Crash is caused by ASP.dll. Make sure you have the latest security update
(it doesn't appear to be security related, but that will get you the latest
bits).
Pat
"Randy" <rkimminau DeleteThis @priority-data.net> wrote in message
news:WzGgf.55596$0l5.50943@dukeread06...
>I have a new issue with one of our application running IIS4.
>Intermittantly, these
> servers will crash . This time I saw pop-up
> message on the screen indicating the following: Title bar says "mtx.exe -
> application error." Message indicates "the instruction at 0x77f64dab
> referenced memory at 0x00000010. The memory could not be read. Click OK
> to
> terminate application."
>
> IIS is configured to run in separate memory space. So I ran IISstate
> against the main site mtx.exe as follows: IIsstate -p 145 -hc. I need
> help interpreting the data in this dump. Thanks in advance.
>
> It looks like there was a problem trying to post data but I am not sure I
> interpretting
> this properly.
>
> Opened log file 'C:\iisstate\output\IISState-145.log'
>
> ***********************
> Starting new log output
> IISState version 3.4
>
> Tue Nov 22 08:22:53 2005
>
> OS = NT4
> Executable: mtx.exe
> PID = 145
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
> IIS has crashed...
> Beginning Analysis
> DLL (!FunctionName) that failed: asp!CViperActivity::PostAsyncRequest
>
>
>
>
> Thread ID: 6
> System Thread ID: 60
> Kernel Time: 0:0:3.640
> User Time: 0:0:1.937
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\WINNT\System32\inetsrv\ISATQ.dll -
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 00f7fedc 680c7a51 asp!CViperActivity::PostAsyncRequest+0x58
> 01 00f7fef0 680d8a3d asp!CHitObj::PostViperAsyncCall+0x88
> 02 00f7ff4c 680d8bc0 asp!CSessionMgr::DeleteSession+0xb1
> 03 00f7ff6c 680d8d08 asp!CSessionMgr::DeleteExpiredSessions+0xeb
> 04 00f7ff7c 68624c15 asp!CSessionMgr::SessionKillerSchedulerCallback+0x22
> 05 00f7ffb8 77f04eeb ISATQ!ScheduleAdjustTime+0x272
> 06 00f7ffc4 000c000a KERNEL32!BaseThreadStart+0x51
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 07 00000001 00000000 0xc000a
> Closing open log file C:\iisstate\output\IISState-145.log
> Opened log file 'C:\iisstate\output\IISState-145.log'
>
> ***********************
> Starting new log output
> IISState version 3.4
>
> Tue Nov 22 08:22:54 2005
>
> OS = NT4
> Executable: mtx.exe
> PID = 145
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
>
>
>
> Thread ID: 0
> System Thread ID: 66
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006feb4 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 0006fedc 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0006feec 004017e7 KERNEL32!WaitForSingleObject+0xf
> 03 0006ff24 00402246 mtx!WinMain+0x141
> 04 0006ffc0 77f1bb7c mtx!WinMainCRTStartup+0x156
> 05 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40
>
>
>
>
> Thread ID: 1
> System Thread ID: 93
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00d7ff30 77e85486 USER32!ZwUserGetMessage+0xb
> 01 00d7ff50 77b772bc USER32!GetMessageW+0x34
> 02 00d7ff94 77b77202 ole32!CDllHost::WorkerThread+0xb7
> 03 00d7ff98 77b73030 ole32!DLLHostThreadEntry+0x9
> 04 00d7ffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x15
> 05 00d7ffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 00d7ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 2
> System Thread ID: 92
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00dfff64 77f1d1e8 ntdll!NtDelayExecution+0xb
> 01 00dfff84 77f1d1b1 KERNEL32!SleepEx+0x34
> 02 00dfff90 77b6ed4b KERNEL32!Sleep+0xb
> 03 00dfff98 77b73030 ole32!CRpcResolver::WorkerThreadLoop+0xc
> 04 00dfffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x15
> 05 00dfffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 06 00dfffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 3
> System Thread ID: 71
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e3ff64 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 00e3ff8c 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 00e3ff9c 69d0b454 KERNEL32!WaitForSingleObject+0xf
> 03 00e3ffb8 77f04eeb MTSEvents!DispatchEvents+0x94
> 04 00e3ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 4
> System Thread ID: 76
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e7ff24 77f1d1e8 ntdll!NtDelayExecution+0xb
> 01 00e7ff44 77f1d1b1 KERNEL32!SleepEx+0x34
> 02 00e7ff50 699c2726 KERNEL32!Sleep+0xb
> 03 00e7ff84 7800a3c0 MTXTRK!PostData+0xea
> 04 00e7ffb8 77f04eeb MSVCRT!_beginthreadex+0xca
> 05 00e7ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 5
> System Thread ID: a6
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\WINNT\System32\MtxDm.dll -
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00ebff58 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 00ebff80 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 00ebff90 69a21998 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 00ebffb8 77f04eeb MtxDm+0x1998
> 04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 6
> System Thread ID: 60
> Kernel Time: 0:0:3.640
> User Time: 0:0:1.937
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 00f7fedc 680c7a51 asp!CViperActivity::PostAsyncRequest+0x58
> 01 00f7fef0 680d8a3d asp!CHitObj::PostViperAsyncCall+0x88
> 02 00f7ff4c 680d8bc0 asp!CSessionMgr::DeleteSession+0xb1
> 03 00f7ff6c 680d8d08 asp!CSessionMgr::DeleteExpiredSessions+0xeb
> 04 00f7ff7c 68624c15 asp!CSessionMgr::SessionKillerSchedulerCallback+0x22
> 05 00f7ffb8 77f04eeb ISATQ!ScheduleAdjustTime+0x272
> 06 00f7ffc4 000c000a KERNEL32!BaseThreadStart+0x51
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 07 00000001 00000000 0xc000a
>
>
>
>
> Thread ID: 7
> System Thread ID: 6f
> Kernel Time: 0:0:3.296
> User Time: 0:0:2.453
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00fbff04 77e7ad84 USER32!ZwUserGetInputEvent+0xb
> 01 00fbff50 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x58
> 02 00fbff6c 68624ab9 USER32!MsgWaitForMultipleObjects+0x1d
> 03 00fbffb8 77f04eeb ISATQ!ScheduleAdjustTime+0x116
> 04 00fbffc4 000c000a KERNEL32!BaseThreadStart+0x51
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 05 00000001 00000000 0xc000a
>
>
>
>
> Thread ID: 8
> System Thread ID: a8
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.15
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00ffff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
> 01 00ffff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00ffffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
> 03 00ffffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 9
> System Thread ID: a9
> Kernel Time: 0:0:0.109
> User Time: 0:0:0.109
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 0103ff54 77f0c2a0 ntdll!NtRemoveIoCompletion+0xb
> 01 0103ff84 686272c6 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 0103ffb8 77f04eeb ISATQ!AtqBandwidthGetInfo+0x5e6
> 03 0103ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 10
> System Thread ID: 53
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0107ff0c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0107ff64 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0107ff80 697ec222 KERNEL32!WaitForMultipleObjects+0x16
> 03 0107ffb0 697ee93a mtxex!CMTSPackage::PackageControl+0x4e
> 04 0107ffb8 77f04eeb mtxex!ControlThread+0x3e
> 05 0107ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 11
> System Thread ID: a5
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 0117fe70 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0117fec8 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0117ff24 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0117ff40 680caa5c USER32!MsgWaitForMultipleObjects+0x1d
> 04 0117ff84 7800a27b asp!CMTACallbackThread::Thread+0x42
> 05 0117ffb8 77f04eeb MSVCRT!_beginthread+0xce
> 06 0117ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 12
> System Thread ID: ad
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> *** WARNING: Unable to verify checksum for C:\WINNT\System32\pdm.dll
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\WINNT\System32\pdm.dll -
> Thread Type: PDM (Debugger) Thread.
> # ChildEBP RetAddr
> 00 011ffdd8 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 011ffe30 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 011ffe8c 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 011ffea8 4a003b19 USER32!MsgWaitForMultipleObjects+0x1d
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 04 77e7ae7b 0110247c pdm+0x3b19
> 05 83ec8b55 00000000 MSASN1!ASN1BERDecZeroChar16String+0x57
>
>
>
>
> Thread ID: 13
> System Thread ID: a0
> Kernel Time: 0:0:3.109
> User Time: 0:0:7.718
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0125fe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0125fed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0125ff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0125ff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0125ff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 0125ff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 0125ffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 0125ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 14
> System Thread ID: 3e
> Kernel Time: 0:0:8.843
> User Time: 0:0:21.234
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote endpoint located (probably not a DCOM call)
>
> # ChildEBP RetAddr
> 00 01aef7b8 77e7a9b3 USER32!NtUserCallOneParam+0xb
> 01 01aef7c4 77b2dc64 USER32!GetQueueStatus+0x23
> 02 01aef7dc 77b2dbb9 ole32!CCliModalLoop::BlockFn+0x5d
> 03 01aef7e4 77e164ef ole32!OleModalLoopBlockFn+0xd
> 04 01aef918 77e1666b RPCRT4!WMSG_CCALL::AsyncSendReceive+0x182
> 05 01aef928 77ba5d82 RPCRT4!I_RpcAsyncSendReceive+0x14
> 06 01aef94c 77ba651d ole32!ThreadSendReceive+0x84
> 07 01aef9dc 77b6e5eb ole32!CRpcChannelBuffer::SendReceive2+0x166
> 08 01aef9f4 77b2db0e ole32!CCliModalLoop::SendReceive+0x1c
> 09 01aefa4c 77e55898 ole32!CAptRpcChnl::SendReceive+0xb5
> 0a 01aefa6c 77e54457 RPCRT4!NdrProxySendReceive+0x50
> 0b 01aefc6c 77e55935 RPCRT4!NdrClientCall2+0x457
> 0c 01aefc8c 77e4e3bb RPCRT4!ObjectStublessClient+0x65
> 0d 01aefc9c 77b70d47 RPCRT4!ObjectStubless+0xf
> 0e 01aefcb4 77b70cea ole32!RemoteReleaseRifRefHelper+0x57
> 0f 01aefcd0 77b46099 ole32!RemoteReleaseRifRef+0x4c
> 10 01aefdc8 77b70b11 ole32!CStdMarshal::DisconnectCliIPIDs+0x11c
> 11 01aefde0 77b2620f ole32!CStdMarshal::Disconnect+0xb9
> 12 01aefde8 77b26243 ole32!CStdIdentity::Disconnect+0xe
> 13 01aefdfc 77b21162 ole32!CStdIdentity::~CStdIdentity+0x31
> 14 01aefe18 680bb3be ole32!CStdIdentity::CInternalUnk::Release+0x8e
> 15 01aefe24 680bb42c asp!CComponentObject::ReleaseAll+0x21
> 16 01aefe5c 680bb31e asp!CComponentObject::Clear+0x36
> 17 01aefe64 680bb2fd asp!CComponentObject::~CComponentObject+0xe
> 18 01aefe6c 680bbc59 asp!CComponentObject::`scalar deleting
> destructor'+0x8
> 19 01aefe94 680c75e0 asp!CComponentCollection::~CComponentCollection+0x68
> 1a 01aefea0 680c7f9a asp!CHitObj::StopComponentProcessing+0x2a
> 1b 01aefee8 680e3393 asp!CHitObj::ViperAsyncCallback+0x511
> 1c 01aeff00 697e677c asp!CViperAsyncRequest::OnCall+0x3f
> 1d 01aeff44 697e57fe mtxex!CActivity::CallWithNewContext+0x5c
> 1e 01aeff4c 697f18fe mtxex!CQueuedRequestOnCall::CallBack+0xe
> 1f 01aeff60 697f15b0 mtxex!CViperThread::ConsumePrivateQueue+0x4e
> 20 01aeff78 697f19f2 mtxex!CViperThread::MainLoop+0x8a
> 21 01aeff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 22 01aeffb8 77f04eeb MSVCRT!_beginthread+0xce
> 23 01aeffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 15
> System Thread ID: a7
> Kernel Time: 0:0:6.781
> User Time: 0:0:22.671
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01b2fe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 01b2fed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 01b2ff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 01b2ff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01b2ff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 01b2ff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 01b2ffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 01b2ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 16
> System Thread ID: 6b
> Kernel Time: 0:0:4.453
> User Time: 0:0:10.546
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01befe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 01befed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 01beff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 01beff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01beff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 01beff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 01beffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 01beffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 17
> System Thread ID: 97
> Kernel Time: 0:0:5.750
> User Time: 0:0:13.984
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\WINNT\System32\vbscript.dll -
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: D:\WEB\PRIORITYRATE\AUTO\QUOTESUMMARY.ASP
>
> No remote call being made
> # ChildEBP RetAddr
> 00 01c2f1a8 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 01c2f200 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 01c2f25c 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 01c2f278 77b2dc8e USER32!MsgWaitForMultipleObjects+0x1d
> 04 01c2f2a0 77b2dbb9 ole32!CCliModalLoop::BlockFn+0x87
> 05 01c2f2a8 77b6f6ce ole32!OleModalLoopBlockFn+0xd
> 06 01c2f2c4 77b6f757 ole32!ModalLoop+0x4b
> 07 01c2f2d4 77ba6513 ole32!SwitchSTA+0x1f
> 08 01c2f368 77b6e5eb ole32!CRpcChannelBuffer::SendReceive2+0x15c
> 09 01c2f380 77b2db0e ole32!CCliModalLoop::SendReceive+0x1c
> 0a 01c2f3d8 77e55898 ole32!CAptRpcChnl::SendReceive+0xb5
> 0b 01c2f3f8 77e54457 RPCRT4!NdrProxySendReceive+0x50
> 0c 01c2f5f8 77e55935 RPCRT4!NdrClientCall2+0x457
> 0d 01c2f618 77e4e3bb RPCRT4!ObjectStublessClient+0x65
> 0e 01c2f628 680d1f2a RPCRT4!ObjectStubless+0xf
> 0f 01c2f640 680d1edd asp!WAM_EXEC_INFO::SyncWriteClient+0x22
> 10 01c2f65c 680d139b asp!CResponse::SyncWrite+0x3e
> 11 01c2f674 680d3b75 asp!CResponseBuffer::Flush+0x35
> 12 01c2f688 65367b9d asp!CResponse::Flush+0x8e
> 13 01c2f6a0 653b2c42 OLEAUT32!DispCallFunc+0x15d
> 14 01c2f730 680c122c OLEAUT32!CTypeInfo2::Invoke+0x244
> 15 01c2f760 73573e84 asp!CDispatch::Invoke+0x62
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 16 01c2f7a8 73573e07 vbscript!DllCanUnloadNow+0x2811
> 17 01c2f8bc 73573936 vbscript!DllCanUnloadNow+0x2794
> 18 01c2f8e0 73573cdb vbscript!DllCanUnloadNow+0x22c3
> 19 01c2fbbc 73574380 vbscript!DllCanUnloadNow+0x2668
> 1a 01c2fcc0 7357444c vbscript!DllCanUnloadNow+0x2d0d
> 1b 01c2fd24 73574746 vbscript!DllCanUnloadNow+0x2dd9
> 1c 01c2fd74 735747b3 vbscript!DllCanUnloadNow+0x30d3
> 1d 01c2fd90 680d5332 vbscript!DllCanUnloadNow+0x3140
> 1e 01c2fdc0 680d530c asp!CActiveScriptEngine::TryCall+0x15
> 1f 01c2fe04 680c40d0 asp!CActiveScriptEngine::Call+0x98
> 20 01c2fe10 680c3620 asp!CallScriptFunctionOfEngine+0x48
> 21 01c2fe4c 680c344a asp!ExecuteRequest+0x1b9
> 22 01c2fe94 680c7f48 asp!Execute+0xcb
> 23 01c2fee8 680e3393 asp!CHitObj::ViperAsyncCallback+0x4bf
> 24 01c2ff00 697e677c asp!CViperAsyncRequest::OnCall+0x3f
> 25 01c2ff44 697e57fe mtxex!CActivity::CallWithNewContext+0x5c
> 26 01c2ff4c 697f18fe mtxex!CQueuedRequestOnCall::CallBack+0xe
> 27 01c2ff60 697f15b0 mtxex!CViperThread::ConsumePrivateQueue+0x4e
> 28 01c2ff78 697f19f2 mtxex!CViperThread::MainLoop+0x8a
> 29 01c2ff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 2a 01c2ffb8 77f04eeb MSVCRT!_beginthread+0xce
> 2b 01c2ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 18
> System Thread ID: ac
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.109
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 026dff60 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 026dff88 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 026dff98 1f948267 KERNEL32!WaitForSingleObject+0xf
> 03 026dffb8 77f04eeb oledb32!ReleaseResourceThread+0xd
> 04 026dffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 19
> System Thread ID: ab
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.93
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0271ff5c 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 0271ff84 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0271ff94 1f948431 KERNEL32!WaitForSingleObject+0xf
> 03 0271ffb8 77f04eeb oledb32!ResetResourceThread+0x16
> 04 0271ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 20
> System Thread ID: aa
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0288fefc 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0288ff54 77f1d06b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0288ff70 65352a46 KERNEL32!WaitForMultipleObjects+0x16
> 03 0288ffb8 77f04eeb OLEAUT32!RegistryWatchThread+0x86
> 04 0288ffc4 77f3fd50 KERNEL32!BaseThreadStart+0x51
> 05 77f4181f 416d6f74 KERNEL32!_NULL_IMPORT_DESCRIPTOR+0x1b28
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 06 41646441 00000000 0x416d6f74
>
>
>
>
> Thread ID: 21
> System Thread ID: 63
> Kernel Time: 0:0:5.15
> User Time: 0:0:11.500
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02defe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 02defed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 02deff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 02deff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 02deff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 02deff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 02deffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 02deffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 22
> System Thread ID: f2
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 07daff40 776689ce ntdll!NtWaitForSingleObject+0xb
> 01 07daff98 77661e92 msafd!SockWaitForSingleObject+0x204
> 02 07daffb8 77f04eeb msafd!SockAsyncThread+0x2c
> 03 07daffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 23
> System Thread ID: d3
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for C:\WINNT\System32\crypt32.dll -
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0821ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0821ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0821ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0821ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 24
> System Thread ID: cd
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0825ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0825ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0825ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0825ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 25
> System Thread ID: 10b
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0829ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0829ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0829ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0829ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 26
> System Thread ID: f3
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 082dff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 082dff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 082dffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 082dffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 27
> System Thread ID: c5
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0831ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0831ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0831ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0831ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 28
> System Thread ID: 45
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0835ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0835ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0835ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0835ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 29
> System Thread ID: fd
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0839ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0839ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0839ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0839ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 30
> System Thread ID: f0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 083dff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 083dff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 083dffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 083dffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 31
> System Thread ID: 50
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0841ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0841ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0841ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0841ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 32
> System Thread ID: b0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0845ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0845ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0845ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0845ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 33
> System Thread ID: 98
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0849ff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0849ff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0849ffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 0849ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 34
> System Thread ID: d2
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 084dff38 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 084dff90 5cf1a49b KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 084dffb8 77f04eeb crypt32!CertEnumPhysicalStore+0xaf1
> 03 084dffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 35
> System Thread ID: 90
> Kernel Time: 0:0:4.796
> User Time: 0:0:13.62
> Thread Type: Other
> # ChildEBP RetAddr
> 00 08adfe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 08adfed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 08adff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 08adff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 08adff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 08adff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 08adffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 08adffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 36
> System Thread ID: 90
> Kernel Time: 0:0:4.796
> User Time: 0:0:13.62
> Thread Type: Other
> # ChildEBP RetAddr
> 00 08adfe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 08adfed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 08adff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 08adff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 08adff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 08adff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 08adffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 08adffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 37
> System Thread ID: 120
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 131bff68 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 131bff90 77b7306b KERNEL32!WaitForSingleObjectEx+0x73
> 02 131bffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x50
> 03 131bffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 04 131bffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 38
> System Thread ID: 129
> Kernel Time: 0:0:1.125
> User Time: 0:0:3.171
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0c0afe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
>01 0c0afed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0c0aff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0c0aff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0c0aff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 0c0aff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 0c0affb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 0c0affec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 39
> System Thread ID: d5
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0ce9ff60 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 0ce9ff88 77f04f44 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0ce9ff98 776b1c06 KERNEL32!WaitForSingleObject+0xf
> 03 0ce9ffb8 77f04eeb WS2_32!SockAsyncThread+0x2c
> 04 0ce9ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 40
> System Thread ID: b5
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.31
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0f3bff68 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 0f3bff90 77b7306b KERNEL32!WaitForSingleObjectEx+0x73
> 02 0f3bffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x50
> 03 0f3bffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 04 0f3bffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 41
> System Thread ID: 1be
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.46
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0f4bfe84 77e12f2b ntdll!ZwRequestWaitReplyPort+0xb
> 01 0f4bff60 77e12597 RPCRT4!WMSG_CCALL::SendReceive+0xe2
> 02 0f4bff68 77ba5dac RPCRT4!I_RpcSendReceive+0xc
> 03 0f4bff84 77b6f795 ole32!ThreadSendReceive+0xae
> 04 0f4bff98 77b73030 ole32!ThreadDispatch+0x1c
> 05 0f4bffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x15
> 06 0f4bffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 07 0f4bffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 42
> System Thread ID: 1e8
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 1309ff68 77f1cf95 ntdll!NtWaitForSingleObject+0xb
> 01 1309ff90 77b7306b KERNEL32!WaitForSingleObjectEx+0x73
> 02 1309ffac 77b72fbe ole32!CRpcThread::WorkerLoop+0x50
> 03 1309ffb8 77f04eeb ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x1a
> 04 1309ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 43
> System Thread ID: 21d
> Kernel Time: 0:0:1.843
> User Time: 0:0:5.765
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0ca1fe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ca1fed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0ca1ff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0ca1ff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ca1ff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 0ca1ff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 0ca1ffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 0ca1ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 44
> System Thread ID: 21e
> Kernel Time: 0:0:3.359
> User Time: 0:0:7.937
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0ca5fe7c 77f1d15e ntdll!ZwWaitForMultipleObjects+0xb
> 01 0ca5fed4 77e7ae53 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0ca5ff30 77e7ae98 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0ca5ff4c 697f1581 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0ca5ff78 697f19f2 mtxex!CViperThread::MainLoop+0x5b
> 05 0ca5ff84 7800a27b mtxex!CViperThreadMainProc+0x12
> 06 0ca5ffb8 77f04eeb MSVCRT!_beginthread+0xce
> 07 0ca5ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 45
> System Thread ID: 17a
> Kernel Time: 0:0:0.390
> User Time: 0:0:0.421
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
> # ChildEBP RetAddr
> 00 0fd3fdec 77e17f9c ntdll!NtReplyWaitReceivePort+0xb
> 01 0fd3ff90 77e17f3e RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
> 02 0fd3ff94 77e17b5c RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0fd3ffac 77e17c0f RPCRT4!BaseCachedThreadRoutine+0x22
> 04 0fd3ffb8 77f04eeb RPCRT4!ThreadStartRoutine+0x17
> 05 0fd3ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
> Closing open log file C:\iisstate\output\IISState-145.log
>
>
FAQ
Profile
Private Messages
Log in
