Not a lot of work going on. You have a thread marshalling to thread 38.
Thread 38 is in the process of getting things going (i.e. responding to the
marshalled call). What I don't see is why the calls are marshalling to 38
or what object is there. Either way, it doesn't really look too bad. I am
not sure that you captured the problem.
Pat
"Vanyuan" <derekp.TakeThisOut@discovery.co.za> wrote in message
news:c21e9ac4.0406031314.3d765200@posting.google.com...
> Pat, hoping you can help. Posted a previous message, but will give
> more info here...
>
> I'm having a problem with one of two processes that is heavily
> utilizing a server of mine's cpu . The memory usage is normal.
> The cpu spikes are not constant, but it occurs every couple of
> seconds.
>
> There are two processes from which I cannot pinpoint the culprit since
> both of them it looks are keeping the cpu very busy. (DLLHOST &
> INETINFO)
>
> Herewith the results for both:
> (DLLHOST LOG IS BELOW)
>
> #########################################################
> INETINFO LOG:
> ##########################################################
>
> Opened log file 'D:\tools\installed\iisstate\output\IISState-2664.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Thu Jun 03 13:36:07 2004
>
> OS = Windows 2000
> Executable: dllhost.exe
> PID = 2664
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: ad0
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006fd28 7c573b28 ntdll!ZwWaitForSingleObject+0xb
> 01 0006fd50 7c573b50 KERNEL32!WaitForSingleObjectEx+0x71
> 02 0006fd60 77aaa701 KERNEL32!WaitForSingleObject+0xf
> 03 0006fd80 77aa9f0f
> ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
> 06 0006ffc0 7c581af6 dllhost!WinMainCRTStartup+0x156
> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: a64
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00baff30 77abbad5 USER32!NtUserGetMessage+0xb
> 01 00baff70 77abba23 ole32!CDllHost::STAWorkerLoop+0x40
> 02 00baff8c 77abb95e ole32!CDllHost::WorkerThread+0xc2
> 03 00baff90 77ab50ee ole32!DLLHostThreadEntry+0x9
> 04 00baffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
> 05 00baffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 00baffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: a48
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00d3fc54 7c573c73 ntdll!ZwRemoveIoCompletion+0xb
> 01 00d3fc80 00c0b9d0 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00d3fd94 00c0b908 TxfAux!WORK_QUEUE::WorkerLoop+0xa0
> 03 00d3ffb4 7c57438b TxfAux!WORK_QUEUE::ThreadLoop+0x58
> 04 00d3ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: a78
> Kernel Time: 0:0:0.62
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00f7ff08 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00f7ff58 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00f7ff70 787f58ce KERNEL32!WaitForMultipleObjects+0x17
> 03 00f7ffb4 7c57438b COMSVCS!CEventDispatcher::PushEvents+0x4e
> 04 00f7ffc0 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 398
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> Remote call is either to a MTA object or object not initialized. Also,
> possible utility thread.
> DCOM call being made to Process ID: 2056
> Waiting on thread id: ffffffff
>
> # ChildEBP RetAddr
> 00 00fbfb68 77d4256d ntdll!ZwRequestWaitReplyPort+0xb
> 01 00fbfb94 77d3ac56 RPCRT4!LRPC_CCALL::SendReceive+0x11e
> 02 00fbfba0 77b25b87 RPCRT4!I_RpcSendReceive+0x2c
> 03 00fbfbc0 77b25a52 ole32!ThreadSendReceive+0xef
> 04 00fbfbd8 77b22ab6
> ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14f
> 05 00fbfc18 77b258c6 ole32!CRpcChannelBuffer::SendReceive2+0x96
> 06 00fbfc28 77a6cb5d ole32!CRpcChannelBuffer::SendReceive+0x11
> 07 00fbfc88 77ab74c3 ole32!CAptRpcChnl::SendReceive+0xa9
> 08 00fbfce0 77d94c1a ole32!CCtxComChnl::SendReceive+0x124
> 09 00fbfcfc 77d9487d RPCRT4!NdrProxySendReceive+0x4c
> 0a 00fbff44 77d95136 RPCRT4!NdrClientCall2+0x4f5
> 0b 00fbff60 77d46e75 RPCRT4!ObjectStublessClient+0x76
> 0c 00fbff70 787f5818 RPCRT4!ObjectStubless+0xf
> 0d 00fbffb4 7c57438b
> COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x118
> 0e 00fbffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 7f8
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.93
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00bffee0 7c573a4e ntdll!NtDelayExecution+0xb
> 01 00bfff00 7c573a22 KERNEL32!SleepEx+0x32
> 02 00bfff0c 787d12aa KERNEL32!Sleep+0xb
> 03 00bfff7c 780085bc COMSVCS!PostData+0xf2
> 04 00bfff88 77ab779b MSVCRT!_endthreadex+0xc1
> 05 00000000 00000000 ole32!CCtxComChnl::FreeBuffer+0x3d
>
>
>
>
> Thread ID: 6
> System Thread ID: c48
> Kernel Time: 0:0:0.78
> User Time: 0:0:0.93
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00ffff9c 77f842c4 ntdll!NtDelayExecution+0xb
> 01 00ffffb4 7c57438b ntdll!RtlpTimerThread+0x42
> 02 00ffffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 5f8
> Kernel Time: 0:1:29.562
> User Time: 0:6:58.250
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0104fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0104fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0104fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0104fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0104ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 0104ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 7f4
> Kernel Time: 0:1:29.796
> User Time: 0:6:57.109
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0108fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0108fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0108fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0108fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0108ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 0108ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: af8
> Kernel Time: 0:1:27.984
> User Time: 0:6:56.515
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 010cfe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 010cfe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 010cfed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 010cfef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 010cff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 010cffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 010cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: 4f0
> Kernel Time: 0:0:4.765
> User Time: 0:0:3.671
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0110fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0110fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0110fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0110fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0110ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 0110ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 0110ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: 468
> Kernel Time: 0:1:28.468
> User Time: 0:6:59.968
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0114fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0114fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0114fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0114fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0114ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 0114ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 0114ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: afc
> Kernel Time: 0:1:28.656
> User Time: 0:7:3.484
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 011cfe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 011cfe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 011cfed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 011cfef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 011cff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 011cffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 011cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: 9c0
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01d6ff20 77f838a5 ntdll!ZwRemoveIoCompletion+0xb
> 01 01d6ffb4 7c57438b ntdll!RtlpWorkerThread+0x6b
> 02 01d6ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: f80
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02edfd20 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 02edfd70 7c578f0d KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 02edfd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
> 03 02edffb4 7c57438b RTUTILS!TraceServerThread+0xde
> 04 02edffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 15
> System Thread ID: cfc
> Kernel Time: 0:0:15.203
> User Time: 0:1:11.406
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 024efe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 024efe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 024efed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 024efef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 024eff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 024effb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 024effec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 16
> System Thread ID: 12c0
> Kernel Time: 0:0:3.843
> User Time: 0:0:12.968
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 025afe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 025afe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 025afed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 025afef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 025aff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 025affb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 025affec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 17
> System Thread ID: 12d0
> Kernel Time: 0:0:3.625
> User Time: 0:0:17.656
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0377fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0377fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0377fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0377fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0377ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 0377ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 0377ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 18
> System Thread ID: 10f4
> Kernel Time: 0:0:0.687
> User Time: 0:0:2.140
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0118ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0118ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0118ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0118ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 19
> System Thread ID: 1264
> Kernel Time: 0:0:0.468
> User Time: 0:0:1.281
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00b6ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 00b6ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 00b6ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 00b6ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 20
> System Thread ID: 854
> Kernel Time: 0:0:0.296
> User Time: 0:0:1.15
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0224ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0224ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0224ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0224ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 21
> System Thread ID: 12e8
> Kernel Time: 0:0:0.234
> User Time: 0:0:0.421
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00cfff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 00cfffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 00cfffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 00cfffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 22
> System Thread ID: d30
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 021cff5c 7c573a4e ntdll!NtDelayExecution+0xb
> 01 021cff7c 7c573a22 KERNEL32!SleepEx+0x32
> 02 021cff88 77ab8ffb KERNEL32!Sleep+0xb
> 03 021cff90 77ab50ee ole32!CROIDTable::WorkerThreadLoop+0xc
> 04 021cffa8 77ab5046 ole32!CRpcThread::WorkerLoop+0x22
> 05 021cffb4 7c57438b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 021cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 23
> System Thread ID: 1458
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00d8ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 00d8ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 00d8ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 00d8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 24
> System Thread ID: 1460
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00dcff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 00dcffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 00dcffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 00dcffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 25
> System Thread ID: 1464
> Kernel Time: 0:0:0.250
> User Time: 0:0:0.546
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0120ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0120ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0120ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 26
> System Thread ID: 146c
> Kernel Time: 0:0:0.515
> User Time: 0:0:2.671
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0124fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0124fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0124fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0124fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0124ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 0124ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 0124ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 27
> System Thread ID: 1470
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0220ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0220ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0220ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0220ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 28
> System Thread ID: 1478
> Kernel Time: 0:0:0.171
> User Time: 0:0:0.578
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0228fe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 0228ff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0228ff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0228ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
> 04 0228ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 05 0228ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 29
> System Thread ID: 147c
> Kernel Time: 0:0:0.593
> User Time: 0:0:2.453
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0230fe28 7c573c23 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0230fe78 77e119e6 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0230fed4 77e11ace USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0230fef0 787c3911 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0230ff1c 787c2cc0 COMSVCS!STAThread::WaitForWork+0x33
> 05 0230ffb4 7c57438b COMSVCS!STAThread::STAThreadWorker+0x4e2
> 06 0230ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 30
> System Thread ID: 1480
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0246ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0246ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0246ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0246ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 31
> System Thread ID: 1484
> Kernel Time: 0:0:0.140
> User Time: 0:0:0.328
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 024afe24 77d37ba7 ntdll!ZwReplyWaitReceivePortEx+0xb
> 01 024aff74 77d37b4c RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 024aff78 77d359c3 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 024affa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0x11f
> 04 024affb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 05 024affec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 32
> System Thread ID: 1488
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.15
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0252ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0252ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0252ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0252ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 33
> System Thread ID: 148c
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.171
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0256ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0256ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0256ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0256ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 34
> System Thread ID: 1494
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0347ff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 0347ffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 0347ffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 0347ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 35
> System Thread ID: 1498
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 034bff74 77d359a3 ntdll!NtDelayExecution+0xb
> 01 034bffa8 77d358d6 RPCRT4!BaseCachedThreadRoutine+0xc3
> 02 034bffb4 7c57438b RPCRT4!ThreadStartRoutine+0x18
> 03 034bffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 36
> System Thread ID: 14a0
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.109
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP
FAQ
Profile
Private Messages
Log in
