I think that you may have missed the issue. The thread that has used the
most CPU time is:
Thread ID: 38
System Thread ID: f5
Kernel Time: 0:0:21.421
User Time: 0:0:43.390 <--43 seconds since the thread was created
Thread Type: Other
# ChildEBP RetAddr
00 049dfe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
01 049dfeb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
02 049dff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
03 049dff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
04 049dff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
05 049dff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
WARNING: Stack unwind information not available. Following frames may be
wrong.
06 049dff90 77b3067a MSVCRT!beginthread+0xce
This is a thread that would handle ASP requests, but is currently idle.
Pat
"cschang" <cschang.RemoveThis@maxinter.net> wrote in message
news:402D9027.6000903@maxinter.net...
> Finally I got something out of the iisstate application when my web
> server had a very high inetinfo.exe and I run the iisstate against this
> PID. It generated a log file and a 700 MB plus dump file. But to
> interpretate the log file. The content is as following:
> Opened log file 'D:\iisstate\output\IISState-263.log'
>
> ***********************
> Starting new log output
> IISState version 3.3.1
>
> Fri Feb 13 18:35:19 2004
>
> OS = NT4
> Executable: inetinfo.exe
> PID = 263
>
> Note: Thread times are formatted as HH:MM:SS.ms
>
> ***********************
>
> Thread ID: 0
> System Thread ID: 13b
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0006fd44 77f0d2ca ntdll!NtReadFile+0xb
> 01 0006fdb0 77dd8a61 KERNEL32!ReadFile+0x1a6
> 02 0006fde4 77dd84ad ADVAPI32!ScGetPipeInput+0x28
> 03 0006fe48 77dd82ca ADVAPI32!ScDispatcherLoop+0x46
> 04 0006fe6c 0100182c ADVAPI32!StartServiceCtrlDispatcherA+0x82
> 05 0006fea4 010015d5 inetinfo!StartDispatchTable+0x61
> 06 0006ff70 01001e7f inetinfo!main+0x2a5
> 07 0006ffc0 77f1bbb5 inetinfo!mainCRTStartup+0xff
> 08 0006fff0 00000000 KERNEL32!BaseProcessStart+0x40
>
>
> Thread ID: 1
> System Thread ID: 10c
> Kernel Time: 0:0:0.78
> User Time: 0:0:0.31
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0085fe2c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 0085fe54 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0085fe64 683a18fe KERNEL32!WaitForSingleObject+0xf
> 03 0085fe80 0100175d iisadmin!ServiceEntry+0x11b
> 04 0085ffa8 77dd8c41 inetinfo!InetinfoStartService+0xfb
> 05 0085ffb8 77f04ef0 ADVAPI32!ScSvcctrlThreadA+0xe
> 06 0085ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
> Thread ID: 2
> System Thread ID: c8
> Kernel Time: 0:0:0.62
> User Time: 0:0:0.31
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00e4fd28 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00e4fd80 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 00e4fddc 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 00e4fdf8 6859907d USER32!MsgWaitForMultipleObjects+0x1d
> 04 00e4fe40 68c19b9f INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
> 05 00e4fe80 0100175d w3svc!ServiceEntry+0x105
> 06 00e4ffa8 77dd8c41 inetinfo!InetinfoStartService+0xfb
> 07 00e4ffb8 77f04ef0 ADVAPI32!ScSvcctrlThreadA+0xe
> 08 00e4ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
> Thread ID: 3
> System Thread ID: c9
> Kernel Time: 0:1:1.406
> User Time: 0:0:43.46
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00e8fe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00e8fef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 00e8ff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 00e8ff6c 68625cce USER32!MsgWaitForMultipleObjects+0x1d
> 04 00e8ffb8 77f04ef0 ISATQ!SchedulerThread+0x3c
> 05 00e8ffc4 00000000 KERNEL32!BaseThreadStart+0x51
>
> Thread ID: 4
> System Thread ID: 147
> Kernel Time: 0:1:1.281
> User Time: 0:0:44.593
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00ecfe9c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00ecfef4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 00ecff50 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 00ecff6c 68625cce USER32!MsgWaitForMultipleObjects+0x1d
> 04 00ecffb8 77f04ef0 ISATQ!SchedulerThread+0x3c
> 05 00ecffc4 00000000 KERNEL32!BaseThreadStart+0x51
>
>
> Thread ID: 5
> System Thread ID: cd
> Kernel Time: 0:0:3.265
> User Time: 0:0:1.796
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f0ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
> 01 00f0ff84 686248e5 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f0ffb8 77f04ef0 ISATQ!AtqPoolThread+0x3d
> 03 00f0ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
> Thread ID: 6
> System Thread ID: f6
> Kernel Time: 0:0:57.578
> User Time: 0:0:27.625
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 00f4ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
> 01 00f4ff84 686248e5 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 00f4ffb8 77f04ef0 ISATQ!AtqPoolThread+0x3d
> 03 00f4ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
> Thread ID: 7
> System Thread ID: c2
> Kernel Time: 0:0:0.531
> User Time: 0:0:0.437
> Thread Type: Other
> # ChildEBP RetAddr
> 00 00f8ff30 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 00f8ff88 685a78a7 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 00f8ffb8 77f04ef0 INFOCOMM!ChangeWaitThread+0xec
> 03 00f8ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 8
> System Thread ID: cf
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 00fcfdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
> 01 00fcff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
> 02 00fcff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 00fcffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
> 04 00fcffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
> 05 00fcffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 9
> System Thread ID: a3
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0104fd20 776689ce ntdll!NtWaitForSingleObject+0xb
> 01 0104fd78 77664a12 msafd!SockWaitForSingleObject+0x204
> 02 0104fea0 776ba274 msafd!WSPSelect+0x28e
> 03 0104fef0 74fa21e2 WS2_32!select+0xfc
> 04 0104ff2c 77e20fae RpcLtScm!COMMON_ServerReceiveAny+0x2b8
> 05 0104ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
> 06 0104ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
> 07 0104ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
> 08 0104ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
> 09 0104ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
> 0a 0104ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 10
> System Thread ID: 13c
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 011ffee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
> 01 011fff2c 77e20fae rpclts1!ServerReceiveAny+0x133
> 02 011fff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
> 03 011fff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
> 04 011fff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
> 05 011fffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
> 06 011fffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
> 07 011fffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 11
> System Thread ID: 141
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for MSVCRT.dll -
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0123fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0123fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0123ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0123ff40 68c2201f USER32!MsgWaitForMultipleObjects+0x1d
> 04 0123ff84 7800b9f5 w3svc!CMTACallbackThread::Thread+0x42
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 05 0123ffb8 77f04ef0 MSVCRT!beginthread+0xce
> 06 0123ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 12
> System Thread ID: 94
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0127fea8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0127ff00 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0127ff5c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0127ff78 68c1a171 USER32!MsgWaitForMultipleObjects+0x1d
> 04 0127ffb8 77f04ef0 w3svc!OleHackThread+0x34
> 05 0127ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 13
> System Thread ID: 13a
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 012bfca0 776689ce ntdll!NtWaitForSingleObject+0xb
> 01 012bfcf8 77664a12 msafd!SockWaitForSingleObject+0x204
> 02 012bfe20 776ba274 msafd!WSPSelect+0x28e
> 03 012bfe70 68563c07 WS2_32!select+0xfc
> 04 012bffb8 77f04ef0 inetsloc!SocketListenThread+0x51
> 05 012bffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 14
> System Thread ID: bd
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.15
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for SMTPSVC.dll -
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 013ffd34 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 013ffd8c 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 013ffde8 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 013ffe04 6859907d USER32!MsgWaitForMultipleObjects+0x1d
> 04 013ffe4c 678aed24 INFOCOMM!IIS_SERVICE::StartServiceOperation+0xd4
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 05 013ffe64 77f1408a SMTPSVC!ServiceEntry+0xd4
> 06 0015a990 50544d53 KERNEL32!GetProcAddress+0x5b
> 07 0015a990 50544d53 0x50544d53
> 08 0015a994 00435653 0x50544d53
> 09 50544d53 72006500 0x435653
> 0a 70004f00 00000000 0x72006500
>
>
>
>
> Thread ID: 15
> System Thread ID: be
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0143fdec 77e17f96 ntdll!NtReplyWaitReceivePort+0xb
> 01 0143ff90 77e17f38 RPCRT4!WMSG_ADDRESS::ReceiveLotsaCalls+0x5b
> 02 0143ff94 77e17b56 RPCRT4!RecvLotsaCallsWrapper+0x9
> 03 0143ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
> 04 0143ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
> 05 0143ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 16
> System Thread ID: b4
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Possible ASP page. Possible DCOM activity
> Executing Page: Unable to locate ASP page
>
> No remote call being made
>
> # ChildEBP RetAddr
> 00 0147fee8 77e013c4 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0147ff2c 77e20fae rpclts1!ServerReceiveAny+0x133
> 02 0147ff60 77e1da44 RPCRT4!TRANS_ADDRESS::TransReceive+0x7c
> 03 0147ff90 77e1f495 RPCRT4!OSF_ADDRESS::ReceiveLotsaCalls+0x1e
> 04 0147ff94 77e17b56 RPCRT4!ReceiveLotsaCallsWrapper+0x9
> 05 0147ffac 77e17c09 RPCRT4!BaseCachedThreadRoutine+0x22
> 06 0147ffb8 77f04ef0 RPCRT4!ThreadStartRoutine+0x17
> 07 0147ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 17
> System Thread ID: c0
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 014cff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 014cff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 014cff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 014cffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
>
>
>
>
> Thread ID: 18
> System Thread ID: c3
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0150ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0150ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0150ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 0150ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
>
>
>
>
> Thread ID: 19
> System Thread ID: c7
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0154ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0154ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0154ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 0154ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
>
>
>
>
> Thread ID: 20
> System Thread ID: 137
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0158ff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0158ff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0158ff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 0158ffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
>
>
>
>
> Thread ID: 21
> System Thread ID: 125
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 015cff10 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 015cff68 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 015cff84 678b9333 KERNEL32!WaitForMultipleObjects+0x16
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 015cffec 00000000 SMTPSVC!MIME_MAP::Print+0x4063
>
>
>
>
> Thread ID: 22
> System Thread ID: 116
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0160ff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 0160ff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0160ff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 0160ffb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
> 04 002748e0 00000770 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 23
> System Thread ID: 12a
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0164ff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 0164ff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0164ff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 0164ffb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
> 04 00274940 0000077c KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 24
> System Thread ID: f9
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0168ff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 0168ff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0168ff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 0168ffb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
> 04 002749e0 00000784 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 25
> System Thread ID: 146
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 016cff6c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 016cff94 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 016cffa4 678d5c44 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 016cffec 00000000 SMTPSVC!MIME_MAP::Print+0x20974
>
>
>
>
> Thread ID: 26
> System Thread ID: fa
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Status: Thread is in a WAIT state.
> Thread Type: SMTP Service Worker Thread
> # ChildEBP RetAddr
> 00 0174ff64 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 0174ff8c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 0174ff9c 678d0d07 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 0174ffb8 77f04ef0 SMTPSVC!MIME_MAP::Print+0x1ba37
> 04 00274b00 000007a4 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 27
> System Thread ID: c5
> Kernel Time: 0:0:0.15
> User Time: 0:0:0.62
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for MtxDm.dll -
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01c1ff58 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 01c1ff80 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 01c1ff90 69a21998 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 01c1ffb8 77f04ef0 MtxDm+0x1998
> 04 ffffffff 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 28
> System Thread ID: cb
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 01c8fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01c8fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 01c8ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 01c8ff40 680ca6a5 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01c8ff84 7800b9f5 asp!CMTACallbackThread::Thread+0x42
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 05 01c8ffb8 77f04ef0 MSVCRT!beginthread+0xce
> 06 01c8ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 29
> System Thread ID: 104
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: ASP
> Executing Page: Unable to locate ASP page
>
> # ChildEBP RetAddr
> 00 01d0fe70 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01d0fec8 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 01d0ff24 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 01d0ff40 680bf014 USER32!MsgWaitForMultipleObjects+0x1d
> 04 01d0ff84 7800b9f5 asp!Debugger+0x74
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 05 01d0ffb8 77f04ef0 MSVCRT!beginthread+0xce
> 06 01d0ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 30
> System Thread ID: a0
> Kernel Time: 0:0:0.31
> User Time: 0:0:0.46
> *** WARNING: Unable to verify checksum for PDM.DLL
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for PDM.DLL -
> Thread Type: PDM (Debugger) Thread.
> # ChildEBP RetAddr
> 00 01dafdd8 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01dafe30 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 01dafe8c 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 01dafea8 4a00888c USER32!MsgWaitForMultipleObjects+0x1d
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 04 77e7ae75 0110247c PDM+0x888c
> 05 83ec8b55 00000000 0x110247c
>
>
>
>
> Thread ID: 31
> System Thread ID: 115
> Kernel Time: 0:0:15.906
> User Time: 0:0:34.484
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0217fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0217feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0217ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0217ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0217ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0217ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0217ff90 77b3067a MSVCRT!beginthread+0xce
> 07 0217ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0217ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 32
> System Thread ID: 3e
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: Other
> # ChildEBP RetAddr
> 00 025ffefc 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 025fff54 77f1cf41 KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 025fff70 65352a46 KERNEL32!WaitForMultipleObjects+0x16
> 03 025fffb8 77f04ef0 OLEAUT32!RegistryWatchThread+0x86
> 04 025fffc4 77f3fcb0 KERNEL32!BaseThreadStart+0x51
> 05 77f4177f 416d6f74 KERNEL32!_NULL_IMPORT_DESCRIPTOR+0x1b30
> WARNING: Frame IP not in any known module. Following frames may be wrong.
> 06 41646441 00000000 0x416d6f74
>
>
>
>
> Thread ID: 33
> System Thread ID: 132
> Kernel Time: 0:0:0.109
> User Time: 0:0:0.515
> *** ERROR: Symbol file could not be found. Defaulted to export symbols
> for oledb32.dll -
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02c8ff5c 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 02c8ff84 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 02c8ff94 1f8bc562 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 02c8ffb8 77f04ef0 oledb32!DllGetClassObject+0x60a8
> 04 02c8ffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 34
> System Thread ID: e5
> Kernel Time: 0:0:0.140
> User Time: 0:0:0.171
> Thread Status: Thread is in a WAIT state.
> Thread Type: Other
> # ChildEBP RetAddr
> 00 02ccff54 77f1ce6b ntdll!NtWaitForSingleObject+0xb
> 01 02ccff7c 77f04f49 KERNEL32!WaitForSingleObjectEx+0x73
> 02 02ccff8c 1f8bc554 KERNEL32!WaitForSingleObject+0xf
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 03 02ccffb8 77f04ef0 oledb32!DllGetClassObject+0x609a
> 04 02ccffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 35
> System Thread ID: a6
> Kernel Time: 0:0:9.156
> User Time: 0:0:12.875
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0320fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0320feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0320ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0320ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0320ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0320ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0320ff90 77b3067a MSVCRT!beginthread+0xce
> 07 0320ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0320ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 36
> System Thread ID: 117
> Kernel Time: 0:0:10.218
> User Time: 0:0:39.343
> Thread Type: Other
> # ChildEBP RetAddr
> 00 047cfe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 047cfeb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 047cff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 047cff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 047cff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 047cff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 047cff90 77b3067a MSVCRT!beginthread+0xce
> 07 047cffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 047cffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 37
> System Thread ID: e3
> Kernel Time: 0:0:9.984
> User Time: 0:0:13.781
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0097fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0097feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0097ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0097ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0097ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0097ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0097ff90 77b3067a MSVCRT!beginthread+0xce
> 07 0097ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0097ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 38
> System Thread ID: f5
> Kernel Time: 0:0:21.421
> User Time: 0:0:43.390
> Thread Type: Other
> # ChildEBP RetAddr
> 00 049dfe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 049dfeb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 049dff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 049dff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 049dff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 049dff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 049dff90 77b3067a MSVCRT!beginthread+0xce
> 07 049dffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 049dffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 39
> System Thread ID: 113
> Kernel Time: 0:0:13.953
> User Time: 0:0:10.218
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0cedfe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0cedfeb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0cedff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0cedff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0cedff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0cedff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0cedff90 77b3067a MSVCRT!beginthread+0xce
> 07 0cedffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0cedffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 40
> System Thread ID: 123
> Kernel Time: 0:0:4.93
> User Time: 0:0:16.437
> Thread Type: Other
> # ChildEBP RetAddr
> 00 051cfec4 77e7ad7e USER32!ZwUserGetInputEvent+0xb
> 01 051cff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x58
> 02 051cff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 03 051cff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 04 051cff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 05 051cff90 77b3067a MSVCRT!beginthread+0xce
> 06 051cffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 07 051cffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 41
> System Thread ID: 142
> Kernel Time: 0:0:1.296
> User Time: 0:0:4.828
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0cd7fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0cd7feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0cd7ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0cd7ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0cd7ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0cd7ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0cd7ff90 77b3067a MSVCRT!beginthread+0xce
> 07 0cd7ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0cd7ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 42
> System Thread ID: 31
> Kernel Time: 0:0:22.156
> User Time: 0:0:42.906
> Thread Type: Other
> # ChildEBP RetAddr
> 00 1004fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 1004feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 1004ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 1004ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 1004ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 1004ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 1004ff90 77b3067a MSVCRT!beginthread+0xce
> 07 1004ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 1004ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 43
> System Thread ID: 106
> Kernel Time: 0:0:42.484
> User Time: 0:2:2.406
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0bb4fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0bb4feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0bb4ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0bb4ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0bb4ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0bb4ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0bb4ff90 77b3067a MSVCRT!beginthread+0xce
> 07 0bb4ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0bb4ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 44
> System Thread ID: 14e
> Kernel Time: 0:0:4.484
> User Time: 0:0:1.281
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0bbcfe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0bbcfeb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0bbcff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0bbcff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0bbcff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0bbcff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0bbcff90 77b3067a MSVCRT!beginthread+0xce
> 07 0bbcffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0bbcffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 45
> System Thread ID: 11c
> Kernel Time: 0:0:7.109
> User Time: 0:0:3.156
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
> 00 021bff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb
> 01 021bff84 686248e5 KERNEL32!GetQueuedCompletionStatus+0x27
> 02 021bffb8 77f04ef0 ISATQ!AtqPoolThread+0x3d
> 03 021bffec 00000000 KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 46
> System Thread ID: 12b
> Kernel Time: 0:0:43.62
> User Time: 0:1:33.187
> Thread Type: Other
> # ChildEBP RetAddr
> 00 053dfe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 053dfeb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 053dff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 053dff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 053dff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 053dff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 053dff90 77b3067a MSVCRT!beginthread+0xce
> 07 053dffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 053dffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 47
> System Thread ID: 14d
> Kernel Time: 0:0:0.921
> User Time: 0:0:0.281
> Thread Type: Other
> # ChildEBP RetAddr
> 00 054dfec4 77e7ad7e USER32!ZwUserGetInputEvent+0xb
> 01 054dff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x58
> 02 054dff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 03 054dff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 04 054dff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 05 054dff90 77b3067a MSVCRT!beginthread+0xce
> 06 054dffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 07 054dffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 48
> System Thread ID: 59
> Kernel Time: 0:0:5.203
> User Time: 0:0:16.265
> Thread Type: Other
> # ChildEBP RetAddr
> 00 01d4fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 01d4feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 01d4ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 01d4ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 01d4ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 01d4ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 01d4ff90 77b3067a MSVCRT!beginthread+0xce
> 07 01d4ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 01d4ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 49
> System Thread ID: 119
> Kernel Time: 0:0:7.187
> User Time: 0:0:24.656
> Thread Type: Other
> # ChildEBP RetAddr
> 00 0335fe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 0335feb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 0335ff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 0335ff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 0335ff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 0335ff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 0335ff90 77b3067a MSVCRT!beginthread+0xce
> 07 0335ffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 0335ffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 50
> System Thread ID: 10b
> Kernel Time: 0:0:0.968
> User Time: 0:0:0.234
> Thread Type: Other
> # ChildEBP RetAddr
> 00 033dfe5c 77f1d034 ntdll!ZwWaitForMultipleObjects+0xb
> 01 033dfeb4 77e7ae4d KERNEL32!WaitForMultipleObjectsEx+0xef
> 02 033dff10 77e7ae92 USER32!MsgWaitForMultipleObjectsEx+0x127
> 03 033dff2c 697f1dbe USER32!MsgWaitForMultipleObjects+0x1d
> 04 033dff78 697f22d2 mtxex!CViperThread::MainLoop+0x60
> 05 033dff84 7800b9f5 mtxex!CViperThreadMainProc+0x12
> WARNING: Stack unwind information not available. Following frames may be
> wrong.
> 06 033dff90 77b3067a MSVCRT!beginthread+0xce
> 07 033dffb8 77f04ef0 ole32!WriteObjRef+0x5f
> 08 033dffcc 77b3067a KERNEL32!BaseThreadStart+0x51
>
>
>
>
> Thread ID: 51
> System Thread ID: e9
> Kernel Time: 0:0:0.0
> User Time: 0:0:0.0
> Thread Type: HTTP Listener
> # ChildEBP RetAddr
<font color=purple> > 00 3f25ff54 77f0c2da ntdll!NtRemoveIoCompletion+0xb</<!-- ~MESSAGE_AFTER~ -->
FAQ
Profile
Private Messages
Log in
