Multiple IIS servers stopping at once

External Since: Mar 03, 2004 Posts: 16

Awhile ago I posted regarding a concatenation lock - that's now fixed.

However we're now experiencing intermittent events where THREE seperate IIS
servers [1]all stop responding similtaneously.

There does not seem to be any rhyme or reason to this, I did an IIS State on
one of the servers (below) and would appreciate some more views on it as I
don't see any specific problems.

Any thoughts on what might cause this?

[1] via a load balancer, in a secure network environment - highly highly
unlikely to something like a virus.

Opened log file 'D:\iisstate\output\IISState-282.log'

***********************
Starting new log output
IISState version 3.4

Fri May 07 12:15:46 2004

OS = NT4
Executable: inetinfo.exe
PID = 282

Note: Thread times are formatted as HH:MM:SS.ms

***********************

Thread ID: 0
System Thread ID: 119
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0006fd44 77f0d291 ntdll!NtReadFile+0xb
01 0006fdb0 77dd8a61 KERNEL32!ReadFile+0x1a6
02 0006fde4 77dd84ad ADVAPI32!ScGetPipeInput+0x28
03 0006fe48 77dd82ca ADVAPI32!ScDispatcherLoop+0x46
04 0006fe6c 0100182c ADVAPI32!StartServiceCtrlDispatcherA+0x82
05 0006fea4 010015d5 inetinfo!StartDispatchTable+0x61
06 0006ff70 01001e7f inetinfo!main+0x2a5
07 0006ffc0 77f1bb7c inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40

Thread ID: 1
System Thread ID: 11c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0085fe2c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0085fe54 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0085fe64 683a18ee KERNEL32!WaitForSingleObject+0xf
03 0085fe80 0100175d iisadmin!ServiceEntry+0x11b
04 0085ffa8 77dd8c41 inetinfo!InetinfoStartService+0xfb
05 0085ffb8 77f04eeb ADVAPI32!ScSvcctrlThreadA+0xe
06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 2
System Thread ID: 152
Kernel Time: 0:0:0.62
User Time: 0:0:0.109
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
INFOCOMM.dll -
Thread Type: Other
# ChildEBP RetAddr
00 00e3fd34 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00e3fd8c 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00e3fde8 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00e3fe04 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0023f7ac 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4

Thread ID: 3
System Thread ID: 153
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00e7fd28 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 00e7fd80 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 00e7fddc 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 00e7fdf8 685992a3 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0023e664 00000000 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4

Thread ID: 4
System Thread ID: 15b
Kernel Time: 0:0:42.703
User Time: 0:0:20.203
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ISATQ.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00ebff30 77f1d1e8 ntdll!NtDelayExecution+0xb
01 00ebff50 77f1d1b1 KERNEL32!SleepEx+0x34
02 00ebff5c 68627b95 KERNEL32!Sleep+0xb
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 00ebff6c 68598d7c ISATQ!AtqCloseEndpoint+0x30
04 002ead20 03cbac38 INFOCOMM!IIS_ENDPOINT::Dereference+0x79
05 002ead20 03cbac38 0x3cbac38
06 002d6570 00000000 0x3cbac38

Thread ID: 5
System Thread ID: 15d
Kernel Time: 0:0:37.78
User Time: 0:0:22.687
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00efff30 77f1d1e8 ntdll!NtDelayExecution+0xb
01 00efff50 77f1d1b1 KERNEL32!SleepEx+0x34
02 00efff5c 68627b95 KERNEL32!Sleep+0xb
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 00efff6c 68598d7c ISATQ!AtqCloseEndpoint+0x30
04 00348170 000923f0 INFOCOMM!IIS_ENDPOINT::Dereference+0x79
05 00348170 000923f0 0x923f0
06 00274d90 00000000 0x923f0

Thread ID: 6
System Thread ID: 16a
Kernel Time: 0:0:16.843
User Time: 0:0:20.93
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00f8ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 00f8ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 00f8ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 00f8ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 7
System Thread ID: 16b
Kernel Time: 0:0:10.375
User Time: 0:0:12.62
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fcff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 00fcff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 00fcffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 00fcffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 8
System Thread ID: 16d
Kernel Time: 0:0:0.187
User Time: 0:0:0.125
Thread Type: Other
# ChildEBP RetAddr
00 0104ff30 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0104ff88 685a7e80 KERNEL32!WaitForMultipleObjectsEx+0xef
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 685b35a0 00096fb8 INFOCOMM!TS_OPEN_FILE_INFO::MakeStrongETag+0x7d3
03 000985a0 685b35a0 0x96fb8
04 0009b7e8 000985a0 INFOCOMM!MB::GetMultisz+0x649c
05 000c2fd8 0009b7e8 0x985a0
06 000c3b08 000c2fd8 0x9b7e8
07 000c42e0 000c3b08 0xc2fd8
08 000c5b08 000c42e0 0xc3b08
09 000c62e0 000c5b08 0xc42e0
0a 000c6ab8 000c62e0 0xc5b08
0b 000c7290 000c6ab8 0xc62e0
0c 000c7da0 000c7290 0xc6ab8
0d 00096fb8 000c7da0 0xc7290
0e 685b35a0 00096fb8 0xc7da0
0f 000985a0 685b35a0 0x96fb8
10 0009b7e8 000985a0 INFOCOMM!MB::GetMultisz+0x649c
11 000c2fd8 0009b7e8 0x985a0
12 000c3b08 000c2fd8 0x9b7e8
13 000c42e0 000c3b08 0xc2fd8
14 000c5b08 000c42e0 0xc3b08
15 000c62e0 000c5b08 0xc42e0
16 000c6ab8 000c62e0 0xc5b08
17 000c7290 000c6ab8 0xc62e0
18 000c7da0 000c7290 0xc6ab8
19 00096fb8 000c7da0 0xc7290
1a 685b35a0 00096fb8 0xc7da0
1b 000985a0 685b35a0 0x96fb8
1c 0009b7e8 000985a0 INFOCOMM!MB::GetMultisz+0x649c
1d 000c2fd8 0009b7e8 0x985a0
1e 000c3b08 000c2fd8 0x9b7e8
1f 000c42e0 000c3b08 0xc2fd8
20 000c5b08 000c42e0 0xc3b08
21 000c62e0 000c5b08 0xc42e0
22 000c6ab8 000c62e0 0xc5b08
23 000c7290 000c6ab8 0xc62e0
24 000c7da0 000c7290 0xc6ab8
25 00096fb8 000c7da0 0xc7290
26 685b35a0 00096fb8 0xc7da0
27 000985a0 685b35a0 0x96fb8
28 0009b7e8 000985a0 INFOCOMM!MB::GetMultisz+0x649c
29 000c2fd8 0009b7e8 0x985a0
2a 000c3b08 000c2fd8 0x9b7e8
2b 000c42e0 000c3b08 0xc2fd8
2c 000c5b08 000c42e0 0xc3b08
2d 000c62e0 000c5b08 0xc42e0
2e 000c6ab8 000c62e0 0xc5b08
2f 000c7290 000c6ab8 0xc62e0
30 000c7da0 000c7290 0xc6ab8
31 00096fb8 000c7da0 0xc7290

Thread ID: 9
System Thread ID: 16e
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: *** ERROR: Symbol file could not be found. Defaulted to
export symbols for asp.dll -
Either ASP.dll is not being called on this thread or symbol file not
available. Unable to locate ASP page.
Continuing with other analysis.

*** ERROR: Symbol file could not be found. Defaulted to export symbols for
ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
00 0108fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 0108ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 0108ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0108ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 0108ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 0108ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 10
System Thread ID: 16f
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or symbol
file not available. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
00 0114fd20 776689ce ntdll!NtWaitForSingleObject+0xb
01 0114fd78 77664a12 msafd!SockWaitForSingleObject+0x204
02 0114fea0 776ba274 msafd!WSPSelect+0x28e
03 0114fef0 74fa21e2 WS2_32!select+0xfc
04 0114ff2c 77e20fae RpcLtScm!COMMON_ServerReceiveAny+0x2b8
05 0114ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
06 0114ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
07 0114ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
08 0114ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
09 0114ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
0a 0114ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 11
System Thread ID: 170
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or symbol
file not available. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
00 0119fee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 0119ff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 0119ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 0119ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 0119ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 0119ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 0119ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
07 0119ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 12
System Thread ID: 173
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
w3svc.dll -
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MSVCRT.dll -
Thread Type: Other
# ChildEBP RetAddr
00 011efe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 011efec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 011eff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 011eff40 68c22d44 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 011eff84 7800b995 w3svc!HTTP_HEADERS::Cleanup+0x2f55
05 011effb8 77f04eeb MSVCRT!beginthread+0xce
06 011effec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 13
System Thread ID: 174
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0122fea8 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0122ff00 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0122ff5c 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0122ff78 68c1acea USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0122ffb8 77f04eeb w3svc!ServiceEntry+0x6d7
05 0122ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 14
System Thread ID: 4b
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0126fca0 776689ce ntdll!NtWaitForSingleObject+0xb
01 0126fcf8 77664a12 msafd!SockWaitForSingleObject+0x204
02 0126fe20 776ba274 msafd!WSPSelect+0x28e
03 0126fe70 68563c07 WS2_32!select+0xfc
04 0126ffb8 77f04eeb inetsloc!SocketListenThread+0x51
05 0126ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 15
System Thread ID: d9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or symbol
file not available. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
00 012afdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 012aff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 012aff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
03 012affac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
04 012affb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 012affec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 16
System Thread ID: 182
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or symbol
file not available. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
00 012efee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
01 012eff2c 77e20fae rpclts1!ServerReceiveAny+0x133
02 012eff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
03 012eff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
04 012eff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
05 012effac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
06 012effb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
07 012effec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 17
System Thread ID: 19a
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0143ff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0143ff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0143ff84 678b8d63 KERNEL32!WaitForMultipleObjects+0x16
03 0143ffb8 77f04eeb SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x33
04 0143ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 18
System Thread ID: 85
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0147ff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0147ff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0147ff84 678b8d63 KERNEL32!WaitForMultipleObjects+0x16
03 0147ffb8 77f04eeb SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x33
04 0147ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 19
System Thread ID: 199
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 014bff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 014bff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 014bff84 678b8d63 KERNEL32!WaitForMultipleObjects+0x16
03 014bffb8 77f04eeb SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x33
04 014bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 20
System Thread ID: 192
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 014fff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 014fff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 014fff84 678b8d63 KERNEL32!WaitForMultipleObjects+0x16
03 014fffb8 77f04eeb SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x33
04 014fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 21
System Thread ID: 19f
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0153ff10 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0153ff68 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0153ff84 678b8d63 KERNEL32!WaitForMultipleObjects+0x16
03 0153ffb8 77f04eeb SMTPSVC!PERSIST_QUEUE::QueueThreadRoutine+0x33
04 0153ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 22
System Thread ID: 1a0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0157ff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0157ff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0157ff9c 678cfe97 KERNEL32!WaitForSingleObject+0xf
03 0157ffb8 77f04eeb SMTPSVC!CRetryQ::RetryQueueThread+0x37
04 0157ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 23
System Thread ID: 1a1
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 015bff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 015bff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 015bff9c 678cfe97 KERNEL32!WaitForSingleObject+0xf
03 015bffb8 77f04eeb SMTPSVC!CRetryQ::RetryQueueThread+0x37
04 015bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 24
System Thread ID: 1a2
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 015fff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 015fff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 015fff9c 678cfe97 KERNEL32!WaitForSingleObject+0xf
03 015fffb8 77f04eeb SMTPSVC!CRetryQ::RetryQueueThread+0x37
04 015fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 25
System Thread ID: 1a3
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0163ff6c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0163ff94 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0163ffa4 678d4db4 KERNEL32!WaitForSingleObject+0xf
03 0163ffb8 77f04eeb SMTPSVC!SMTP_ETRN::EtrnQueueThread+0x14
04 0163ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 26
System Thread ID: 1a5
Kernel Time: 0:0:0.359
User Time: 0:0:0.31
Thread Status: Thread is in a WAIT state.
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 016bff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 016bff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 016bff9c 678cfe97 KERNEL32!WaitForSingleObject+0xf
03 016bffb8 77f04eeb SMTPSVC!CRetryQ::RetryQueueThread+0x37
04 016bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 27
System Thread ID: b9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
MtxDm.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 018bff58 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 018bff80 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 018bff90 69a21998 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 018bffb8 77f04eeb MtxDm+0x1998
04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 28
System Thread ID: 1ae
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: Either ASP.dll is not being called on this thread or symbol
file not available. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
00 0192fe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0192fec8 77e7ae57 KERNEL32!WaitForMultipleObjectsEx+0xef
02 0192ff24 77e7ae9c USER32!MsgWaitForMultipleObjectsEx+0x127
03 0192ff40 680c5fa5 USER32!MsgWaitForMultipleObjects+0x1d
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0192ff84 7800b995 asp!AspStatusHtmlDump+0x276d
05 0192ffb8 77f04eeb MSVCRT!beginthread+0xce
06 0192ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 29
System Thread ID: 1b0
Kernel Time: 0:0:22.796
User Time: 0:2:10.406
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
msxml3.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0198f388 776689ce ntdll!NtWaitForSingleObject+0xb
01 0198f3e0 776642b6 msafd!SockWaitForSingleObject+0x204
02 0198f450 776b861d msafd!WSPRecv+0x14b
03 0198f498 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0198f4c4 69bb66b2 msxml3!Ordinal10+0x644ea
05 04295b40 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 30
System Thread ID: 1b1
Kernel Time: 0:0:0.343
User Time: 0:0:2.937
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
oledb32.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 025fff5c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 025fff84 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 025fff94 020b3cfa KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 025fffb8 77f04eeb oledb32!DllGetClassObject+0x20d0
04 025fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 31
System Thread ID: 1b2
Kernel Time: 0:0:0.890
User Time: 0:0:0.812
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0263ff54 77f1cf95 ntdll!NtWaitForSingleObject+0xb
01 0263ff7c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
02 0263ff8c 020b3f49 KERNEL32!WaitForSingleObject+0xf
WARNING: Stack unwind information not available. Following frames may be
wrong.
03 0263ffb8 77f04eeb oledb32!DllGetClassObject+0x231f
04 0263ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 32
System Thread ID: 1b4
Kernel Time: 0:0:14.156
User Time: 0:0:16.359
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0282ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0282ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0282ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0282ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 33
System Thread ID: 1b5
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0316ff14 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0316ff6c 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0316ff88 681635de KERNEL32!WaitForMultipleObjects+0x16
03 0316ffb8 77f04eeb browscap!ThingWatcherThread+0x59
04 0316ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 34
System Thread ID: cb
Kernel Time: 0:0:11.984
User Time: 0:1:8.343
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0322f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 0322f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 0322f248 776b861d msafd!WSPRecv+0x14b
03 0322f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0322f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 033a4978 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 35
System Thread ID: 183
Kernel Time: 0:0:3.468
User Time: 0:0:4.625
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0326ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0326ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0326ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0326ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 36
System Thread ID: 1bf
Kernel Time: 0:0:6.562
User Time: 0:0:6.140
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 032aff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 032aff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 032affb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 032affec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 37
System Thread ID: 1c0
Kernel Time: 0:0:6.312
User Time: 0:0:9.421
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 032eff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 032eff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 032effb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 032effec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 38
System Thread ID: 1c1
Kernel Time: 0:0:1.890
User Time: 0:0:2.828
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0332ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0332ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0332ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0332ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 39
System Thread ID: 1c2
Kernel Time: 0:1:20.578
User Time: 0:4:13.265
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0336f17c 776689ce ntdll!NtWaitForSingleObject+0xb
01 0336f1d4 776642b6 msafd!SockWaitForSingleObject+0x204
02 0336f244 776b861d msafd!WSPRecv+0x14b
03 0336f28c 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0336f2b8 69bb66b2 msxml3!Ordinal10+0x644ea
05 04257f20 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 40
System Thread ID: 51
Kernel Time: 0:0:44.234
User Time: 0:2:19.531
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 038ff180 776689ce ntdll!NtWaitForSingleObject+0xb
01 038ff1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 038ff248 776b861d msafd!WSPRecv+0x14b
03 038ff290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 038ff2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 0338adc0 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 41
System Thread ID: 1ca
Kernel Time: 0:0:11.984
User Time: 0:1:10.125
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0393f388 776689ce ntdll!NtWaitForSingleObject+0xb
01 0393f3e0 776642b6 msafd!SockWaitForSingleObject+0x204
02 0393f450 776b861d msafd!WSPRecv+0x14b
03 0393f498 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0393f4c4 69bb66b2 msxml3!Ordinal10+0x644ea
05 04266e38 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 42
System Thread ID: 1e5
Kernel Time: 0:0:1.250
User Time: 0:0:0.187
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 039eff40 776689ce ntdll!NtWaitForSingleObject+0xb
01 039eff98 77661e92 msafd!SockWaitForSingleObject+0x204
02 039effb8 77f04eeb msafd!SockAsyncThread+0x2c
03 039effec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 43
System Thread ID: 1f6
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 03f3ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 03f3ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 03f3ffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 03f3ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 44
System Thread ID: 1f7
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 03f7ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 03f7ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 03f7ffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 03f7ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 45
System Thread ID: 1f8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 03fbff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 03fbff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 03fbffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 03fbffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 46
System Thread ID: 1f9
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 03ffff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 03ffff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 03ffffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 03ffffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 47
System Thread ID: 1fa
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0403ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0403ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0403ffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 0403ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 48
System Thread ID: 1fb
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0407ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0407ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0407ffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 0407ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 49
System Thread ID: 1fc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 040bff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 040bff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 040bffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 040bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 50
System Thread ID: 1fd
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 040fff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 040fff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 040fffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 040fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 51
System Thread ID: 1fe
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0413ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0413ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0413ffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 0413ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 52
System Thread ID: 1f5
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0417ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0417ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0417ffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 0417ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 53
System Thread ID: 52
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 041bff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 041bff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 041bffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 041bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 54
System Thread ID: 1ff
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 041fff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 041fff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 041fffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 041fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 55
System Thread ID: 200
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0423ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
01 0423ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
02 0423ffb8 77f04eeb CRYPT32!ILS_WaitForThreadProc+0x25
03 0423ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 56
System Thread ID: 1d0
Kernel Time: 0:0:37.562
User Time: 0:2:15.562
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0488f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 0488f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 0488f248 776b861d msafd!WSPRecv+0x14b
03 0488f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0488f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 03397fc0 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 57
System Thread ID: 1cb
Kernel Time: 0:0:40.531
User Time: 0:2:15.343
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0490f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 0490f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 0490f248 776b861d msafd!WSPRecv+0x14b
03 0490f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0490f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 0426b0a0 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 58
System Thread ID: 1dd
Kernel Time: 0:0:40.0
User Time: 0:2:23.250
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0494f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 0494f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 0494f248 776b861d msafd!WSPRecv+0x14b
03 0494f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0494f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 0339cc90 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 59
System Thread ID: 1bb
Kernel Time: 0:1:7.531
User Time: 0:3:50.953
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 0498f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 0498f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 0498f248 776b861d msafd!WSPRecv+0x14b
03 0498f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 0498f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 04252ea8 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 60
System Thread ID: 205
Kernel Time: 0:2:27.0
User Time: 0:5:54.718
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 049cf180 776689ce ntdll!NtWaitForSingleObject+0xb
01 049cf1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 049cf248 776b861d msafd!WSPRecv+0x14b
03 049cf290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 049cf2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 04256f60 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 61
System Thread ID: 1e0
Kernel Time: 0:0:17.453
User Time: 0:1:40.625
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04a0f388 776689ce ntdll!NtWaitForSingleObject+0xb
01 04a0f3e0 776642b6 msafd!SockWaitForSingleObject+0x204
02 04a0f450 776b861d msafd!WSPRecv+0x14b
03 04a0f498 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04a0f4c4 69bb66b2 msxml3!Ordinal10+0x644ea
05 033812f0 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 62
System Thread ID: 1bd
Kernel Time: 0:0:17.234
User Time: 0:1:33.843
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04a4f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 04a4f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 04a4f248 776b861d msafd!WSPRecv+0x14b
03 04a4f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04a4f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 03399c78 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 63
System Thread ID: 63
Kernel Time: 0:0:37.640
User Time: 0:2:26.578
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04a8f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 04a8f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 04a8f248 776b861d msafd!WSPRecv+0x14b
03 04a8f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04a8f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 03385748 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 64
System Thread ID: 1e2
Kernel Time: 0:0:14.546
User Time: 0:1:20.656
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04acf180 776689ce ntdll!NtWaitForSingleObject+0xb
01 04acf1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 04acf248 776b861d msafd!WSPRecv+0x14b
03 04acf290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04acf2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 033a49b8 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 65
System Thread ID: 1d1
Kernel Time: 0:0:55.734
User Time: 0:3:14.62
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04b0f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 04b0f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 04b0f248 776b861d msafd!WSPRecv+0x14b
03 04b0f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04b0f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 03383888 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 66
System Thread ID: 17b
Kernel Time: 0:0:24.703
User Time: 0:2:22.562
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04b4f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 04b4f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 04b4f248 776b861d msafd!WSPRecv+0x14b
03 04b4f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04b4f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 04294400 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 67
System Thread ID: 206
Kernel Time: 0:0:16.31
User Time: 0:1:27.250
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04b8f388 776689ce ntdll!NtWaitForSingleObject+0xb
01 04b8f3e0 776642b6 msafd!SockWaitForSingleObject+0x204
02 04b8f450 776b861d msafd!WSPRecv+0x14b
03 04b8f498 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04b8f4c4 69bb66b2 msxml3!Ordinal10+0x644ea
05 03397910 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 68
System Thread ID: 20b
Kernel Time: 0:1:10.234
User Time: 0:3:48.359
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04bcf388 776689ce ntdll!NtWaitForSingleObject+0xb
01 04bcf3e0 776642b6 msafd!SockWaitForSingleObject+0x204
02 04bcf450 776b861d msafd!WSPRecv+0x14b
03 04bcf498 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04bcf4c4 69bb66b2 msxml3!Ordinal10+0x644ea
05 04272290 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 69
System Thread ID: 1af
Kernel Time: 0:0:40.250
User Time: 0:2:10.265
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04c0f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 04c0f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 04c0f248 776b861d msafd!WSPRecv+0x14b
03 04c0f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04c0f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 0337f9f0 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 70
System Thread ID: f9
Kernel Time: 0:0:18.390
User Time: 0:1:39.593
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 04c4f180 776689ce ntdll!NtWaitForSingleObject+0xb
01 04c4f1d8 776642b6 msafd!SockWaitForSingleObject+0x204
02 04c4f248 776b861d msafd!WSPRecv+0x14b
03 04c4f290 69bb5f5d WS2_32!recv+0xa1
WARNING: Stack unwind information not available. Following frames may be
wrong.
04 04c4f2bc 69bb66b2 msxml3!Ordinal10+0x644ea
05 03383a28 00000000 msxml3!Ordinal10+0x64c3f

Thread ID: 71
System Thread ID: 21d
Kernel Time: 0:0:5.437
User Time: 0:0:6.484
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0703ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0703ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0703ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0703ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 72
System Thread ID: 212
Kernel Time: 0:0:10.15
User Time: 0:0:11.328
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0707ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0707ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0707ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0707ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 73
System Thread ID: 218
Kernel Time: 0:0:3.109
User Time: 0:0:3.453
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 070bff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 070bff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 070bffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 070bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 74
System Thread ID: ab
Kernel Time: 0:0:1.718
User Time: 0:0:2.234
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 070fff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 070fff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 070fffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 070fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 75
System Thread ID: aa
Kernel Time: 0:0:8.984
User Time: 0:0:9.890
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 071bff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 071bff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 071bffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 071bffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 76
System Thread ID: 1c5
Kernel Time: 0:0:0.218
User Time: 0:0:0.296
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 071fff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 071fff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 071fffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 071fffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 77
System Thread ID: 4c
Kernel Time: 0:0:6.125
User Time: 0:0:7.921
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0727ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0727ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0727ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0727ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 78
System Thread ID: 39
Kernel Time: 0:0:6.625
User Time: 0:0:7.390
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0723ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0723ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0723ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0723ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 79
System Thread ID: 214
Kernel Time: 0:0:1.468
User Time: 0:0:1.625
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0884ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0884ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0884ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0884ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 80
System Thread ID: c1
Kernel Time: 0:0:0.671
User Time: 0:0:1.62
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0888ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0888ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0888ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0888ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 81
System Thread ID: 209
Kernel Time: 0:0:1.390
User Time: 0:0:2.125
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0592ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0592ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0592ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0592ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 82
System Thread ID: 185
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 08c1ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 08c1ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 08c1ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 08c1ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 83
System Thread ID: 19b
Kernel Time: 0:0:0.421
User Time: 0:0:0.734
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 08c5ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 08c5ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 08c5ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 08c5ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 84
System Thread ID: 21c
Kernel Time: 0:0:0.15
User Time: 0:0:0.46
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 08c9ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 08c9ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 08c9ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 08c9ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 85
System Thread ID: 1be
Kernel Time: 0:0:0.15
User Time: 0:0:0.31
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 08cdff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 08cdff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 08cdffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 08cdffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 86
System Thread ID: ad
Kernel Time: 0:0:0.93
User Time: 0:0:0.78
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 08d1ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 08d1ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 08d1ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 08d1ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 87
System Thread ID: 20c
Kernel Time: 0:0:0.828
User Time: 0:0:1.140
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 08d5ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 08d5ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 08d5ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 08d5ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 88
System Thread ID: 210
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0855ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0855ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0855ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0855ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 89
System Thread ID: 58
Kernel Time: 0:0:0.93
User Time: 0:0:0.156
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0859ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0859ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0859ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0859ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 90
System Thread ID: 208
Kernel Time: 0:0:0.406
User Time: 0:0:0.562
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 085dff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 085dff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 085dffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 085dffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 91
System Thread ID: 1bc
Kernel Time: 0:0:0.31
User Time: 0:0:0.31
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0096ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0096ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0096ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0096ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 92
System Thread ID: 216
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0167ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0167ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0167ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0167ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 93
System Thread ID: f5
Kernel Time: 0:0:0.46
User Time: 0:0:0.62
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0d48ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
01 0d48ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
WARNING: Stack unwind information not available. Following frames may be
wrong.
02 0d48ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
03 0d48ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 94
System Thread ID: 20d
Kernel Time: 0:0:0.0
User Time: 0:0:0.125
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or symbol
file not available. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
00 06f2fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 06f2ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 06f2ff94 77e17bd3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 06f2ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x9f
04 06f2ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 06f2ffec 00000000 KERNEL32!BaseThreadStart+0x51

Thread ID: 95
System Thread ID: 230
Kernel Time: 0:0:0.0
User Time: 0:0:0.62
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or symbol
file not available. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
00 06fafdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
01 06faff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
02 06faff94 77e17bd3 RPCRT4!RecvLotsaCallsWrapper+0x9
03 06faffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x9f
04 06faffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
05 06faffec 00000000 KERNEL32!BaseThreadStart+0x51

Closing open log file D:\iisstate\output\IISState-282.log