We see this a lot. A COM dll is unloading out from under IIS (i.e. it is
unloading itself). To identify the culprit, next time run IISState with:
iisstate -p <pid> -hc -d <enter>
Then open the dump with WinDBG and type lm <enter>. Then refer to the log
file to get the crashing thread id (in this log it is thread 4
. Switch to
that thread in WinDBG (~48s<enter>). Then dump the thread stack
(kb<enter>). It will tell you what dll was _supposed_ to be there.
Pat
"roben" <rbnstudio.RemoveThis@hotmail.com> wrote in message
news:emP9fEhUFHA.584@TK2MSFTNGP15.phx.gbl...
> Hi,
>
> I have a IIS6. w3wp.exe keeps crashing several times a day.
> I used IISSTATE to get a debug (-hc hardcrash) debug.
> I need some help with interpretation of it:
>
> Thanks in advance:
>
>
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Thu May 05 17:30:27 2005
>
> OS = Windows 2003 Server
> Executable: w3wp.exe
> PID = 4700
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
> IIS has crashed...
> Beginning Analysis
> DLL (!FunctionName) that failed:
>
>
>
>
> Thread ID: 48
> System Thread ID: 1254
> Kernel Time: 0:0:15.531
> User Time: 0:0:43.859
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 00 0a6cfda4 77d015df 0x20837dc8
> 01 0a6cfdd0 77d01a15 USER32!InternalCallWinProc+0x1b
> 02 0a6cfe48 77d016d8 USER32!UserCallWinProcCheckWow+0x151
> 03 0a6cfeb0 77d01744 USER32!DispatchMessageWorker+0x327
> 04 0a6cfebc 75614407 USER32!DispatchMessageW+0xb
> 05 0a6cfed4 75614302 comsvcs!CSTAQueueLessMessageWork::DoWork+0x45
> 06 0a6cfee8 75614b24 comsvcs!CSTAThread::DoWork+0x14
> 07 0a6cff04 75614dee comsvcs!CSTAThread::ProcessQueueWork+0x30
> 08 0a6cff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x17a
> 09 0a6cffb8 77e4a990 msvcrt!_endthreadex+0x95
> 0a 0a6cffec 00000000 kernel32!BaseThreadStart+0x34
> Closing open log file C:\IISState\output\IISState-4700.log
> Opened log file 'C:\IISState\output\IISState-4700.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Thu May 05 17:43:04 2005
>
> OS = Windows 2003 Server
> Executable: w3wp.exe
> PID = 4700
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 150c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0006fe58 77f43741 SharedUserData!SystemCallStub+0x4
> 01 0006fe5c 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 0006fecc 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 0006fedc 5a3635ae kernel32!WaitForSingleObject+0xf
> 04 0006feec 5a364d7d w3dt!WP_CONTEXT::RunMainThreadLoop+0xe
> 05 0006fef4 5a3a1d98 w3dt!UlAtqStartListen+0x2d
> 06 0006ff00 5a3a5d54 w3core!W3_SERVER::StartListen+0x8e
> 07 0006ff0c 010017af w3core!UlW3Start+0xea
> 08 0006ff44 0100195e w3wp!wmain+0x236
> 09 0006ffc0 77e4f38c w3wp!wmainCRTStartup+0x12f
> 0a 0006fff0 00000000 kernel32!BaseProcessStart+0x23
>
>
>
>
> Thread ID: 1
> System Thread ID: ebc
> Kernel Time: 0:0:0.187
> User Time: 0:0:0.312
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00a4ff9c 77f4262b SharedUserData!SystemCallStub+0x4
> 01 00a4ffa0 77f6b5b2 ntdll!NtDelayExecution+0xc
> 02 00a4ffb8 77e4a990 ntdll!RtlpTimerThread+0x45
> 03 00a4ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 2
> System Thread ID: 110
> Kernel Time: 0:0:11.156
> User Time: 0:0:12.31
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d0ff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00d0ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00d0ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00d0ff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00d0ffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00d0ffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00d0ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 3
> System Thread ID: fd8
> Kernel Time: 0:0:10.468
> User Time: 0:0:10.671
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d4ff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00d4ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00d4ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00d4ff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00d4ffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00d4ffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 4
> System Thread ID: 1138
> Kernel Time: 0:0:10.390
> User Time: 0:0:10.515
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00d8ff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00d8ff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00d8ff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00d8ff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00d8ffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00d8ffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00d8ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 5
> System Thread ID: 16dc
> Kernel Time: 0:0:11.687
> User Time: 0:0:10.750
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00dcff28 77f430c7 SharedUserData!SystemCallStub+0x4
> 01 00dcff2c 77e430bc ntdll!ZwRemoveIoCompletion+0xc
> 02 00dcff58 5a302360 kernel32!GetQueuedCompletionStatus+0x27
> 03 00dcff90 5a302531 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x31
> 04 00dcffa4 5a301d27 W3TP!THREAD_POOL_DATA::ThreadPoolThread+0x21
> 05 00dcffb8 77e4a990 W3TP!THREAD_MANAGER::ThreadManagerThread+0x35
> 06 00dcffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 6
> System Thread ID: 156c
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e8fcec 77f4372d SharedUserData!SystemCallStub+0x4
> 01 00e8fcf0 77f75297 ntdll!NtWaitForMultipleObjects+0xc
> 02 00e8ffb8 77e4a990 ntdll!RtlpWaitThread+0x158
> 03 00e8ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 7
> System Thread ID: 1680
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: HTTP Compression Thread
> # ChildEBP RetAddr
> 00 0170ff14 77f43741 SharedUserData!SystemCallStub+0x4
> 01 0170ff18 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 0170ff88 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 0170ff98 5a3a51f7 kernel32!WaitForSingleObject+0xf
> 04 0170ffb8 77e4a990 w3core!HTTP_COMPRESSION::CompressionThread+0x85
> 05 0170ffc4 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 8
> System Thread ID: 1230
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 023cff14 77f43741 SharedUserData!SystemCallStub+0x4
> 01 023cff18 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 023cff88 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 023cff98 70a05c99 kernel32!WaitForSingleObject+0xf
> 04 023cffb4 70a0625a asp!CApplnCleanupMgr::ApplnCleanupDoWork+0x19
> 05 023cffb8 77e4a990 asp!CApplnCleanupMgr::ApplnCleanupThread+0xa
> 06 023cffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 9
> System Thread ID: 152c
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 0250fe1c 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0250fe20 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0250fec8 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0250ff24 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0250ff40 70a183cc USER32!MsgWaitForMultipleObjects+0x1d
> 05 0250ff80 77bbb9c3 asp!CMTACallbackThread::Thread+0x4c
> 06 0250ff8c 00000000 msvcrt!free+0xc8
>
>
>
>
> Thread ID: 10
> System Thread ID: 155c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 0254fefc 77f43741 SharedUserData!SystemCallStub+0x4
> 01 0254ff00 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 0254ff70 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 0254ff80 709f4800 kernel32!WaitForSingleObject+0xf
> 04 0254ffb4 77f5cd6b asp!CViperReqManager::WatchThread+0x65
>
>
>
>
> Thread ID: 11
> System Thread ID: 11f0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.15
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 025afef0 77f43741 SharedUserData!SystemCallStub+0x4
> 01 025afef4 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 025aff64 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 025aff74 75611e06 kernel32!WaitForSingleObject+0xf
> 04 025aff84 77bc91ed
> comsvcs!CSTAThreadPool::LoadBalanceThreadControlLoop+0x25
> 05 025affb8 77e4a990 msvcrt!_endthreadex+0x95
> 06 025affec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 12
> System Thread ID: fc0
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 025efee8 77f43741 SharedUserData!SystemCallStub+0x4
> 01 025efeec 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 025eff5c 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 025eff6c 75611999 kernel32!WaitForSingleObject+0xf
> 04 025eff84 77bc91ed comsvcs!CSTAThreadPool::KillThreadControlLoop+0x21
> 05 025effb8 77e4a990 msvcrt!_endthreadex+0x95
> 06 025effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 13
> System Thread ID: 16b0
> Kernel Time: 0:0:47.640
> User Time: 0:0:59.890
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0262fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0262fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0262fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0262fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0262fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0262ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0262ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0262ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 14
> System Thread ID: e54
> Kernel Time: 0:0:5.750
> User Time: 0:0:19.281
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0266fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0266fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0266fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0266fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0266fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0266ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0266ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0266ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 15
> System Thread ID: 10b8
> Kernel Time: 0:0:35.937
> User Time: 0:1:9.390
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 026afdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 026afdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 026afe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 026afed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 026afef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 026aff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 026affb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 026affec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 16
> System Thread ID: edc
> Kernel Time: 0:0:4.421
> User Time: 0:0:16.140
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 026efdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 026efdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 026efe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 026efed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 026efef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 026eff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 026effb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 026effec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 17
> System Thread ID: 1580
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02bcff88 77f4372d SharedUserData!SystemCallStub+0x4
> 01 02bcff8c 71c63620 ntdll!NtWaitForMultipleObjects+0xc
> 02 02bcffb8 77e4a990 NETAPI32!NetbiosWaiter+0x71
> 03 02bcffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 18
> System Thread ID: 7d0
> Kernel Time: 0:0:0.406
> User Time: 0:0:2.171
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02c0ff10 77f43741 SharedUserData!SystemCallStub+0x4
> 01 02c0ff14 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 02c0ff84 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 02c0ff94 02a638a9 kernel32!WaitForSingleObject+0xf
> 04 02c0ffb8 77e4a990 oledb32!ReleaseResourceThread+0x54
> 05 02c0ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 19
> System Thread ID: 11b0
> Kernel Time: 0:0:1.312
> User Time: 0:0:1.484
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02c4ff08 77f43741 SharedUserData!SystemCallStub+0x4
> 01 02c4ff0c 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 02c4ff7c 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 02c4ff8c 02a638b9 kernel32!WaitForSingleObject+0xf
> 04 02c4ffb8 77e4a990 oledb32!ResetResourceThread+0x84
> 05 02c4ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 20
> System Thread ID: a28
> Kernel Time: 0:0:0.78
> User Time: 0:0:0.46
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 02c8fd04 77f43741 SharedUserData!SystemCallStub+0x4
> 01 02c8fd08 77e41817 ntdll!ZwWaitForSingleObject+0xc
> 02 02c8fd78 77e4168f kernel32!WaitForSingleObjectEx+0xac
> 03 02c8fd88 755f4fbf kernel32!WaitForSingleObject+0xf
> 04 02c8ffb8 77e4a990 comsvcs!PingThread+0xea
> 05 02c8ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 21
> System Thread ID: 15b8
> Kernel Time: 0:0:37.359
> User Time: 0:1:8.250
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0364fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0364fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0364fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0364fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0364fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0364ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0364ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0364ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 22
> System Thread ID: 1108
> Kernel Time: 0:0:43.343
> User Time: 0:0:41.843
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0178fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0178fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0178fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0178fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0178fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0178ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0178ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0178ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 23
> System Thread ID: 8ac
> Kernel Time: 0:0:45.953
> User Time: 0:1:1.437
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00ccfdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 00ccfdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 00ccfe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 00ccfed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 00ccfef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 00ccff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 00ccffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 00ccffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 24
> System Thread ID: a8c
> Kernel Time: 0:0:6.875
> User Time: 0:0:19.937
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0344fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0344fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0344fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0344fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0344fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0344ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0344ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0344ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 25
> System Thread ID: 124c
> Kernel Time: 0:0:19.31
> User Time: 0:1:0.890
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 03defdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 03defdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 03defe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 03defed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 03defef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 03deff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 03deffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 03deffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 26
> System Thread ID: e6c
> Kernel Time: 0:0:4.375
> User Time: 0:0:11.812
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0278fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0278fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0278fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0278fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0278fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0278ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0278ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0278ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 27
> System Thread ID: b90
> Kernel Time: 0:0:52.31
> User Time: 0:1:27.671
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0368fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0368fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0368fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0368fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0368fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0368ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0368ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0368ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 28
> System Thread ID: 9c8
> Kernel Time: 0:0:2.718
> User Time: 0:0:11.31
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0383fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0383fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0383fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0383fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0383fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0383ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0383ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0383ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 29
> System Thread ID: e3c
> Kernel Time: 0:0:6.640
> User Time: 0:0:19.93
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 00a8fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 00a8fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 00a8fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 00a8fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 00a8fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 00a8ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 00a8ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 00a8ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 30
> System Thread ID: 15e8
> Kernel Time: 0:0:4.312
> User Time: 0:0:14.343
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0495fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0495fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0495fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0495fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0495fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0495ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0495ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0495ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 31
> System Thread ID: 85c
> Kernel Time: 0:0:26.546
> User Time: 0:0:53.921
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 04dbfdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 04dbfdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 04dbfe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 04dbfed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 04dbfef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 04dbff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 04dbffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 04dbffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 32
> System Thread ID: 838
> Kernel Time: 0:0:26.421
> User Time: 0:0:52.453
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0454fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0454fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0454fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0454fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0454fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0454ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0454ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0454ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 33
> System Thread ID: 1630
> Kernel Time: 0:0:34.125
> User Time: 0:1:0.203
> Thread Status: Thread is in a WAIT state.
> Thread Type: Idle ASP thread
> # ChildEBP RetAddr
> 00 0504fdcc 77f4372d SharedUserData!SystemCallStub+0x4
> 01 0504fdd0 77e41bfa ntdll!NtWaitForMultipleObjects+0xc
> 02 0504fe78 77d02695 kernel32!WaitForMultipleObjectsEx+0x11a
> 03 0504fed4 77d037f0 USER32!RealMsgWaitForMultipleObjectsEx+0x13f
> 04 0504fef0 75614e57 USER32!MsgWaitForMultipleObjects+0x1d
> 05 0504ff84 77bc91ed comsvcs!CSTAThread::WorkerLoop+0x1e3
> 06 0504ffb8 77e4a990 msvcrt!_endthreadex+0x95
> 07 0504ffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
>
> Thread ID: 34
> System Thread ID: 17a8
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.31
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 05cffe20 77f4313f SharedUserData!SystemCallStub+0x4
> 01 05cffe24 77c57b25 ntdll!NtReplyWaitReceivePortEx+0xc
> 02 05cfff8c 77c696a9 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x193
> 03 05cfff90 77c695f1 RPCRT4!RecvLotsaCallsWrapper+0x9
> 04 05cfffb0 77c696d7 RPCRT4!BaseCachedThreadRoutine+0x9c
> 05 05cfffb8 77e4a990 RPCRT4!ThreadStartRoutine+0x17
> 06 05cfffec 00000000 kernel32!BaseThreadStart+0x34
>
>
>
FAQ
Profile
Private Messages
Log in
