We have a problem with a search service running an ATL Server Web
Service (ATL7 unmamaged) on Windows 2000 SP4 (IIS 5). The problem is
urgent because this is the main search service in our web site (the
first financial paper in Italy).
We have a Web Service that implements a thread pooled async for SOAP
methods (msdn PooledAsync sample:
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/vcsam.../html/v).
The web service run in IIS with high isolation mode. IIS crash with
event id:37 and restart many times every day.
I have used IISState in debugging, but the log dump doen't help me.
Could someone help me?
Sorry for my awful english.
tia
nico
Here the IISState log:
Opened log file 'C:\iisstate\output\IISState-8152.log'
***********************
Starting new log output
IISState version 3.4
Fri Apr 02 17:31:16 2004
OS = Windows 2000
Executable: dllhost.exe
PID = 8152
Note: Thread times are formatted as HH:MM:SS.ms
***********************
IIS has crashed...
Beginning Analysis
*** WARNING: Unable to verify checksum for
C:\Webs\SitoH2OESP\se\h2oesp_se.dll
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\Webs\SitoH2OESP\se\h2oesp_se.dll -
DLL (!FunctionName) that failed: h2oesp_se!DllGetClassObject
Thread ID: 23
System Thread ID: 1d70
Kernel Time: 0:0:0.375
User Time: 0:0:0.312
*** WARNING: Unable to verify checksum for
C:\Webs\SitoH2OESP\se\h2oesp_seIsapi.dll
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\Webs\SitoH2OESP\se\h2oesp_seIsapi.dll -
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\KERNEL32.DLL -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01b8ff30 1000aae2 h2oesp_se!DllGetClassObject+0x98b9
01 01b8ff7c 1000b689 h2oesp_seIsapi!DllGetClassObject+0x192
02 01b8ffb4 7c57b382 h2oesp_seIsapi!DllGetClassObject+0xd39
03 01b8ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Closing open log file C:\iisstate\output\IISState-8152.log
Opened log file 'C:\iisstate\output\IISState-8152.log'
***********************
Starting new log output
IISState version 3.4
Fri Apr 02 17:33:51 2004
OS = Windows 2000
Executable: dllhost.exe
PID = 8152
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: 1ecc
Kernel Time: 0:0:0.15
User Time: 0:0:0.31
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\ntdll.dll -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0006fd50 7c57b3d5 ntdll!NtWaitForSingleObject+0xb
01 00000000 00000000 KERNEL32!WaitForSingleObject+0xf
Thread ID: 1
System Thread ID: 1ec0
Kernel Time: 0:0:0.625
User Time: 0:0:0.796
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\RPCRT4.DLL -
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or
symbol file not available. Unable to locate ASP page.
Continuing with other analysis.
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0088ffa8 77d41c6c ntdll!ZwDelayExecution+0xb
01 0088ffb4 7c57b382 RPCRT4!I_RpcServerInqTransportType+0x1a0
02 0088ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 2
System Thread ID: 1ea8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 008cff7c 7c59a0b8 ntdll!ZwDelayExecution+0xb
01 00007530 00000000 KERNEL32!Sleep+0xb
Thread ID: 3
System Thread ID: 1eb0
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\USER32.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0090ff30 77abaf4d USER32!GetMenuItemRect+0x19
01 0090ff70 77abae9b ole32!CoInstall+0x7cd
02 0090ff8c 77abadd6 ole32!CoInstall+0x71b
03 00007530 00000000 ole32!CoInstall+0x656
Thread ID: 4
System Thread ID: 1f70
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\TxfAux.Dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00a1fc98 6de8b983 ntdll!NtRemoveIoCompletion+0xb
01 00a1fd94 6de8b8d8 TxfAux!Log+0x5e3
02 00a1ffb4 7c57b382 TxfAux!Log+0x538
03 00a1ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 5
System Thread ID: 1f6c
Kernel Time: 0:0:0.640
User Time: 0:0:0.562
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\System32\inetsrv\wam.dll -
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or
symbol file not available. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00adf2a8 77d3a2c7 ntdll!ZwRequestWaitReplyPort+0xb
01 00adf2b4 77b23b2c RPCRT4!I_RpcSendReceive+0x2c
02 00adf2d4 77b239f7 ole32!DllDebugObjectRPCHook+0x12a
03 00adf2ec 77b20aa5 ole32!WdtpInterfacePointer_UserSize+0x1b54
04 00adf32c 77b23870 ole32!StgGetIFillLockBytesOnFile+0x19f30
05 00adf39c 77ab6a37 ole32!WdtpInterfacePointer_UserSize+0x19cd
06 00adf3f4 77d90328 ole32!UpdateDCOMSettings+0xacec
07 00adf410 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
08 00adf658 77d95f85 RPCRT4!NdrClientCall2+0x4f5
09 00adf674 77d77fcb RPCRT4!NdrStubCall2+0xb03
0a 00adf684 65d817c6 RPCRT4!NdrServerMarshall+0x1311
0b 00adf6c0 10009913 wam!WAM_REQ_CORE::GetSz+0x4c0
0c 000000c8 00000000 h2oesp_seIsapi!DllUnregisterServer+0x1403
Thread ID: 6
System Thread ID: 1f68
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00c7ff58 7c599f6c ntdll!NtWaitForMultipleObjects+0xb
01 00c7ffec 00000000 KERNEL32!WaitForMultipleObjects+0x17
Thread ID: 7
System Thread ID: 1f64
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\COMSVCS.DLL -
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\system32\NETAPI32.dll -
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or
symbol file not available. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00cbfb94 77d3a2c7 ntdll!ZwRequestWaitReplyPort+0xb
01 00cbfba0 77b23b2c RPCRT4!I_RpcSendReceive+0x2c
02 00cbfbc0 77b239f7 ole32!DllDebugObjectRPCHook+0x12a
03 00cbfbd8 77b20aa5 ole32!WdtpInterfacePointer_UserSize+0x1b54
04 00cbfc18 77b23870 ole32!StgGetIFillLockBytesOnFile+0x19f30
05 00cbfc88 77ab6ac3 ole32!WdtpInterfacePointer_UserSize+0x19cd
06 00cbfce0 77d90328 ole32!UpdateDCOMSettings+0xad78
07 00cbfcfc 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
08 00cbff44 77d95f85 RPCRT4!NdrClientCall2+0x4f5
09 00cbff60 77d77fcb RPCRT4!NdrStubCall2+0xb03
0a 00cbff70 787f372e RPCRT4!NdrServerMarshall+0x1311
0b 78868f0c ffffffff COMSVCS!RegisterComEvents+0x6768
0c 0008a9e0 78868f0c 0xffffffff
0d 00000000 00000000 COMSVCS!RegisterComEvents+0x7bf46
Thread ID: 8
System Thread ID: 1f60
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00cfff00 7c59a0b8 ntdll!ZwDelayExecution+0xb
01 77f89134 4affc033 KERNEL32!Sleep+0xb
02 0424548b 00000000 0x4affc033
Thread ID: 9
System Thread ID: 1f5c
Kernel Time: 0:0:3.984
User Time: 0:0:1.625
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\SYSTEM32\IISRTL.DLL -
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00f7feac 77e1e9fb ntdll!NtWaitForMultipleObjects+0xb
01 00f7ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
02 00f7ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
03 00406d10 000003e9
IISRTL!ALLOC_CACHE_HANDLER::SetLookasideCleanupInterval+0xe4
Thread ID: 10
System Thread ID: 1efc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00fbfeac 77e1e9fb ntdll!NtWaitForMultipleObjects+0xb
01 00fbff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
02 00fbff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
03 00406dc0 000003ea
IISRTL!ALLOC_CACHE_HANDLER::SetLookasideCleanupInterval+0xe4
Thread ID: 11
System Thread ID: 1e44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\WINNT\System32\inetsrv\ISATQ.DLL -
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 010cff7c 6d702957 ntdll!NtRemoveIoCompletion+0xb
01 7c30fcf9 e65868ff ISATQ!CDirMonitor::RemoveEntry+0xeb
02 6aec8b55 00000000 0xe65868ff
Thread ID: 12
System Thread ID: 1bd8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0110ff7c 6d702957 ntdll!NtRemoveIoCompletion+0xb
01 7c30fcf9 e65868ff ISATQ!CDirMonitor::RemoveEntry+0xeb
02 6aec8b55 00000000 0xe65868ff
Thread ID: 13
System Thread ID: 1d6c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or
symbol file not available. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0128fee4 77d809da ntdll!NtRemoveIoCompletion+0xb
01 0128ff20 77d50ede RPCRT4!I_RpcTransGetAddressList+0x304c
02 0128ff74 77d50d17 RPCRT4!TowerConstruct+0x4abd
03 0128ffa8 77d41c6c RPCRT4!TowerConstruct+0x48f6
04 0128ffb4 7c57b382 RPCRT4!I_RpcServerInqTransportType+0x1a0
05 0128ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 14
System Thread ID: 1bd0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0135fc18 7c599f6c ntdll!NtWaitForMultipleObjects+0xb
01 00000005 00000000 KERNEL32!WaitForMultipleObjects+0x17
Thread ID: 15
System Thread ID: 1c68
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0139ff44 10008ffb ntdll!NtRemoveIoCompletion+0xb
01 0139ffb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xaeb
02 0139ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 16
System Thread ID: 1cf0
Kernel Time: 0:0:0.15
User Time: 0:0:0.187
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0195ff40 10009047 ntdll!NtRemoveIoCompletion+0xb
01 0195ffb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xb37
02 0195ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 17
System Thread ID: 1e8c
Kernel Time: 0:0:0.93
User Time: 0:0:0.265
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 019aff40 10009047 ntdll!NtRemoveIoCompletion+0xb
01 019affb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xb37
02 019affec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 18
System Thread ID: 1ed8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 019fff40 10009047 ntdll!NtRemoveIoCompletion+0xb
01 019fffb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xb37
02 019fffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 19
System Thread ID: 1cd4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01a4ff44 10008ffb ntdll!NtRemoveIoCompletion+0xb
01 01a4ffb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xaeb
02 01a4ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 20
System Thread ID: 1c20
Kernel Time: 0:0:0.218
User Time: 0:0:0.562
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01a9ff40 10009047 ntdll!NtRemoveIoCompletion+0xb
01 01a9ffb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xb37
02 01a9ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 21
System Thread ID: 1c30
Kernel Time: 0:0:0.734
User Time: 0:0:1.46
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01aeff40 10009047 ntdll!NtRemoveIoCompletion+0xb
01 01aeffb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xb37
02 01aeffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 22
System Thread ID: 1d68
Kernel Time: 0:0:0.484
User Time: 0:0:1.31
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01b3ff40 10009047 ntdll!NtRemoveIoCompletion+0xb
01 01b3ffb4 7c57b382 h2oesp_seIsapi!DllUnregisterServer+0xb37
02 01b3ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 23
System Thread ID: 1d70
Kernel Time: 0:0:0.375
User Time: 0:0:0.312
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01b8ff30 1000aae2 h2oesp_se!DllGetClassObject+0x98b9
01 01b8ff7c 1000b689 h2oesp_seIsapi!DllGetClassObject+0x192
02 01b8ffb4 7c57b382 h2oesp_seIsapi!DllGetClassObject+0xd39
03 01b8ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 24
System Thread ID: 1d7c
Kernel Time: 0:0:7.125
User Time: 0:0:4.296
*** WARNING: Unable to verify checksum for C:\Program Files\ComPlus
Applications\h2oesp\bin\search services\h2oesp_finder.dll
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\Program Files\ComPlus Applications\h2oesp\bin\search
services\h2oesp_finder.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0224ea90 04b08afc h2oesp_finder+0x1193
01 04b08afc 0065006c 0x4b08afc
02 0065003c 00000000 0x65006c
Thread ID: 25
System Thread ID: 1ea0
Kernel Time: 0:0:31.187
User Time: 0:0:13.140
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0228ff3c 1000aee1 ntdll!NtRemoveIoCompletion+0xb
01 0228ff7c 1000b689 h2oesp_seIsapi!DllGetClassObject+0x591
02 0228ffb4 7c57b382 h2oesp_seIsapi!DllGetClassObject+0xd39
03 0228ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 26
System Thread ID: 1ef4
Kernel Time: 0:0:43.296
User Time: 0:0:18.15
*** WARNING: Unable to verify checksum for C:\Program Files\ComPlus
Applications\h2oesp\bin\search services\avs30_mt.dll
*** ERROR: Symbol file could not be found. Defaulted to export
symbols for C:\Program Files\ComPlus Applications\h2oesp\bin\search
services\avs30_mt.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 022ce900 7c586e42 ntdll!NtCreateSection+0xb
01 022ce92c 024ebdb6 KERNEL32!CreateFileMappingA+0x6c
02 00000000 00000000 avs30_mt!avs_cvterrmsg_copy+0x23ff6
Thread ID: 27
System Thread ID: 1f40
Kernel Time: 0:0:21.296
User Time: 0:0:10.296
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0230ff3c 1000aee1 ntdll!NtRemoveIoCompletion+0xb
01 0230ff7c 1000b689 h2oesp_seIsapi!DllGetClassObject+0x591
02 0230ffb4 7c57b382 h2oesp_seIsapi!DllGetClassObject+0xd39
03 0230ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 28
System Thread ID: 1d00
Kernel Time: 0:0:27.406
User Time: 0:0:13.109
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0234ea90 0281f114 h2oesp_finder+0x1193
01 0281f114 0065006c 0x281f114
02 0065003c 00000000 0x65006c
Thread ID: 29
System Thread ID: 1d78
Kernel Time: 0:0:27.671
User Time: 0:0:11.515
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0238ff3c 1000aee1 ntdll!NtRemoveIoCompletion+0xb
01 0238ff7c 1000b689 h2oesp_seIsapi!DllGetClassObject+0x591
02 0238ffb4 7c57b382 h2oesp_seIsapi!DllGetClassObject+0xd39
03 0238ffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 30
System Thread ID: 1f3c
Kernel Time: 0:0:15.843
User Time: 0:0:7.281
Thread Status: Thread is in a WAIT state.
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or
symbol file not available. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 023cdb3c 77e1e9fb ntdll!NtWaitForMultipleObjects+0xb
01 023cdb98 77aa97a0 USER32!MsgWaitForMultipleObjectsEx+0x153
02 023cdbc0 77ab32d5 ole32!CoGetPSClsid+0xd96
03 023cdbe8 77b23ad5 ole32!UpdateDCOMSettings+0x758a
04 023cdc08 77b239f7 ole32!DllDebugObjectRPCHook+0xd3
05 023cdc20 77b20aa5 ole32!WdtpInterfacePointer_UserSize+0x1b54
06 023cdc60 77aa960b ole32!StgGetIFillLockBytesOnFile+0x19f30
07 023cdcd8 77ab6ac3 ole32!CoGetPSClsid+0xc01
08 023cdd30 77d90328 ole32!UpdateDCOMSettings+0xad78
09 023cdd4c 77d92b3f RPCRT4!NdrProxySendReceive+0x4c
0a 023cdf94 77d95f85 RPCRT4!NdrClientCall2+0x4f5
0b 023cdfb0 77d77fcb RPCRT4!NdrStubCall2+0xb03
0c 023cdfc0 77aaba89 RPCRT4!NdrServerMarshall+0x1311
0d 023ce018 77abee6c ole32!CoWaitForMultipleHandles+0x1265
0e 023ce260 77b0e45a ole32!CoInstall+0x46ec
0f 023ce27c 77ac06b3 ole32!StgGetIFillLockBytesOnFile+0x78e5
10 023ce9f4 77a6be58 ole32!CoInstall+0x5f33
11 023cea1c 77a6be23 ole32!CoCreateInstanceEx+0x2b
12 023cea4c 02492c93 ole32!CoCreateInstance+0x35
13 779d9430 0375c085 h2oesp_finder+0x2c93
14 0424448b 00000000 0x375c085
Thread ID: 31
System Thread ID: 1ec8
Kernel Time: 0:0:0.890
User Time: 0:0:0.875
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Either ASP.dll is not being called on this thread or
symbol file not available. Unable to locate ASP page.
Continuing with other analysis.
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 032cff74 77d56d9e ntdll!NtReplyWaitReceivePortEx+0xb
01 032cffa8 77d41c6c RPCRT4!TowerConstruct+0xa97d
02 032cffb4 7c57b382 RPCRT4!I_RpcServerInqTransportType+0x1a0
03 032cffec 00000000 KERNEL32!lstrcmpiW+0xb7
Thread ID: 32
System Thread ID: 1fbc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 045cff3c 7c59a0b8 ntdll!ZwDelayExecution+0xb
01 0252e4f0 0252e4f0 KERNEL32!Sleep+0xb
Thread ID: 33
System Thread ID: 1fbc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 045cff3c 7c59a0b8 ntdll!ZwDelayExecution+0xb
01 0252e4f0 0252e4f0 KERNEL32!Sleep+0xb
*****
Dump name is formatted as: PID-Timestamp.dmp
Creating C:\iisstate\output\8152-1080920308.dmp - mini user dump
*****
Closing open log file C:\iisstate\output\IISState-8152.log
FAQ
Profile
Private Messages
Log in
