IIS Continuously Restarting...

This started occurring after I ran the updates over the weekend

I'll try IISState - thanks!!
a

Pat [MSFT] wrote:

 > May be an attack, could be a bug in a dll.
 >
 > Run IISState (www.iisfaq.com/iisstate) to see the dll causing it:
 >
 > iisstate -p <pid of inetinfo> -sc <enter>
 >
 > Also, run Windows Update to make sure you have all the latest security
 > updates.
 >
 > Pat
 >
 > "Aaron" <a DeleteThis @1.net> wrote in message
 > news:%23RzG6rqsDHA.2252@TK2MSFTNGP09.phx.gbl...
 >
  >>Has anyone seen this before? The event logs shows that IIS is
  >>continuously restarting?
  >>
 >
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS Continuously Restarting... 

Got this after running IIS State:

C:\iisstate>iisstate -p 4700 -sc
Symbol search path is:
SRV*C:\iisstate\symbols*http://msdl.microsoft.com/downloa
d/symbols

Microsoft (R) Windows Debugger Version 6.2.0013.1
Copyright (c) Microsoft Corporation. All rights reserved.

Cannot debug pid 4700, Win32 error 5
"Access is denied."
WaitForEvent failed, 0x8000FFFF

C:\iisstate>

Pat [MSFT] wrote:

 > May be an attack, could be a bug in a dll.
 >
 > Run IISState (www.iisfaq.com/iisstate) to see the dll causing it:
 >
 > iisstate -p <pid of inetinfo> -sc <enter>
 >
 > Also, run Windows Update to make sure you have all the latest security
 > updates.
 >
 > Pat
 >
 > "Aaron" <a.DeleteThis@1.net> wrote in message
 > news:%23RzG6rqsDHA.2252@TK2MSFTNGP09.phx.gbl...
 >
  >>Has anyone seen this before? The event logs shows that IIS is
  >>continuously restarting?
  >>
 >
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS Continuously Restarting... 

To run IISState you have to:
1) Be logged on as Adminstrator
2) Run locally (i.e. not through a terminal server session).

Pat

"Aaron" <a.TakeThisOut@1.net> wrote in message
news:OVpu1HrsDHA.2248@TK2MSFTNGP09.phx.gbl...
 > Got this after running IIS State:
 >
 > C:\iisstate>iisstate -p 4700 -sc
 > Symbol search path is:
 > SRV*C:\iisstate\symbols*http://msdl.microsoft.com/downloa
 > d/symbols
 >
 > Microsoft (R) Windows Debugger Version 6.2.0013.1
 > Copyright (c) Microsoft Corporation. All rights reserved.
 >
 > Cannot debug pid 4700, Win32 error 5
 > "Access is denied."
 > WaitForEvent failed, 0x8000FFFF
 >
 > C:\iisstate>
 >
 > Pat [MSFT] wrote:
 >
  > > May be an attack, could be a bug in a dll.
  > >
  > > Run IISState (www.iisfaq.com/iisstate) to see the dll causing it:
  > >
  > > iisstate -p <pid of inetinfo> -sc <enter>
  > >
  > > Also, run Windows Update to make sure you have all the latest security
  > > updates.
  > >
  > > Pat
  > >
  > > "Aaron" <a.TakeThisOut@1.net> wrote in message
  > > news:%23RzG6rqsDHA.2252@TK2MSFTNGP09.phx.gbl...
  > >
   > >>Has anyone seen this before? The event logs shows that IIS is
   > >>continuously restarting?
   > >>
  > >
  > >
  > >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS Continuously Restarting... 

Ah. I was in as the Admin, but over RDP.

Pat [MSFT] wrote:

 > To run IISState you have to:
 > 1) Be logged on as Adminstrator
 > 2) Run locally (i.e. not through a terminal server session).
 >
 > Pat
 >
 > "Aaron" <a.TakeThisOut@1.net> wrote in message
 > news:OVpu1HrsDHA.2248@TK2MSFTNGP09.phx.gbl...
 >
  >>Got this after running IIS State:
  >>
  >>C:\iisstate>iisstate -p 4700 -sc
  >>Symbol search path is:
  >>SRV*C:\iisstate\symbols*http://msdl.microsoft.com/downloa
  >>d/symbols
  >>
  >>Microsoft (R) Windows Debugger Version 6.2.0013.1
  >>Copyright (c) Microsoft Corporation. All rights reserved.
  >>
  >>Cannot debug pid 4700, Win32 error 5
  >> "Access is denied."
  >>WaitForEvent failed, 0x8000FFFF
  >>
  >>C:\iisstate>
  >>
  >>Pat [MSFT] wrote:
  >>
  >>
   >>>May be an attack, could be a bug in a dll.
   >>>
   >>>Run IISState (www.iisfaq.com/iisstate) to see the dll causing it:
   >>>
   >>>iisstate -p <pid of inetinfo> -sc <enter>
   >>>
   >>>Also, run Windows Update to make sure you have all the latest security
   >>>updates.
   >>>
   >>>Pat
   >>>
   >>>"Aaron" <a.TakeThisOut@1.net> wrote in message
   >>>news:%23RzG6rqsDHA.2252@TK2MSFTNGP09.phx.gbl...
   >>>
   >>>
   >>>>Has anyone seen this before? The event logs shows that IIS is
   >>>>continuously restarting?
   >>>>
   >>>
   >>>
   >>>
 >
 ><!-- ~MESSAGE_AFTER~ -->
 >> Stay informed about: IIS Continuously Restarting...