IISState on DLLHOST.exe.... 80% CPU

After a non-graceful shutdown, IIS on my laptop won't get too far into
my web application.

By they way, is there a good tutorial out there for reading the IISState
logs? I'd love to read any book, article, blog, whatever, written by
Pat on this very subject.

So, here's the log file after running

$> iisstate.exe -p 1252 -d

=====================================================================

Opened log file 'C:\iisstate\output\IISState-1252.log'

***********************
Starting new log output
IISState version 3.3.1

Tue Jan 11 10:50:34 2005

OS = Windows XP
Executable: dllhost.exe
PID = 1252

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 4f0
Kernel Time: 0:0:0.50
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0007fce0 7c90e9c0 ntdll!KiFastSystemCallRet
01 0007fce4 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 0007fd48 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 0007fd5c 7758ce84 kernel32!WaitForSingleObject+0x12
04 0007fd78 7758d8b0
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x51
05 0007fd90 01001288 ole32!CoRegisterSurrogateEx+0x191
06 0007ff1c 010015b0 dllhost!WinMain+0xca
07 0007ffc0 7c816d4f dllhost!WinMainCRTStartup+0x174
08 0007fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: 2c4
Kernel Time: 0:0:0.60
User Time: 0:0:0.130
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0066fe18 7c90e399 ntdll!KiFastSystemCallRet
01 0066fe1c 77e76703 ntdll!NtReplyWaitReceivePortEx+0xc
02 0066ff80 77e76c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0xf4
03 0066ff88 77e76a3b RPCRT4!RecvLotsaCallsWrapper+0xd
04 0066ffa8 77e76c0a RPCRT4!BaseCachedThreadRoutine+0x79
05 0066ffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
06 0066ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 2
System Thread ID: 544
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 006eff10 77d4919b ntdll!KiFastSystemCallRet
01 006eff30 7752d5a4 USER32!NtUserGetMessage+0xc
02 006eff70 7751db7d ole32!CDllHost::STAWorkerLoop+0x72
03 006eff8c 7751dab0 ole32!CDllHost::WorkerThread+0xc8
04 006eff94 774f314d ole32!DLLHostThreadEntry+0xd
05 006effa8 774f31b5 ole32!CRpcThread::WorkerLoop+0x1e
06 006effb4 7c80b50b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1b
07 006effec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 3
System Thread ID: 5a0
Kernel Time: 0:0:0.10
User Time: 0:0:0.20
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0076fec4 7c90e31b ntdll!KiFastSystemCallRet
01 0076fec8 7c80cbd9 ntdll!ZwRemoveIoCompletion+0xc
02 0076fef4 766f5c85 kernel32!GetQueuedCompletionStatus+0x29
03 0076ff70 766f5f52 COMSVCS!WORK_QUEUE::WorkerLoop+0x6c
04 0076ff80 77c3a3b0 COMSVCS!WORK_QUEUE::ThreadLoop+0x19
05 0076ffb4 7c80b50b msvcrt!_endthreadex+0xa9
06 0076ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 4
System Thread ID: 5c8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0099fe98 7c90e9ab ntdll!KiFastSystemCallRet
01 0099fe9c 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 0099ff38 7c809c86 kernel32!WaitForMultipleObjectsEx+0x12c
03 0099ff54 7668c9df kernel32!WaitForMultipleObjects+0x18
04 0099ffb4 7c80b50b COMSVCS!PostData+0x16e
05 0099ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 5
System Thread ID: 600
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00a1fddc 7c90e9ab ntdll!KiFastSystemCallRet
01 00a1fde0 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00a1fe7c 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00a1fed8 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00a1fef4 68a2c634 USER32!MsgWaitForMultipleObjects+0x1f
05 00a1ff80 77c3a3b0 IisRTL!SchedulerWorkerThread+0xaf
06 00a1ffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00a1ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 6
System Thread ID: 1d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00a5ff48 7c90e31b ntdll!KiFastSystemCallRet
01 00a5ff4c 7c80cbd9 ntdll!ZwRemoveIoCompletion+0xc
02 00a5ff78 65f19b3a kernel32!GetQueuedCompletionStatus+0x29
03 00a5ffb4 7c80b50b ISATQ!AtqPoolThread+0x40
04 00a5ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 7
System Thread ID: 190
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 00c8ff1c 7c90e9c0 ntdll!KiFastSystemCallRet
01 00c8ff20 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 00c8ff84 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 00c8ff98 7093b366 kernel32!WaitForSingleObject+0x12
04 00c8ffb0 7093c035 asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x83
05 00c8ffb4 7c80b50b asp!CApplnCleanupMgr::ApplnCleanupThread+0xa
06 00c8ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 8
System Thread ID: 838
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 00d4fe24 7c90e9ab ntdll!KiFastSystemCallRet
01 00d4fe28 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00d4fec4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00d4ff20 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00d4ff3c 70953ae0 USER32!MsgWaitForMultipleObjects+0x1f
05 00d4ff80 77c3a243 asp!CMTACallbackThread::Thread+0x4a
06 00d4ffb4 7c80b50b msvcrt!_endthread+0xaf
07 00d4ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 9
System Thread ID: 848
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00ddfeec 7c90e9c0 ntdll!KiFastSystemCallRet
01 00ddfef0 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 00ddff54 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 00ddff68 76687db5 kernel32!WaitForSingleObject+0x12
04 00ddff80 77c3a3b0
COMSVCS!CSTAThreadPool::LoadBalanceThreadControlLoop+0x3b
05 00ddffb4 7c80b50b msvcrt!_endthreadex+0xa9
06 00ddffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 10
System Thread ID: 828
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00e1fee8 7c90e9c0 ntdll!KiFastSystemCallRet
01 00e1feec 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 00e1ff50 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 00e1ff64 7668781e kernel32!WaitForSingleObject+0x12
04 00e1ff80 77c3a3b0 COMSVCS!CSTAThreadPool::KillThreadControlLoop+0x34
05 00e1ffb4 7c80b50b msvcrt!_endthreadex+0xa9
06 00e1ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 11
System Thread ID: 850
Kernel Time: 0:0:0.90
User Time: 0:0:0.150
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00e5fe14 7c90e9ab ntdll!KiFastSystemCallRet
01 00e5fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00e5feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00e5ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00e5ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
05 00e5ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
06 00e5ffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00e5ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 12
System Thread ID: 854
Kernel Time: 0:0:0.20
User Time: 0:0:0.60
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00e9fe14 7c90e9ab ntdll!KiFastSystemCallRet
01 00e9fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00e9feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00e9ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00e9ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
05 00e9ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
06 00e9ffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00e9ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 13
System Thread ID: 858
Kernel Time: 0:0:0.861
User Time: 0:0:10.515
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00edfe14 7c90e9ab ntdll!KiFastSystemCallRet
01 00edfe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00edfeb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00edff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00edff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
05 00edff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
06 00edffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00edffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 14
System Thread ID: 85c
Kernel Time: 0:0:0.881
User Time: 0:0:10.244
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 00f1ea6c 73304840 vbscript!SYM::InitFromSymbol+0x17
01 00f1ea9c 73304970 vbscript!CScriptRuntime::GetVarAdr+0x1f
02 00f1ed64 73301e55 vbscript!CScriptRuntime::Run+0x115c
03 00f1ee68 73302fe3 vbscript!CScriptEntryPoint::Call+0x65
04 00f1f13c 73301e55 vbscript!CScriptRuntime::Run+0x1ed4
05 00f1f240 73303045 vbscript!CScriptEntryPoint::Call+0x65
06 00f1f514 73301e55 vbscript!CScriptRuntime::Run+0x20a5
07 00f1f618 73302fe3 vbscript!CScriptEntryPoint::Call+0x65
08 00f1f8ec 73301e55 vbscript!CScriptRuntime::Run+0x1ed4
09 00f1f9f0 7334d9c8 vbscript!CScriptEntryPoint::Call+0x65
0a 00f1fa24 7331aaf5 vbscript!VBScriptClass::TerminateClass+0x59
0b 00f1fa3c 73312fc7 vbscript!CSession::Close+0x2b
0c 00f1fa50 7331b313 vbscript!COleScript::Reset+0x89
0d 00f1fa6c 7095f7c3 vbscript!COleScript::SetScriptState+0x188
0e 00f1fa78 7095e9ee asp!CActiveScriptEngine::ResetScript+0x11
0f 00f1facc 70961da3 asp!CActiveScriptEngine::ResetToUninitialized+0x174
10 00f1faec 7094a6a7 asp!CScriptManager::ReturnEngineToCache+0x7c
11 00f1fb08 7094b261 asp!DeAllocAndFreeEngines+0x3a
12 00f1fb40 7094b805 asp!ExecuteRequest+0x259
13 00f1fb88 7094ffa2 asp!Execute+0x158
14 00f1fbd8 709721de asp!CHitObj::ViperAsyncCallback+0x3fc
15 00f1fbf0 7668a2bb asp!CViperAsyncRequest::OnCall+0x37
16 00f1fc0c 77586ffc COMSVCS!CSTAActivityWork::STAActivityWorkHelper+0x5e
17 00f1fc58 77587762 ole32!EnterForCallback+0xc2
18 00f1fdb8 77561aa6 ole32!SwitchForCallback+0x1a3
19 00f1fde4 77543c38 ole32!PerformCallback+0x54
1a 00f1fe7c 77589d75 ole32!CObjectContext::InternalContextCallback+0x155
1b 00f1fe9c 7668a40d ole32!CObjectContext::DoCallback+0x1c
1c 00f1ff08 7668a9c2 COMSVCS!CSTAActivityWork::DoWork+0x103
1d 00f1ff20 7668b3d9 COMSVCS!CSTAThread::DoWork+0x18
1e 00f1ff40 7668b6cb COMSVCS!CSTAThread::ProcessQueueWork+0x47
1f 00f1ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1a1
20 00f1ffb4 7c80b50b msvcrt!_endthreadex+0xa9
21 00f1ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 15
System Thread ID: 860
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00f5fe14 7c90e9ab ntdll!KiFastSystemCallRet
01 00f5fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00f5feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00f5ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00f5ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
05 00f5ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
06 00f5ffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00f5ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 16
System Thread ID: 3a4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00f9fe14 7c90e9ab ntdll!KiFastSystemCallRet
01 00f9fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00f9feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00f9ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00f9ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
05 00f9ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
06 00f9ffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00f9ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 17
System Thread ID: 83c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00fdfe14 7c90e9ab ntdll!KiFastSystemCallRet
01 00fdfe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00fdfeb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00fdff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00fdff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
05 00fdff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
06 00fdffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00fdffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 18
System Thread ID: 864
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0104fe14 7c90e9ab ntdll!KiFastSystemCallRet
01 0104fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 0104feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 0104ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 0104ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
05 0104ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
06 0104ffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 0104ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 19
System Thread ID: 514
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 01d8fd08 7c90e9c0 ntdll!KiFastSystemCallRet
01 01d8fd0c 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 01d8fd70 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 01d8fd84 76662235 kernel32!WaitForSingleObject+0x12
04 01d8ffb4 7c80b50b COMSVCS!PingThread+0xf2
05 01d8ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 20
System Thread ID: 368
Kernel Time: 0:0:0.10
User Time: 0:0:0.200
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 006afe18 7c90e399 ntdll!KiFastSystemCallRet
01 006afe1c 77e76703 ntdll!NtReplyWaitReceivePortEx+0xc
02 006aff80 77e76c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0xf4
03 006aff88 77e76a3b RPCRT4!RecvLotsaCallsWrapper+0xd
04 006affa8 77e76c0a RPCRT4!BaseCachedThreadRoutine+0x79
05 006affb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
06 006affec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 21
System Thread ID: 928
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0072ff1c 7c90d85c ntdll!KiFastSystemCallRet
01 0072ff20 7c8023ed ntdll!NtDelayExecution+0xc
02 0072ff78 7c802451 kernel32!SleepEx+0x61
03 0072ff88 774f2fcb kernel32!Sleep+0xf
04 0072ff94 774f314d ole32!CROIDTable::WorkerThreadLoop+0x14
05 0072ffa4 774e0000 ole32!CRpcThread::WorkerLoop+0x1e
06 0072ffb4 7c80b50b ole32!_imp__RegQueryValueExA <PERF> (ole32+0x0)
07 0072ffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 22
System Thread ID: a58
Kernel Time: 0:0:0.30
User Time: 0:0:0.50
Thread Type: Other
# ChildEBP RetAddr
00 00bdff24 7c90e9c0 ntdll!KiFastSystemCallRet
01 00bdff28 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 00bdff8c 774f3178 kernel32!WaitForSingleObjectEx+0xa8
03 00bdffa8 774f31b5 ole32!CRpcThread::WorkerLoop+0x5c
04 00bdffb4 7c80b50b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1b
05 00bdffec 00000000 kernel32!BaseThreadStart+0x37




Thread ID: 23
System Thread ID: a60
Kernel Time: 0:0:0.80
User Time: 0:0:0.110
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 00c1fd68 7c90e57c ntdll!KiFastSystemCallRet
01 00c1fd6c 7c809c38 ntdll!NtSetEvent+0xc
02 00c1fd7c 7753a418 kernel32!SetEvent+0x10
03 00c1fd8c 77e8afa2 ole32!ThreadSignal+0xc6
04 00c1fda0 77e8ada1 RPCRT4!CALL::IssueNotificationMain+0x75
05 00c1fdb0 77e8ad68 RPCRT4!CALL::IssueNotification+0x22
06 00c1fe04 77e8ac3c RPCRT4!LRPC_CCALL::ProcessResponse+0x28b
07 00c1fe28 77e8abb6 RPCRT4!LRPC_CASSOCIATION::ProcessResponse+0x92
08 00c1ff80 77e76c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x23c
09 00c1ff88 77e76a3b RPCRT4!RecvLotsaCallsWrapper+0xd
0a 00c1ffa8 77e76c0a RPCRT4!BaseCachedThreadRoutine+0x79
0b 00c1ffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
0c 00c1ffec 00000000 kernel32!BaseThreadStart+0x37

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\1252-1105462326.dmp - mini user dump

*****

Closing open log file C:\iisstate\output\IISState-1252.log

=========================================================

Thanks in advance,
Paul

Thread 14 is the culprit, though I don't see why a non-graceful shutdown
would have anything to do with it. It is an ASP page (VBScript), but
IISState didn't find the page name. Don't know why.

Depending on what the ASP page is doing, the hard shutdown may be corrupting
something (a db?) that you are using as a parameter for VBScript during the
run time.

Reading IISState logs is basically just applied debugging. A few quick
hints:
1) Read the threads from the bottom to the top.
2) If you see VBScript at or near the top, that is your ASP script
executing. If you see MSADO15.dll (as an example), you are probably doing
DB stuff.

I generally only answer folks if they post to the group, so many of my
answers are there.

Books:
Debugging Windows (MS Press)
Inside Windows or Windows Internals (just released) MS Press

Pat


"Wooden Badger" <bigNOcheese.RemoveThis@SPAMpaultastic.PLEASEcom> wrote in message
news:gKTEd.10$vI6.1108@news.uswest.net...
 > After a non-graceful shutdown, IIS on my laptop won't get too far into my
 > web application.
 >
 > By they way, is there a good tutorial out there for reading the IISState
 > logs? I'd love to read any book, article, blog, whatever, written by Pat
 > on this very subject.
 >
 > So, here's the log file after running
 >
 > $> iisstate.exe -p 1252 -d
 >
 > =====================================================================
 >
 > Opened log file 'C:\iisstate\output\IISState-1252.log'
 >
 > ***********************
 > Starting new log output
 > IISState version 3.3.1
 >
 > Tue Jan 11 10:50:34 2005
 >
 > OS = Windows XP
 > Executable: dllhost.exe
 > PID = 1252
 >
 > Note: Thread times are formatted as HH:MM:SS.ms
 >
 > ***********************
 >
 >
 >
 >
 > Thread ID: 0
 > System Thread ID: 4f0
 > Kernel Time: 0:0:0.50
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0007fce0 7c90e9c0 ntdll!KiFastSystemCallRet
 > 01 0007fce4 7c8025db ntdll!ZwWaitForSingleObject+0xc
 > 02 0007fd48 7c802542 kernel32!WaitForSingleObjectEx+0xa8
 > 03 0007fd5c 7758ce84 kernel32!WaitForSingleObject+0x12
 > 04 0007fd78 7758d8b0
 > ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x51
 > 05 0007fd90 01001288 ole32!CoRegisterSurrogateEx+0x191
 > 06 0007ff1c 010015b0 dllhost!WinMain+0xca
 > 07 0007ffc0 7c816d4f dllhost!WinMainCRTStartup+0x174
 > 08 0007fff0 00000000 kernel32!BaseProcessStart+0x23
 >
 >
 >
 >
 > Thread ID: 1
 > System Thread ID: 2c4
 > Kernel Time: 0:0:0.60
 > User Time: 0:0:0.130
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 >
 > # ChildEBP RetAddr
 > 00 0066fe18 7c90e399 ntdll!KiFastSystemCallRet
 > 01 0066fe1c 77e76703 ntdll!NtReplyWaitReceivePortEx+0xc
 > 02 0066ff80 77e76c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0xf4
 > 03 0066ff88 77e76a3b RPCRT4!RecvLotsaCallsWrapper+0xd
 > 04 0066ffa8 77e76c0a RPCRT4!BaseCachedThreadRoutine+0x79
 > 05 0066ffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
 > 06 0066ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 2
 > System Thread ID: 544
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 006eff10 77d4919b ntdll!KiFastSystemCallRet
 > 01 006eff30 7752d5a4 USER32!NtUserGetMessage+0xc
 > 02 006eff70 7751db7d ole32!CDllHost::STAWorkerLoop+0x72
 > 03 006eff8c 7751dab0 ole32!CDllHost::WorkerThread+0xc8
 > 04 006eff94 774f314d ole32!DLLHostThreadEntry+0xd
 > 05 006effa8 774f31b5 ole32!CRpcThread::WorkerLoop+0x1e
 > 06 006effb4 7c80b50b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1b
 > 07 006effec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 3
 > System Thread ID: 5a0
 > Kernel Time: 0:0:0.10
 > User Time: 0:0:0.20
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 0076fec4 7c90e31b ntdll!KiFastSystemCallRet
 > 01 0076fec8 7c80cbd9 ntdll!ZwRemoveIoCompletion+0xc
 > 02 0076fef4 766f5c85 kernel32!GetQueuedCompletionStatus+0x29
 > 03 0076ff70 766f5f52 COMSVCS!WORK_QUEUE::WorkerLoop+0x6c
 > 04 0076ff80 77c3a3b0 COMSVCS!WORK_QUEUE::ThreadLoop+0x19
 > 05 0076ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 06 0076ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 4
 > System Thread ID: 5c8
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 0099fe98 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 0099fe9c 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 0099ff38 7c809c86 kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 0099ff54 7668c9df kernel32!WaitForMultipleObjects+0x18
 > 04 0099ffb4 7c80b50b COMSVCS!PostData+0x16e
 > 05 0099ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 5
 > System Thread ID: 600
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 00a1fddc 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00a1fde0 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00a1fe7c 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00a1fed8 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00a1fef4 68a2c634 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00a1ff80 77c3a3b0 IisRTL!SchedulerWorkerThread+0xaf
 > 06 00a1ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 00a1ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 6
 > System Thread ID: 1d0
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: HTTP Listener
 > # ChildEBP RetAddr
 > 00 00a5ff48 7c90e31b ntdll!KiFastSystemCallRet
 > 01 00a5ff4c 7c80cbd9 ntdll!ZwRemoveIoCompletion+0xc
 > 02 00a5ff78 65f19b3a kernel32!GetQueuedCompletionStatus+0x29
 > 03 00a5ffb4 7c80b50b ISATQ!AtqPoolThread+0x40
 > 04 00a5ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 7
 > System Thread ID: 190
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: ASP
 > Executing Page: Unable to locate ASP page
 >
 > # ChildEBP RetAddr
 > 00 00c8ff1c 7c90e9c0 ntdll!KiFastSystemCallRet
 > 01 00c8ff20 7c8025db ntdll!ZwWaitForSingleObject+0xc
 > 02 00c8ff84 7c802542 kernel32!WaitForSingleObjectEx+0xa8
 > 03 00c8ff98 7093b366 kernel32!WaitForSingleObject+0x12
 > 04 00c8ffb0 7093c035 asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x83
 > 05 00c8ffb4 7c80b50b asp!CApplnCleanupMgr::ApplnCleanupThread+0xa
 > 06 00c8ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 8
 > System Thread ID: 838
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: ASP
 > Executing Page: Unable to locate ASP page
 >
 > # ChildEBP RetAddr
 > 00 00d4fe24 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00d4fe28 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00d4fec4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00d4ff20 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00d4ff3c 70953ae0 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00d4ff80 77c3a243 asp!CMTACallbackThread::Thread+0x4a
 > 06 00d4ffb4 7c80b50b msvcrt!_endthread+0xaf
 > 07 00d4ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 9
 > System Thread ID: 848
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00ddfeec 7c90e9c0 ntdll!KiFastSystemCallRet
 > 01 00ddfef0 7c8025db ntdll!ZwWaitForSingleObject+0xc
 > 02 00ddff54 7c802542 kernel32!WaitForSingleObjectEx+0xa8
 > 03 00ddff68 76687db5 kernel32!WaitForSingleObject+0x12
 > 04 00ddff80 77c3a3b0
 > COMSVCS!CSTAThreadPool::LoadBalanceThreadControlLoop+0x3b
 > 05 00ddffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 06 00ddffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 10
 > System Thread ID: 828
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00e1fee8 7c90e9c0 ntdll!KiFastSystemCallRet
 > 01 00e1feec 7c8025db ntdll!ZwWaitForSingleObject+0xc
 > 02 00e1ff50 7c802542 kernel32!WaitForSingleObjectEx+0xa8
 > 03 00e1ff64 7668781e kernel32!WaitForSingleObject+0x12
 > 04 00e1ff80 77c3a3b0 COMSVCS!CSTAThreadPool::KillThreadControlLoop+0x34
 > 05 00e1ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 06 00e1ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 11
 > System Thread ID: 850
 > Kernel Time: 0:0:0.90
 > User Time: 0:0:0.150
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00e5fe14 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00e5fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00e5feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00e5ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00e5ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00e5ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
 > 06 00e5ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 00e5ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 12
 > System Thread ID: 854
 > Kernel Time: 0:0:0.20
 > User Time: 0:0:0.60
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00e9fe14 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00e9fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00e9feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00e9ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00e9ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00e9ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
 > 06 00e9ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 00e9ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 13
 > System Thread ID: 858
 > Kernel Time: 0:0:0.861
 > User Time: 0:0:10.515
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00edfe14 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00edfe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00edfeb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00edff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00edff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00edff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
 > 06 00edffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 00edffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 14
 > System Thread ID: 85c
 > Kernel Time: 0:0:0.881
 > User Time: 0:0:10.244
 > Thread Type: ASP
 > Executing Page: Unable to locate ASP page
 >
 > # ChildEBP RetAddr
 > 00 00f1ea6c 73304840 vbscript!SYM::InitFromSymbol+0x17
 > 01 00f1ea9c 73304970 vbscript!CScriptRuntime::GetVarAdr+0x1f
 > 02 00f1ed64 73301e55 vbscript!CScriptRuntime::Run+0x115c
 > 03 00f1ee68 73302fe3 vbscript!CScriptEntryPoint::Call+0x65
 > 04 00f1f13c 73301e55 vbscript!CScriptRuntime::Run+0x1ed4
 > 05 00f1f240 73303045 vbscript!CScriptEntryPoint::Call+0x65
 > 06 00f1f514 73301e55 vbscript!CScriptRuntime::Run+0x20a5
 > 07 00f1f618 73302fe3 vbscript!CScriptEntryPoint::Call+0x65
 > 08 00f1f8ec 73301e55 vbscript!CScriptRuntime::Run+0x1ed4
 > 09 00f1f9f0 7334d9c8 vbscript!CScriptEntryPoint::Call+0x65
 > 0a 00f1fa24 7331aaf5 vbscript!VBScriptClass::TerminateClass+0x59
 > 0b 00f1fa3c 73312fc7 vbscript!CSession::Close+0x2b
 > 0c 00f1fa50 7331b313 vbscript!COleScript::Reset+0x89
 > 0d 00f1fa6c 7095f7c3 vbscript!COleScript::SetScriptState+0x188
 > 0e 00f1fa78 7095e9ee asp!CActiveScriptEngine::ResetScript+0x11
 > 0f 00f1facc 70961da3 asp!CActiveScriptEngine::ResetToUninitialized+0x174
 > 10 00f1faec 7094a6a7 asp!CScriptManager::ReturnEngineToCache+0x7c
 > 11 00f1fb08 7094b261 asp!DeAllocAndFreeEngines+0x3a
 > 12 00f1fb40 7094b805 asp!ExecuteRequest+0x259
 > 13 00f1fb88 7094ffa2 asp!Execute+0x158
 > 14 00f1fbd8 709721de asp!CHitObj::ViperAsyncCallback+0x3fc
 > 15 00f1fbf0 7668a2bb asp!CViperAsyncRequest::OnCall+0x37
 > 16 00f1fc0c 77586ffc COMSVCS!CSTAActivityWork::STAActivityWorkHelper+0x5e
 > 17 00f1fc58 77587762 ole32!EnterForCallback+0xc2
 > 18 00f1fdb8 77561aa6 ole32!SwitchForCallback+0x1a3
 > 19 00f1fde4 77543c38 ole32!PerformCallback+0x54
 > 1a 00f1fe7c 77589d75 ole32!CObjectContext::InternalContextCallback+0x155
 > 1b 00f1fe9c 7668a40d ole32!CObjectContext::DoCallback+0x1c
 > 1c 00f1ff08 7668a9c2 COMSVCS!CSTAActivityWork::DoWork+0x103
 > 1d 00f1ff20 7668b3d9 COMSVCS!CSTAThread::DoWork+0x18
 > 1e 00f1ff40 7668b6cb COMSVCS!CSTAThread::ProcessQueueWork+0x47
 > 1f 00f1ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1a1
 > 20 00f1ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 21 00f1ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 15
 > System Thread ID: 860
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00f5fe14 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00f5fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00f5feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00f5ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00f5ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00f5ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
 > 06 00f5ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 00f5ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 16
 > System Thread ID: 3a4
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00f9fe14 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00f9fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00f9feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00f9ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00f9ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00f9ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
 > 06 00f9ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 00f9ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 17
 > System Thread ID: 83c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00fdfe14 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 00fdfe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 00fdfeb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 00fdff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 00fdff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 00fdff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
 > 06 00fdffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 00fdffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 18
 > System Thread ID: 864
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 0104fe14 7c90e9ab ntdll!KiFastSystemCallRet
 > 01 0104fe18 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
 > 02 0104feb4 77d4bbfe kernel32!WaitForMultipleObjectsEx+0x12c
 > 03 0104ff10 77d4bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
 > 04 0104ff2c 7668b714 USER32!MsgWaitForMultipleObjects+0x1f
 > 05 0104ff80 77c3a3b0 COMSVCS!CSTAThread::WorkerLoop+0x1ea
 > 06 0104ffb4 7c80b50b msvcrt!_endthreadex+0xa9
 > 07 0104ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 19
 > System Thread ID: 514
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 01d8fd08 7c90e9c0 ntdll!KiFastSystemCallRet
 > 01 01d8fd0c 7c8025db ntdll!ZwWaitForSingleObject+0xc
 > 02 01d8fd70 7c802542 kernel32!WaitForSingleObjectEx+0xa8
 > 03 01d8fd84 76662235 kernel32!WaitForSingleObject+0x12
 > 04 01d8ffb4 7c80b50b COMSVCS!PingThread+0xf2
 > 05 01d8ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 20
 > System Thread ID: 368
 > Kernel Time: 0:0:0.10
 > User Time: 0:0:0.200
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 >
 > # ChildEBP RetAddr
 > 00 006afe18 7c90e399 ntdll!KiFastSystemCallRet
 > 01 006afe1c 77e76703 ntdll!NtReplyWaitReceivePortEx+0xc
 > 02 006aff80 77e76c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0xf4
 > 03 006aff88 77e76a3b RPCRT4!RecvLotsaCallsWrapper+0xd
 > 04 006affa8 77e76c0a RPCRT4!BaseCachedThreadRoutine+0x79
 > 05 006affb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
 > 06 006affec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 21
 > System Thread ID: 928
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0072ff1c 7c90d85c ntdll!KiFastSystemCallRet
 > 01 0072ff20 7c8023ed ntdll!NtDelayExecution+0xc
 > 02 0072ff78 7c802451 kernel32!SleepEx+0x61
 > 03 0072ff88 774f2fcb kernel32!Sleep+0xf
 > 04 0072ff94 774f314d ole32!CROIDTable::WorkerThreadLoop+0x14
 > 05 0072ffa4 774e0000 ole32!CRpcThread::WorkerLoop+0x1e
 > 06 0072ffb4 7c80b50b ole32!_imp__RegQueryValueExA <PERF> (ole32+0x0)
 > 07 0072ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 22
 > System Thread ID: a58
 > Kernel Time: 0:0:0.30
 > User Time: 0:0:0.50
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 00bdff24 7c90e9c0 ntdll!KiFastSystemCallRet
 > 01 00bdff28 7c8025db ntdll!ZwWaitForSingleObject+0xc
 > 02 00bdff8c 774f3178 kernel32!WaitForSingleObjectEx+0xa8
 > 03 00bdffa8 774f31b5 ole32!CRpcThread::WorkerLoop+0x5c
 > 04 00bdffb4 7c80b50b ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1b
 > 05 00bdffec 00000000 kernel32!BaseThreadStart+0x37
 >
 >
 >
 >
 > Thread ID: 23
 > System Thread ID: a60
 > Kernel Time: 0:0:0.80
 > User Time: 0:0:0.110
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 >
 > # ChildEBP RetAddr
 > 00 00c1fd68 7c90e57c ntdll!KiFastSystemCallRet
 > 01 00c1fd6c 7c809c38 ntdll!NtSetEvent+0xc
 > 02 00c1fd7c 7753a418 kernel32!SetEvent+0x10
 > 03 00c1fd8c 77e8afa2 ole32!ThreadSignal+0xc6
 > 04 00c1fda0 77e8ada1 RPCRT4!CALL::IssueNotificationMain+0x75
 > 05 00c1fdb0 77e8ad68 RPCRT4!CALL::IssueNotification+0x22
 > 06 00c1fe04 77e8ac3c RPCRT4!LRPC_CCALL::ProcessResponse+0x28b
 > 07 00c1fe28 77e8abb6 RPCRT4!LRPC_CASSOCIATION::ProcessResponse+0x92
 > 08 00c1ff80 77e76c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x23c
 > 09 00c1ff88 77e76a3b RPCRT4!RecvLotsaCallsWrapper+0xd
 > 0a 00c1ffa8 77e76c0a RPCRT4!BaseCachedThreadRoutine+0x79
 > 0b 00c1ffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
 > 0c 00c1ffec 00000000 kernel32!BaseThreadStart+0x37
 >
 > *****
 >
 > Dump name is formatted as: PID-Timestamp.dmp
 >
 > Creating C:\iisstate\output\1252-1105462326.dmp - mini user dump
 >
 > *****
 >
 > Closing open log file C:\iisstate\output\IISState-1252.log
 >
 > =========================================================
 >
 > Thanks in advance,
 > Paul<!-- ~MESSAGE_AFTER~ -->