 0266f0e0 74a2c81a ole32!CoCreateInstance+0x35
1e 019f2ec4 eb955b15 asp!DllUnregisterServer+0x1aaf6
1f 00000000 00000000 0xeb955b15

Thread ID: 32
System Thread ID: 3a8
Kernel Time: 0:0:18.578
User Time: 0:1:19.15
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 026afe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 026afed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 026afef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 33
System Thread ID: 904
Kernel Time: 0:0:19.328
User Time: 0:1:16.437
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 026efe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 026efed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 026efef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 34
System Thread ID: e78
Kernel Time: 0:0:0.62
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0274ffb4 77e8758a ntdll!ZwDelayExecution+0xb
01 0274ffec 00000000 KERNEL32!SetFilePointer+0x18a

Thread ID: 35
System Thread ID: 1718
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0404ffb4 77e8758a ntdll!ZwRemoveIoCompletion+0xb
01 0404ffec 00000000 KERNEL32!SetFilePointer+0x18a

Thread ID: 36
System Thread ID: 11f8
Kernel Time: 0:0:18.125
User Time: 0:1:23.15
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 04ebfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 04ebfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 04ebfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 37
System Thread ID: 18fc
Kernel Time: 0:0:18.781
User Time: 0:1:22.828
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 04f8fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 04f8fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 04f8fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 38
System Thread ID: 1680
Kernel Time: 0:0:19.93
User Time: 0:1:17.578
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 04fcfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 04fcfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 04fcfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 39
System Thread ID: 1180
Kernel Time: 0:0:18.781
User Time: 0:1:22.109
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0501fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0501fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0501fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 40
System Thread ID: f80
Kernel Time: 0:0:16.890
User Time: 0:1:16.484
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0525da38 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0525da94 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0525dabc 77ab32d5 ole32!CoGetPSClsid+0xd96
03 0525dae4 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 0525db04 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 0525db1c 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 0525db5c 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 0525dbd4 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 0525dc2c 77d90328 ole32!UpdateDCOMSettings+0xad78
09 0525dc48 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 0525de90 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 0525deac 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 0525debc 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 0525df14 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 0525e15c 77b0e45a ole32!CoInstall+0x46ec
0f 0525e178 77ac06b3 ole32!
StgGetIFillLockBytesOnFile+0x78e5
10 0525e8f0 77a6be58 ole32!CoInstall+0x5f33
11 0525e918 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 0525e948 787a377b ole32!CoCreateInstance+0x35
13 0525ea94 6601d763 COMSVCS!CoCreateStdTrustable+0x137bb
14 0525eaf0 6601cddd MSVBVM60!EVENT_SINK_AddRef+0x11c
15 0525eb24 6601c7f8 MSVBVM60!_vbaNew2+0x861
16 0525eba4 6602952f MSVBVM60!_vbaNew2+0x27c
17 0525ee58 66029457 MSVBVM60!TipCreateInstanceEx+0x9f
18 0525ee94 66029391 MSVBVM60!_vbaStrVarCopy+0x56d
19 0525ef90 66029331 MSVBVM60!_vbaStrVarCopy+0x4a7
1a 0525efcc 77ac0508 MSVBVM60!_vbaStrVarCopy+0x447
1b 0525f088 77a6be58 ole32!CoInstall+0x5d88
1c 0525f0b0 77a6be23 ole32!CoCreateInstanceEx+0x2b
1d 0525f0e0 74a2c81a ole32!CoCreateInstance+0x35
1e 019dbe64 eb955b15 asp!DllUnregisterServer+0x1aaf6
1f 00000000 00000000 0xeb955b15

Thread ID: 41
System Thread ID: b14
Kernel Time: 0:0:17.171
User Time: 0:1:9.859
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0529fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0529fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0529fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 42
System Thread ID: 1654
Kernel Time: 0:0:17.328
User Time: 0:1:11.703
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 052dfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 052dfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 052dfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 43
System Thread ID: b04
Kernel Time: 0:0:18.281
User Time: 0:1:13.421
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0531fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0531fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0531fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 44
System Thread ID: f48
Kernel Time: 0:0:16.750
User Time: 0:1:17.937
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0535da38 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0535da94 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0535dabc 77ab32d5 ole32!CoGetPSClsid+0xd96
03 0535dae4 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 0535db04 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 0535db1c 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 0535db5c 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 0535dbd4 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 0535dc2c 77d90328 ole32!UpdateDCOMSettings+0xad78
09 0535dc48 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 0535de90 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 0535deac 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 0535debc 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 0535df14 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 0535e15c 77b0e45a ole32!CoInstall+0x46ec
0f 0535e178 77ac06b3 ole32!
StgGetIFillLockBytesOnFile+0x78e5
10 0535e8f0 77a6be58 ole32!CoInstall+0x5f33
11 0535e918 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 0535e948 787a377b ole32!CoCreateInstance+0x35
13 0535ea94 6601d763 COMSVCS!CoCreateStdTrustable+0x137bb
14 0535eaf0 6601cddd MSVBVM60!EVENT_SINK_AddRef+0x11c
15 0535eb24 6601c7f8 MSVBVM60!_vbaNew2+0x861
16 0535eba4 6602952f MSVBVM60!_vbaNew2+0x27c
17 0535ee58 66029457 MSVBVM60!TipCreateInstanceEx+0x9f
18 0535ee94 66029391 MSVBVM60!_vbaStrVarCopy+0x56d
19 0535ef90 66029331 MSVBVM60!_vbaStrVarCopy+0x4a7
1a 0535efcc 77ac0508 MSVBVM60!_vbaStrVarCopy+0x447
1b 0535f088 77a6be58 ole32!CoInstall+0x5d88
1c 0535f0b0 77a6be23 ole32!CoCreateInstanceEx+0x2b
1d 0535f0e0 74a2c81a ole32!CoCreateInstance+0x35
1e 019d341c eb955b15 asp!DllUnregisterServer+0x1aaf6
1f 00000000 00000000 0xeb955b15

Thread ID: 45
System Thread ID: b24
Kernel Time: 0:0:17.890
User Time: 0:1:16.296
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0539fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0539fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0539fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 46
System Thread ID: 1b4c
Kernel Time: 0:0:17.359
User Time: 0:1:15.546
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 053dfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 053dfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 053dfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 47
System Thread ID: a48
Kernel Time: 0:0:18.328
User Time: 0:1:18.578
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0541fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0541fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0541fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 48
System Thread ID: 1a7c
Kernel Time: 0:0:18.187
User Time: 0:1:16.578
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0545fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0545fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0545fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 49
System Thread ID: 19b8
Kernel Time: 0:0:17.218
User Time: 0:1:14.468
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for E:\GLX\DLLs\EDC_PX_PCY_WKS.dll -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for C:\WINNT\system32\OLEAUT32.dll -
*** ERROR: Symbol file could not be found. Defaulted to
export symbols for -
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0549e574 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0549e5d0 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0549e5f8 77ab32d5 ole32!CoGetPSClsid+0xd96
03 0549e620 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 0549e640 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 0549e658 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 0549e698 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 0549e710 77ab6a37 ole32!CoGetPSClsid+0xc01
08 0549e768 77d90328 ole32!UpdateDCOMSettings+0xacec
09 0549e784 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 0549e9cc 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 0549e9e8 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 0549e9f8 04d09819 RPCRT4!NdrServerMarshall+0x1311
0d 0549eadc 779d7bcd EDC_PX_PCY_WKS!DllCanUnloadNow+0x2f9b
0e 0549eb24 6602a053 OLEAUT32!DispCallFunc+0x15d
0f 0549f480 66029e4c MSVBVM60!BASIC_CLASS_Invoke+0x259
10 0549f4dc 6b61c528 MSVBVM60!BASIC_CLASS_Invoke+0x52
11 0549f544 6b61f7cc vbscript!DllRegisterServer+0x8219
12 00000000 00000000 vbscript!DllRegisterServer+0xb4bd

Thread ID: 50
System Thread ID: 1864
Kernel Time: 0:0:17.578
User Time: 0:1:14.687
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 054efe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 054efed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 054efef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 51
System Thread ID: 1108
Kernel Time: 0:0:17.703
User Time: 0:1:20.562
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0583fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0583fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0583fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 52
System Thread ID: 1774
Kernel Time: 0:0:17.375
User Time: 0:1:16.421
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0587fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0587fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0587fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 53
System Thread ID: fc0
Kernel Time: 0:0:17.265
User Time: 0:1:16.593
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0617fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0617fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0617fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 54
System Thread ID: 163c
Kernel Time: 0:0:17.781
User Time: 0:1:17.656
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 061bfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 061bfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 061bfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 55
System Thread ID: 1798
Kernel Time: 0:0:17.687
User Time: 0:1:21.500
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06c1fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06c1fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06c1fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 56
System Thread ID: 1c08
Kernel Time: 0:0:16.515
User Time: 0:1:16.984
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06c5fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06c5fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06c5fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 57
System Thread ID: 11ac
Kernel Time: 0:0:17.671
User Time: 0:1:16.234
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06cbfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06cbfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06cbfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 58
System Thread ID: 95c
Kernel Time: 0:0:16.671
User Time: 0:1:14.609
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06cffe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06cffed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06cffef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 59
System Thread ID: e20
Kernel Time: 0:0:16.953
User Time: 0:1:16.937
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06d3fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06d3fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06d3fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 60
System Thread ID: 908
Kernel Time: 0:0:17.437
User Time: 0:1:14.46
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06d7fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06d7fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06d7fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 61
System Thread ID: 638
Kernel Time: 0:0:17.656
User Time: 0:1:19.453
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06edfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06edfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06edfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 62
System Thread ID: 11a8
Kernel Time: 0:0:16.968
User Time: 0:1:16.187
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06f1fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06f1fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06f1fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 63
System Thread ID: b28
Kernel Time: 0:0:17.250
User Time: 0:1:21.484
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06fbfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06fbfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06fbfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 64
System Thread ID: b20
Kernel Time: 0:0:17.484
User Time: 0:1:12.500
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 06fffe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 06fffed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 06fffef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 65
System Thread ID: d58
Kernel Time: 0:0:16.937
User Time: 0:1:13.156
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0704fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0704fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0704fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 66
System Thread ID: 1968
Kernel Time: 0:0:16.93
User Time: 0:1:11.359
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0708fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0708fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0708fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 67
System Thread ID: b0c
Kernel Time: 0:0:16.421
User Time: 0:1:15.937
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 070cfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 070cfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 070cfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 68
System Thread ID: 19a0
Kernel Time: 0:0:16.468
User Time: 0:1:16.125
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0711fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0711fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0711fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 69
System Thread ID: 1838
Kernel Time: 0:0:16.406
User Time: 0:1:15.656
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0715fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0715fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0715fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 70
System Thread ID: 1950
Kernel Time: 0:0:16.796
User Time: 0:1:15.828
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0719fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0719fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0719fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 71
System Thread ID: 188c
Kernel Time: 0:0:17.234
User Time: 0:1:24.750
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 071dfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 071dfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 071dfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 72
System Thread ID: 1010
Kernel Time: 0:0:17.218
User Time: 0:1:18.828
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0721fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0721fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0721fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 73
System Thread ID: acc
Kernel Time: 0:0:16.687
User Time: 0:1:13.31
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0766fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0766fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0766fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 74
System Thread ID: 1530
Kernel Time: 0:0:15.687
User Time: 0:1:12.859
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 076afe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 076afed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 076afef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 75
System Thread ID: 1828
Kernel Time: 0:0:16.453
User Time: 0:1:15.718
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 076efe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 076efed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 076efef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 76
System Thread ID: 133c
Kernel Time: 0:0:17.218
User Time: 0:1:13.140
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0772fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0772fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0772fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 77
System Thread ID: 1c1c
Kernel Time: 0:0:16.671
User Time: 0:1:20.640
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0779fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0779fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0779fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 78
System Thread ID: aec
Kernel Time: 0:0:16.500
User Time: 0:1:16.828
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 077dfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 077dfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 077dfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 79
System Thread ID: b34
Kernel Time: 0:0:16.500
User Time: 0:1:18.968
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0781fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0781fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0781fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 80
System Thread ID: 1934
Kernel Time: 0:0:16.250
User Time: 0:1:15.578
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0785fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0785fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0785fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 81
System Thread ID: 1ac8
Kernel Time: 0:0:16.453
User Time: 0:1:15.671
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0789fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0789fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0789fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 82
System Thread ID: 1b38
Kernel Time: 0:0:15.937
User Time: 0:1:14.984
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 078efe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 078efed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 078efef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 83
System Thread ID: ac8
Kernel Time: 0:0:16.62
User Time: 0:1:19.15
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0793fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0793fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0793fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 84
System Thread ID: 1ad0
Kernel Time: 0:0:17.109
User Time: 0:1:20.828
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 0797fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 0797fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 0797fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 85
System Thread ID: 18d8
Kernel Time: 0:0:16.156
User Time: 0:1:17.875
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 079cfe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 079cfed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 079cfef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 86
System Thread ID: 17c0
Kernel Time: 0:0:15.953
User Time: 0:1:16.828
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 07a0fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 07a0fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 07a0fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 87
System Thread ID: 1954
Kernel Time: 0:0:16.218
User Time: 0:1:19.750
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 07a4fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 07a4fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 07a4fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 88
System Thread ID: 1708
Kernel Time: 0:0:16.625
User Time: 0:1:15.296
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 07a8da38 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 07a8da94 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 07a8dabc 77ab32d5 ole32!CoGetPSClsid+0xd96
03 07a8dae4 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 07a8db04 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 07a8db1c 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 07a8db5c 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 07a8dbd4 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 07a8dc2c 77d90328 ole32!UpdateDCOMSettings+0xad78
09 07a8dc48 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 07a8de90 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 07a8deac 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 07a8debc 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 07a8df14 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 07a8e15c 77b0e45a ole32!CoInstall+0x46ec
0f 07a8e178 77ac06b3 ole32!
StgGetIFillLockBytesOnFile+0x78e5
10 07a8e8f0 77a6be58 ole32!CoInstall+0x5f33
11 07a8e918 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 07a8e948 787a377b ole32!CoCreateInstance+0x35
13 07a8ea94 6601d763 COMSVCS!CoCreateStdTrustable+0x137bb
14 07a8eaf0 6601cddd MSVBVM60!EVENT_SINK_AddRef+0x11c
15 07a8eb24 6601c7f8 MSVBVM60!_vbaNew2+0x861
16 07a8eba4 6602952f MSVBVM60!_vbaNew2+0x27c
17 07a8ee58 66029457 MSVBVM60!TipCreateInstanceEx+0x9f
18 07a8ee94 66029391 MSVBVM60!_vbaStrVarCopy+0x56d
19 07a8ef90 66029331 MSVBVM60!_vbaStrVarCopy+0x4a7
1a 07a8efcc 77ac0508 MSVBVM60!_vbaStrVarCopy+0x447
1b 07a8f088 77a6be58 ole32!CoInstall+0x5d88
1c 07a8f0b0 77a6be23 ole32!CoCreateInstanceEx+0x2b
1d 07a8f0e0 74a2c81a ole32!CoCreateInstance+0x35
1e 019db0d4 eb955b15 asp!DllUnregisterServer+0x1aaf6
1f 00000000 00000000 0xeb955b15

Thread ID: 89
System Thread ID: f94
Kernel Time: 0:0:16.62
User Time: 0:1:18.562
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 07acda38 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 07acda94 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 07acdabc 77ab32d5 ole32!CoGetPSClsid+0xd96
03 07acdae4 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 07acdb04 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 07acdb1c 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 07acdb5c 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 07acdbd4 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 07acdc2c 77d90328 ole32!UpdateDCOMSettings+0xad78
09 07acdc48 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 07acde90 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 07acdeac 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 07acdebc 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 07acdf14 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 07ace15c 77b0e45a ole32!CoInstall+0x46ec
0f 07ace178 77ac06b3 ole32!
StgGetIFillLockBytesOnFile+0x78e5
10 07ace8f0 77a6be58 ole32!CoInstall+0x5f33
11 07ace918 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 07ace948 787a377b ole32!CoCreateInstance+0x35
13 07acea94 6601d763 COMSVCS!CoCreateStdTrustable+0x137bb
14 07aceaf0 6601cddd MSVBVM60!EVENT_SINK_AddRef+0x11c
15 07aceb24 6601c7f8 MSVBVM60!_vbaNew2+0x861
16 07aceba4 6602952f MSVBVM60!_vbaNew2+0x27c
17 07acee58 66029457 MSVBVM60!TipCreateInstanceEx+0x9f
18 07acee94 66029391 MSVBVM60!_vbaStrVarCopy+0x56d
19 07acef90 66029331 MSVBVM60!_vbaStrVarCopy+0x4a7
1a 07acefcc 77ac0508 MSVBVM60!_vbaStrVarCopy+0x447
1b 07acf088 77a6be58 ole32!CoInstall+0x5d88
1c 07acf0b0 77a6be23 ole32!CoCreateInstanceEx+0x2b
1d 07acf0e0 74a2c81a ole32!CoCreateInstance+0x35
1e 019e98b4 eb955b15 asp!DllUnregisterServer+0x1aaf6
1f 00000000 00000000 0xeb955b15

Thread ID: 90
System Thread ID: 1898
Kernel Time: 0:0:16.218
User Time: 0:1:19.62
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 07b0fe78 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 07b0fed4 77e1382b USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 07b0fef0 787c0db3 USER32!MsgWaitForMultipleObjects+0x1e
03 77e1380d 104539c0 COMSVCS!Ordinal7+0x2b03
04 33ec8b55 00000000 0x104539c0

Thread ID: 91
System Thread ID: 17c8
Kernel Time: 0:0:16.578
User Time: 0:1:15.46
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM
check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available.
Following frames may be wrong.
00 07b4de50 77e1375e ntdll!NtWaitForMultipleObjects+0xb
01 07b4deac 77aa97a0 USER32!
MsgWaitForMultipleObjectsEx+0xe0
02 07b4ded4 77ab32d5 ole32!CoGetPSClsid+0xd96
03 07b4defc 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 07b4df1c 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 07b4df34 77b20aa5 ole32!
WdtpInterfacePointer_UserSize+0x1b54
06 07b4df74 77aa960b ole32!
StgGetIFillLockBytesOnFile+0x19f30
07 07b4dfec 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 07b4e044 77d90328 ole32!UpdateDCOMSettings+0xad78
09 07b4e060 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 07b4e2a8 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 07b4e2c4 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 07b4e2d4 77aaba89 RPCRT4!NdrServerMar...(message truncated)