Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

IIS 5 100% CPU troubleshooting tools - IISState?

 
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  Method=GET, but not sending all values for all co..  
Author Message
mmr

External


Since: Feb 16, 2004
Posts: 11



(Msg. 1) Posted: Mon Feb 16, 2004 1:33 pm
Post subject: IIS 5 100% CPU troubleshooting tools - IISState?
Archived from groups: microsoft>public>inetserver>iis (more info?)

I need to find a way to determine the source of 100% CPU utilization
episodes on a shared web hosting server running Win2k SP4. The box is run
headless, managed normally via terminal services remote administration. The
symptoms typically are one of the DLLHOST.EXE processes is showing up in
task manager as the culprit. On a few rarer occasions, inetinfo.exe was the
one nearing 100% CPU.

What will allow me to match the DLLHOST.EXE process with the particular high
isolation virtual server or shared application pool? And if it is the
shared pool, get me to the particular virtual server causing the disruption?

I've seen IISState mentioned for troubleshooting, and have downloaded and
installed it over the weekend. The documentation indicated that it doesn't
work with terminal services on Win2K. I tried setting up a scheduled job as
suggested, but I also tried running it from a command prompt, and could not
see any significant difference in the results. Am I misunderstanding? Or
is it not fully working in either case? (No indications of errors from it.)

Are there some links where I can learn more about how to use this or other
tools?

Here is one of the logs that were created last night during 100%CPU episode.
This DLLHOST.EXE must have been the pool since there are multiple domains
references. But I can't decipher a troublemaker from the data.


Opened log file 'D:\iisstate\output\IISState-3120.log'

***********************
Starting new log output
IISState version 3.3.1

Sun Feb 15 18:07:01 2004

OS = Windows 2000
Executable: dllhost.exe
PID = 3120

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: c54
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0006fd28 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0006fd50 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0006fd60 77aaa483 KERNEL32!WaitForSingleObject+0xf
03 0006fd80 77aa9c91
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
05 0006ff24 010014c6 dllhost!WinMain+0xb0
06 0006ffc0 7c4e87f5 dllhost!WinMainCRTStartup+0x156
07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: d2c
Kernel Time: 0:0:0.78
User Time: 0:0:0.46
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0088fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 0088ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0088ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0088ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
04 0088ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: bf8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 008cff5c 7c4faca5 ntdll!NtDelayExecution+0xb
01 008cff7c 7c4fac79 KERNEL32!SleepEx+0x32
02 008cff88 77ab85fc KERNEL32!Sleep+0xb
03 008cff90 77ab46fb ole32!CROIDTable::WorkerThreadLoop+0xc
04 008cffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x22
05 008cffb4 7c4e987c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 008cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 61c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0090ff30 77abaf4d USER32!NtUserGetMessage+0xb
01 0090ff70 77abae9b ole32!CDllHost::STAWorkerLoop+0x40
02 0090ff8c 77abadd6 ole32!CDllHost::WorkerThread+0xc2
03 0090ff90 77ab46fb ole32!DLLHostThreadEntry+0x9
04 0090ffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x22
05 0090ffb4 7c4e987c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 6c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.46
Thread Type: Other
# ChildEBP RetAddr
00 0099fc6c 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 0099fc98 6de8b983 KERNEL32!GetQueuedCompletionStatus+0x27
02 0099fd94 6de8b8d8 TxfAux!WORK_QUEUE::WorkerLoop+0x83
03 0099ffb4 7c4e987c TxfAux!WORK_QUEUE::ThreadLoop+0x58
04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: c98
Kernel Time: 0:0:0.46
User Time: 0:0:0.62
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 00b9fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 00b9ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00b9ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00b9ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
04 00b9ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 00b9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: c7c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WIN2K\system32\ODBC32.DLL -
Thread Type: Other
# ChildEBP RetAddr
00 00bdff20 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 00bdff70 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 00bdff88 00a0466f KERNEL32!WaitForMultipleObjects+0x17
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 00bdffb4 7c4e987c ODBC32!ODBCGetTryWaitValue+0xca
04 00000101 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: c5c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00c1ff08 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 00c1ff58 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 00c1ff70 787f37d4 KERNEL32!WaitForMultipleObjects+0x17
03 00c1ffb4 7c4e987c COMSVCS!CEventDispatcher::PushEvents+0x44
04 00c1ffc0 00000008 KERNEL32!BaseThreadStart+0x52




Thread ID: 8
System Thread ID: c88
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

Remote call is either to a MTA object or object not initialized. Also,
possible utility thread.
DCOM call being made to Process ID: 1636
Waiting on thread id: ffffffff

# ChildEBP RetAddr
00 00c5fb68 77d4ec77 ntdll!NtRequestWaitReplyPort+0xb
01 00c5fb94 77d3a2c7 RPCRT4!LRPC_CCALL::SendReceive+0x11e
02 00c5fba0 77b23b2c RPCRT4!I_RpcSendReceive+0x2c
03 00c5fbc0 77b239f7 ole32!ThreadSendReceive+0xef
04 00c5fbd8 77b20aa5 ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14a
05 00c5fc18 77b23870 ole32!CRpcChannelBuffer::SendReceive2+0x96
06 00c5fc28 77a6c767 ole32!CRpcChannelBuffer::SendReceive+0x11
07 00c5fc88 77ab6ac3 ole32!CAptRpcChnl::SendReceive+0xa9
08 00c5fce0 77d90328 ole32!CCtxComChnl::SendReceive+0x124
09 00c5fcfc 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 00c5ff44 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 00c5ff60 77d77fcb RPCRT4!ObjectStublessClient+0x76
0c 00c5ff70 787f372e RPCRT4!ObjectStubless+0xf
0d 00c5ffb4 7c4e987c
COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x10e
0e 00c5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: cf4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 00c9fee0 7c4faca5 ntdll!NtDelayExecution+0xb
01 00c9ff00 7c4fac79 KERNEL32!SleepEx+0x32
02 00c9ff0c 787d011a KERNEL32!Sleep+0xb
03 00c9ff7c 780085bc COMSVCS!PostData+0xf2
04 00c9ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
05 00c9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: bb0
Kernel Time: 0:0:0.250
User Time: 0:0:0.171
Thread Type: Other
# ChildEBP RetAddr
00 00f1fe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 00f1feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00f1ff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 00f1ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00f1ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00f1ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
06 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: d30
Kernel Time: 0:0:0.468
User Time: 0:0:0.203
Thread Type: Other
# ChildEBP RetAddr
00 00f5fe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 00f5feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00f5ff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 00f5ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 00f5ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
05 00f5ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
06 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: d48
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0094ff50 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 0094ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 0094ffb4 7c4e987c ISATQ!AtqPoolThread+0x40
03 0094ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: c10
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0104ff50 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 0104ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 0104ffb4 7c4e987c ISATQ!AtqPoolThread+0x40
03 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14
System Thread ID: 5c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 011cfeb8 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 011cfee4 77d809da KERNEL32!GetQueuedCompletionStatus+0x27
02 011cff20 77d50ede RPCRT4!COMMON_ProcessCalls+0x9e
03 011cff74 77d50d17 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 011cff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
05 011cffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
06 011cffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
07 011cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 15
System Thread ID: ba4
Kernel Time: 0:0:0.15
User Time: 0:0:0.46
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made
# ChildEBP RetAddr
00 0128fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 0128ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0128ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0128ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
04 0128ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 16
System Thread ID: c8c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 01dafe70 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 01dafec0 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01daff1c 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 01daff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
04 01daff7c 78008454 asp!CMTACallbackThread::Thread+0x42
05 01daffb4 7c4e987c MSVCRT!_endthread+0xc6
06 01daffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 17
System Thread ID: 93c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** WARNING: Unable to verify checksum for
*** ERROR: Symbol file could not be found. Defaulted to export symbols
or -
Thread Type: PDM (Debugger) Thread.
# ChildEBP RetAddr
00 01e2fddc 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 01e2fe2c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01e2fe88 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 01e2fea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
04 01e2ff88 4a008a85 pdm+0x886c
05 01e2ffb0 4a008a09 pdm+0x8a85
06 01e2ffb4 7c4e987c pdm+0x8a09
07 01e2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 18
System Thread ID: ca8
Kernel Time: 0:0:0.93
User Time: 0:0:0.734
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WIN2K\System32\msjetoledb40.dll -
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0107030\BESTCOMPUTERBOOKS.COM\WEBROOT\ORDER.ASP

# ChildEBP RetAddr
00 01e6eb50 77f92387 ntdll!NtWaitForSingleObject+0xb
01 01e6ebc4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 01e6ebcc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 01e6ebd4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 01e6ebec 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 01e6ec48 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 19
System Thread ID: c14
Kernel Time: 0:0:0.109
User Time: 0:0:0.484
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 01eae460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 01eae4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 01eae4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 01eae4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 01eae4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 01eae558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 20
System Thread ID: 7c8
Kernel Time: 0:0:0.93
User Time: 0:0:0.390
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 01eee91c 77f92387 ntdll!NtWaitForSingleObject+0xb
01 01eee990 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 01eee998 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 01eee9a0 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 01eee9b8 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 01eeea14 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 21
System Thread ID: d00
Kernel Time: 0:0:0.46
User Time: 0:0:0.453
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 01f2fe28 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 01f2fe78 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01f2fed4 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 01f2fef0 787c2885 USER32!MsgWaitForMultipleObjects+0x1d
04 01f2ff1c 787c1daa COMSVCS!STAThread::WaitForWork+0x37
05 01f2ffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x4b2
06 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 22
System Thread ID: 6ec
Kernel Time: 0:0:0.15
User Time: 0:0:0.265
*** ERROR: Symbol file could not be found. Defaulted to export symbols
or -
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0208091\HILBORNINJECTION.COM\WEBROOT\PRODUCT.ASP

# ChildEBP RetAddr
00 01f6caf4 77f92387 ntdll!NtWaitForSingleObject+0xb
01 01f6cb68 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 01f6cb70 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 01f6cb78 1b00a149 msjet40!UtilEnterCriticalSection+0xb
04 01f6cb90 092d6853 msjet40!JetSetSystemParameter+0x2f
05 01f6d064 092d74dc odbcjt32!TellJetAboutRegistry+0xd9
06 01f6e1c8 092d8c68 odbcjt32!SQLConnectCover+0x395
07 01f6e1fc 009e36de odbcjt32!SQLDriverConnectW+0x3d
WARNING: Stack unwind information not available. Following frames may be
wrong.
08 01f6e240 009e2a3b ODBC32!MpHeapFree+0x9b6
09 01f6e980 1f69b623 ODBC32!SQLDriverConnectW+0x1a5
0a 01f6e9e4 1f69b5be msdasql!CODBCHandle::OHDriverConnect+0x78
0b 01f6ea04 1f69b41f msdasql!CHdbcNode::DriverConnect+0x20
0c 01f6ea48 1f8b0365 msdasql!CImpIDBInitialize::Initialize+0x161
0d 01f6ea74 1f8b02ff oledb32!CDBInitialize::DoInitialize+0x32
0e 01f6eaa4 1f8a4636 oledb32!CDBInitialize::Initialize+0x58
0f 01f6eb4c 7878e1d7 oledb32!CDCMPool::CreateResource+0x1e6
10 01f6eb88 7878ecef
COMSVCS!CHolder::SafeDispenserDriver::CreateResource+0x45
11 01f6ebd8 1f8a50e1 COMSVCS!CHolder::AllocResource+0x3ef
12 01f6ec28 1f8a5aed oledb32!CDCMPool::DrawResource+0x9d
13 01f6ec80 1f8a59bf oledb32!CDCMPoolManager::DrawResource+0x176
14 01f6ece0 1f441756 oledb32!CDPO::Initialize+0x136
15 01f6edd0 1f4416e1 msado15!_ConnectAsync+0x96
16 01f6ede0 1f441627 msado15!ConnectAsync+0x1f
17 01f6ef6c 1f44389e msado15!CConnection::Open+0xaf0
18 01f6f1e8 6b614279 msado15!CConnection::Invoke+0xb5c
19 01f6f21c 6b60d177 vbscript!DllCanUnloadNow+0x8e24
1a 00000001 00000000 vbscript!DllCanUnloadNow+0x1d22




Thread ID: 23
System Thread ID: cf8
Kernel Time: 0:0:0.156
User Time: 0:0:1.46
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0208091\HILBORNINJECTION.COM\WEBROOT\PRODUCT.ASP

# ChildEBP RetAddr
00 01facaf4 77f92387 ntdll!NtWaitForSingleObject+0xb
01 01facb68 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 01facb70 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 01facb78 1b00a149 msjet40!UtilEnterCriticalSection+0xb
04 01facb90 092d6853 msjet40!JetSetSystemParameter+0x2f
05 01fad064 092d74dc odbcjt32!TellJetAboutRegistry+0xd9
06 01fae1c8 092d8c68 odbcjt32!SQLConnectCover+0x395
07 01fae1fc 009e36de odbcjt32!SQLDriverConnectW+0x3d
WARNING: Stack unwind information not available. Following frames may be
wrong.
08 01fae240 009e2a3b ODBC32!MpHeapFree+0x9b6
09 01fae980 1f69b623 ODBC32!SQLDriverConnectW+0x1a5
0a 01fae9e4 1f69b5be msdasql!CODBCHandle::OHDriverConnect+0x78
0b 01faea04 1f69b41f msdasql!CHdbcNode::DriverConnect+0x20
0c 01faea48 1f8b0365 msdasql!CImpIDBInitialize::Initialize+0x161
0d 01faea74 1f8b02ff oledb32!CDBInitialize::DoInitialize+0x32
0e 01faeaa4 1f8a4636 oledb32!CDBInitialize::Initialize+0x58
0f 01faeb4c 7878e1d7 oledb32!CDCMPool::CreateResource+0x1e6
10 01faeb88 7878ecef
COMSVCS!CHolder::SafeDispenserDriver::CreateResource+0x45
11 01faebd8 1f8a50e1 COMSVCS!CHolder::AllocResource+0x3ef
12 01faec28 1f8a5aed oledb32!CDCMPool::DrawResource+0x9d
13 01faec80 1f8a59bf oledb32!CDCMPoolManager::DrawResource+0x176
14 01faece0 1f441756 oledb32!CDPO::Initialize+0x136
15 01faedd0 1f4416e1 msado15!_ConnectAsync+0x96
16 01faede0 1f441627 msado15!ConnectAsync+0x1f
17 01faef6c 1f44389e msado15!CConnection::Open+0xaf0
18 01faf1e8 6b614279 msado15!CConnection::Invoke+0xb5c
19 01faf21c 6b60d177 vbscript!DllCanUnloadNow+0x8e24
1a 00000001 00000000 vbscript!DllCanUnloadNow+0x1d22




Thread ID: 24
System Thread ID: cbc
Kernel Time: 0:0:0.46
User Time: 0:0:0.390
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0208091\HILBORNINJECTION.COM\WEBROOT\CATEGORY.ASP

# ChildEBP RetAddr
00 01fecaf4 77f92387 ntdll!NtWaitForSingleObject+0xb
01 01fecb68 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 01fecb70 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 01fecb78 1b00a149 msjet40!UtilEnterCriticalSection+0xb
04 01fecb90 092d6853 msjet40!JetSetSystemParameter+0x2f
05 01fed064 092d74dc odbcjt32!TellJetAboutRegistry+0xd9
06 01fee1c8 092d8c68 odbcjt32!SQLConnectCover+0x395
07 01fee1fc 009e36de odbcjt32!SQLDriverConnectW+0x3d
WARNING: Stack unwind information not available. Following frames may be
wrong.
08 01fee240 009e2a3b ODBC32!MpHeapFree+0x9b6
09 01fee980 1f69b623 ODBC32!SQLDriverConnectW+0x1a5
0a 01fee9e4 1f69b5be msdasql!CODBCHandle::OHDriverConnect+0x78
0b 01feea04 1f69b41f msdasql!CHdbcNode::DriverConnect+0x20
0c 01feea48 1f8b0365 msdasql!CImpIDBInitialize::Initialize+0x161
0d 01feea74 1f8b02ff oledb32!CDBInitialize::DoInitialize+0x32
0e 01feeaa4 1f8a4636 oledb32!CDBInitialize::Initialize+0x58
0f 01feeb4c 7878e1d7 oledb32!CDCMPool::CreateResource+0x1e6
10 01feeb88 7878ecef
COMSVCS!CHolder::SafeDispenserDriver::CreateResource+0x45
11 01feebd8 1f8a50e1 COMSVCS!CHolder::AllocResource+0x3ef
12 01feec28 1f8a5aed oledb32!CDCMPool::DrawResource+0x9d
13 01feec80 1f8a59bf oledb32!CDCMPoolManager::DrawResource+0x176
14 01feece0 1f441756 oledb32!CDPO::Initialize+0x136
15 01feedd0 1f4416e1 msado15!_ConnectAsync+0x96
16 01feede0 1f441627 msado15!ConnectAsync+0x1f
17 01feef6c 1f44389e msado15!CConnection::Open+0xaf0
18 01fef1e8 6b614279 msado15!CConnection::Invoke+0xb5c
19 01fef21c 6b60d177 vbscript!DllCanUnloadNow+0x8e24
1a 00000001 00000000 vbscript!DllCanUnloadNow+0x1d22




Thread ID: 25
System Thread ID: cac
Kernel Time: 0:0:0.156
User Time: 0:0:0.468
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 0202e710 7c4faca5 ntdll!NtDelayExecution+0xb
01 0202e730 7c4fac79 KERNEL32!SleepEx+0x32
02 0202e73c 1f453d0c KERNEL32!Sleep+0xb
03 0202e750 1f43a7f0 msado15!CQuery::Cancel+0x50
04 0202e788 1f43a431 msado15!CCommand::Cancel+0x58
05 0202e85c 1f44494b msado15!CConnection::_Close+0x1f9
06 0202e88c 1f450931 msado15!CConnection::Close+0x8d
07 0202eaf8 6b614279 msado15!CConnection::Invoke+0x23a
WARNING: Stack unwind information not available. Following frames may be
wrong.
08 0202eb44 7c4ef3aa vbscript!DllCanUnloadNow+0x8e24
09 085dd860 6165677a KERNEL32!NlsGetCurrentUserNlsInfo+0x229
0a 00000000 00000000 0x6165677a




Thread ID: 26
System Thread ID: cc4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0208ff9c 77f85c42 ntdll!NtDelayExecution+0xb
01 0208ffb4 7c4e987c ntdll!RtlpTimerThread+0x42
02 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 27
System Thread ID: b74
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0234ff28 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0234ff50 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0234ff60 77abaede KERNEL32!WaitForSingleObject+0xf
03 0234ff6c 77abae92 ole32!CDllHost::MTAWorkerLoop+0xf
04 0234ff8c 77abadd6 ole32!CDllHost::WorkerThread+0xb9
05 0234ff90 77ab46fb ole32!DLLHostThreadEntry+0x9
06 0234ffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x22
07 0234ffb4 7c4e987c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
08 0234ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 28
System Thread ID: 7c0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0238ff20 77f8c35a ntdll!NtRemoveIoCompletion+0xb
01 0238ffb4 7c4e987c ntdll!RtlpWorkerThread+0x6b
02 0238ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 29
System Thread ID: 974
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0323fd54 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0323fd7c 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0323fd8c 7878d425 KERNEL32!WaitForSingleObject+0xf
03 0323ffb4 7c4e987c COMSVCS!PingThread+0xf5
04 0323ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 30
System Thread ID: c08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0818ff58 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0818ff80 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0818ff90 1f8b2bc7 KERNEL32!WaitForSingleObject+0xf
03 0818ffb4 7c4e987c oledb32!ReleaseResourceThread+0x54
04 0818ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 31
System Thread ID: 414
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 081cff50 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 081cff78 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 081cff88 1f8b2b5b KERNEL32!WaitForSingleObject+0xf
03 081cffb4 7c4e987c oledb32!ResetResourceThread+0x84
04 081cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 32
System Thread ID: 898
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 082afd20 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 082afd70 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 082afd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
03 082affb4 7c4e987c RTUTILS!TraceServerThread+0xde
04 082affec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 33
System Thread ID: c38
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0ba5feec 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0ba5ff14 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0ba5ff24 1b0099c7 KERNEL32!WaitForSingleObject+0xf
03 0ba5ff30 1b00998f msjet40!Semaphore::Wait+0xe
04 0ba5ff58 1b003528 msjet40!Queue::GetMessageW+0xc9
05 0ba5ffb4 7c4e987c msjet40!System::WorkerThread+0x41
06 0ba5ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 34
System Thread ID: b6c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0ba9feec 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0ba9ff14 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0ba9ff24 1b0099c7 KERNEL32!WaitForSingleObject+0xf
03 0ba9ff30 1b00998f msjet40!Semaphore::Wait+0xe
04 0ba9ff58 1b003528 msjet40!Queue::GetMessageW+0xc9
05 0ba9ffb4 7c4e987c msjet40!System::WorkerThread+0x41
06 0ba9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 35
System Thread ID: c48
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 0badfeec 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0badff14 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0badff24 1b0099c7 KERNEL32!WaitForSingleObject+0xf
03 0badff30 1b00998f msjet40!Semaphore::Wait+0xe
04 0badff58 1b003528 msjet40!Queue::GetMessageW+0xc9
05 0badffb4 7c4e987c msjet40!System::WorkerThread+0x41
06 0badffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 36
System Thread ID: a78
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 0bb3e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 0bb3e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 0bb3e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 0bb3e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 0bb3e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 0bb3e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 37
System Thread ID: 258
Kernel Time: 0:0:0.46
User Time: 0:0:0.390
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0202047\APPLEFARMGIFTS.COM\WEBROOT\DETAIL.ASP

# ChildEBP RetAddr
00 0bb7eb50 77f92387 ntdll!NtWaitForSingleObject+0xb
01 0bb7ebc4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 0bb7ebcc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 0bb7ebd4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 0bb7ebec 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 0bb7ec48 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 38
System Thread ID: 71c
Kernel Time: 0:0:0.46
User Time: 0:0:0.312
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0bdcfe28 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0bdcfe78 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0bdcfed4 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 0bdcfef0 787c2885 USER32!MsgWaitForMultipleObjects+0x1d
04 0bdcff1c 787c1daa COMSVCS!STAThread::WaitForWork+0x37
05 0bdcffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x4b2
06 0bdcffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 39
System Thread ID: 7d0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0c43ff80 74fd6363 ntdll!NtRemoveIoCompletion+0xb
01 0c43ffb4 7c4e987c msafd!SockAsyncThread+0x52
02 0c43ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 40
System Thread ID: c78
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\WIN2K\system32\msjava.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0cc1ff70 7c03d5e5 USER32!NtUserGetMessage+0xb
WARNING: Stack unwind information not available. Following frames may be
wrong.
01 0cc1ffb4 7c4e987c msjava!DllGetClassObject+0x16d3
02 0cc1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 41
System Thread ID: 200
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0f69ff40 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0f69ff68 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0f69ff78 7c03eab9 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0f69ff94 7c03ea79 msjava!DllGetClassObject+0x2ba7
04 0c4b9c98 04000500 msjava!DllGetClassObject+0x2b67
05 0c4b9c98 04000500 0x4000500
06 0c485590 04000700 0x4000500
07 0c482f30 00000000 0x4000700




Thread ID: 42
System Thread ID: b4c
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0107027\GOPISMO.COM\WEBROOT\HOTELS.ASP

# ChildEBP RetAddr
00 104ae91c 77f92387 ntdll!NtWaitForSingleObject+0xb
01 104ae990 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 104ae998 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 104ae9a0 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 104ae9b8 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 104aea14 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 43
System Thread ID: bb8
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 104ee460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 104ee4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 104ee4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 104ee4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 104ee4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 104ee558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 44
System Thread ID: 7dc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 106be460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 106be4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 106be4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 106be4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 106be4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 106be558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 45
System Thread ID: 708
Kernel Time: 0:0:0.0
User Time: 0:0:0.46
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 106fe460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 106fe4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 106fe4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 106fe4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 106fe4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 106fe558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 46
System Thread ID: c18
Kernel Time: 0:0:0.15
User Time: 0:0:0.218
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1073e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1073e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1073e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1073e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1073e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1073e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 47
System Thread ID: 370
Kernel Time: 0:0:0.46
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0107027\GOPISMO.COM\WEBROOT\VACATIONRENTALS.ASP

# ChildEBP RetAddr
00 107ce91c 77f92387 ntdll!NtWaitForSingleObject+0xb
01 107ce990 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 107ce998 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 107ce9a0 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 107ce9b8 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 107cea14 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 48
System Thread ID: 82c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 1084ff60 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 1084ff88 77ab4719 KERNEL32!WaitForSingleObjectEx+0x71
02 1084ffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x40
03 1084ffb4 7c4e987c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
04 1084ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 49
System Thread ID: 6b8
Kernel Time: 0:0:0.0
User Time: 0:0:0.109
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1088e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1088e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1088e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1088e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1088e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1088e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 50
System Thread ID: c50
Kernel Time: 0:0:0.62
User Time: 0:0:0.140
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: E:\WEBS\S0208091\HILBORNINJECTION.COM\WEBROOT\PRODUCT.ASP

# ChildEBP RetAddr
00 108ccaf4 77f92387 ntdll!NtWaitForSingleObject+0xb
01 108ccb68 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 108ccb70 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 108ccb78 1b00a149 msjet40!UtilEnterCriticalSection+0xb
04 108ccb90 092d6853 msjet40!JetSetSystemParameter+0x2f
05 108cd064 092d74dc odbcjt32!TellJetAboutRegistry+0xd9
06 108ce1c8 092d8c68 odbcjt32!SQLConnectCover+0x395
07 108ce1fc 009e36de odbcjt32!SQLDriverConnectW+0x3d
WARNING: Stack unwind information not available. Following frames may be
wrong.
08 108ce240 009e2a3b ODBC32!MpHeapFree+0x9b6
09 108ce980 1f69b623 ODBC32!SQLDriverConnectW+0x1a5
0a 108ce9e4 1f69b5be msdasql!CODBCHandle::OHDriverConnect+0x78
0b 108cea04 1f69b41f msdasql!CHdbcNode::DriverConnect+0x20
0c 108cea48 1f8b0365 msdasql!CImpIDBInitialize::Initialize+0x161
0d 108cea74 1f8b02ff oledb32!CDBInitialize::DoInitialize+0x32
0e 108ceaa4 1f8a4636 oledb32!CDBInitialize::Initialize+0x58
0f 108ceb4c 7878e1d7 oledb32!CDCMPool::CreateResource+0x1e6
10 108ceb88 7878ecef
COMSVCS!CHolder::SafeDispenserDriver::CreateResource+0x45
11 108cebd8 1f8a50e1 COMSVCS!CHolder::AllocResource+0x3ef
12 108cec28 1f8a5aed oledb32!CDCMPool::DrawResource+0x9d
13 108cec80 1f8a59bf oledb32!CDCMPoolManager::DrawResource+0x176
14 108cece0 1f441756 oledb32!CDPO::Initialize+0x136
15 108cedd0 1f4416e1 msado15!_ConnectAsync+0x96
16 108cede0 1f441627 msado15!ConnectAsync+0x1f
17 108cef6c 1f44389e msado15!CConnection::Open+0xaf0
18 108cf1e8 6b614279 msado15!CConnection::Invoke+0xb5c
19 108cf21c 6b60d177 vbscript!DllCanUnloadNow+0x8e24
1a 00000001 00000000 vbscript!DllCanUnloadNow+0x1d22




Thread ID: 51
System Thread ID: c28
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1094e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1094e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1094e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1094e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1094e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1094e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 52
System Thread ID: c0c
Kernel Time: 0:0:0.0
User Time: 0:0:0.93
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 110ce460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 110ce4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 110ce4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 110ce4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 110ce4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 110ce558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 53
System Thread ID: 938
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1110e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1110e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1110e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1110e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1110e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1110e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 54
System Thread ID: ba8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1114e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1114e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1114e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1114e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1114e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1114e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 55
System Thread ID: ce8
Kernel Time: 0:0:18.828
User Time: 0:0:12.109
Thread Type: ASP
Executing Page:

# ChildEBP RetAddr
00 1118ebcc 7c51c163 ntdll!ZwYieldExecution+0xb
01 1118ebd0 1f668af0 KERNEL32!SwitchToThread+0x6
02 1118ebd4 1f668c4c MSDART!SwitchOrSleep+0x6
03 1118ec08 1f67958a MSDART!CReaderWriterLock3::_LockSpin+0xfc
04 1118ec24 1f66a3d8 MSDART!CReaderWriterLock3::_WriteLockSpin+0x3c
05 1118ec44 1f8a5c06 MSDART!CReaderWriterLock3::WriteLock+0x7a
06 1118ec80 1f8a59bf oledb32!CDCMPoolManager::DrawResource+0xb7
07 1118ece0 1f441756 oledb32!CDPO::Initialize+0x136
08 1118edd0 1f4416e1 msado15!_ConnectAsync+0x96
09 1118ede0 1f441627 msado15!ConnectAsync+0x1f
0a 1118ef6c 1f44389e msado15!CConnection::Open+0xaf0
0b 1118f1e8 6b614279 msado15!CConnection::Invoke+0xb5c
WARNING: Stack unwind information not available. Following frames may be
wrong.
0c 1118f244 1f4353c0 vbscript!DllCanUnloadNow+0x8e24
0d 00000003 00000000 msado15!ATL::AtlInternalQueryInterface+0x57




Thread ID: 56
System Thread ID: d3c
Kernel Time: 0:0:19.203
User Time: 0:0:10.718
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 111cf5f0 7c51c163 ntdll!ZwYieldExecution+0xb
01 111cf5f4 1f668af0 KERNEL32!SwitchToThread+0x6
02 111cf5f8 1f668c4c MSDART!SwitchOrSleep+0x6
03 111cf62c 1f668241 MSDART!CReaderWriterLock3::_LockSpin+0xfc
04 111cf64c 1f8a5aae MSDART!CReaderWriterLock3::ReadLock+0x3b
05 111cf688 1f8a59bf oledb32!CDCMPoolManager::DrawResource+0x82
06 111cf6e8 1f441756 oledb32!CDPO::Initialize+0x136
07 111cf7d8 1f4416e1 msado15!_ConnectAsync+0x96
08 111cf7e8 1f441627 msado15!ConnectAsync+0x1f
09 111cf974 1f732872 msado15!CConnection::Open+0xaf0
0a 111cf9e4 1f384e7f msdfmap!CHandler::OpenConnection+0xf9
0b 111cfa28 1f386a7e msadcf!CDataGramFactory::GetConnection+0x63
0c 111cfa94 1f3860c6 msadcf!CDataGramFactory::Execute+0x15a
0d 111cfbbc 1f3d37d5 msadcf!CDataGramFactory::Invoke+0x410
0e 111cfbec 1f3d3d8c msadcs!CSoapStub::InvokeMethod+0x37
0f 111cfc6c 1f3d3e88 msadcs!CSoapStub::HttpExtensionProc+0x95
10 111cfcc8 787c2b7a msadcs!CSoapAsyncRequest::OnCall+0x6c
11 111cfcd0 77aa1dc5 COMSVCS!STAActivityWorkHelper+0xa
12 111cfd14 77aa1be9 ole32!EnterForCallback+0x6a
13 111cfe40 77aa1aac ole32!SwitchForCallback+0x12b
14 111cfe68 77aa64f4 ole32!PerformCallback+0x50
15 111cfed4 77aa634d ole32!CObjectContext::InternalContextCallback+0x10d
16 111cfef4 787bfb93 ole32!CObjectContext::DoCallback+0x1a
17 111cff24 787c1d42 COMSVCS!STAActivityWork::DoWork+0x73
18 111cffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x44a
19 111cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 57
System Thread ID: a58
Kernel Time: 0:0:0.15
User Time: 0:0:0.312
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 1120fc20 7c4faca5 ntdll!NtDelayExecution+0xb
01 1120fc40 7c4fac79 KERNEL32!SleepEx+0x32
02 1120fc4c 74a2c8a6 KERNEL32!Sleep+0xb
03 1120fc64 74a2c844 asp!CThreadGate::Enter+0x5d
04 1120fc6c 749f2bf6 asp!EnterThreadGate+0x13
05 1120fcb0 749f2b13 asp!CHitObj::ViperAsyncCallback+0x8b
06 1120fcc8 787c2b7a asp!CViperAsyncRequest::OnCall+0x3f
07 1120fcd0 77aa1dc5 COMSVCS!STAActivityWorkHelper+0xa
08 1120fd14 77aa1be9 ole32!EnterForCallback+0x6a
09 1120fe40 77aa1aac ole32!SwitchForCallback+0x12b
0a 1120fe68 77aa64f4 ole32!PerformCallback+0x50
0b 1120fed4 77aa634d ole32!CObjectContext::InternalContextCallback+0x10d
0c 1120fef4 787bfb93 ole32!CObjectContext::DoCallback+0x1a
0d 1120ff24 787c1bb7 COMSVCS!STAActivityWork::DoWork+0x73
0e 1120ffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x2bf
0f 1120ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 58
System Thread ID: 358
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 1124eaac 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1124eb20 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1124eb28 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1124eb30 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1124eb48 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1124eba4 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 59
System Thread ID: 7bc
Kernel Time: 0:0:17.843
User Time: 0:0:10.640
Thread Type: ASP
Executing Page: E:\WEBS\S0208091\HILBORNINJECTION.COM\WEBROOT\PRODUCT.ASP

# ChildEBP RetAddr
00 1129ebe8 7c51c163 ntdll!ZwYieldExecution+0xb
01 1129ebec 1f668af0 KERNEL32!SwitchToThread+0x6
02 1129ebf0 1f668c4c MSDART!SwitchOrSleep+0x6
03 1129ec24 1f668241 MSDART!CReaderWriterLock3::_LockSpin+0xfc
04 1129ec44 1f8a5aae MSDART!CReaderWriterLock3::ReadLock+0x3b
05 1129ec80 1f8a59bf oledb32!CDCMPoolManager::DrawResource+0x82
06 1129ece0 1f441756 oledb32!CDPO::Initialize+0x136
07 1129edd0 1f4416e1 msado15!_ConnectAsync+0x96
08 1129ede0 1f441627 msado15!ConnectAsync+0x1f
09 1129ef6c 1f44389e msado15!CConnection::Open+0xaf0
0a 1129f1e8 6b614279 msado15!CConnection::Invoke+0xb5c
WARNING: Stack unwind information not available. Following frames may be
wrong.
0b 1129f21c 6b60d177 vbscript!DllCanUnloadNow+0x8e24
0c 00000001 00000000 vbscript!DllCanUnloadNow+0x1d22




Thread ID: 60
System Thread ID: c58
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 113ee460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 113ee4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 113ee4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 113ee4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 113ee4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 113ee558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 61
System Thread ID: 98c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 1142eaac 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1142eb20 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1142eb28 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1142eb30 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1142eb48 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1142eba4 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 62
System Thread ID: 764
Kernel Time: 0:0:0.31
User Time: 0:0:0.78
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 1146fe28 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 1146fe78 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 1146fed4 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 1146fef0 787c2885 USER32!MsgWaitForMultipleObjects+0x1d
04 1146ff1c 787c1daa COMSVCS!STAThread::WaitForWork+0x37
05 1146ffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x4b2
06 1146ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 63
System Thread ID: 42c
Kernel Time: 0:0:0.0
User Time: 0:0:0.62
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 114ae460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 114ae4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 114ae4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 114ae4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 114ae4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 114ae558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 64
System Thread ID: 4e8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 114ee460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 114ee4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 114ee4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 114ee4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 114ee4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 114ee558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 65
System Thread ID: c9c
Kernel Time: 0:0:0.0
User Time: 0:0:0.62
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1152e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1152e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1152e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1152e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1152e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1152e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 66
System Thread ID: d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1156e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1156e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1156e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1156e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1156e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1156e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 67
System Thread ID: 934
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 115ae460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 115ae4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 115ae4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 115ae4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 115ae4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 115ae558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 68
System Thread ID: ab8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 115ee460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 115ee4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 115ee4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 115ee4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 115ee4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 115ee558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 69
System Thread ID: 75c
Kernel Time: 0:0:0.0
User Time: 0:0:0.46
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1162e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1162e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1162e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1162e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1162e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1162e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 70
System Thread ID: cd0
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1166e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1166e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1166e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1166e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1166e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1166e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 71
System Thread ID: bc4
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 116aeaac 77f92387 ntdll!NtWaitForSingleObject+0xb
01 116aeb20 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 116aeb28 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 116aeb30 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 116aeb48 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 116aeba4 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 72
System Thread ID: bd8
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 116efc20 7c4faca5 ntdll!NtDelayExecution+0xb
01 116efc40 7c4fac79 KERNEL32!SleepEx+0x32
02 116efc4c 74a2c8a6 KERNEL32!Sleep+0xb
03 116efc64 74a2c844 asp!CThreadGate::Enter+0x5d
04 116efc6c 749f2bf6 asp!EnterThreadGate+0x13
05 116efcb0 749f2b13 asp!CHitObj::ViperAsyncCallback+0x8b
06 116efcc8 787c2b7a asp!CViperAsyncRequest::OnCall+0x3f
07 116efcd0 77aa1dc5 COMSVCS!STAActivityWorkHelper+0xa
08 116efd14 77aa1be9 ole32!EnterForCallback+0x6a
09 116efe40 77aa1aac ole32!SwitchForCallback+0x12b
0a 116efe68 77aa64f4 ole32!PerformCallback+0x50
0b 116efed4 77aa634d ole32!CObjectContext::InternalContextCallback+0x10d
0c 116efef4 787bfb93 ole32!CObjectContext::DoCallback+0x1a
0d 116eff24 787c1bb7 COMSVCS!STAActivityWork::DoWork+0x73
0e 116effb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x2bf
0f 116effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 73
System Thread ID: d04
Kernel Time: 0:0:0.0
User Time: 0:0:0.109
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 1172fe28 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 1172fe78 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 1172fed4 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 1172fef0 787c2885 USER32!MsgWaitForMultipleObjects+0x1d
04 1172ff1c 787c1daa COMSVCS!STAThread::WaitForWork+0x37
05 1172ffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x4b2
06 1172ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 74
System Thread ID: 968
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 1176e460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 1176e4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 1176e4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 1176e4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 1176e4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 1176e558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 75
System Thread ID: a90
Kernel Time: 0:0:0.0
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 117aeaac 77f92387 ntdll!NtWaitForSingleObject+0xb
01 117aeb20 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 117aeb28 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 117aeb30 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 117aeb48 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 117aeba4 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 76
System Thread ID: b7c
Kernel Time: 0:0:0.46
User Time: 0:0:0.296
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 117efe28 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 117efe78 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 117efed4 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
03 117efef0 787c2885 USER32!MsgWaitForMultipleObjects+0x1d
04 117eff1c 787c1daa COMSVCS!STAThread::WaitForWork+0x37
05 117effb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x4b2
06 117effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 77
System Thread ID: c94
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 1182fc20 7c4faca5 ntdll!NtDelayExecution+0xb
01 1182fc40 7c4fac79 KERNEL32!SleepEx+0x32
02 1182fc4c 74a2c8a6 KERNEL32!Sleep+0xb
03 1182fc64 74a2c844 asp!CThreadGate::Enter+0x5d
04 1182fc6c 749f2bf6 asp!EnterThreadGate+0x13
05 1182fcb0 749f2b13 asp!CHitObj::ViperAsyncCallback+0x8b
06 1182fcc8 787c2b7a asp!CViperAsyncRequest::OnCall+0x3f
07 1182fcd0 77aa1dc5 COMSVCS!STAActivityWorkHelper+0xa
08 1182fd14 77aa1be9 ole32!EnterForCallback+0x6a
09 1182fe40 77aa1aac ole32!SwitchForCallback+0x12b
0a 1182fe68 77aa64f4 ole32!PerformCallback+0x50
0b 1182fed4 77aa634d ole32!CObjectContext::InternalContextCallback+0x10d
0c 1182fef4 787bfb93 ole32!CObjectContext::DoCallback+0x1a
0d 1182ff24 787c1d42 COMSVCS!STAActivityWork::DoWork+0x73
0e 1182ffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x44a
0f 1182ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 78
System Thread ID: 6cc
Kernel Time: 0:0:0.0
User Time: 0:0:0.203
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 1186fc20 7c4faca5 ntdll!NtDelayExecution+0xb
01 1186fc40 7c4fac79 KERNEL32!SleepEx+0x32
02 1186fc4c 74a2c8a6 KERNEL32!Sleep+0xb
03 1186fc64 74a2c844 asp!CThreadGate::Enter+0x5d
04 1186fc6c 749f2bf6 asp!EnterThreadGate+0x13
05 1186fcb0 749f2b13 asp!CHitObj::ViperAsyncCallback+0x8b
06 1186fcc8 787c2b7a asp!CViperAsyncRequest::OnCall+0x3f
07 1186fcd0 77aa1dc5 COMSVCS!STAActivityWorkHelper+0xa
08 1186fd14 77aa1be9 ole32!EnterForCallback+0x6a
09 1186fe40 77aa1aac ole32!SwitchForCallback+0x12b
0a 1186fe68 77aa64f4 ole32!PerformCallback+0x50
0b 1186fed4 77aa634d ole32!CObjectContext::InternalContextCallback+0x10d
0c 1186fef4 787bfb93 ole32!CObjectContext::DoCallback+0x1a
0d 1186ff24 787c1d42 COMSVCS!STAActivityWork::DoWork+0x73
0e 1186ffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x44a
0f 1186ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 79
System Thread ID: cc0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Other information: Thread is waiting for a lock to be released. Looking for
lock owner.
Owning thread System ID: cac
Thread Type: Jet DB Query. Possible ASP Page
Executing Page:

# ChildEBP RetAddr
00 118ae460 77f92387 ntdll!NtWaitForSingleObject+0xb
01 118ae4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
02 118ae4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
03 118ae4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
04 118ae4fc 1b57a7e0 msjet40!JetInit+0x2f
WARNING: Stack unwind information not available. Following frames may be
wrong.
05 118ae558 1f8b0365 msjetoledb40+0xa7e0
06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32




Thread ID: 80
System Thread ID: c34
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Unable to locate ASP page

# ChildEBP RetAddr
00 118efc20 7c4faca5 ntdll!NtDelayExecution+0xb
01 118efc40 7c4fac79 KERNEL32!SleepEx+0x32
02 118efc4c 74a2c8a6 KERNEL32!Sleep+0xb
03 118efc64 74a2c844 asp!CThreadGate::Enter+0x5d
04 118efc6c 749f2bf6 asp!EnterThreadGate+0x13
05 118efcb0 749f2b13 asp!CHitObj::ViperAsyncCallback+0x8b
06 118efcc8 787c2b7a asp!CViperAsyncRequest::OnCall+0x3f
07 118efcd0 77aa1dc5 COMSVCS!STAActivityWorkHelper+0xa
08 118efd...(message truncated)

 >> Stay informed about: IIS 5 100% CPU troubleshooting tools - IISState? 
Back to top
Login to vote
patfilot

External


Since: Aug 24, 2003
Posts: 1478



(Msg. 2) Posted: Mon Feb 16, 2004 10:20 pm
Post subject: Re: IIS 5 100% CPU troubleshooting tools - IISState? [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

1) This looks like a bug in MSDART.dll (part of MDAC). Try installing the
latest version (2.Cool. If that doesn't resolve it, you will likely need to
open an incident w/MS-Support.

2) Since you make a lot of calls to Jet (Access), I would recommend that you
change your connection string to be OLEDB instead of ODBC b/c it performs
much better. Also, you should be running compaction on the DB at least once
a week (improves perf as well).

3) You should also take a moment to install the Jet updates. This won't
affect this problem, but may prevent others.

Also, I would recommend disabling the ASP thread gating.

Pat


"M. Rafferty" <mmr.TakeThisOut@vistagrande.com> wrote in message
news:uPpgrtL9DHA.2924@tk2msftngp13.phx.gbl...
 > I need to find a way to determine the source of 100% CPU utilization
 > episodes on a shared web hosting server running Win2k SP4. The box is run
 > headless, managed normally via terminal services remote administration.
The
 > symptoms typically are one of the DLLHOST.EXE processes is showing up in
 > task manager as the culprit. On a few rarer occasions, inetinfo.exe was
the
 > one nearing 100% CPU.
 >
 > What will allow me to match the DLLHOST.EXE process with the particular
high
 > isolation virtual server or shared application pool? And if it is the
 > shared pool, get me to the particular virtual server causing the
disruption?
 >
 > I've seen IISState mentioned for troubleshooting, and have downloaded and
 > installed it over the weekend. The documentation indicated that it
doesn't
 > work with terminal services on Win2K. I tried setting up a scheduled job
as
 > suggested, but I also tried running it from a command prompt, and could
not
 > see any significant difference in the results. Am I misunderstanding? Or
 > is it not fully working in either case? (No indications of errors from
it.)
 >
 > Are there some links where I can learn more about how to use this or other
 > tools?
 >
 > Here is one of the logs that were created last night during 100%CPU
episode.
 > This DLLHOST.EXE must have been the pool since there are multiple domains
 > references. But I can't decipher a troublemaker from the data.
 >
 >
 > Opened log file 'D:\iisstate\output\IISState-3120.log'
 >
 > ***********************
 > Starting new log output
 > IISState version 3.3.1
 >
 > Sun Feb 15 18:07:01 2004
 >
 > OS = Windows 2000
 > Executable: dllhost.exe
 > PID = 3120
 >
 > Note: Thread times are formatted as HH:MM:SS.ms
 >
 > ***********************
 >
 >
 >
 >
 > Thread ID: 0
 > System Thread ID: c54
 > Kernel Time: 0:0:0.15
 > User Time: 0:0:0.15
 > Thread Status: Thread is in a WAIT state.
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0006fd28 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
 > 01 0006fd50 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
 > 02 0006fd60 77aaa483 KERNEL32!WaitForSingleObject+0xf
 > 03 0006fd80 77aa9c91
 > ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x4f
 > 04 0006fd9c 01001230 ole32!CoRegisterSurrogateEx+0x169
 > 05 0006ff24 010014c6 dllhost!WinMain+0xb0
 > 06 0006ffc0 7c4e87f5 dllhost!WinMainCRTStartup+0x156
 > 07 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
 >
 >
 >
 >
 > Thread ID: 1
 > System Thread ID: d2c
 > Kernel Time: 0:0:0.78
 > User Time: 0:0:0.46
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 >
 > # ChildEBP RetAddr
 > 00 0088fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
 > 01 0088ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
 > 02 0088ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
 > 03 0088ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
 > 04 0088ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
 > 05 0088ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 2
 > System Thread ID: bf8
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 008cff5c 7c4faca5 ntdll!NtDelayExecution+0xb
 > 01 008cff7c 7c4fac79 KERNEL32!SleepEx+0x32
 > 02 008cff88 77ab85fc KERNEL32!Sleep+0xb
 > 03 008cff90 77ab46fb ole32!CROIDTable::WorkerThreadLoop+0xc
 > 04 008cffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x22
 > 05 008cffb4 7c4e987c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
 > 06 008cffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 3
 > System Thread ID: 61c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0090ff30 77abaf4d USER32!NtUserGetMessage+0xb
 > 01 0090ff70 77abae9b ole32!CDllHost::STAWorkerLoop+0x40
 > 02 0090ff8c 77abadd6 ole32!CDllHost::WorkerThread+0xc2
 > 03 0090ff90 77ab46fb ole32!DLLHostThreadEntry+0x9
 > 04 0090ffa8 77ab4653 ole32!CRpcThread::WorkerLoop+0x22
 > 05 0090ffb4 7c4e987c ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
 > 06 0090ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 4
 > System Thread ID: 6c4
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.46
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 0099fc6c 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
 > 01 0099fc98 6de8b983 KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 0099fd94 6de8b8d8 TxfAux!WORK_QUEUE::WorkerLoop+0x83
 > 03 0099ffb4 7c4e987c TxfAux!WORK_QUEUE::ThreadLoop+0x58
 > 04 0099ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 5
 > System Thread ID: c98
 > Kernel Time: 0:0:0.46
 > User Time: 0:0:0.62
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 >
 > # ChildEBP RetAddr
 > 00 00b9fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
 > 01 00b9ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
 > 02 00b9ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
 > 03 00b9ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
 > 04 00b9ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
 > 05 00b9ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 6
 > System Thread ID: c7c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > *** ERROR: Symbol file could not be found. Defaulted to export symbols fo
r
 > C:\WIN2K\system32\ODBC32.DLL -
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 00bdff20 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 00bdff70 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 00bdff88 00a0466f KERNEL32!WaitForMultipleObjects+0x17
 > WARNING: Stack unwind information not available. Following frames may be
 > wrong.
 > 03 00bdffb4 7c4e987c ODBC32!ODBCGetTryWaitValue+0xca
 > 04 00000101 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 7
 > System Thread ID: c5c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00c1ff08 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 00c1ff58 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 00c1ff70 787f37d4 KERNEL32!WaitForMultipleObjects+0x17
 > 03 00c1ffb4 7c4e987c COMSVCS!CEventDispatcher::PushEvents+0x44
 > 04 00c1ffc0 00000008 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 8
 > System Thread ID: c88
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > Remote call is either to a MTA object or object not initialized. Also,
 > possible utility thread.
 > DCOM call being made to Process ID: 1636
 > Waiting on thread id: ffffffff
 >
 > # ChildEBP RetAddr
 > 00 00c5fb68 77d4ec77 ntdll!NtRequestWaitReplyPort+0xb
 > 01 00c5fb94 77d3a2c7 RPCRT4!LRPC_CCALL::SendReceive+0x11e
 > 02 00c5fba0 77b23b2c RPCRT4!I_RpcSendReceive+0x2c
 > 03 00c5fbc0 77b239f7 ole32!ThreadSendReceive+0xef
 > 04 00c5fbd8 77b20aa5
ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14a
 > 05 00c5fc18 77b23870 ole32!CRpcChannelBuffer::SendReceive2+0x96
 > 06 00c5fc28 77a6c767 ole32!CRpcChannelBuffer::SendReceive+0x11
 > 07 00c5fc88 77ab6ac3 ole32!CAptRpcChnl::SendReceive+0xa9
 > 08 00c5fce0 77d90328 ole32!CCtxComChnl::SendReceive+0x124
 > 09 00c5fcfc 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
 > 0a 00c5ff44 77d95f85 RPCRT4!NdrClientCall2+0x4f5
 > 0b 00c5ff60 77d77fcb RPCRT4!ObjectStublessClient+0x76
 > 0c 00c5ff70 787f372e RPCRT4!ObjectStubless+0xf
 > 0d 00c5ffb4 7c4e987c
 > COMSVCS!CEventDispatcher::GetEventServerInfoThread+0x10e
 > 0e 00c5ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 9
 > System Thread ID: cf4
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 00c9fee0 7c4faca5 ntdll!NtDelayExecution+0xb
 > 01 00c9ff00 7c4fac79 KERNEL32!SleepEx+0x32
 > 02 00c9ff0c 787d011a KERNEL32!Sleep+0xb
 > 03 00c9ff7c 780085bc COMSVCS!PostData+0xf2
 > 04 00c9ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
 > 05 00c9ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 10
 > System Thread ID: bb0
 > Kernel Time: 0:0:0.250
 > User Time: 0:0:0.171
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 00f1fe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 00f1feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 00f1ff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 00f1ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
 > 04 00f1ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
 > 05 00f1ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
 > 06 00f1ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 11
 > System Thread ID: d30
 > Kernel Time: 0:0:0.468
 > User Time: 0:0:0.203
 > Thread Type: Other
 > # ChildEBP RetAddr
 > 00 00f5fe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 00f5feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 00f5ff08 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 00f5ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
 > 04 00f5ff7c 780085bc IISRTL!SchedulerWorkerThread+0xa7
 > 05 00f5ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
 > 06 00f5ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 12
 > System Thread ID: d48
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: HTTP Listener
 > # ChildEBP RetAddr
 > 00 0094ff50 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
 > 01 0094ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 0094ffb4 7c4e987c ISATQ!AtqPoolThread+0x40
 > 03 0094ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 13
 > System Thread ID: c10
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: HTTP Listener
 > # ChildEBP RetAddr
 > 00 0104ff50 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
 > 01 0104ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 0104ffb4 7c4e987c ISATQ!AtqPoolThread+0x40
 > 03 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 14
 > System Thread ID: 5c4
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 > # ChildEBP RetAddr
 > 00 011cfeb8 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
 > 01 011cfee4 77d809da KERNEL32!GetQueuedCompletionStatus+0x27
 > 02 011cff20 77d50ede RPCRT4!COMMON_ProcessCalls+0x9e
 > 03 011cff74 77d50d17 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
 > 04 011cff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
 > 05 011cffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
 > 06 011cffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
 > 07 011cffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 15
 > System Thread ID: ba4
 > Kernel Time: 0:0:0.15
 > User Time: 0:0:0.46
 > Thread Type: Possible ASP page. Possible DCOM activity
 > Executing Page: Unable to locate ASP page
 >
 > No remote call being made
 > # ChildEBP RetAddr
 > 00 0128fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
 > 01 0128ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
 > 02 0128ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
 > 03 0128ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
 > 04 0128ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
 > 05 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 16
 > System Thread ID: c8c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > Thread Type: ASP
 > Executing Page: Unable to locate ASP page
 >
 > # ChildEBP RetAddr
 > 00 01dafe70 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01dafec0 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01daff1c 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01daff38 74a01e69 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01daff7c 78008454 asp!CMTACallbackThread::Thread+0x42
 > 05 01daffb4 7c4e987c MSVCRT!_endthread+0xc6
 > 06 01daffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 17
 > System Thread ID: 93c
 > Kernel Time: 0:0:0.0
 > User Time: 0:0:0.0
 > *** WARNING: Unable to verify checksum for
 > *** ERROR: Symbol file could not be found. Defaulted to export symbols
 > or -
 > Thread Type: PDM (Debugger) Thread.
 > # ChildEBP RetAddr
 > 00 01e2fddc 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01e2fe2c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01e2fe88 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01e2fea4 4a00886c USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01e2ff88 4a008a85 pdm+0x886c
 > 05 01e2ffb0 4a008a09 pdm+0x8a85
 > 06 01e2ffb4 7c4e987c pdm+0x8a09
 > 07 01e2ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 18
 > System Thread ID: ca8
 > Kernel Time: 0:0:0.93
 > User Time: 0:0:0.734
 > *** ERROR: Symbol file could not be found. Defaulted to export symbols
for
 > C:\WIN2K\System32\msjetoledb40.dll -
 > Thread Status: Thread is in a WAIT state.
 > Other information: Thread is waiting for a lock to be released. Looking
for
 > lock owner.
 > Owning thread System ID: cac
 > Thread Type: Jet DB Query. Possible ASP Page
 > Executing Page: E:\WEBS\S0107030\BESTCOMPUTERBOOKS.COM\WEBROOT\ORDER.ASP
 >
 > # ChildEBP RetAddr
 > 00 01e6eb50 77f92387 ntdll!NtWaitForSingleObject+0xb
 > 01 01e6ebc4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
 > 02 01e6ebcc 1b005764 ntdll!RtlEnterCriticalSection+0x46
 > 03 01e6ebd4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
 > 04 01e6ebec 1b57a7e0 msjet40!JetInit+0x2f
 > WARNING: Stack unwind information not available. Following frames may be
 > wrong.
 > 05 01e6ec48 1f8b0365 msjetoledb40+0xa7e0
 > 06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32
 >
 >
 >
 >
 > Thread ID: 19
 > System Thread ID: c14
 > Kernel Time: 0:0:0.109
 > User Time: 0:0:0.484
 > Thread Status: Thread is in a WAIT state.
 > Other information: Thread is waiting for a lock to be released. Looking
for
 > lock owner.
 > Owning thread System ID: cac
 > Thread Type: Jet DB Query. Possible ASP Page
 > Executing Page:
 >
 > # ChildEBP RetAddr
 > 00 01eae460 77f92387 ntdll!NtWaitForSingleObject+0xb
 > 01 01eae4d4 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
 > 02 01eae4dc 1b005764 ntdll!RtlEnterCriticalSection+0x46
 > 03 01eae4e4 1b0056ec msjet40!UtilEnterCriticalSection+0xb
 > 04 01eae4fc 1b57a7e0 msjet40!JetInit+0x2f
 > WARNING: Stack unwind information not available. Following frames may be
 > wrong.
 > 05 01eae558 1f8b0365 msjetoledb40+0xa7e0
 > 06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32
 >
 >
 >
 >
 > Thread ID: 20
 > System Thread ID: 7c8
 > Kernel Time: 0:0:0.93
 > User Time: 0:0:0.390
 > Thread Status: Thread is in a WAIT state.
 > Other information: Thread is waiting for a lock to be released. Looking
for
 > lock owner.
 > Owning thread System ID: cac
 > Thread Type: Jet DB Query. Possible ASP Page
 > Executing Page:
 >
 > # ChildEBP RetAddr
 > 00 01eee91c 77f92387 ntdll!NtWaitForSingleObject+0xb
 > 01 01eee990 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
 > 02 01eee998 1b005764 ntdll!RtlEnterCriticalSection+0x46
 > 03 01eee9a0 1b0056ec msjet40!UtilEnterCriticalSection+0xb
 > 04 01eee9b8 1b57a7e0 msjet40!JetInit+0x2f
 > WARNING: Stack unwind information not available. Following frames may be
 > wrong.
 > 05 01eeea14 1f8b0365 msjetoledb40+0xa7e0
 > 06 00000001 00000000 oledb32!CDBInitialize::DoInitialize+0x32
 >
 >
 >
 >
 > Thread ID: 21
 > System Thread ID: d00
 > Kernel Time: 0:0:0.46
 > User Time: 0:0:0.453
 > Thread Type: Idle ASP thread
 > # ChildEBP RetAddr
 > 00 01f2fe28 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
 > 01 01f2fe78 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
 > 02 01f2fed4 77e13a5c USER32!MsgWaitForMultipleObjectsEx+0x153
 > 03 01f2fef0 787c2885 USER32!MsgWaitForMultipleObjects+0x1d
 > 04 01f2ff1c 787c1daa COMSVCS!STAThread::WaitForWork+0x37
 > 05 01f2ffb4 7c4e987c COMSVCS!STAThread::STAThreadWorker+0x4b2
 > 06 01f2ffec 00000000 KERNEL32!BaseThreadStart+0x52
 >
 >
 >
 >
 > Thread ID: 22
 > System Thread ID: 6ec
 > Kernel Time: 0:0:0.15
 > User Time: 0:0:0.265
 > *** ERROR: Symbol file could not be found. Defaulted to export symbols
 > or -
 > Thread Status: Thread is in a WAIT state.
 > Other information: Thread is waiting for a lock to be released. Looking
for
 > lock owner.
 > Owning thread System ID: cac
 > Thread Type: Jet DB Query. Possible ASP Page
 > Executing Page: E:\WEBS\S0208091\HILBORNINJECTION.COM\WEBROOT\PRODUCT.ASP
 >
 > # ChildEBP RetAddr
 > 00 01f6caf4 77f92387 ntdll!NtWaitForSingleObject+0xb
 > 01 01f6cb68 77f922f8 ntdll!RtlpWaitForCriticalSection+0x9e
 > 02 01f6cb70 1b005764 ntdll!RtlEnterCriticalSection+0x46
 > 03 01f6cb78 1b00a149 msjet40!UtilEnterCriticalSection+0xb
 > 04 01f6cb90 092d6853 msjet40!JetSetSystemParameter+0x2f
 > 05 01f6d064 092d74dc odbcjt32!TellJetAboutRegistry+0xd9
 > 06 01f6e1c8 092d8c68 odbcjt32!SQLConnectCover+0x395
 > 07 01f6e1fc 009e36de odbcjt32!SQLDriverConnectW+0x3d
 > WARNING: Stack unwind information not available. Following frames may be
 > wrong.
 > 08 01f6e240 009e2a3b ODBC32!MpHeapFree+0x9b6
 > 09 01f6e980 1f69b623 ODBC32!SQLDriverConnectW+0x1a5
 > 0a 01f6e9e4 1f69b5be msdasql!CODBCHandle::OHDriverConnect+0x78
 > 0b 01f6ea04 1f69b41f msdasql!CHdbcNode::DriverConnect+0x20
 > 0c 01f6ea48 1f8b0365 msdasql!CImpIDBInitialize::Initialize+0x161
 > 0d 01f6ea74 1f8b02ff oledb32!CDBInitialize::DoInitialize+0x32
 > 0e 01f6eaa4 1f8a4636 oledb32!CDBInitialize::Initialize+0x58
 > 0f 01f6eb4c 7878e1d7 oledb32!CDCMPool::CreateResource+0x1e6
 > 10 01f6eb88 7878ecef
 > COMSVCS!CHolder::SafeDispenserDriver::CreateResource+0x45
 > 11