There is no activity going on. ASP threads were created, but no requests
are executing, etc. The logs look pretty normal. Was the problem happening
at the time?
Pat
"Dean" <anonymous DeleteThis @discussions.microsoft.com> wrote in message
news:1BE6BC4C-A70A-4C07-9946-0243DDB19290@microsoft.com...
> I have ran IIS state on the 2 DLLHOST of a server that has a locking web
page. The only thing that seems to resolve this is an actual reboot of the
server, this fixes the problem for a day or so then the problem re-occurs.
> Please could someone help in interpreting the log.
> Many thanks in advance.
>
> Opened log file 'c:\iisstate.log'
> ***********************
> Starting new log output
> IISState version 2.3
> OS = Windows 2000
> PID = 2372
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 940
> Kernel Time: 0:0:0:46
> User Time: 0:0:0:0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006fd28 77ea9b35 ntdll!NtWaitForSingleObject+0xb
> 01 0006fd50 77e8b32b KERNEL32!WaitForSingleObjectEx+0x71
> 02 0006fd60 77aaa483 KERNEL32!WaitForSingleObject+0xf
> 03 0006fd80 77aa9c91
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
> 06 0006ffc0 77ea847c dllhost!WinMainCRTStartup+0x156
> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: 948
> Kernel Time: 0:0:2:171
> User Time: 0:0:1:796
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0087fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 0087ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0087ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0087ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0087ffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 05 0087ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: 950
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 008fff30 77abaf4d USER32!NtUserGetMessage+0xb
> 01 008fff70 77abae9b ole32!CDllHost::STAWorkerLoop+0x40
> 02 008fff8c 77abadd6 ole32!CDllHost::WorkerThread+0xc2
> 03 008fff90 77ab46fb ole32!DLLHostThreadEntry+0x9
> 04 008fffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x22
> 05 008fffb4 77e8b2d8 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 008fffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: 978
> Kernel Time: 0:0:0:15
> User Time: 0:0:0:15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00a0fc6c 77e95244 ntdll!NtRemoveIoCompletion+0xb
> 01 00a0fc98 6de8b953 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00a0fd94 6de8b8a8 TxfAux!WORK_QUEUE::WorkerLoop+0x83
> 03 00a0ffb4 77e8b2d8 TxfAux!WORK_QUEUE::ThreadLoop+0x58
> 04 00a0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 954
> Kernel Time: 0:0:2:156
> User Time: 0:0:1:578
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00a8fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 00a8ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00a8ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00a8ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00a8ffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 05 00a8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 9c0
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00c2ff08 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00c2ff58 77ea9c13 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00c2ff70 787f21d4 KERNEL32!WaitForMultipleObjects+0x17
> 03 00c2ffb4 77e8b2d8 COMSVCS!CEventDispatcher::PushEvents+0x44
> 04 00c2ffc0 00000008 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 9c4
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00c6fb68 77d4ec77 ntdll!NtRequestWaitReplyPort+0xb
> 01 00c6fb94 77d3a2c7 RPCRT4!LRPC_CCALL::SendReceive+0x11e
> 02 00c6fba0 77b23b2c RPCRT4!I_RpcSendReceive+0x2c
> 03 00c6fbc0 77b239f7 ole32!ThreadSendReceive+0xef
> 04 00c6fbd8 77b20aa5
ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14a
> 05 00c6fc18 77b23870 ole32!CRpcChannelBuffer::SendReceive2+0x96
> 06 00c6fc28 77a6c767 ole32!CRpcChannelBuffer::SendReceive+0x11
> 07 00c6fc88 77ab6ac3 ole32!CAptRpcChnl::SendReceive+0xa9
> 08 00c6fce0 77d90328 ole32!CCtxComChnl::SendReceive+0x124
> 09 00c6fcfc 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
> 0a 00c6ff44 77d95f85 RPCRT4!NdrClientCall2+0x4f5
> 0b 00c6ff60 77d77fcb RPCRT4!ObjectStublessClient+0x76
> 0c 00c6ff70 787f212e RPCRT4!ObjectStubless+0xf
> 0d 00c6ffb4 77e8b2d8
COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x10e
> 0e 00c6ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 9c8
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00cafee4 77ea9d94 ntdll!NtDelayExecution+0xb
> 01 00caff04 77ea9d5f KERNEL32!SleepEx+0x32
> 02 00caff10 787cf77a KERNEL32!Sleep+0xb
> 03 00caff80 780060ce COMSVCS!PostData+0xf2
> 04 00caffb4 77e8b2d8 MSVCRT!_beginthreadex+0xca
> 05 00caffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 9d8
> Kernel Time: 0:0:39:781
> User Time: 0:0:14:625
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00f2fe60 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00f2feb0 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00f2ff0c 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00f2ff28 6e5a2399 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00f2ff80 780060ce IISRTL!SchedulerWorkerThread+0xa7
> 05 00f2ffb4 77e8b2d8 MSVCRT!_beginthreadex+0xca
> 06 00f2ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 9dc
> Kernel Time: 0:0:36:125
> User Time: 0:0:16:31
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00f6fe60 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00f6feb0 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00f6ff0c 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00f6ff28 6e5a2399 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00f6ff80 780060ce IISRTL!SchedulerWorkerThread+0xa7
> 05 00f6ffb4 77e8b2d8 MSVCRT!_beginthreadex+0xca
> 06 00f6ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: 9e4
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: ATQ Listener
> # ChildEBP RetAddr
> 00 0108ff50 77e95244 ntdll!NtRemoveIoCompletion+0xb
> 01 0108ff7c 6d7021b4 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0108ffb4 77e8b2d8 ISATQ!AtqPoolThread+0x40
> 03 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: 9e8
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: ATQ Listener
> # ChildEBP RetAddr
> 00 010cff50 77e95244 ntdll!NtRemoveIoCompletion+0xb
> 01 010cff7c 6d7021b4 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 010cffb4 77e8b2d8 ISATQ!AtqPoolThread+0x40
> 03 010cffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: 9f0
> Kernel Time: 0:2:34:484
> User Time: 0:1:11:859
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0124feb8 77e95244 ntdll!NtRemoveIoCompletion+0xb
> 01 0124fee4 77d809da KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0124ff20 77d50ede RPCRT4!COMMON_ProcessCalls+0x9e
> 03 0124ff74 77d50d17 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 0124ff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 0124ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 0124ffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 07 0124ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: 9f4
> Kernel Time: 0:0:2:640
> User Time: 0:0:1:609
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0128fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 0128ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0128ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0128ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0128ffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 05 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: 9f8
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 01e2fe74 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01e2fec4 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01e2ff20 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01e2ff3c 74a1a6f2 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01e2ff80 7800c9eb asp!CMTACallbackThread::Thread+0x42
> 05 01e2ffb4 77e8b2d8 MSVCRT!_beginthread+0xce
> 06 01e2ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 15
> System Thread ID: a00
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> *** WARNING: Unable to verify checksum for
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
for -
> Thread Type: PDM Thread.
> # ChildEBP RetAddr
> 00 01eafddc 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01eafe2c 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01eafe88 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01eafea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
> 04 01eaff88 4a008a85 pdm+0x886c
> 05 01eaffb0 4a008a09 pdm+0x8a85
> 06 01eaffb4 77e8b2d8 pdm+0x8a09
> 07 01eaffc0 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 16
> System Thread ID: a08
> Kernel Time: 0:0:31:265
> User Time: 0:0:49:312
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 01eefe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01eefe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01eefed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01eefef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01eeff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 01eeffb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 01eeffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 17
> System Thread ID: a0c
> Kernel Time: 0:0:29:265
> User Time: 0:0:45:156
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 01f2fe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01f2fe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01f2fed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01f2fef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01f2ff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 01f2ffb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 18
> System Thread ID: a10
> Kernel Time: 0:0:1:125
> User Time: 0:0:1:687
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 01f6fe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01f6fe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01f6fed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01f6fef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01f6ff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 01f6ffb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 01f6ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 19
> System Thread ID: a14
> Kernel Time: 0:0:36:765
> User Time: 0:0:52:0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 01fafe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01fafe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01fafed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01fafef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01faff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 01faffb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 01faffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 20
> System Thread ID: a18
> Kernel Time: 0:0:34:812
> User Time: 0:0:58:453
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 01fefe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01fefe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 01fefed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 01fefef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01feff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 01feffb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 01feffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 21
> System Thread ID: a1c
> Kernel Time: 0:0:29:203
> User Time: 0:0:50:671
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0202fe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0202fe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0202fed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0202fef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0202ff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 0202ffb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 0202ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 22
> System Thread ID: a20
> Kernel Time: 0:0:31:796
> User Time: 0:0:50:875
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0206fe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0206fe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0206fed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0206fef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0206ff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 0206ffb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 0206ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 23
> System Thread ID: a24
> Kernel Time: 0:0:40:796
> User Time: 0:1:1:640
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 020afe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 020afe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 020afed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 020afef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 020aff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 020affb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 020affec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 24
> System Thread ID: a28
> Kernel Time: 0:0:34:203
> User Time: 0:0:58:578
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 020efe28 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 020efe78 77e1e97b KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 020efed4 77e1e9c8 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 020efef0 787c1e23 USER32!MsgWaitForMultipleObjects+0x1d
> 04 020eff1c 787c1219 COMSVCS!STAThread::WaitForWork+0x65
> 05 020effb4 77e8b2d8 COMSVCS!STAThread::STAThreadWorker+0x4d1
> 06 020effec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 25
> System Thread ID: a2c
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0214ff9c 77fa21d2 ntdll!NtDelayExecution+0xb
> 01 0214ffb4 77e8b2d8 ntdll!RtlpTimerThread+0x42
> 02 0214ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 26
> System Thread ID: a30
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02aeff20 77fa07b7 ntdll!NtRemoveIoCompletion+0xb
> 01 02aeffb4 77e8b2d8 ntdll!RtlpWorkerThread+0x6b
> 02 02aeffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 27
> System Thread ID: 50c
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Distributed Transaction. Checking for running ASP page
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 04fbff40 77ea9b35 ntdll!NtWaitForSingleObject+0xb
> 01 04fbff68 77e8b32b KERNEL32!WaitForSingleObjectEx+0x71
> 02 04fbff78 6dfce3f6 KERNEL32!WaitForSingleObject+0xf
> 03 04fbffb0 6dfce30b
MSDTCPRX!CConnectionManager::TimerProcForNonGuardedUser+0xe6
> 04 04fbffb4 77e8b2d8 MSDTCPRX!CConnectionManager::TimerProc+0x1b
> 05 4001a000 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 28
> System Thread ID: 4e0
> Kernel Time: 0:0:0:15
> User Time: 0:0:0:0
> Thread Type: ATQ Listener
> # ChildEBP RetAddr
> 00 01e6ff50 77e95244 ntdll!NtRemoveIoCompletion+0xb
> 01 01e6ff7c 6d7021b4 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 01e6ffb4 77e8b2d8 ISATQ!AtqPoolThread+0x40
> 03 01e6ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 29
> System Thread ID: 9a8
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02daff60 77ea9b35 ntdll!NtWaitForSingleObject+0xb
> 01 02daff88 77ab4719 KERNEL32!WaitForSingleObjectEx+0x71
> 02 02daffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x40
> 03 02daffb4 77e8b2d8 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 04 02daffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 30
> System Thread ID: a70
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 008bfeb8 77e95244 ntdll!NtRemoveIoCompletion+0xb
> 01 008bfee4 77d809da KERNEL32!GetQueuedCompletionStatus+0x27
> 02 008bff20 77d50ede RPCRT4!COMMON_ProcessCalls+0x9e
> 03 008bff74 77d50d17 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 008bff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 008bffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 008bffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 07 008bffec 00000000 KERNEL32!BaseThreadStart+0x52
> Closing open log file c:\iisstate.log
>
> Opened log file 'c:\iisstate.log'
> ***********************
> Starting new log output
> IISState version 2.3
> OS = Windows 2000
> PID = 2440
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 984
> Kernel Time: 0:0:0:15
> User Time: 0:0:0:15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006fd28 77ea9b35 ntdll!NtWaitForSingleObject+0xb
> 01 0006fd50 77e8b32b KERNEL32!WaitForSingleObjectEx+0x71
> 02 0006fd60 77aaa483 KERNEL32!WaitForSingleObject+0xf
> 03 0006fd80 77aa9c91
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
> 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
> 05 0006ff24 010014c6 dllhost!WinMain+0xb0
> 06 0006ffc0 77ea847c dllhost!WinMainCRTStartup+0x156
> 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: 98c
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0087fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 0087ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0087ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0087ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 0087ffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 05 0087ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: 994
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 008fff30 77abaf4d USER32!NtUserGetMessage+0xb
> 01 008fff70 77abae9b ole32!CDllHost::STAWorkerLoop+0x40
> 02 008fff8c 77abadd6 ole32!CDllHost::WorkerThread+0xc2
> 03 008fff90 77ab46fb ole32!DLLHostThreadEntry+0x9
> 04 008fffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x22
> 05 008fffb4 77e8b2d8 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 008fffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: 9a0
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:31
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00a0fc6c 77e95244 ntdll!NtRemoveIoCompletion+0xb
> 01 00a0fc98 6de8b953 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00a0fd94 6de8b8a8 TxfAux!WORK_QUEUE::WorkerLoop+0x83
> 03 00a0ffb4 77e8b2d8 TxfAux!WORK_QUEUE::ThreadLoop+0x58
> 04 00a0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 9a4
> Kernel Time: 0:0:0:15
> User Time: 0:0:0:0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00a4fddc 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00a4fe2c 77ea9c13 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00a4fe44 788010f3 KERNEL32!WaitForMultipleObjects+0x17
> 03 00a4ff34 787fe72a COMSVCS!CRMRecoveryClerk::RecoveryThread+0x48f
> 04 00a4ff80 7800c9eb COMSVCS!RecoveryThreadFunction+0x8c
> 05 00a4ffb4 77e8b2d8 MSVCRT!_beginthread+0xce
> 06 00a4ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 998
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00b0fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 00b0ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00b0ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00b0ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00b0ffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 05 00b0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 9b0
> Kernel Time: 0:0:0:15
> User Time: 0:0:0:31
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00b4f5f0 77ea9d00 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00b4f640 77ea9c13 KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00b4f658 787ecc3d KERNEL32!WaitForMultipleObjects+0x17
> 03 00b4f6a4 77d77fb0 COMSVCS!CLceDisp::DoWork+0xab
> 04 00b4f6c0 77d95ad7 RPCRT4!Invoke+0x30
> 05 00b4f924 77d8f77e RPCRT4!NdrStubCall2+0x655
> 06 00b4f988 77b22548 RPCRT4!CStdStubBuffer_Invoke+0xc8
> 07 00b4f9cc 77b22823 ole32!SyncStubInvoke+0x61
> 08 00b4fa14 77ab6e81 ole32!StubInvoke+0xa8
> 09 00b4fa78 77aa9a11 ole32!CCtxComChnl::ContextInvoke+0xbb
> 0a 00b4fa94 77b2242d ole32!MTAInvoke+0x18
> 0b 00b4fac4 77b22b58 ole32!AppInvoke+0xb5
> 0c 00b4fb84 77b2289b ole32!ComInvokeWithLockAndIPID+0x29e
> 0d 00b4fba4 77ab3347 ole32!ComInvoke+0x41
> 0e 00b4fbb4 77b23897 ole32!ThreadDispatch+0x21
> 0f 00b4fbc8 77b238dd ole32!DispatchCall+0x24
> 10 00b4fbe0 77b20aa5
ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x30
> 11 00b4fc20 77b23870 ole32!CRpcChannelBuffer::SendReceive2+0x96
> 12 00b4fc30 77a6c767 ole32!CRpcChannelBuffer::SendReceive+0x11
> 13 00b4fc90 77ab6ac3 ole32!CAptRpcChnl::SendReceive+0xa9
> 14 00b4fce8 77d90328 ole32!CCtxComChnl::SendReceive+0x124
> 15 00b4fd04 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
> 16 00b4ff4c 77d95f85 RPCRT4!NdrClientCall2+0x4f5
> 17 00b4ff68 77d77fcb RPCRT4!ObjectStublessClient+0x76
> 18 00b4ff78 787eed9f RPCRT4!ObjectStubless+0xf
> 19 00b4ffb4 77e8b2d8 COMSVCS!CEventServer::DispatchEvents+0x81
> 1a 00b4ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 9b4
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00b8fee4 77ea9d94 ntdll!NtDelayExecution+0xb
> 01 00b8ff04 77ea9d5f KERNEL32!SleepEx+0x32
> 02 00b8ff10 787cf77a KERNEL32!Sleep+0xb
> 03 00b8ff80 780060ce COMSVCS!PostData+0xf2
> 04 00b8ffb4 77e8b2d8 MSVCRT!_beginthreadex+0xca
> 05 00b8ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 9b8
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:15
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
> Continuing with other analysis.
>
> No remote call being made
> # ChildEBP RetAddr
> 00 00c0fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 00c0ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 00c0ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00c0ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 04 00c0ffb4 77e8b2d8 RPCRT4!ThreadStartRoutine+0x18
> 05 00c0ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 9bc
> Kernel Time: 0:0:0:0
> User Time: 0:0:0:0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00c4ebe0 77fa0e3d ntdll!ZwWaitForMultipleObjects+0xb
> 01 00c4ffb4 77e8b2d8 ntdll!RtlpWaitThread+0x1b9
> 02 00c4ffec 00000000 KERNEL32!BaseThreadStart+0x52
> Closing open log file c:\iisstate.log
><!-- ~MESSAGE_AFTER~ -->
FAQ
Search
Profile
Private Messages
Log in/Register/Password
