Welcome to MobyThreads.com!
FAQFAQ      ProfileProfile    Private MessagesPrivate Messages   Log inLog in
All support for the MobyThreads Threaded phpBB MOD can now be found on welsolutions at this forum

IIS Request Freeze

  
   Web Hosting and Web Master Forums (Home) -> IIS RSS
Next:  Why cant i add an isapi extension  
Author Message
shankr57

External


Since: Sep 12, 2003
Posts: 10



(Msg. 1) Posted: Sat Sep 13, 2003 12:31 am
Post subject: IIS Request Freeze
Archived from groups: microsoft>public>inetserver>iis (more info?)
Hello All,
IIS freezes momentarily ranging from 30 seconds to 2
minutes making the web applicaiton unavailable for that
period. All the requests are queued momentarily and
finally is executed. Its so strange that everything works
normal after that freeze. This scenario happens three to
four times a day.

I noticed that the ASP REQUESTS QUEUED increases upto 50
(approx) which is well below the RequestQueueMax of 100.
The machine has 4 Processor 4Gigs Memory with 2 OnBoard
Nics.

Following are the counters that were observed when the
freeze happens.

1. Memory - Normal
2. CPU Usage - Very Minimal (Less than Normal)
3. ASP Requests Queued - Increasing
4. ASP Requests Executing - Increasing
5. ASP Requests/Sec - Close to Zero
6. SQL Transactions - Close to Zero(normally 15-20)
7. Web Service Get Requests/Sec - Close to Zero (normally
in 10's)
8. Network Interface Bytes Recieved/sec - Close to Zero
9. Network Interface Bytes Sent/sec - Close to Zero
10. TCP Segments/Sec - 20's (normally 200's)

Based on the above counters I could possibly imagine that
the network firewall or the switch could be causing this
issue. Is this the right direction to move on to debug
this issue?

Thanks,
Shankar.

 >> Stay informed about: IIS Request Freeze 
Back to top
Login to vote
timcof

External


Since: Sep 02, 2003
Posts: 912



(Msg. 2) Posted: Wed Sep 17, 2003 12:14 pm
Post subject: RE: IIS Request Freeze [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Well, it is good that the "hang" does recover. It could be any number of things, such as, what does the app do? DB access, to either
SQL, Oracle, DB2, Access, all of the above? DB drivers up to date? Anything in the code with "On error resume next"? If so, rem it
out; bad practive for ASP. Also, set conn = nothing? conn.close? Make sure you are on MDAC 2.7sp1 minimum if you are connecting
to SQL (and make sure you are using IP if it is on another server; Named Pipes if local). If Access, get the latest JET package. If other
DBs, get their latest drivers from their site.

Any custom components? If you are on sp4 for w2k on the server, then you should be ok as far as RIM and UE go, as now the runtime
and the version of msvbvm60.dll can now be "tricked" into thinking your VB ActiveX dll is compiled with RIM and UE, even if they are not!

These will be good starting places. You can also grab IISState from www.iisfaq.com and run it while it is experiencing the hang. You
can then post the log back with IISState in the subject line.

Thank you. I hope this information is helpful.

Tim Coffey [MSFT]

This posting is provided “AS IS” with no warranties, and confers no rights. You assume all risk for your use. © 2001 Microsoft
Corporation. All rights reserved.
--------------------
| Content-Class: urn:content-classes:message
| From: "Shankar" <shankr57.TakeThisOut@hotmail.com>
| Sender: "Shankar" <shankr57.TakeThisOut@hotmail.com>
| Subject: IIS Request Freeze
| Date: Fri, 12 Sep 2003 21:31:58 -0700
| Lines: 35
| Message-ID: <079f01c379af$f7d7d260$a301280a@phx.gbl>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Thread-Index: AcN5r/fXYiVKOMhrRb6t0UXvP/DCeg==
| Newsgroups: microsoft.public.inetserver.iis
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.inetserver.iis:275371
| NNTP-Posting-Host: TK2MSFTNGXA11 10.40.1.163
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| Hello All,
| IIS freezes momentarily ranging from 30 seconds to 2
| minutes making the web applicaiton unavailable for that
| period. All the requests are queued momentarily and
| finally is executed. Its so strange that everything works
| normal after that freeze. This scenario happens three to
| four times a day.
|
| I noticed that the ASP REQUESTS QUEUED increases upto 50
| (approx) which is well below the RequestQueueMax of 100.
| The machine has 4 Processor 4Gigs Memory with 2 OnBoard
| Nics.
|
| Following are the counters that were observed when the
| freeze happens.
|
| 1. Memory - Normal
| 2. CPU Usage - Very Minimal (Less than Normal)
| 3. ASP Requests Queued - Increasing
| 4. ASP Requests Executing - Increasing
| 5. ASP Requests/Sec - Close to Zero
| 6. SQL Transactions - Close to Zero(normally 15-20)
| 7. Web Service Get Requests/Sec - Close to Zero (normally
| in 10's)
| 8. Network Interface Bytes Recieved/sec - Close to Zero
| 9. Network Interface Bytes Sent/sec - Close to Zero
| 10. TCP Segments/Sec - 20's (normally 200's)
|
| Based on the above counters I could possibly imagine that
| the network firewall or the switch could be causing this
| issue. Is this the right direction to move on to debug
| this issue?
|
| Thanks,
| Shankar.
|

 >> Stay informed about: IIS Request Freeze 
Back to top
Login to vote
shankr571

External


Since: Sep 17, 2003
Posts: 1



(Msg. 3) Posted: Wed Sep 17, 2003 6:02 pm
Post subject: RE: IIS Request Freeze [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Thanks a lot for your input.

The IIS 5.0 and SQL Server 2000 is on one machine, X1. The source code
of the application is on another Win 2000 server, X2. X2 is shared in
X1. Virtual directories are created on X1 using the UNC path to the X2
Machine. The application talks to the SQL Server using OLEDB Services
and Named Pipes. The application doesnt use any external COM components
except for a third party file upload component. All the objects
instantiated on the ASP are destroyed properly at the end of the page. I
dont think this would cause the problem. Is there any counters that will
indicate this?

When I noticed this problem, as a first step I patched the server with
SP4 and that didnt help fixing it. During the hang period, I constantly
pinged (ping <IP> -t) the server from outside if network was the issue.
But the test turned negative, meaning - The machine was reachable from
outside.

One thing was very obvious that the production environment has a MDAC
6.2 version installed on it. I am going to install MDAC 8.0 on the prod
environment tonight to check if that fixes the problem. If not I will
have to install IISState or IISDump on the server to take a dump of the
memory.

Can you please let me know what major impact does the "On error Resume
Next" has on the IIS ?

Thanks a lot,
Shankar.


*** Sent via Developersdex http://www.developersdex.com ***
Don't just participate in USENET...get rewarded for it!
 >> Stay informed about: IIS Request Freeze 
Back to top
Login to vote
timcof

External


Since: Sep 02, 2003
Posts: 912



(Msg. 4) Posted: Thu Sep 18, 2003 5:27 am
Post subject: RE: IIS Request Freeze [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Well, on error resume next, means if there is an error, you are going to skip over it and continue running the script; this error (unless
you have error handling in your code, which is the way to do things if you are using 'on error resume next') can cause your CPU to
spike, hang, all kind of things. So I would rem that out, and then check to see if we do get an error when the problem occurs.

MDAC, if you haven't already upgraded to 2.8, I would start off with 2.7sp1. It has been out a while, and shows to be very stable.

Thank you. I hope this information is helpful.

Tim Coffey [MSFT]

This posting is provided “AS IS” with no warranties, and confers no rights. You assume all risk for your use. © 2001 Microsoft
Corporation. All rights reserved.
--------------------
| From: Shankar Bala <shankr57.DeleteThis@hotmail.com>
| References: <IbHxfwPfDHA.2208.DeleteThis@cpmsftngxa06.phx.gbl>
| X-Newsreader: AspNNTP 1.50 (ActionJackson.com)
| Subject: RE: IIS Request Freeze
| Mime-Version: 1.0
| Content-Type: text/plain; charset="us-ascii"
| Content-Transfer-Encoding: 7bit
| Message-ID: <e98BmdWfDHA.3896.DeleteThis@tk2msftngp13.phx.gbl>
| Newsgroups: microsoft.public.inetserver.iis
| Date: Wed, 17 Sep 2003 15:02:32 -0700
| NNTP-Posting-Host: actionjackson133.dsl.frii.net 216.17.147.133
| Lines: 1
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.inetserver.iis:276000
| X-Tomcat-NG: microsoft.public.inetserver.iis
|
| Thanks a lot for your input.
|
| The IIS 5.0 and SQL Server 2000 is on one machine, X1. The source code
| of the application is on another Win 2000 server, X2. X2 is shared in
| X1. Virtual directories are created on X1 using the UNC path to the X2
| Machine. The application talks to the SQL Server using OLEDB Services
| and Named Pipes. The application doesnt use any external COM components
| except for a third party file upload component. All the objects
| instantiated on the ASP are destroyed properly at the end of the page. I
| dont think this would cause the problem. Is there any counters that will
| indicate this?
|
| When I noticed this problem, as a first step I patched the server with
| SP4 and that didnt help fixing it. During the hang period, I constantly
| pinged (ping <IP> -t) the server from outside if network was the issue.
| But the test turned negative, meaning - The machine was reachable from
| outside.
|
| One thing was very obvious that the production environment has a MDAC
| 6.2 version installed on it. I am going to install MDAC 8.0 on the prod
| environment tonight to check if that fixes the problem. If not I will
| have to install IISState or IISDump on the server to take a dump of the
| memory.
|
| Can you please let me know what major impact does the "On error Resume
| Next" has on the IIS ?
|
| Thanks a lot,
| Shankar.
|
|
| *** Sent via Developersdex http://www.developersdex.com ***
| Don't just participate in USENET...get rewarded for it!
|
 >> Stay informed about: IIS Request Freeze 
Back to top
Login to vote
shankr57

External


Since: Sep 12, 2003
Posts: 10



(Msg. 5) Posted: Mon Sep 22, 2003 2:56 pm
Post subject: RE: IIS Request Freeze(IISState) [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)
Hello,
I have managed to get the IISDump log when the freeze was
happening. It would be of great help if you can find what
causes the freeze on IIS from the IIS Dump File.

Thanks,
Shankar.


***********************
Starting new log output
IISState version 3.1

Mon Sep 22 10:32:17 2003

OS = Windows 2000
Executable: inetinfo.exe
PID = 1780

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 6f0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f89c 7c4e660d ntdll!ZwReadFile+0xb
01 0006f910 7c2e0135 KERNEL32!ReadFile+0x181
02 0006f93c 7c2dffbb ADVAPI32!ScGetPipeInput+0x28
03 0006f9b8 7c2e1995 ADVAPI32!ScDispatcherLoop+0x4a
04 0006fbf4 01002884 ADVAPI32!
StartServiceCtrlDispatcherA+0x7d
05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
06 0006ff70 01002fbf inetinfo!main+0x654
07 0006ffc0 7c4e87f5 inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d




Thread ID: 1
System Thread ID: 718
Kernel Time: 0:0:0.62
User Time: 0:0:0.62
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 005dfd1c 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 005dfd44 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 005dfd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
03 005dfd70 01002440 iisadmin!ServiceEntry+0x156
04 005dffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
05 005dffb4 7c4e987c ADVAPI32!ScSvcctrlThreadA+0xe
06 005dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 2
System Thread ID: 76c
Kernel Time: 0:1:12.250
User Time: 0:0:15.343
Thread Type: Other
# ChildEBP RetAddr
00 0071fe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0071feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0071ff08 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0071ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 3
System Thread ID: 770
Kernel Time: 0:1:18.78
User Time: 0:0:21.93
Thread Type: Other
# ChildEBP RetAddr
00 0075fe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0075feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0075ff08 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 0075ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0075ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0075ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
06 0075ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 4
System Thread ID: 774
Kernel Time: 0:1:6.500
User Time: 0:0:14.734
Thread Type: Other
# ChildEBP RetAddr
00 0079fe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0079feac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 0079ff08 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 0079ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0079ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0079ffb4 7c4e987c MSVCRT!_endthreadex+0xc1
06 0079ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 5
System Thread ID: 778
Kernel Time: 0:1:34.609
User Time: 0:0:17.281
Thread Type: Other
# ChildEBP RetAddr
00 007dfe5c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 007dfeac 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 007dff08 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 007dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 007dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 007dffb4 7c4e987c MSVCRT!_endthreadex+0xc1
06 007dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 6
System Thread ID: 7c8
Kernel Time: 0:0:0.171
User Time: 0:0:0.234
Thread Type: Other
# ChildEBP RetAddr
00 00ecfc1c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 00ecfc6c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00ecfcc8 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 00ecfce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 00ecfd30 6b561a78 INFOCOMM!
IIS_SERVICE::StartServiceOperation+0x209
05 00ecfd70 01002440 SMTPSVC!ServiceEntry+0x136
06 00ecffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
07 00ecffb4 7c4e987c ADVAPI32!ScSvcctrlThreadA+0xe
08 00ecffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 7
System Thread ID: 7cc
Kernel Time: 0:0:0.187
User Time: 0:0:0.187
Thread Type: Other
# ChildEBP RetAddr
00 00f0fc1c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 00f0fc6c 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 00f0fcc8 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 00f0fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 00f0fd30 65f0cfd8 INFOCOMM!
IIS_SERVICE::StartServiceOperation+0x209
05 00f0fd70 01002440 w3svc!ServiceEntry+0x1b5
06 00f0ffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
07 00f0ffb4 7c4e987c ADVAPI32!ScSvcctrlThreadA+0xe
08 00f0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 8
System Thread ID: b0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0111ff5c 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 0111ff88 6d7029ef KERNEL32!
GetQueuedCompletionStatus+0x27
02 0111ffb4 7c4e987c ISATQ!I_AtqOplockThreadFunc+0x32
03 0111ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 9
System Thread ID: 808
Kernel Time: 0:0:29.921
User Time: 0:0:16.93
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0115f824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0115f8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0115fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0115fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0115fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 0115fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0115fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0115fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0115fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0115ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0115ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0115ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0115ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0115ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 10
System Thread ID: 80c
Kernel Time: 0:0:22.515
User Time: 0:0:13.515
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0119f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0119f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0119fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0119fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0119fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 0119fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0119fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0119ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0119ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 0119ff4c 6d701a22 w3svc!W3Completion+0x43
0a 0119ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 0119ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 0119ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 11
System Thread ID: 820
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0165fd20 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0165fd70 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0165fd88 778322b2 KERNEL32!WaitForMultipleObjects+0x17
03 0165ffb4 7c4e987c RTUTILS!TraceServerThread+0xde
04 0165ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 12
System Thread ID: 824
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 016afeb8 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 016afee4 77d809da KERNEL32!
GetQueuedCompletionStatus+0x27
02 016aff20 77d50ede RPCRT4!COMMON_ProcessCalls+0x9e
03 016aff74 77d50d17 RPCRT4!
LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 016aff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
05 016affa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
06 016affb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
07 016affec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 13
System Thread ID: 828
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 016eff20 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 016eff70 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 016eff88 701224fa KERNEL32!WaitForMultipleObjects+0x17
03 016effb4 7c4e987c exstrace!RegNotifyThread+0x6f
04 016effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 14
System Thread ID: 82c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0172ff24 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0172ff74 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0172ff8c 70121e6a KERNEL32!WaitForMultipleObjects+0x17
03 0172ffb4 7c4e987c exstrace!WriteTraceThread+0x2f
04 0172ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 15
System Thread ID: 830
Kernel Time: 0:0:0.15
User Time: 0:0:0.78
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0192ff64 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0192ff8c 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0192ff9c 6ff2841e KERNEL32!WaitForSingleObject+0xf
03 0192ffb4 7c4e987c FCACHDLL!
CScheduleThread::ScheduleThread+0x22
04 0192ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 16
System Thread ID: 834
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01a6ff18 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 01a6ff68 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 01a6ff80 6b57b026 KERNEL32!WaitForMultipleObjects+0x17
03 01a6ffb4 7c4e987c SMTPSVC!TcpRegNotifyThread+0x136
04 01a6ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 17
System Thread ID: 838
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01abff68 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 01abff90 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 01abffa0 6b57ae5a KERNEL32!WaitForSingleObject+0xf
03 01abffb4 7c4e987c SMTPSVC!FreeLibThread+0x1d
04 01abffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 18
System Thread ID: 840
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 01afff5c 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 01afff84 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 01afff94 732c3366 KERNEL32!WaitForSingleObject+0xf
03 01afffb4 7c4e987c compfilt!CompressionThread+0x29
04 01afffc0 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 19
System Thread ID: 844
Kernel Time: 0:0:0.0
User Time: 0:0:0.93
Thread Type: Other
# ChildEBP RetAddr
00 01c0fe70 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 01c0fec0 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01c0ff1c 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 01c0ff38 65f09ccb USER32!MsgWaitForMultipleObjects+0x1d
04 01c0ff7c 78008454 w3svc!CMTACallbackThread::Thread+0x42
05 01c0ffb4 7c4e987c MSVCRT!_endthread+0xc6
06 01c0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 20
System Thread ID: 848
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01c4fea8 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 01c4fef8 77e13990 KERNEL32!WaitForMultipleObjectsEx+0xea
02 01c4ff54 77e13a5c USER32!
MsgWaitForMultipleObjectsEx+0x153
03 01c4ff70 65f09d47 USER32!MsgWaitForMultipleObjects+0x1d
04 01c4ffb4 7c4e987c w3svc!OleHackThread+0x88
05 01c4ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 21
System Thread ID: 878
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01ccfce0 74fd1394 ntdll!NtWaitForSingleObject+0xb
01 01ccfd1c 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
02 01ccfe08 750312f5 msafd!WSPSelect+0x24e
03 01ccfe6c 6e2b3b6e WS2_32!select+0xe7
04 01ccffb4 7c4e987c inetsloc!SocketListenThread+0x51
05 01ccffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 22
System Thread ID: a08
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 01d8fdfc 74fd1394 ntdll!NtWaitForSingleObject+0xb
01 01d8fe38 74fd3c59 msafd!SockWaitForSingleObject+0x1a8
02 01d8ff24 750312f5 msafd!WSPSelect+0x24e
03 01d8ff88 6d7075bd WS2_32!select+0xe7
04 01d8ffb0 6d70791b ISATQ!
ATQ_BMON_SET::BmonThreadFunc+0x22
05 01d8ffb4 7c4e987c ISATQ!BmonThreadFunc+0x9
06 01d8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 23
System Thread ID: a10
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 01deff54 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 01deff7c 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 01deff8c 741a99cd KERNEL32!WaitForSingleObject+0xf
03 01deffb4 7c4e987c aqueue!
CSMTP_RETRY_HANDLER::RetryThreadRoutine+0xce
04 01deffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 24
System Thread ID: a0c
Kernel Time: 0:0:0.281
User Time: 0:0:0.234
Thread Type: Other
# ChildEBP RetAddr
00 01e2fed0 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 01e2ff20 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 01e2ff38 741900e1 KERNEL32!WaitForMultipleObjects+0x17
03 01e2ff9c 6b56dccd aqueue!
CConnMgr::GetNextConnection+0x1da
04 01e2ffb4 7c4e987c SMTPSVC!
PERSIST_QUEUE::QueueThreadRoutine+0x23
05 01e2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 25
System Thread ID: a34
Kernel Time: 0:0:0.156
User Time: 0:0:0.62
Thread Type: Other
# ChildEBP RetAddr
00 01ecebe0 77f8385e ntdll!ZwWaitForMultipleObjects+0xb
01 01ecffb4 7c4e987c ntdll!RtlpWaitThread+0x1b9
02 01ecffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 26
System Thread ID: 8b4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0200ff1c 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0200ff6c 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0200ff84 7c0f4ac7 KERNEL32!WaitForMultipleObjects+0x17
03 0200ffb4 7c4e987c USERENV!NotificationThread+0x5f
04 0200ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 27
System Thread ID: a3c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0208ff9c 77f85c42 ntdll!NtDelayExecution+0xb
01 0208ffb4 7c4e987c ntdll!RtlpTimerThread+0x42
02 0208ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 28
System Thread ID: c98
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 021cfe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 021cff74 77d56d9e RPCRT4!
LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 021cff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
03 021cffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
04 021cffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 021cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 29
System Thread ID: bf0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0286ff08 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0286ff58 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0286ff70 787f37d4 KERNEL32!WaitForMultipleObjects+0x17
03 0286ffb4 7c4e987c COMSVCS!
CEventDispatcher::PushEvents+0x44
04 0286ffc0 00000008 KERNEL32!BaseThreadStart+0x52




Thread ID: 30
System Thread ID: cb0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

Remote call is either to a MTA object or object not
initialized. Also, possible utility thread.
DCOM call being made to Process ID: 2840
Waiting on thread id: ffffffff

# ChildEBP RetAddr
00 028afb68 77d4ec77 ntdll!NtRequestWaitReplyPort+0xb
01 028afb94 77d3a2c7 RPCRT4!LRPC_CCALL::SendReceive+0x11e
02 028afba0 77b23b2c RPCRT4!I_RpcSendReceive+0x2c
03 028afbc0 77b239f7 ole32!ThreadSendReceive+0xef
04 028afbd8 77b20aa5 ole32!
CRpcChannelBuffer::SwitchAptAndDispatchCall+0x14a
05 028afc18 77b23870 ole32!
CRpcChannelBuffer::SendReceive2+0x96
06 028afc28 77a6c767 ole32!
CRpcChannelBuffer::SendReceive+0x11
07 028afc88 77ab6ac3 ole32!CAptRpcChnl::SendReceive+0xa9
08 028afce0 77d90328 ole32!CCtxComChnl::SendReceive+0x124
09 028afcfc 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 028aff44 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 028aff60 77d77fcb RPCRT4!ObjectStublessClient+0x76
0c 028aff70 787f372e RPCRT4!ObjectStubless+0xf
0d 028affb4 7c4e987c COMSVCS!
CEventDispatcher::GetEventServerInfoThread+0x10e
0e 028affec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 31
System Thread ID: a8c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0296fc60 7c4ebdd7 ntdll!ZwWaitForMultipleObjects+0xb
01 0296fcb0 7c4fabfb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0296fcc8 6e901993 KERNEL32!WaitForMultipleObjects+0x17
03 0296ff54 6e9018d0 idq!
CWQueryCache::ProcessCacheEvents+0xa4
04 0296ff7c 6e903b01 idq!CWQueryCache::WatchDogThread+0x2f
05 0296ffb4 7c4e987c idq!CThread::_ThreadFunction+0x42
06 0296ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 32
System Thread ID: b58
Kernel Time: 0:0:21.968
User Time: 0:0:13.828
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02e9f838 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 02e9f860 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 02e9f870 7c51066f KERNEL32!WaitForSingleObject+0xf
03 02e9f880 769b21fc KERNEL32!GetOverlappedResult+0x27
04 02e9f8c0 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 02e9fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 02e9fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 02e9fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
08 02e9fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 02e9fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 02e9fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 02e9fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
0c 02e9ff08 65f06b58 w3svc!CreateClient+0x7b
0d 02e9ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0e 02e9ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0f 02e9ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
10 02e9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 33
System Thread ID: 21c
Kernel Time: 0:0:31.437
User Time: 0:0:18.281
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 03c0f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 03c0f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 03c0fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 03c0fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 03c0fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 03c0fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 03c0fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 03c0ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 03c0ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 03c0ff4c 6d701a22 w3svc!W3Completion+0x43
0a 03c0ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 03c0ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 03c0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 34
System Thread ID: c90
Kernel Time: 0:0:20.875
User Time: 0:0:13.328
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0709f824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0709f8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0709fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0709fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0709fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 0709fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0709fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0709fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0709fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0709ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0709ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0709ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0709ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0709ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 35
System Thread ID: 9f0
Kernel Time: 0:0:18.500
User Time: 0:0:11.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0918fb0c 7c4faca5 ntdll!NtDelayExecution+0xb
01 0918fb2c 7c4fac79 KERNEL32!SleepEx+0x32
02 0918fb38 769b26a5 KERNEL32!Sleep+0xb
03 0918fb98 769b2592 INFOCOMM!CheckoutFile+0x9e
04 0918fcc4 769b2028 INFOCOMM!TsCreateFile+0xe4
05 0918fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0918fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0918fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0918fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0918ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0918ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0918ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0918ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0918ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 36
System Thread ID: 340
Kernel Time: 0:0:21.31
User Time: 0:0:11.828
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0bc8f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0bc8f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0bc8fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0bc8fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0bc8fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 0bc8fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0bc8fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0bc8ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0bc8ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 0bc8ff4c 6d701a22 w3svc!W3Completion+0x43
0a 0bc8ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 0bc8ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 0bc8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 37
System Thread ID: 618
Kernel Time: 0:0:8.937
User Time: 0:0:5.484
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0bd8f88c 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0bd8f8b4 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0bd8f8c4 7c51066f KERNEL32!WaitForSingleObject+0xf
03 0bd8f8d4 769b21fc KERNEL32!GetOverlappedResult+0x27
04 0bd8f914 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 0bd8fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 0bd8fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 0bd8fd18 769b2028 INFOCOMM!TsCreateFile+0x142
08 0bd8fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 0bd8fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 0bd8ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 0bd8ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
0c 0bd8ff4c 6d701a22 w3svc!W3Completion+0x43
0d 0bd8ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0e 0bd8ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0f 0bd8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 38
System Thread ID: c50
Kernel Time: 0:0:10.328
User Time: 0:0:6.328
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0da1f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0da1f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0da1fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0da1fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0da1fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 0da1fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0da1fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0da1ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0da1ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 0da1ff4c 6d701a22 w3svc!W3Completion+0x43
0a 0da1ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 0da1ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 0da1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 39
System Thread ID: c24
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 015dff30 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 015dff5c 6b5e99c2 KERNEL32!
GetQueuedCompletionStatus+0x27
02 015dff8c 6b5e997a httpext!
CDavWorkerThread::GetWorkCompletion+0x23
03 015dffb4 7c4e987c httpext!
CDavWorkerThread::ThreadDispatcher+0x30
04 015dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 40
System Thread ID: 7e8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d0ff30 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 01d0ff5c 6b5e99c2 KERNEL32!
GetQueuedCompletionStatus+0x27
02 01d0ff8c 6b5e997a httpext!
CDavWorkerThread::GetWorkCompletion+0x23
03 01d0ffb4 7c4e987c httpext!
CDavWorkerThread::ThreadDispatcher+0x30
04 01d0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 41
System Thread ID: d20
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01d4ff30 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 01d4ff5c 6b5e99c2 KERNEL32!
GetQueuedCompletionStatus+0x27
02 01d4ff8c 6b5e997a httpext!
CDavWorkerThread::GetWorkCompletion+0x23
03 01d4ffb4 7c4e987c httpext!
CDavWorkerThread::ThreadDispatcher+0x30
04 01d4ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 42
System Thread ID: 158
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 01e8ff30 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 01e8ff5c 6b5e99c2 KERNEL32!
GetQueuedCompletionStatus+0x27
02 01e8ff8c 6b5e997a httpext!
CDavWorkerThread::GetWorkCompletion+0x23
03 01e8ffb4 7c4e987c httpext!
CDavWorkerThread::ThreadDispatcher+0x30
04 01e8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 43
System Thread ID: 470
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0204ff30 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 0204ff5c 6b5e99c2 KERNEL32!
GetQueuedCompletionStatus+0x27
02 0204ff8c 6b5e997a httpext!
CDavWorkerThread::GetWorkCompletion+0x23
03 0204ffb4 7c4e987c httpext!
CDavWorkerThread::ThreadDispatcher+0x30
04 0204ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 44
System Thread ID: 218
Kernel Time: 0:0:2.859
User Time: 0:0:5.234
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 02b1fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 02b1ff74 77d56d9e RPCRT4!
LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 02b1ff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
03 02b1ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
04 02b1ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 02b1ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 45
System Thread ID: aa4
Kernel Time: 0:0:1.625
User Time: 0:0:3.218
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 029bfe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 029bff74 77d56d9e RPCRT4!
LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 029bff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
03 029bffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
04 029bffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 029bffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 46
System Thread ID: 910
Kernel Time: 0:0:0.640
User Time: 0:0:1.468
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 0406fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 0406ff74 77d56d9e RPCRT4!
LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0406ff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0406ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
04 0406ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 0406ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 47
System Thread ID: d5c
Kernel Time: 0:0:1.390
User Time: 0:0:0.890
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02e0f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02e0f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02e0fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02e0fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02e0fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 02e0fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02e0fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02e0ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02e0ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 02e0ff4c 6d701a22 w3svc!W3Completion+0x43
0a 02e0ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 02e0ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 02e0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 48
System Thread ID: cf8
Kernel Time: 0:0:3.343
User Time: 0:0:1.609
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0210f824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0210f8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0210fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0210fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0210fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 0210fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0210fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0210fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0210fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0210ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0210ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0210ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0210ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0210ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 49
System Thread ID: d64
Kernel Time: 0:0:1.328
User Time: 0:0:0.734
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0228f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0228f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0228fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0228fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0228fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 0228fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0228fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0228ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0228ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 0228ff4c 6d701a22 w3svc!W3Completion+0x43
0a 0228ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 0228ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 0228ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 50
System Thread ID: 710
Kernel Time: 0:0:2.937
User Time: 0:0:1.968
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0282fb0c 7c4faca5 ntdll!NtDelayExecution+0xb
01 0282fb2c 7c4fac79 KERNEL32!SleepEx+0x32
02 0282fb38 769b26a5 KERNEL32!Sleep+0xb
03 0282fb98 769b2592 INFOCOMM!CheckoutFile+0x9e
04 0282fcc4 769b2028 INFOCOMM!TsCreateFile+0xe4
05 0282fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0282fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0282fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0282fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0282ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0282ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0282ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0282ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0282ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 51
System Thread ID: cc0
Kernel Time: 0:0:0.703
User Time: 0:0:0.296
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 029ff824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 029ff8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 029ffb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 029ffb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 029ffcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 029ffcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 029ffd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 029ffec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 029ffee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 029fff08 65f06b58 w3svc!CreateClient+0x7b
0a 029fff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 029fff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 029fffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 029fffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 52
System Thread ID: c14
Kernel Time: 0:0:0.562
User Time: 0:0:0.468
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02a3f88c 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 02a3f8b4 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 02a3f8c4 7c51066f KERNEL32!WaitForSingleObject+0xf
03 02a3f8d4 769b21fc KERNEL32!GetOverlappedResult+0x27
04 02a3f914 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 02a3fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 02a3fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 02a3fd18 769b2028 INFOCOMM!TsCreateFile+0x142
08 02a3fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 02a3fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 02a3ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 02a3ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
0c 02a3ff4c 6d701a22 w3svc!W3Completion+0x43
0d 02a3ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0e 02a3ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0f 02a3ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 53
System Thread ID: 15c
Kernel Time: 0:0:4.62
User Time: 0:0:3.62
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 03e9f838 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 03e9f860 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 03e9f870 7c51066f KERNEL32!WaitForSingleObject+0xf
03 03e9f880 769b21fc KERNEL32!GetOverlappedResult+0x27
04 03e9f8c0 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 03e9fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 03e9fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 03e9fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
08 03e9fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 03e9fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 03e9fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 03e9fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
0c 03e9ff08 65f06b58 w3svc!CreateClient+0x7b
0d 03e9ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0e 03e9ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0f 03e9ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
10 03e9ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 54
System Thread ID: 9b4
Kernel Time: 0:0:4.578
User Time: 0:0:2.375
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 040ef34c 6d701e12 ISATQ!SPUDCreateFile+0xb
01 040ef3d4 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 040ef69c 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 040ef6c0 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 040ef7ec 65f22c30 INFOCOMM!TsCreateFile+0x142
05 040efd50 65f23a10 w3svc!
HTTP_REQUEST::CheckDefaultLoad+0x1ab
06 040efda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x39b
07 040eff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 040eff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 040eff4c 6d701a22 w3svc!W3Completion+0x43
0a 040eff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 040effb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 040effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 55
System Thread ID: 7fc
Kernel Time: 0:0:4.421
User Time: 0:0:2.218
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0426f838 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 0426f860 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 0426f870 7c51066f KERNEL32!WaitForSingleObject+0xf
03 0426f880 769b21fc KERNEL32!GetOverlappedResult+0x27
04 0426f8c0 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 0426fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 0426fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 0426fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
08 0426fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 0426fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 0426fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 0426fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
0c 0426ff08 65f06b58 w3svc!CreateClient+0x7b
0d 0426ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0e 0426ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0f 0426ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
10 0426ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 56
System Thread ID: b10
Kernel Time: 0:0:2.687
User Time: 0:0:1.640
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 044afb0c 7c4faca5 ntdll!NtDelayExecution+0xb
01 044afb2c 7c4fac79 KERNEL32!SleepEx+0x32
02 044afb38 769b26a5 KERNEL32!Sleep+0xb
03 044afb98 769b2592 INFOCOMM!CheckoutFile+0x9e
04 044afcc4 769b2028 INFOCOMM!TsCreateFile+0xe4
05 044afcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 044afd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 044afec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 044afee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 044aff08 65f06b58 w3svc!CreateClient+0x7b
0a 044aff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 044aff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 044affb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 044affec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 57
System Thread ID: dbc
Kernel Time: 0:0:0.265
User Time: 0:0:0.500
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 04cbf3ac 74fd1394 ntdll!NtWaitForSingleObject+0xb
01 04cbf3e8 74fdaa24 msafd!SockWaitForSingleObject+0x1a8
02 04cbf464 75031c62 msafd!WSPSend+0x1be
03 04cbf4ac 769b465b WS2_32!send+0x94
04 04cbf4e0 65f2cc06 INFOCOMM!TcpSockSend+0xeb
05 04cbf518 65f2790e w3svc!HTTP_REQ_BASE::WriteFile+0x10a
06 04cbf540 65f2cb68 w3svc!HTTP_FILTER::SendData+0xbb
07 04cbf574 65f38289 w3svc!HTTP_REQ_BASE::WriteFile+0x71
08 04cbf590 65f373b6 w3svc!
WAM_REQUEST::SyncWriteClient+0x63
09 04cbf5bc 65f3839d w3svc!
WAM_REQUEST::SendEntireResponseNormal+0x51
0a 04cbf5c8 65f38476 w3svc!
WAM_REQUEST::SendEntireResponse+0x2a
0b 04cbf78c 77d77fb0 w3svc!
WAM_REQUEST::SendEntireResponseAndCleanup+0xd5
0c 04cbf7c8 77d95ad7 RPCRT4!Invoke+0x30
0d 04cbfa54 77d8f77e RPCRT4!NdrStubCall2+0x655
0e 04cbfab8 77b22548 RPCRT4!CStdStubBuffer_Invoke+0xc8
0f 04cbfafc 77b22823 ole32!SyncStubInvoke+0x61
10 04cbfb44 77ab6e81 ole32!StubInvoke+0xa8
11 04cbfba8 77aa9a11 ole32!CCtxComChnl::ContextInvoke+0xbb
12 04cbfbc4 77b2242d ole32!MTAInvoke+0x18
13 04cbfbf4 77b22b58 ole32!AppInvoke+0xb5
14 04cbfcb4 77b20360 ole32!ComInvokeWithLockAndIPID+0x29e
15 04cbfcf4 77d52156 ole32!ThreadInvoke+0x1b7
16 04cbfd2c 77d37ee1 RPCRT4!DispatchToStubInC+0x32
17 04cbfd84 77d37db5 RPCRT4!
RPC_INTERFACE::DispatchToStubWorker+0x100
18 04cbfda4 77d38081 RPCRT4!
RPC_INTERFACE::DispatchToStub+0x5e
19 04cbfdd4 77d58bda RPCRT4!
RPC_INTERFACE::DispatchToStubWithObject+0xa9
1a 04cbfe10 77d5717a RPCRT4!
LRPC_SCALL::DealWithRequestMessage+0x1cd
1b 04cbfe28 77d57689 RPCRT4!
LRPC_ADDRESS::DealWithLRPCRequest+0x10c
1c 04cbff74 77d56d9e RPCRT4!
LRPC_ADDRESS::ReceiveLotsaCalls+0x229
1d 04cbff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
1e 04cbffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
1f 04cbffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
20 04cbffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 58
System Thread ID: cec
Kernel Time: 0:0:0.937
User Time: 0:0:1.671
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 0477fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 0477ff74 77d56d9e RPCRT4!
LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0477ff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0477ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
04 0477ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 0477ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 59
System Thread ID: ce0
Kernel Time: 0:0:0.546
User Time: 0:0:0.734
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 00c3fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 00c3ff74 77d56d9e RPCRT4!
LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 00c3ff78 77d39a00 RPCRT4!RecvLotsaCallsWrapper+0x9
03 00c3ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
04 00c3ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
05 00c3ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 60
System Thread ID: c08
Kernel Time: 0:0:1.109
User Time: 0:0:0.437
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02b6f824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02b6f8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02b6fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02b6fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02b6fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 02b6fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02b6fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02b6fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02b6fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 02b6ff08 65f06b58 w3svc!CreateClient+0x7b
0a 02b6ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 02b6ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 02b6ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 02b6ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 61
System Thread ID: b38
Kernel Time: 0:0:0.734
User Time: 0:0:0.328
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02bef878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02bef900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02befbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02befbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02befd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 02befd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02befda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02beff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02beff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 02beff4c 6d701a22 w3svc!W3Completion+0x43
0a 02beff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 02beffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 02beffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 62
System Thread ID: dc0
Kernel Time: 0:0:0.281
User Time: 0:0:0.140
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00c7f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 00c7f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 00c7fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 00c7fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 00c7fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 00c7fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 00c7fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 00c7ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 00c7ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 00c7ff4c 6d701a22 w3svc!W3Completion+0x43
0a 00c7ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 00c7ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 00c7ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 63
System Thread ID: 8fc
Kernel Time: 0:0:1.781
User Time: 0:0:1.140
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f4f838 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 00f4f860 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 00f4f870 7c51066f KERNEL32!WaitForSingleObject+0xf
03 00f4f880 769b21fc KERNEL32!GetOverlappedResult+0x27
04 00f4f8c0 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 00f4fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 00f4fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 00f4fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
08 00f4fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 00f4fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 00f4fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 00f4fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
0c 00f4ff08 65f06b58 w3svc!CreateClient+0x7b
0d 00f4ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0e 00f4ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0f 00f4ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
10 00f4ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 64
System Thread ID: 5bc
Kernel Time: 0:0:0.515
User Time: 0:0:0.265
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 011dfb0c 7c4faca5 ntdll!NtDelayExecution+0xb
01 011dfb2c 7c4fac79 KERNEL32!SleepEx+0x32
02 011dfb38 769b26a5 KERNEL32!Sleep+0xb
03 011dfb98 769b2592 INFOCOMM!CheckoutFile+0x9e
04 011dfcc4 769b2028 INFOCOMM!TsCreateFile+0xe4
05 011dfcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 011dfd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 011dfec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 011dfee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 011dff08 65f06b58 w3svc!CreateClient+0x7b
0a 011dff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 011dff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 011dffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 011dffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 65
System Thread ID: 804
Kernel Time: 0:0:0.687
User Time: 0:0:0.265
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 020cf8c0 7c4e91aa ntdll!NtClose+0xb
01 020cf8cc 769b2afe KERNEL32!CloseHandle+0x4f
02 020cfb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x28d
03 020cfb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 020cfcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 020cfcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 020cfd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 020cfec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 020cfee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 020cff08 65f06b58 w3svc!CreateClient+0x7b
0a 020cff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 020cff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 020cffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 020cffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 66
System Thread ID: ad4
Kernel Time: 0:0:0.859
User Time: 0:0:0.250
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0214f824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0214f8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0214fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0214fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0214fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 0214fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0214fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0214fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0214fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0214ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0214ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0214ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0214ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0214ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 67
System Thread ID: 81c
Kernel Time: 0:0:0.234
User Time: 0:0:0.46
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0224f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0224f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0224fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0224fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0224fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 0224fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0224fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0224ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0224ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 0224ff4c 6d701a22 w3svc!W3Completion+0x43
0a 0224ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 0224ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 0224ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 68
System Thread ID: 4bc
Kernel Time: 0:0:1.968
User Time: 0:0:0.984
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 025ff838 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 025ff860 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 025ff870 7c51066f KERNEL32!WaitForSingleObject+0xf
03 025ff880 769b21fc KERNEL32!GetOverlappedResult+0x27
04 025ff8c0 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 025ffb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 025ffb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 025ffcc4 769b2028 INFOCOMM!TsCreateFile+0x142
08 025ffcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 025ffd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 025ffec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 025ffee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
0c 025fff08 65f06b58 w3svc!CreateClient+0x7b
0d 025fff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0e 025fff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0f 025fffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
10 025fffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 69
System Thread ID: bf8
Kernel Time: 0:0:0.781
User Time: 0:0:0.234
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02a7f88c 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 02a7f8b4 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 02a7f8c4 7c51066f KERNEL32!WaitForSingleObject+0xf
03 02a7f8d4 769b21fc KERNEL32!GetOverlappedResult+0x27
04 02a7f914 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 02a7fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 02a7fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 02a7fd18 769b2028 INFOCOMM!TsCreateFile+0x142
08 02a7fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
09 02a7fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
0a 02a7ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 02a7ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
0c 02a7ff4c 6d701a22 w3svc!W3Completion+0x43
0d 02a7ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0e 02a7ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0f 02a7ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 70
System Thread ID: 360
Kernel Time: 0:0:0.546
User Time: 0:0:0.171
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02abf824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02abf8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02abfb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02abfb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02abfcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 02abfcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02abfd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02abfec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02abfee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 02abff08 65f06b58 w3svc!CreateClient+0x7b
0a 02abff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 02abff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 02abffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 02abffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 71
System Thread ID: bc0
Kernel Time: 0:0:0.812
User Time: 0:0:0.265
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02c8f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02c8f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02c8fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02c8fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02c8fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 02c8fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02c8fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02c8ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02c8ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 02c8ff4c 6d701a22 w3svc!W3Completion+0x43
0a 02c8ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 02c8ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 02c8ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 72
System Thread ID: 9dc
Kernel Time: 0:0:0.500
User Time: 0:0:0.140
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02ccf878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02ccf900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02ccfbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02ccfbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02ccfd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 02ccfd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02ccfda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02ccff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02ccff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 02ccff4c 6d701a22 w3svc!W3Completion+0x43
0a 02ccff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 02ccffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 02ccffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 73
System Thread ID: a68
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 02d3ff80 74fd6363 ntdll!NtRemoveIoCompletion+0xb
01 02d3ffb4 7c4e987c msafd!SockAsyncThread+0x52
02 02d3ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 74
System Thread ID: ab0
Kernel Time: 0:0:1.187
User Time: 0:0:0.625
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02d7f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02d7f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02d7fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02d7fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02d7fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 02d7fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02d7fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02d7ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02d7ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 02d7ff4c 6d701a22 w3svc!W3Completion+0x43
0a 02d7ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 02d7ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 02d7ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 75
System Thread ID: 4d0
Kernel Time: 0:0:1.156
User Time: 0:0:0.421
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02dbf878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02dbf900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02dbfbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02dbfbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02dbfd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 02dbfd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02dbfda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02dbff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02dbff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 02dbff4c 6d701a22 w3svc!W3Completion+0x43
0a 02dbff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 02dbffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 02dbffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 76
System Thread ID: b00
Kernel Time: 0:0:0.468
User Time: 0:0:0.109
Thread Status: Thread is in a WAIT state.
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02f0f30c 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 02f0f334 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 02f0f344 7c51066f KERNEL32!WaitForSingleObject+0xf
03 02f0f354 769b21fc KERNEL32!GetOverlappedResult+0x27
04 02f0f394 769b2aee INFOCOMM!ReadFileIntoMemoryCache+0x109
05 02f0f648 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x281
06 02f0f66c 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
07 02f0f798 65f22c30 INFOCOMM!TsCreateFile+0x142
08 02f0fcfc 65f23a10 w3svc!
HTTP_REQUEST::CheckDefaultLoad+0x1ab
09 02f0fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x39b
0a 02f0fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
0b 02f0fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
0c 02f0ff08 65f06b58 w3svc!CreateClient+0x7b
0d 02f0ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0e 02f0ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0f 02f0ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
10 02f0ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 77
System Thread ID: d94
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0361ff20 77f8c35a ntdll!NtRemoveIoCompletion+0xb
01 0361ffb4 7c4e987c ntdll!RtlpWorkerThread+0x6b
02 0361ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 78
System Thread ID: 8b0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 044efef8 7c4fc4c2 ntdll!NtWaitForSingleObject+0xb
01 044eff20 7c4f1b1b KERNEL32!WaitForSingleObjectEx+0x71
02 044eff30 67de6ddf KERNEL32!WaitForSingleObject+0xf
03 044eff70 67f6cf08 fp4amsft!
VmetabaseSinkThread::t_main+0x102
04 044eff7c 780085bc fp4Autl!Vthread::top+0xd
05 044effb4 7c4e987c MSVCRT!_endthreadex+0xc1
06 044effec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 79
System Thread ID: c0c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to
locate ASP page.
Continuing with other analysis.

No remote call being made
# ChildEBP RetAddr
00 02c2ff74 77d39a74 ntdll!NtDelayExecution+0xb
01 02c2ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0xc3
02 02c2ffb4 7c4e987c RPCRT4!ThreadStartRoutine+0x18
03 02c2ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 80
System Thread ID: cfc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02baf824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 02baf8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 02bafb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 02bafb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 02bafcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 02bafcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02bafd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02bafec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02bafee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 02baff08 65f06b58 w3svc!CreateClient+0x7b
0a 02baff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 02baff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 02baffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 02baffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 81
System Thread ID: 72c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02e4fb60 7c4faca5 ntdll!NtDelayExecution+0xb
01 02e4fb80 7c4fac79 KERNEL32!SleepEx+0x32
02 02e4fb8c 769b26a5 KERNEL32!Sleep+0xb
03 02e4fbec 769b2592 INFOCOMM!CheckoutFile+0x9e
04 02e4fd18 769b2028 INFOCOMM!TsCreateFile+0xe4
05 02e4fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02e4fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02e4ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02e4ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 02e4ff4c 6d701a22 w3svc!W3Completion+0x43
0a 02e4ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 02e4ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 02e4ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 82
System Thread ID: d50
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 02f4fb0c 7c4faca5 ntdll!NtDelayExecution+0xb
01 02f4fb2c 7c4fac79 KERNEL32!SleepEx+0x32
02 02f4fb38 769b26a5 KERNEL32!Sleep+0xb
03 02f4fb98 769b2592 INFOCOMM!CheckoutFile+0x9e
04 02f4fcc4 769b2028 INFOCOMM!TsCreateFile+0xe4
05 02f4fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 02f4fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 02f4fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 02f4fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 02f4ff08 65f06b58 w3svc!CreateClient+0x7b
0a 02f4ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 02f4ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 02f4ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 02f4ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 83
System Thread ID: da8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0351fb0c 7c4faca5 ntdll!NtDelayExecution+0xb
01 0351fb2c 7c4fac79 KERNEL32!SleepEx+0x32
02 0351fb38 769b26a5 KERNEL32!Sleep+0xb
03 0351fb98 769b2592 INFOCOMM!CheckoutFile+0x9e
04 0351fcc4 769b2028 INFOCOMM!TsCreateFile+0xe4
05 0351fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0351fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0351fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0351fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0351ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0351ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0351ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0351ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0351ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 84
System Thread ID: 9e8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0355fb0c 7c4faca5 ntdll!NtDelayExecution+0xb
01 0355fb2c 7c4fac79 KERNEL32!SleepEx+0x32
02 0355fb38 769b26a5 KERNEL32!Sleep+0xb
03 0355fb98 769b2592 INFOCOMM!CheckoutFile+0x9e
04 0355fcc4 769b2028 INFOCOMM!TsCreateFile+0xe4
05 0355fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0355fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0355fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0355fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0355ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0355ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0355ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0355ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0355ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 85
System Thread ID: 888
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0359f824 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0359f8ac 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0359fb74 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0359fb98 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0359fcc4 769b2028 INFOCOMM!TsCreateFile+0x142
05 0359fcf4 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0359fd54 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0359fec4 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0359fee4 65f06be5 w3svc!CLIENT_CONN::DoWork+0x1aa
09 0359ff08 65f06b58 w3svc!CreateClient+0x7b
0a 0359ff4c 6d701ad2 w3svc!W3OnConnectEx+0x118
0b 0359ff80 6d7029a6 ISATQ!AtqpProcessContext+0x23e
0c 0359ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0d 0359ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 86
System Thread ID: d3c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0365f878 6d701e12 ISATQ!SPUDCreateFile+0xb
01 0365f900 769b2a3e ISATQ!AtqCreateFileW+0xfa
02 0365fbc8 769b2794 INFOCOMM!TspOpenCachedFileHelper+0x11d
03 0365fbec 769b25b1 INFOCOMM!TspOpenCachedFile+0x73
04 0365fd18 769b2028 INFOCOMM!TsCreateFile+0x142
05 0365fd48 65f03f0c INFOCOMM!TsCreateFileFromURI+0x10a
06 0365fda8 65f0242b w3svc!HTTP_REQUEST::DoGet+0x1c4
07 0365ff18 65f01d97 w3svc!HTTP_REQUEST::DoWork+0x504
08 0365ff38 65f047ef w3svc!CLIENT_CONN::DoWork+0x1aa
09 0365ff4c 6d701a22 w3svc!W3Completion+0x43
0a 0365ff80 6d7029a6 ISATQ!AtqpProcessContext+0x266
0b 0365ffb4 7c4e987c ISATQ!AtqPoolThread+0x1a8
0c 0365ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 87
System Thread ID: ca0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0369ff50 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 0369ff7c 6d702957 KERNEL32!
GetQueuedCompletionStatus+0x27
02 0369ffb4 7c4e987c ISATQ!AtqPoolThread+0x40
03 0369ffec 00000000 KERNEL32!BaseThreadStart+0x52




Thread ID: 88
System Thread ID: 348
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 036dff50 7c4efea1 ntdll!NtRemoveIoCompletion+0xb
01 036dff7c 6d702957 KERNEL32!
GetQueuedCompletionStatus+0x27
02 036dffb4 7c4e987c ISATQ!AtqPoolThread+0x40
03 036dffec 00000000 KERNEL32!BaseThreadStart+0x52

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating D:\iisstate\output\1780-1064251954.dmp - user
full dump

*****

Closing open log file D:\iisstate\output\IISState-1780.log
 >> Stay informed about: IIS Request Freeze 
Back to top
Login to vote
Display posts from previous:   
Related Topics:
Mysterious GET request - I have a dynamic page that processes the results of another HTML page with a form. The page looks at the request.form object and puts information into a database. For some reason, I have seen this page called by a GET request instead of the usual POST,..

Error on Request.BinaryRead for IIS 6.0 (win 2003) - I have a VBscript that I use to upload files onto the server. The script works fine on IIS 5.0 but on IIS 6.0 on Windows 2003 I get an error when uploading certain files. I believe its because the file is larger than what is normally uploaded. Averag...

Failed to create 'CertificateAuthority.Request' Object. - Hi, On a W2K server, I received the error below when I try to request a certificate or download the CA certificate. Failed to create 'CertificateAuthority.Request' Object. Any help. Thanks in advance, Laurent.

IIS 6 HTTP GET Request Fails if headers have LF instead of.. - I have the following problem: I submit GET requests to an IIS 6 server. I have specific headers that are separated by linefeeds (char 10, \r). Under IIS 5, these requests are processed fine. But under IIS6, it is ignoring these headers. To get things to...
   Web Hosting and Web Master Forums (Home) -> IIS All times are: Pacific Time (US & Canada) (change)
Page 1 of 1

 
 You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum



[ Contact us | Terms of Service/Privacy Policy ]