Need help with IISState log file.

External Since: Mar 17, 2004 Posts: 1

Hi, Our web server inetinfo process sits about 25-30% cpu steadily for the entire day I ran IISState and would like help deciphering the log file, any help would be appreciated. Thanks, Chris

Thread ID: 0
System Thread ID: a70
Kernel Time: 0:0:0.31
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0006f89c 7c586235 ntdll!ZwReadFile+0xb
01 0006f910 7c2e0135 KERNEL32!ReadFile+0x181
02 0006f93c 7c2dffbb ADVAPI32!ScGetPipeInput+0x28
03 0006f9b8 7c2e1995 ADVAPI32!ScDispatcherLoop+0x4a
04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
06 0006ff70 01002fbf inetinfo!main+0x654
07 0006ffc0 7c5987e7 inetinfo!mainCRTStartup+0xff
08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d

Thread ID: 1
System Thread ID: 93c
Kernel Time: 0:0:0.171
User Time: 0:0:0.109
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr
00 005dfd1c 7c599e8e ntdll!NtWaitForSingleObject+0xb
01 005dfd44 7c57b3d5 KERNEL32!WaitForSingleObjectEx+0x71
02 005dfd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
03 005dfd70 01002440 iisadmin!ServiceEntry+0x156
04 005dffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
05 005dffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
06 005dffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 2
System Thread ID: 938
Kernel Time: 0:0:23.125
User Time: 0:0:2.921
Thread Type: Other
# ChildEBP RetAddr
00 0071fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0071feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0071ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0071ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 3
System Thread ID: 934
Kernel Time: 0:0:24.234
User Time: 0:0:3.140
Thread Type: Other
# ChildEBP RetAddr
00 0075fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0075feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0075ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0075ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0075ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0075ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 0075ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 4
System Thread ID: 930
Kernel Time: 0:0:23.562
User Time: 0:0:2.781
Thread Type: Other
# ChildEBP RetAddr
00 0079fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0079feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0079ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0079ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0079ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0079ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 0079ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 5
System Thread ID: 92c
Kernel Time: 0:0:22.671
User Time: 0:0:2.781
Thread Type: Other
# ChildEBP RetAddr
00 007dfe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 007dfeac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 007dff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 007dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 007dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 007dffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 007dffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 6
System Thread ID: 928
Kernel Time: 0:0:22.718
User Time: 0:0:2.812
Thread Type: Other
# ChildEBP RetAddr
00 0081fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0081feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0081ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0081ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0081ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0081ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 0081ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 7
System Thread ID: 924
Kernel Time: 0:0:23.546
User Time: 0:0:2.500
Thread Type: Other
# ChildEBP RetAddr
00 0085fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0085feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0085ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0085ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0085ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0085ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 8
System Thread ID: 920
Kernel Time: 0:0:22.578
User Time: 0:0:2.671
Thread Type: Other
# ChildEBP RetAddr
00 0089fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0089feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0089ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0089ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 0089ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 0089ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 0089ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 9
System Thread ID: 90c
Kernel Time: 0:0:22.625
User Time: 0:0:3.171
Thread Type: Other
# ChildEBP RetAddr
00 008dfe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 008dfeac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 008dff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 008dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
04 008dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
05 008dffb4 7c57b382 MSVCRT!_endthreadex+0xc1
06 008dffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 10
System Thread ID: e70
Kernel Time: 0:0:0.296
User Time: 0:0:0.250
Thread Type: Other
# ChildEBP RetAddr
00 00fcfc1c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 00fcfc6c 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 00fcfcc8 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 00fcfce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 00fcfd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 00fcfd70 01002440 w3svc!ServiceEntry+0x1b5
06 00fcffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
07 00fcffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
08 00fcffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 11
System Thread ID: e74
Kernel Time: 0:0:0.125
User Time: 0:0:0.125
Thread Type: SMTP Service Worker Thread
# ChildEBP RetAddr
00 0104fc1c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0104fc6c 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0104fcc8 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0104fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 0104fd30 6b561a78 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 0104fd70 01002440 SMTPSVC!ServiceEntry+0x136
06 0104ffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
07 0104ffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
08 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 12
System Thread ID: e78
Kernel Time: 0:0:0.46
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 0108fc1c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
01 0108fc6c 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
02 0108fcc8 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
03 0108fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
04 0108fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
05 0108fd70 01002440 ftpsvc2!ServiceEntry+0xc7
06 0108ffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
07 0108ffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
08 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 13
System Thread ID: e7c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0120ff5c 7c585323 ntdll!NtRemoveIoCompletion+0xb
01 0120ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
02 0120ffb4 7c57b382 ISATQ!I_AtqOplockThreadFunc+0x32
03 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 14
System Thread ID: e80
Kernel Time: 0:1:51.640
User Time: 16:7:1.203
*** WARNING: Unable to verify checksum for C:\Program Files\ISS\IssSensors\ATHWEB\ISAPI\rsiisfilter.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\ISS\IssSensors\ATHWEB\ISAPI\rsiisfilter.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0287e310 00000000 rsiisfilter+0x239b

Thread ID: 15
System Thread ID: e84
Kernel Time: 0:1:40.671
User Time: 0:3:0.390
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0128ff50 7c585323 ntdll!NtRemoveIoCompletion+0xb
01 0128ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
02 0128ffb4 7c57b382 ISATQ!AtqPoolThread+0x40
03 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 16
System Thread ID: e8c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0140feb8 7c585323 ntdll!NtRemoveIoCompletion+0xb
01 0140fee4 77d809da KERNEL32!GetQueuedCompletionStatus+0x27
02 0140ff20 77d50ede RPCRT4!COMMON_ProcessCalls+0x9e
03 0140ff74 77d50d17 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
04 0140ff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
05 0140ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
06 0140ffb4 7c57b382 RPCRT4!ThreadStartRoutine+0x18
07 0140ffec 00000000 KERNEL32!BaseThreadStart+0x52

Thread ID: 17
System Thread ID: e98
Kernel Time: 0:0:0.265
User Time: 0:0:0.109
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: Unable to locate ASP page

No remote call being made

# ChildEBP RetAddr
00 0170fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
01 0170ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
02 0170ff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
03 0170ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
04 0170ffb4 7c57b382 RPCRT4!ThreadStartRoutine+0x18
05 0170ffec 00000000 KERNEL32!

External Since: Aug 24, 2003 Posts: 1478

It's thread 14:

Thread ID: 14
System Thread ID: e80
Kernel Time: 0:1:51.640
User Time: 16:7:1.203
*** WARNING: Unable to verify checksum for C:\Program
Files\ISS\IssSensors\ATHWEB\ISAPI\rsiisfilter.dll
*** ERROR: Symbol file could not be found. Defaulted to export symbols for
C:\Program Files\ISS\IssSensors\ATHWEB\ISAPI\rsiisfilter.dll -
Thread Type: Other
# ChildEBP RetAddr
00 0287e310 00000000 rsiisfilter+0x239b

This thread has used 16 _hours_ of CPU time (all other threads combined
comes to ~1.5 minutes). It is also the only thread in a non-wait state
(i.e. it is on the CPU at the time IISState was run). I would recommend
pinging the vendor to see if this is expected or a bug.

Pat

"chrisG" <chris.j.greer.RemoveThis@wellsfargo.REMOVETHIS.com> wrote in message
news:C2F5FCA3-E0D4-4A0B-900B-C68E8F9B1A22@microsoft.com...
> Hi, Our web server inetinfo process sits about 25-30% cpu steadily for the
entire day I ran IISState and would like help deciphering the log file, any
help would be appreciated. Thanks, Chris
>
> Thread ID: 0
> System Thread ID: a70
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006f89c 7c586235 ntdll!ZwReadFile+0xb
> 01 0006f910 7c2e0135 KERNEL32!ReadFile+0x181
> 02 0006f93c 7c2dffbb ADVAPI32!ScGetPipeInput+0x28
> 03 0006f9b8 7c2e1995 ADVAPI32!ScDispatcherLoop+0x4a
> 04 0006fbf4 01002884 ADVAPI32!StartServiceCtrlDispatcherA+0x7d
> 05 0006fd30 01001e94 inetinfo!StartDispatchTable+0x2f1
> 06 0006ff70 01002fbf inetinfo!main+0x654
> 07 0006ffc0 7c5987e7 inetinfo!mainCRTStartup+0xff
> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x3d
>
>
>
>
> Thread ID: 1
> System Thread ID: 93c
> Kernel Time: 0:0:0.171
> User Time: 0:0:0.109
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 005dfd1c 7c599e8e ntdll!NtWaitForSingleObject+0xb
> 01 005dfd44 7c57b3d5 KERNEL32!WaitForSingleObjectEx+0x71
> 02 005dfd54 6e6f1685 KERNEL32!WaitForSingleObject+0xf
> 03 005dfd70 01002440 iisadmin!ServiceEntry+0x156
> 04 005dffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
> 05 005dffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
> 06 005dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 2
> System Thread ID: 938
> Kernel Time: 0:0:23.125
> User Time: 0:0:2.921
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0071fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0071feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0071ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0071ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0071ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0071ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 0071ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 3
> System Thread ID: 934
> Kernel Time: 0:0:24.234
> User Time: 0:0:3.140
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0075fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0075feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0075ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0075ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0075ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0075ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 0075ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 4
> System Thread ID: 930
> Kernel Time: 0:0:23.562
> User Time: 0:0:2.781
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0079fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0079feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0079ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0079ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0079ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0079ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 0079ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 5
> System Thread ID: 92c
> Kernel Time: 0:0:22.671
> User Time: 0:0:2.781
> Thread Type: Other
> # ChildEBP RetAddr
> 00 007dfe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 007dfeac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 007dff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 007dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 007dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 007dffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 007dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 6
> System Thread ID: 928
> Kernel Time: 0:0:22.718
> User Time: 0:0:2.812
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0081fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0081feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0081ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0081ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0081ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0081ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 0081ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 7
> System Thread ID: 924
> Kernel Time: 0:0:23.546
> User Time: 0:0:2.500
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0085fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0085feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0085ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0085ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0085ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0085ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 8
> System Thread ID: 920
> Kernel Time: 0:0:22.578
> User Time: 0:0:2.671
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0089fe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0089feac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0089ff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0089ff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0089ff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 0089ffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 0089ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 9
> System Thread ID: 90c
> Kernel Time: 0:0:22.625
> User Time: 0:0:3.171
> Thread Type: Other
> # ChildEBP RetAddr
> 00 008dfe5c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 008dfeac 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 008dff08 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 008dff24 6e5a5a7c USER32!MsgWaitForMultipleObjects+0x1d
> 04 008dff7c 780085bc IisRTL!SchedulerWorkerThread+0xa7
> 05 008dffb4 7c57b382 MSVCRT!_endthreadex+0xc1
> 06 008dffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 10
> System Thread ID: e70
> Kernel Time: 0:0:0.296
> User Time: 0:0:0.250
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00fcfc1c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00fcfc6c 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 00fcfcc8 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 00fcfce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
> 04 00fcfd30 65f0cfd8 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 00fcfd70 01002440 w3svc!ServiceEntry+0x1b5
> 06 00fcffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
> 07 00fcffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
> 08 00fcffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 11
> System Thread ID: e74
> Kernel Time: 0:0:0.125
> User Time: 0:0:0.125
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0104fc1c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0104fc6c 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0104fcc8 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0104fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0104fd30 6b561a78 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 0104fd70 01002440 SMTPSVC!ServiceEntry+0x136
> 06 0104ffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
> 07 0104ffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
> 08 0104ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 12
> System Thread ID: e78
> Kernel Time: 0:0:0.46
> User Time: 0:0:0.15
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0108fc1c 7c59a059 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0108fc6c 77e1e9fb KERNEL32!WaitForMultipleObjectsEx+0xea
> 02 0108fcc8 77e1ea48 USER32!MsgWaitForMultipleObjectsEx+0x153
> 03 0108fce4 769c71e0 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0108fd30 6fc6b2f0 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x209
> 05 0108fd70 01002440 ftpsvc2!ServiceEntry+0xc7
> 06 0108ffa4 7c2e02f7 inetinfo!InetinfoStartService+0x2bd
> 07 0108ffb4 7c57b382 ADVAPI32!ScSvcctrlThreadA+0xe
> 08 0108ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 13
> System Thread ID: e7c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0120ff5c 7c585323 ntdll!NtRemoveIoCompletion+0xb
> 01 0120ff88 6d7029ef KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0120ffb4 7c57b382 ISATQ!I_AtqOplockThreadFunc+0x32
> 03 0120ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 14
> System Thread ID: e80
> Kernel Time: 0:1:51.640
> User Time: 16:7:1.203
> *** WARNING: Unable to verify checksum for C:\Program
Files\ISS\IssSensors\ATHWEB\ISAPI\rsiisfilter.dll
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
for C:\Program Files\ISS\IssSensors\ATHWEB\ISAPI\rsiisfilter.dll -
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0287e310 00000000 rsiisfilter+0x239b
>
>
>
>
> Thread ID: 15
> System Thread ID: e84
> Kernel Time: 0:1:40.671
> User Time: 0:3:0.390
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0128ff50 7c585323 ntdll!NtRemoveIoCompletion+0xb
> 01 0128ff7c 6d702957 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0128ffb4 7c57b382 ISATQ!AtqPoolThread+0x40
> 03 0128ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 16
> System Thread ID: e8c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0140feb8 7c585323 ntdll!NtRemoveIoCompletion+0xb
> 01 0140fee4 77d809da KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0140ff20 77d50ede RPCRT4!COMMON_ProcessCalls+0x9e
> 03 0140ff74 77d50d17 RPCRT4!LOADABLE_TRANSPORT::ProcessIOEvents+0x99
> 04 0140ff78 77d39a00 RPCRT4!ProcessIOEventsWrapper+0x9
> 05 0140ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x4f
> 06 0140ffb4 7c57b382 RPCRT4!ThreadStartRoutine+0x18
> 07 0140ffec 00000000 KERNEL32!BaseThreadStart+0x52
>
>
>
>
> Thread ID: 17
> System Thread ID: e98
> Kernel Time: 0:0:0.265
> User Time: 0:0:0.109
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0170fe24 77d574d4 ntdll!NtReplyWaitReceivePortEx+0xb
> 01 0170ff74 77d56d9e RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x74
> 02 0170ff78 77d39ad0 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0170ffa8 77d41c6c RPCRT4!BaseCachedThreadRoutine+0x11f
> 04 0170ffb4 7c57b382 RPCRT4!ThreadStartRoutine+0x18
> 05 0170ffec 00000000 KERNEL32!
>