IIS - w3wp.exe error ( iis crash)

Asked By nnf

13-Jan-09 06:05 AM

Hello,
We are facing problems with the IIS. it is crashing randomly.

In title its says as notification window w3wp.exe - Application error.

The instruction at '0x22171304' referenced memory at '0x22171304'.The
memory
could not be written.

We have installen iistate, and here is de log, but we dont know really
how to interpret it.
Please any help is aprecciated! we have de problem in a production
site!

Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Wed Jan 07 12:41:14 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  4788

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed: ntdll!RtlAllocateHeap




Thread ID: 5
System Thread ID: 19bc
Kernel Time: 0:0:0.421
User Time: 0:0:0.406
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\IISUTIL.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\w3core.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\w3dt.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\W3TP.dll -
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d9f0e8 77e4bc14 ntdll!RtlAllocateHeap+0xfa
01 00d9f134 6497ee67 kernel32!LocalAlloc+0x52
02 00d9f14c 6497eea9 IISUTIL!BUFFER::ReallocStorage+0x24
03 00d9f158 6497f159 IISUTIL!BUFFER::ReallocStorage+0x66
04 00d9f170 6497f094 IISUTIL!STRU::AuxAppend+0x8a
05 00d9f188 5a4db1ba IISUTIL!STRU::Copy+0x1b
06 00d9f19c 5a4db159 w3core+0xb1ba
07 00d9f1b4 5a4db0a0 w3core+0xb159
08 00d9f1d8 5a4dafe3 w3core+0xb0a0
09 00d9f51c 5a4d926b w3core+0xafe3
0a 00d9fec0 5a4d9183 w3core+0x926b
0b 00d9feec 5a4d2264 w3core+0x9183
0c 00d9ff10 5a4d65ea w3core+0x2264
0d 00d9ff2c 5a4a169f w3core+0x65ea
0e 00d9ff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
0f 00d9ff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
10 00d9ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
11 00d9ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
12 00d9ffb8 77e4608b W3TP+0x1db9
13 00d9ffec 00000000 kernel32!GetModuleFileNameA+0xeb
Closing open log file C:\iisstate\output\IISState.log
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Wed Jan 07 12:42:59 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  4788

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 18e8
Kernel Time: 0:0:0.15
User Time: 0:0:0.62
*** ERROR: Module load completed but symbols could not be loaded for c:
\windows\system32\inetsrv\w3wp.exe
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0006fc7c 77e4ba42 ntdll!KiFastSystemCallRet
01 0006fc90 5a4a467a kernel32!WaitForSingleObject+0x12
02 0006ff0c 0100187c w3dt!IPM_MESSAGE_PIPE::operator=+0x1b31
03 0006ff44 01001a23 w3wp+0x187c
04 0006ffc0 77e323e5 w3wp+0x1a23
05 0006fff0 00000000 kernel32!IsProcessorFeaturePresent+0x9e




Thread ID: 1
System Thread ID: 1a44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00a3ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00a3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 2
System Thread ID: 11b0
Kernel Time: 0:0:0.562
User Time: 0:0:0.375
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00cdf6e4 5a4f512b IISUTIL!uudecode+0xaa
01 00cdfa00 5a4d770a w3core!W3_FILE_INFO_CACHE::GetFileCache+0xa768
02 00cdfeec 5a4d2264 w3core+0x770a
03 00cdff10 5a4d65ea w3core+0x2264
04 00cdff2c 5a4a169f w3core+0x65ea
05 00cdff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
06 00cdff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
07 00cdff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
08 00cdffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
09 00cdffb8 77e4608b W3TP+0x1db9
0a 00cdffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 3
System Thread ID: 1bd8
Kernel Time: 0:0:0.343
User Time: 0:0:0.234
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d1ff54 5a44249e ntdll!KiFastSystemCallRet
01 00d1ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0x89
02 00d1ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
03 00d1ffb8 77e4608b W3TP+0x1db9
04 00d1ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 4
System Thread ID: 1d94
Kernel Time: 0:0:0.546
User Time: 0:0:0.421
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d5ff10 5a4a2501 kernel32!LocalAlloc+0xc
01 00d5ff38 5a4a195b w3dt!UlAtqWaitForDisconnect+0x5aa
02 00d5ff48 5a4a16ca w3dt!UlAtqSetContextProperty+0x1f
03 00d5ff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
04 00d5ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
05 00d5ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
06 00d5ffb8 77e4608b W3TP+0x1db9
07 00d5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 5
System Thread ID: 19bc
Kernel Time: 0:0:0.421
User Time: 0:0:0.406
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d9f0e8 77e4bc14 ntdll!RtlAllocateHeap+0xfa
01 00d9f134 6497ee67 kernel32!LocalAlloc+0x52
02 00d9f14c 6497eea9 IISUTIL!BUFFER::ReallocStorage+0x24
03 00d9f158 6497f159 IISUTIL!BUFFER::ReallocStorage+0x66
04 00d9f170 6497f094 IISUTIL!STRU::AuxAppend+0x8a
05 00d9f188 5a4db1ba IISUTIL!STRU::Copy+0x1b
06 00d9f19c 5a4db159 w3core+0xb1ba
07 00d9f1b4 5a4db0a0 w3core+0xb159
08 00d9f1d8 5a4dafe3 w3core+0xb0a0
09 00d9f51c 5a4d926b w3core+0xafe3
0a 00d9fec0 5a4d9183 w3core+0x926b
0b 00d9feec 5a4d2264 w3core+0x9183
0c 00d9ff10 5a4d65ea w3core+0x2264
0d 00d9ff2c 5a4a169f w3core+0x65ea
0e 00d9ff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
0f 00d9ff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
10 00d9ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
11 00d9ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
12 00d9ffb8 77e4608b W3TP+0x1db9
13 00d9ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 6
System Thread ID: 1234
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00e5ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00e5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 7
System Thread ID: 18d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0184faf8 77e4ba42 ntdll!KiFastSystemCallRet
01 0184fb0c 5a4f8147 kernel32!WaitForSingleObject+0x12
02 0184ffb8 77e4608b w3core!W3_FILE_INFO_CACHE::GetFileCache+0xd784
03 0184ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 8
System Thread ID: 1df0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\RPCRT4.dll -
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0188ff84 77c2778f ntdll!KiFastSystemCallRet
01 0188ff8c 77c2f7dd RPCRT4!NdrOleFree+0x3c5
02 0188ffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x188
03 0188ffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 0188ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 9
System Thread ID: af4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 018cffb8 77e4608b ntdll!KiFastSystemCallRet
01 018cffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 10
System Thread ID: 1638
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
-
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01a8febc 77e224c1 ntdll!KiFastSystemCallRet
01 01a8fecc 791bf4f9 kernel32!Sleep+0xf
02 01a8ffb8 77e4608b mscorsvr!Ordinal76+0xf4f9
03 01a8ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 11
System Thread ID: 74c
Kernel Time: 0:0:1.937
User Time: 0:0:14.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01acfe6c 77e4ba42 ntdll!KiFastSystemCallRet
01 01acfe80 791d401f kernel32!WaitForSingleObject+0x12
02 01acfea4 791fdacc mscorsvr!GetCompileInfo+0x1512
03 01acffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x151b3
04 01acffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 12
System Thread ID: 1b8c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01bfff1c 77e4109d ntdll!KiFastSystemCallRet
01 01bfff38 79238fd6 kernel32!WaitForMultipleObjects+0x18
02 01bfffa0 79238f4d mscorsvr!CoInitializeCor+0x43ad
03 01bfffb8 77e4608b mscorsvr!CoInitializeCor+0x4324
04 01bfffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 13
System Thread ID: b08
Kernel Time: 0:0:0.46
User Time: 0:0:6.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01e8ff70 77e4ba42 ntdll!KiFastSystemCallRet
01 01e8ff84 791fe6b0 kernel32!WaitForSingleObject+0x12
02 01e8ffac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
03 01e8ffb8 77e4608b mscorsvr!CoInitializeCor+0xa96
04 01e8ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 14
System Thread ID: 1098
Kernel Time: 0:0:0.15
User Time: 0:0:7.46
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01ecfe70 77e4ba42 ntdll!KiFastSystemCallRet
01 01ecfe84 791fe6b0 kernel32!WaitForSingleObject+0x12
02 01ecfeac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
03 01ecffb8 77e4608b mscorsvr!CoInitializeCor+0xa96
04 01ecffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 15
System Thread ID: 1f50
Kernel Time: 0:0:0.15
User Time: 0:0:7.375
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f0fd70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f0fd84 791fe6b0 kernel32!WaitForSingleObject+0x12
02 01f0fdac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
03 01f0ffb8 77e4608b mscorsvr!CoInitializeCor+0xa96
04 01f0ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 16
System Thread ID: 1c14
Kernel Time: 0:0:0.46
User Time: 0:0:6.671
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f4fc70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f4fc84 791fe6b0 kernel32!WaitForSingleObject+0x12
02 01f4fcac 792356bf mscorsvr!GetAssemblyMDImport+0x15d97
03 01f4ffb8 77e4608b mscorsvr!CoInitializeCor+0xa96
04 01f4ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 17
System Thread ID: 158c
Kernel Time: 0:0:0.62
User Time: 0:0:0.484
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f8fea4 77e4109d ntdll!KiFastSystemCallRet
01 01f8fec0 7927826b kernel32!WaitForMultipleObjects+0x18
02 01f8fee0 791fecf4 mscorsvr!CoEEShutDownCOM+0x2516a
03 01f8ff24 79245681 mscorsvr!GetAssemblyMDImport+0x163db
04 01f8ffb8 77e4608b mscorsvr!CoUninitializeEE+0xa13e
05 01f8ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 18
System Thread ID: cec
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 021dffa4 791cc578 ntdll!KiFastSystemCallRet
01 021dffec 00000000 mscorsvr!Ordinal76+0x1c578




Thread ID: 19
System Thread ID: 1730
Kernel Time: 0:0:2.125
User Time: 0:0:13.828
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 029bfd6c 77e4ba42 ntdll!KiFastSystemCallRet
01 029bfd80 791d401f kernel32!WaitForSingleObject+0x12
02 029bfda4 791fdacc mscorsvr!GetCompileInfo+0x1512
03 029bffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x151b3
04 029bffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 20
System Thread ID: 1050
Kernel Time: 0:0:1.921
User Time: 0:0:13.609
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02ddfc6c 77e4ba42 ntdll!KiFastSystemCallRet
01 02ddfc80 791d401f kernel32!WaitForSingleObject+0x12
02 02ddfca4 791fdacc mscorsvr!GetCompileInfo+0x1512
03 02ddffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x151b3
04 02ddffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 21
System Thread ID: 122c
Kernel Time: 0:0:0.15
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02ebff90 79249f45 ntdll!KiFastSystemCallRet
01 02ebffb8 77e4608b mscorsvr!GetMetaDataPublicInterfaceFromInternal
+0x33e5
02 02ebffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 22
System Thread ID: 1534
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for \\?\c:\windows\system32\inetsrv\httpext.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03b6ff60 673b977e ntdll!KiFastSystemCallRet
01 03b6ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 03b6ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 03b6ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 23
System Thread ID: 10c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03baff60 673b977e ntdll!KiFastSystemCallRet
01 03baff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 03baffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 03baffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 24
System Thread ID: 1770
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03beff60 673b977e ntdll!KiFastSystemCallRet
01 03beff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 03beffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 03beffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 25
System Thread ID: 1724
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03c2ff60 673b977e ntdll!KiFastSystemCallRet
01 03c2ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 03c2ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 03c2ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 26
System Thread ID: 15c8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03c6ff60 673b977e ntdll!KiFastSystemCallRet
01 03c6ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 03c6ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 03c6ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 27
System Thread ID: 994
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02feff8c 77c2f824 ntdll!KiFastSystemCallRet
01 02feffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x1cf
02 02feffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
03 02feffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 28
System Thread ID: 1d04
Kernel Time: 0:0:1.515
User Time: 0:0:12.703
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03abf86c 77e4ba42 ntdll!KiFastSystemCallRet
01 03abf880 791d401f kernel32!WaitForSingleObject+0x12
02 03abf8a4 791fdacc mscorsvr!GetCompileInfo+0x1512
03 03abffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x151b3
04 03abffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 29
System Thread ID: 1d04
Kernel Time: 0:0:1.515
User Time: 0:0:12.703
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03abf86c 77e4ba42 ntdll!KiFastSystemCallRet
01 03abf880 791d401f kernel32!WaitForSingleObject+0x12
02 03abf8a4 791fdacc mscorsvr!GetCompileInfo+0x1512
03 03abffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x151b3
04 03abffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 30
System Thread ID: 1540
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0442ef70 791fdb22 ntdll!KiFastSystemCallRet
01 0442efa4 791fdacc mscorsvr!GetAssemblyMDImport+0x15209
02 0442ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x151b3
03 0442ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 31
System Thread ID: 1540
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0442ef70 791fdb22 ntdll!KiFastSystemCallRet
01 0442efa4 791fdacc mscorsvr!GetAssemblyMDImport+0x15209
02 0442ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x151b3
03 0442ffec 00000000 kernel32!GetModuleFileNameA+0xeb

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\4788-1231332284.dmp - user full dump
Dump successfully written

*****

Closing open log file C:\iisstate\output\IISState.log
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Thu Jan 08 09:46:17 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  6720

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed: ntdll!RtlAllocateHeap




Thread ID: 6
System Thread ID: 1964
Kernel Time: 0:0:0.500
User Time: 0:0:0.171
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\IISUTIL.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\w3core.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\w3dt.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\W3TP.dll -
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00cdf634 77e4bc14 ntdll!RtlAllocateHeap+0xfa
01 00cdf680 6499452f kernel32!LocalAlloc+0x52
02 00cdf698 649945b8 IISUTIL!CHUNK_BUFFER::AddNewBlock+0x23
03 00cdf6ac 5a4e3ffe IISUTIL!CHUNK_BUFFER::AllocateSpace+0x3f
04 00cdfbac 5a504dbf w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x7fca
05 00cdfbcc 5a5053f8 w3core!UlW3Start+0x8dd4
06 00cdfe78 5a4d6764 w3core!UlW3Start+0x940d
07 00cdfe98 5a4d66f4 w3core+0x6764
08 00cdfea8 5a4d66ae w3core+0x66f4
09 00cdfec4 5a4d6648 w3core+0x66ae
0a 00cdfeec 5a4d2264 w3core+0x6648
0b 00cdff10 5a4d65ea w3core+0x2264
0c 00cdff2c 5a4a169f w3core+0x65ea
0d 00cdff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
0e 00cdff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
0f 00cdff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
10 00cdffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
11 00cdffb8 77e4608b W3TP+0x1db9
12 00cdffec 00000000 kernel32!GetModuleFileNameA+0xeb
Closing open log file C:\iisstate\output\IISState.log
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Thu Jan 08 09:48:02 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  6720

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 1da0
Kernel Time: 0:0:0.31
User Time: 0:0:0.46
*** ERROR: Module load completed but symbols could not be loaded for c:
\windows\system32\inetsrv\w3wp.exe
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0006fc7c 77e4ba42 ntdll!KiFastSystemCallRet
01 0006fc90 5a4a467a kernel32!WaitForSingleObject+0x12
02 0006ff0c 0100187c w3dt!IPM_MESSAGE_PIPE::operator=+0x1b31
03 0006ff44 01001a23 w3wp+0x187c
04 0006ffc0 77e323e5 w3wp+0x1a23
05 0006fff0 00000000 kernel32!IsProcessorFeaturePresent+0x9e




Thread ID: 1
System Thread ID: 19d0
Kernel Time: 0:0:0.828
User Time: 0:0:6.843
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
-
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 03d3f56c 77e4ba42 ntdll!KiFastSystemCallRet
01 03d3f580 791d6134 kernel32!WaitForSingleObject+0x12
02 03d3f5a4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 03d3ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 03d3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 2
System Thread ID: 904
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00a3ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00a3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 3
System Thread ID: 1ed4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01c3fd70 791fe9b2 ntdll!KiFastSystemCallRet
01 01c3fda4 791fe95c mscorsvr!GetAssemblyMDImport+0x1976f
02 01c3ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
03 01c3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 4
System Thread ID: 1d9c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\RPCRT4.dll -
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00adff84 77c2778c ntdll!KiFastSystemCallRet
01 00adff8c 77c2f7e3 RPCRT4!NdrOleFree+0x3c5
02 00adffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x186
03 00adffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 00adffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 5
System Thread ID: 1d9c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00adff84 77c2778c ntdll!KiFastSystemCallRet
01 00adff8c 77c2f7e3 RPCRT4!NdrOleFree+0x3c5
02 00adffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x186
03 00adffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 00adffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 6
System Thread ID: 1964
Kernel Time: 0:0:0.500
User Time: 0:0:0.171
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00cdf634 77e4bc14 ntdll!RtlAllocateHeap+0xfa
01 00cdf680 6499452f kernel32!LocalAlloc+0x52
02 00cdf698 649945b8 IISUTIL!CHUNK_BUFFER::AddNewBlock+0x23
03 00cdf6ac 5a4e3ffe IISUTIL!CHUNK_BUFFER::AllocateSpace+0x3f
04 00cdfbac 5a504dbf w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x7fca
05 00cdfbcc 5a5053f8 w3core!UlW3Start+0x8dd4
06 00cdfe78 5a4d6764 w3core!UlW3Start+0x940d
07 00cdfe98 5a4d66f4 w3core+0x6764
08 00cdfea8 5a4d66ae w3core+0x66f4
09 00cdfec4 5a4d6648 w3core+0x66ae
0a 00cdfeec 5a4d2264 w3core+0x6648
0b 00cdff10 5a4d65ea w3core+0x2264
0c 00cdff2c 5a4a169f w3core+0x65ea
0d 00cdff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
0e 00cdff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
0f 00cdff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
10 00cdffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
11 00cdffb8 77e4608b W3TP+0x1db9
12 00cdffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 7
System Thread ID: 17c4
Kernel Time: 0:0:0.187
User Time: 0:0:0.125
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d1ff54 5a44249e ntdll!KiFastSystemCallRet
01 00d1ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0x89
02 00d1ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
03 00d1ffb8 77e4608b W3TP+0x1db9
04 00d1ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 8
System Thread ID: 1d28
Kernel Time: 0:0:0.78
User Time: 0:0:0.140
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\Secur32.dll -
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d5f4c4 76f06ead ntdll!KiFastSystemCallRet
01 00d5f5f0 76f06ba8 Secur32!AcceptSecurityContext+0x4ff
02 00d5f680 76f06a30 Secur32!AcceptSecurityContext+0x1fa
03 00d5f6d0 5a4f52b2 Secur32!AcceptSecurityContext+0x82
04 00d5fa00 5a4d770a w3core!W3_FILE_INFO_CACHE::GetFileCache+0xa8ef
05 00d5feec 5a4d2264 w3core+0x770a
06 00d5ff10 5a4d65ea w3core+0x2264
07 00d5ff2c 5a4a169f w3core+0x65ea
08 00d5ff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
09 00d5ff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
0a 00d5ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
0b 00d5ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
0c 00d5ffb8 77e4608b W3TP+0x1db9
0d 00d5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 9
System Thread ID: 15fc
Kernel Time: 0:0:0.78
User Time: 0:0:0.109
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d9f4c4 76f06ead ntdll!KiFastSystemCallRet
01 00d9f5f0 76f06ba8 Secur32!AcceptSecurityContext+0x4ff
02 00d9f680 76f06a30 Secur32!AcceptSecurityContext+0x1fa
03 00d9f6d0 5a4f52b2 Secur32!AcceptSecurityContext+0x82
04 00d9fa00 5a4d770a w3core!W3_FILE_INFO_CACHE::GetFileCache+0xa8ef
05 00d9feec 5a4d2264 w3core+0x770a
06 00d9ff10 5a4d65ea w3core+0x2264
07 00d9ff2c 5a4a169f w3core+0x65ea
08 00d9ff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
09 00d9ff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
0a 00d9ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
0b 00d9ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
0c 00d9ffb8 77e4608b W3TP+0x1db9
0d 00d9ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 10
System Thread ID: 1d44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00e5ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00e5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 11
System Thread ID: 714
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0184faf8 77e4ba42 ntdll!KiFastSystemCallRet
01 0184fb0c 5a4f8147 kernel32!WaitForSingleObject+0x12
02 0184ffb8 77e4608b w3core!W3_FILE_INFO_CACHE::GetFileCache+0xd784
03 0184ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 12
System Thread ID: 1004
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0188ff84 77c2778c ntdll!KiFastSystemCallRet
01 0188ff8c 77c2f7e3 RPCRT4!NdrOleFree+0x3c5
02 0188ffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x186
03 0188ffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 0188ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 13
System Thread ID: 10c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 018cffb8 77e4608b ntdll!KiFastSystemCallRet
01 018cffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 14
System Thread ID: 35c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01a7febc 77e224c1 ntdll!KiFastSystemCallRet
01 01a7fecc 791bc166 kernel32!Sleep+0xf
02 01a7ffb8 77e4608b mscorsvr!Ordinal74+0xc166
03 01a7ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 15
System Thread ID: 1af4
Kernel Time: 0:0:1.0
User Time: 0:0:11.421
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01abfe6c 77e4ba42 ntdll!KiFastSystemCallRet
01 01abfe80 791d6134 kernel32!WaitForSingleObject+0x12
02 01abfea4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 01abffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 01abffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 16
System Thread ID: 1a6c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01bfff1c 77e4109d ntdll!KiFastSystemCallRet
01 01bfff38 7922fce6 kernel32!WaitForMultipleObjects+0x18
02 01bfffa0 7922fc5d mscorsvr!CoInitializeCor+0x8a32
03 01bfffb8 77e4608b mscorsvr!CoInitializeCor+0x89a9
04 01bfffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 17
System Thread ID: 14ec
Kernel Time: 0:0:0.46
User Time: 0:0:3.203
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01e8ff70 77e4ba42 ntdll!KiFastSystemCallRet
01 01e8ff84 7920369d kernel32!WaitForSingleObject+0x12
02 01e8ffac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01e8ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01e8ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 18
System Thread ID: 1c1c
Kernel Time: 0:0:0.62
User Time: 0:0:2.859
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01ecfe70 77e4ba42 ntdll!KiFastSystemCallRet
01 01ecfe84 7920369d kernel32!WaitForSingleObject+0x12
02 01ecfeac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01ecffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01ecffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 19
System Thread ID: 1060
Kernel Time: 0:0:0.31
User Time: 0:0:2.906
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f0fd70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f0fd84 7920369d kernel32!WaitForSingleObject+0x12
02 01f0fdac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01f0ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01f0ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 20
System Thread ID: 1714
Kernel Time: 0:0:0.15
User Time: 0:0:2.828
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f4fc70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f4fc84 7920369d kernel32!WaitForSingleObject+0x12
02 01f4fcac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01f4ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01f4ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 21
System Thread ID: 1e64
Kernel Time: 0:0:0.0
User Time: 0:0:0.203
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f8fea4 77e4109d ntdll!KiFastSystemCallRet
01 01f8fec0 7926ed87 kernel32!WaitForMultipleObjects+0x18
02 01f8fee0 792034b2 mscorsvr!CoEEShutDownCOM+0x2348a
03 01f8ff24 7922ec3f mscorsvr!GetAssemblyMDImport+0x1e26f
04 01f8ffb8 77e4608b mscorsvr!CoInitializeCor+0x798b
05 01f8ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 22
System Thread ID: 4c4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 023affac 791cfb1a ntdll!KiFastSystemCallRet
01 023affec 00000000 mscorsvr!Ordinal74+0x1fb1a




Thread ID: 23
System Thread ID: 1d4c
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0295ff90 79248c93 ntdll!KiFastSystemCallRet
01 0295ffb8 77e4608b mscorsvr!GetMetaDataPublicInterfaceFromInternal
+0x1734
02 0295ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 24
System Thread ID: 1c38
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\USER32.dll -
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Thu Jan 08 12:45:59 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  5236

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed:




Thread ID: 29
System Thread ID: 1a64
Kernel Time: 0:0:0.46
User Time: 0:0:0.140
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Thu Jan 08 16:16:07 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  7184

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed: ntdll!RtlAllocateHeap




Thread ID: 47
System Thread ID: 1d7c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\IISUTIL.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\w3core.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\w3dt.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\W3TP.dll -
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 069abf18 77e4bc14 ntdll!RtlAllocateHeap+0xfa
01 069abf64 6497ee67 kernel32!LocalAlloc+0x52
02 069abf7c 6497eea9 IISUTIL!BUFFER::ReallocStorage+0x24
03 069abf88 6497f159 IISUTIL!BUFFER::ReallocStorage+0x66
04 069abfa0 6497f03b IISUTIL!STRU::AuxAppend+0x8a
05 069abfbc 5a4dd14e IISUTIL!STRU::Copy+0x29
06 069ac1ec 5a4dd550 w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x111a
07 069ac224 5a4de00d w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x151c
08 069af014 5a4dec3e w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x1fd9
09 069af030 5a4deb9d w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x2c0a
0a 069af1b0 5a4db062 w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x2b69
0b 069af1d8 5a4dafe3 w3core+0xb062
0c 069af51c 5a4d926b w3core+0xafe3
0d 069afec0 5a4d9183 w3core+0x926b
0e 069afeec 5a4d2264 w3core+0x9183
0f 069aff10 5a4d65ea w3core+0x2264
10 069aff2c 5a4a169f w3core+0x65ea
11 069aff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
12 069aff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
13 069aff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
14 069affa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
15 069affb8 77e4608b W3TP+0x1db9
16 069affec 00000000 kernel32!GetModuleFileNameA+0xeb
Closing open log file C:\iisstate\output\IISState.log
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Thu Jan 08 16:17:53 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  7184

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 1760
Kernel Time: 0:0:0.46
User Time: 0:0:0.15
*** ERROR: Module load completed but symbols could not be loaded for c:
\windows\system32\inetsrv\w3wp.exe
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0006fc7c 77e4ba42 ntdll!KiFastSystemCallRet
01 0006fc90 5a4a467a kernel32!WaitForSingleObject+0x12
02 0006ff0c 0100187c w3dt!IPM_MESSAGE_PIPE::operator=+0x1b31
03 0006ff44 01001a23 w3wp+0x187c
04 0006ffc0 77e323e5 w3wp+0x1a23
05 0006fff0 00000000 kernel32!IsProcessorFeaturePresent+0x9e




Thread ID: 1
System Thread ID: 107c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\USER32.dll -
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\WinSxS
\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.3790.3126_x-
ww_7E5E4116\gdiplus.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0a7afef4 77f4cd08 ntdll!KiFastSystemCallRet
01 0a7aff50 77f3e381 USER32!PeekMessageW+0x244
02 0a7aff6c 4de868ab USER32!MsgWaitForMultipleObjects+0x1f
03 0a7affb8 77e4608b gdiplus+0x68ab
04 0a7affec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 2
System Thread ID: 1428
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00a3f754 77e42e6a ntdll!KiFastSystemCallRet
01 00a3fb9c 77e36152 kernel32!CreateRemoteThread+0x89
02 00a3fc0c 7c816042 kernel32!CreateSemaphoreA+0xcd
03 00a3fc28 7c816086 ntdll!RtlRegisterWait+0x287
04 00a3fc40 7c81621f ntdll!RtlRegisterWait+0x2cb
05 00a3fc68 7c82026f ntdll!RtlTimeToSecondsSince1980+0x143
06 00a3fc94 7c820441 ntdll!RtlReleaseActivationContext+0x212
07 00a3fcb8 7c82ec2d ntdll!RtlReleaseActivationContext+0x3e4
08 00a3ffb8 77e4608b ntdll!KiUserApcDispatcher+0x25
09 00a3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 3
System Thread ID: 86c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00a7fd64 7c839620 ntdll!KiFastSystemCallRet
01 00a7fd84 7c815d85 ntdll!RtlAddressInSectionTable+0xda
02 00a7fd98 7c815e48 ntdll!RtlFormatMessageEx+0x37e
03 00a7fdc4 77e35c20 ntdll!RtlRegisterWait+0x8d
04 00a7fdec 649802bb kernel32!RegisterWaitForSingleObject+0x58
05 00a7fe1c 6498050c IISUTIL!IPM_MESSAGE_PIPE::IncrementAcceptorInUse
+0xb2
06 00a7fe40 649800bb IISUTIL!IPM_MESSAGE_PIPE::ReadMessage+0x32
07 00a7fe6c 7c83b332 IISUTIL!IPM_MESSAGE_PIPE::MessagePipeCompletion
+0xa6
08 00a7fec8 7c8161d0 ntdll!RtlCopyLuid+0x2ce
09 00a7feec 7c81a3c5 ntdll!RtlTimeToSecondsSince1980+0xf4
0a 00a7ff44 7c8200fc ntdll!RtlFinalReleaseOutOfProcessMemoryStream
+0x216
0b 00a7ff64 7c81a3fa ntdll!RtlReleaseActivationContext+0x9f
0c 00a7ff78 7c82017f ntdll!RtlFinalReleaseOutOfProcessMemoryStream
+0x24b
0d 00a7ffb8 77e4608b ntdll!RtlReleaseActivationContext+0x122
0e 00a7ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 4
System Thread ID: 1d00
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\RPCRT4.dll -
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00adff84 77c2778c ntdll!KiFastSystemCallRet
01 00adff8c 77c2f7e3 RPCRT4!NdrOleFree+0x3c5
02 00adffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x186
03 00adffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 00adffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 5
System Thread ID: 1ca0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
-
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 04d3fe68 77e4ba42 ntdll!KiFastSystemCallRet
01 04d3fe7c 792740cf kernel32!WaitForSingleObject+0x12
02 04d3fea4 791fe95c mscorsvr!CoEEShutDownCOM+0x287d2
03 04d3ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 04d3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 6
System Thread ID: 175c
Kernel Time: 0:0:0.375
User Time: 0:0:0.203
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for \\?\C:\WINDOWS\Microsoft.NET\Framework
\v1.1.4322\aspnet_isapi.dll -
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00cdf370 77e4109d ntdll!KiFastSystemCallRet
01 00cdf38c 793a5988 kernel32!WaitForMultipleObjects+0x18
02 00cdf3b8 793a815c mscorsvr!CorCreateMiniDump+0x4b985
03 00cdf3e0 793a83d6 mscorsvr!CorCreateMiniDump+0x4e159
04 00cdf404 792b4573 mscorsvr!CorCreateMiniDump+0x4e3d3
05 00cdf428 792b47a0 mscorsvr!ReleaseFusionInterfaces+0x6a40
06 00cdf8c8 792b4811 mscorsvr!ReleaseFusionInterfaces+0x6c6d
07 00cdf8f8 792394f4 mscorsvr!ReleaseFusionInterfaces+0x6cde
08 00cdf910 792c9609 mscorsvr!Ordinal17+0x4d90
09 00cdf930 7c82eeb2 mscorsvr!ReleaseFusionInterfaces+0x1bad6
0a 00cdf954 7c82ee84 ntdll!RtlRaiseStatus+0xda
0b 00cdf9fc 7c82ecc6 ntdll!RtlRaiseStatus+0xac
0c 00cdfd1c 791cf7a5 ntdll!KiUserExceptionDispatcher+0xe
0d 00cdfd2c 791cf7b4 mscorsvr!Ordinal74+0x1f7a5
0e 00cdfd38 791cf7f3 mscorsvr!Ordinal74+0x1f7b4
0f 00cdfd58 791cf4d1 mscorsvr!Ordinal74+0x1f7f3
10 00cdfd84 791cf970 mscorsvr!Ordinal74+0x1f4d1
11 00cdfdd4 792e5d03 mscorsvr!Ordinal74+0x1f970
12 00cdfe28 79e7397e mscorsvr!ReleaseFusionInterfaces+0x381d0
13 00cdfe64 5a4d500a aspnet_isapi!EcbDoneWithSession+0x23c
14 00cdfe90 5a4d4ca0 w3core+0x500a
15 00cdfeac 5a4d4c6f w3core+0x4ca0
16 00cdfec4 5a4d4bf0 w3core+0x4c6f
17 00cdfee8 5a4d4baf w3core+0x4bf0
18 00cdff08 5a4d4fab w3core+0x4baf
19 00cdff20 5a4a18b2 w3core+0x4fab
1a 00cdff48 5a4a16ca w3dt!UlAtqSendEntityBody+0x163
1b 00cdff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
1c 00cdff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
1d 00cdffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
1e 00cdffb8 77e4608b W3TP+0x1db9
1f 00cdffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 7
System Thread ID: b88
Kernel Time: 0:0:0.375
User Time: 0:0:0.343
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d1ff54 5a44249e ntdll!KiFastSystemCallRet
01 00d1ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0x89
02 00d1ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
03 00d1ffb8 77e4608b W3TP+0x1db9
04 00d1ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 8
System Thread ID: 1d20
Kernel Time: 0:0:0.578
User Time: 0:0:0.234
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d5f030 5a4deb75 ntdll!KiFastSystemCallRet
01 00d5f1b0 5a4db062 w3core!W3_FILE_INFO_CACHE::GetFileInfo+0x2b41
02 00d5f1d8 5a4dafe3 w3core+0xb062
03 00d5f51c 5a4d926b w3core+0xafe3
04 00d5fec0 5a4d9183 w3core+0x926b
05 00d5feec 5a4d2264 w3core+0x9183
06 00d5ff10 5a4d65ea w3core+0x2264
07 00d5ff2c 5a4a169f w3core+0x65ea
08 00d5ff48 5a4a16ca w3dt!UlAtqAllocateMemory+0x16f
09 00d5ff5c 5a4424de w3dt!UlAtqAllocateMemory+0x19a
0a 00d5ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
0b 00d5ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
0c 00d5ffb8 77e4608b W3TP+0x1db9
0d 00d5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 9
System Thread ID: 1edc
Kernel Time: 0:0:0.781
User Time: 0:0:0.359
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d9fe5c 7c839620 ntdll!KiFastSystemCallRet
01 00d9fe7c 7c815d85 ntdll!RtlAddressInSectionTable+0xda
02 00d9fe90 7c815e48 ntdll!RtlFormatMessageEx+0x37e
03 00d9febc 77e35c20 ntdll!RtlRegisterWait+0x8d
04 00d9fee4 649802bb kernel32!RegisterWaitForSingleObject+0x58
05 00d9ff14 649803d0 IISUTIL!IPM_MESSAGE_PIPE::IncrementAcceptorInUse
+0xb2
06 00d9ff3c 5a4a1cf3 IISUTIL!IPM_MESSAGE_PIPE::WriteMessage+0x37
07 00d9ff5c 5a4424de w3dt!UlAtqSetContextProperty+0x3b7
08 00d9ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0xc9
09 00d9ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
0a 00d9ffb8 77e4608b W3TP+0x1db9
0b 00d9ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 10
System Thread ID: 12ec
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00e5ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00e5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 11
System Thread ID: 1660
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0184faf8 77e4ba42 ntdll!KiFastSystemCallRet
01 0184fb0c 5a4f8147 kernel32!WaitForSingleObject+0x12
02 0184ffb8 77e4608b w3core!W3_FILE_INFO_CACHE::GetFileCache+0xd784
03 0184ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 12
System Thread ID: 1660
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0184faf8 77e4ba42 ntdll!KiFastSystemCallRet
01 0184fb0c 5a4f8147 kernel32!WaitForSingleObject+0x12
02 0184ffb8 77e4608b w3core!W3_FILE_INFO_CACHE::GetFileCache+0xd784
03 0184ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 13
System Thread ID: 4e4
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 018cff74 7c839620 ntdll!KiFastSystemCallRet
01 018cff94 7c815271 ntdll!RtlAddressInSectionTable+0xda
02 018cffb8 77e4608b ntdll!RtlUpdateTimer+0xe8
03 018cffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 14
System Thread ID: 1c1c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01a8febc 77e224c1 ntdll!KiFastSystemCallRet
01 01a8fecc 791bc166 kernel32!Sleep+0xf
02 01a8ffb8 77e4608b mscorsvr!Ordinal74+0xc166
03 01a8ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 15
System Thread ID: 1cc0
Kernel Time: 0:0:1.312
User Time: 0:0:9.750
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01acfa80 791b7f92 mscorsvr!Ordinal74+0x1e1f7
01 01acfa88 791bdd4e mscorsvr!Ordinal74+0x7f92
02 01acfb98 791d5fc3 mscorsvr!Ordinal74+0xdd4e
03 01acfc54 791d6077 mscorsvr!GetCompileInfo+0x22ab
04 01acfc7c 791d638b mscorsvr!GetCompileInfo+0x235f
05 01acfd30 791d659f mscorsvr!GetCompileInfo+0x2673
06 01acfd44 791cf976 mscorsvr!GetCompileInfo+0x2887
07 01acfd8c 791d64ee mscorsvr!Ordinal74+0x1f976
08 01acfe48 791d662e mscorsvr!GetCompileInfo+0x27d6
09 01acfe5c 791d6605 mscorsvr!GetCompileInfo+0x2916
0a 01acfe70 791d6211 mscorsvr!GetCompileInfo+0x28ed
0b 01acfe84 791d616a mscorsvr!GetCompileInfo+0x24f9
0c 01acfea4 791fe95c mscorsvr!GetCompileInfo+0x2452
0d 01acffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
0e 01acffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 16
System Thread ID: 1d98
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01c0ff1c 77e4109d ntdll!KiFastSystemCallRet
01 01c0ff38 7922fce6 kernel32!WaitForMultipleObjects+0x18
02 01c0ffa0 7922fc5d mscorsvr!CoInitializeCor+0x8a32
03 01c0ffb8 77e4608b mscorsvr!CoInitializeCor+0x89a9
04 01c0ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 17
System Thread ID: 788
Kernel Time: 0:0:0.15
User Time: 0:0:6.234
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01e9ff70 77e4ba42 ntdll!KiFastSystemCallRet
01 01e9ff84 7920369d kernel32!WaitForSingleObject+0x12
02 01e9ffac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01e9ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01e9ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 18
System Thread ID: 1b9c
Kernel Time: 0:0:0.46
User Time: 0:0:5.125
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01edfe70 77e4ba42 ntdll!KiFastSystemCallRet
01 01edfe84 7920369d kernel32!WaitForSingleObject+0x12
02 01edfeac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01edffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01edffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 19
System Thread ID: 16c4
Kernel Time: 0:0:0.15
User Time: 0:0:5.109
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f1fd70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f1fd84 7920369d kernel32!WaitForSingleObject+0x12
02 01f1fdac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01f1ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01f1ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 20
System Thread ID: 1b54
Kernel Time: 0:0:0.46
User Time: 0:0:5.500
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f5fc70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f5fc84 7920369d kernel32!WaitForSingleObject+0x12
02 01f5fcac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01f5ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01f5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 21
System Thread ID: 1b58
Kernel Time: 0:0:0.15
User Time: 0:0:0.375
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f9fea4 77e4109d ntdll!KiFastSystemCallRet
01 01f9fec0 7926ed87 kernel32!WaitForMultipleObjects+0x18
02 01f9fee0 792034b2 mscorsvr!CoEEShutDownCOM+0x2348a
03 01f9ff24 7922ec3f mscorsvr!GetAssemblyMDImport+0x1e26f
04 01f9ffb8 77e4608b mscorsvr!CoInitializeCor+0x798b
05 01f9ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 22
System Thread ID: 630
Kernel Time: 0:0:1.156
User Time: 0:0:6.312
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\fusion.dll -
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0204dad0 7c839620 ntdll!KiFastSystemCallRet
01 0204daf0 019a147f ntdll!RtlAddressInSectionTable+0xda
02 0204db08 019a8c4b fusion+0x147f
03 0204db30 019a65ba fusion!CreateAssemblyEnum+0x4d8c
04 0204df74 019a67c8 fusion!CreateAssemblyEnum+0x26fb
05 0204df90 019a684d fusion!CreateAssemblyEnum+0x2909
06 0204dfb8 019a5176 fusion!CreateAssemblyEnum+0x298e
07 0204e008 791e5ca0 fusion!CreateAssemblyEnum+0x12b7
08 0204e050 791e5cf7 mscorsvr!GetAssemblyMDImport+0xa5d
09 0204e080 791e5f0c mscorsvr!GetAssemblyMDImport+0xab4
0a 0204e36c 791e4882 mscorsvr!GetAssemblyMDImport+0xcc9
0b 0204e5f4 791e475a mscorsvr!GetMetaDataInternalInterface+0xd73
0c 0204e614 791e392c mscorsvr!GetMetaDataInternalInterface+0xc4b
0d 0204eb24 791ea534 mscorsvr!GetCompileInfo+0xfc14
0e 0204f6a4 01bcb9ac mscorsvr!GetAssemblyMDImport+0x52f1
0f 0204f720 022184b3 0x1bcb9ac
10 0204f860 77e4bafd 0x22184b3
11 0204f864 79e769ca kernel32!WaitForSingleObjectEx+0xad
12 0204f878 79e76bcc aspnet_isapi!HttpExtensionProc+0x34c
13 0204fad4 791b1916 aspnet_isapi!InstrumentedMutexGetLock+0x12
14 0204fadc 7923ff03 mscorsvr!Ordinal74+0x1916
15 0204fb88 79e76350 mscorsvr!Ordinal17+0xb79f
16 0204fc38 791cf8b9 aspnet_isapi!
UpdateLastActivityTimeForHealthMonitor+0x67a
17 0204fc44 791cf8d4 mscorsvr!Ordinal74+0x1f8b9
18 00000000 00000000 mscorsvr!Ordinal74+0x1f8d4




Thread ID: 23
System Thread ID: b8c
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 023fff74 791d62d2 ntdll!KiFastSystemCallRet
01 023fff90 791d65ce mscorsvr!GetCompileInfo+0x25ba
02 023fffb4 791cfb11 mscorsvr!GetCompileInfo+0x28b6
03 023fffec 00000000 mscorsvr!Ordinal74+0x1fb11




Thread ID: 24
System Thread ID: 1538
Kernel Time: 0:0:1.265
User Time: 0:0:8.828
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 029bfd6c 77e4ba42 ntdll!KiFastSystemCallRet
01 029bfd80 791d6134 kernel32!WaitForSingleObject+0x12
02 029bfda4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 029bffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 029bffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 25
System Thread ID: 1bb4
Kernel Time: 0:0:0.968
User Time: 0:0:7.625
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 029ffcec 77e4ba42 ntdll!KiFastSystemCallRet
01 029ffd00 791d6134 kernel32!WaitForSingleObject+0x12
02 029ffd24 791fe95c mscorsvr!GetCompileInfo+0x241c
03 029fffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 029fffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 26
System Thread ID: 1b48
Kernel Time: 0:0:0.62
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02ecff90 79248c93 ntdll!KiFastSystemCallRet
01 02ecffb8 77e4608b mscorsvr!GetMetaDataPublicInterfaceFromInternal
+0x1734
02 02ecffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 27
System Thread ID: 1b48
Kernel Time: 0:0:0.62
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02ecff90 79248c93 ntdll!KiFastSystemCallRet
01 02ecffb8 77e4608b mscorsvr!GetMetaDataPublicInterfaceFromInternal
+0x1734
02 02ecffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 28
System Thread ID: 1728
Kernel Time: 0:0:0.890
User Time: 0:0:5.515
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0362fb6c 77e4ba42 ntdll!KiFastSystemCallRet
01 0362fb80 791d6134 kernel32!WaitForSingleObject+0x12
02 0362fba4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 0362ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 0362ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 29
System Thread ID: 17d0
Kernel Time: 0:0:1.46
User Time: 0:0:5.453
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0366faec 77e4ba42 ntdll!KiFastSystemCallRet
01 0366fb00 791d6134 kernel32!WaitForSingleObject+0x12
02 0366fb24 791fe95c mscorsvr!GetCompileInfo+0x241c
03 0366ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 0366ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 30
System Thread ID: 1dac
Kernel Time: 0:0:1.93
User Time: 0:0:8.328
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 036dfa6c 77e4ba42 ntdll!KiFastSystemCallRet
01 036dfa80 791d6134 kernel32!WaitForSingleObject+0x12
02 036dfaa4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 036dffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 036dffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 31
System Thread ID: 1dac
Kernel Time: 0:0:1.93
User Time: 0:0:8.328
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 036dfa6c 77e4ba42 ntdll!KiFastSystemCallRet
01 036dfa80 791d6134 kernel32!WaitForSingleObject+0x12
02 036dfaa4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 036dffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 036dffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 32
System Thread ID: 17e0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0667ff84 77c2778c ntdll!KiFastSystemCallRet
01 0667ff8c 77c2f7e3 RPCRT4!NdrOleFree+0x3c5
02 0667ffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x186
03 0667ffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 0667ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 33
System Thread ID: 1088
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0675f1e8 77e4ba42 ntdll!KiFastSystemCallRet
01 0675f1fc 792740cf kernel32!WaitForSingleObject+0x12
02 0675f224 791fe95c mscorsvr!CoEEShutDownCOM+0x287d2
03 0675ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 0675ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 34
System Thread ID: 1434
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for \\?\c:\windows\system32\inetsrv\httpext.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 04e5ff60 673b977e ntdll!KiFastSystemCallRet
01 04e5ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 04e5ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 04e5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 35
System Thread ID: 1a84
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 04e9ff60 673b977e ntdll!KiFastSystemCallRet
01 04e9ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 04e9ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 04e9ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 36
System Thread ID: 1c58
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 04edff60 673b977e ntdll!KiFastSystemCallRet
01 04edff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 04edffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 04edffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 37
System Thread ID: 19d4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 04f1ff60 673b977e ntdll!KiFastSystemCallRet
01 04f1ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 04f1ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 04f1ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 38
System Thread ID: 11e4
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 04f5ff60 673b977e ntdll!KiFastSystemCallRet
01 04f5ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 04f5ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 04f5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 39
System Thread ID: 11e4
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 04f5ff60 673b977e ntdll!KiFastSystemCallRet
01 04f5ff90 673b981d httpext!DllCanUnloadNow+0x1dd1f
02 04f5ffb8 77e4608b httpext!DllCanUnloadNow+0x1ddbe
03 04f5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 40
System Thread ID: 1740
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 067ef170 791fe9b2 ntdll!KiFastSystemCallRet
01 067ef1a4 791fe95c mscorsvr!GetAssemblyMDImport+0x1976f
02 067effb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
03 067effec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 41
System Thread ID: 1c60
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0682f0e8 77e4ba42 ntdll!KiFastSystemCallRet
01 0682f0fc 792740cf kernel32!WaitForSingleObject+0x12
02 0682f124 791fe95c mscorsvr!CoEEShutDownCOM+0x287d2
03 0682ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 0682ffec 00000000 kernel32!GetModuleFileNameA+0xeb

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\7184-1231431664.dmp - user full dump
Dump successfully written

*****

Closing open log file C:\iisstate\output\IISState.log
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Mon Jan 12 07:35:10 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  8940

Note: Thread times are formatted as HH:MM:SS.ms

***********************


IIS has crashed...
Beginning Analysis
DLL (!FunctionName) that failed:




Thread ID: 0
System Thread ID: 2e14
Kernel Time: 0:0:0.46
User Time: 0:0:0.15
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\ntdll.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be
wrong.
00 0006f764 03a95476 0x3a9554f
01 0006f798 03a953bd 0x3a95476
02 0006f834 03a95225 0x3a953bd
03 0006f838 18a2cd68 0x3a95225
04 0006f83c 142ef554 0x18a2cd68
05 0006f840 104667d8 0x142ef554
06 0006f844 00000000 0x104667d8
Closing open log file C:\iisstate\output\IISState.log
Opened log file 'C:\iisstate\output\IISState.log'

***********************
Starting new log output
IISState version 3.0

Mon Jan 12 07:35:52 2009

OS = Windows 2003 Server
Executable: w3wp.exe
PID =  8940

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 2e14
Kernel Time: 0:0:0.46
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
WARNING: Frame IP not in any known module. Following frames may be
wrong.
00 0006f764 03a95476 0x3a9554f
01 0006f798 03a953bd 0x3a95476
02 0006f834 03a95225 0x3a953bd
03 0006f838 18a2cd68 0x3a95225
04 0006f83c 142ef554 0x18a2cd68
05 0006f840 104667d8 0x142ef554
06 0006f844 00000000 0x104667d8




Thread ID: 1
System Thread ID: 2c40
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\kernel32.dll -
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 009fffb8 77e4608b ntdll!KiFastSystemCallRet
01 009fffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 2
System Thread ID: 2c44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00a3ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00a3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 3
System Thread ID: 2b58
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00a7ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00a7ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 4
System Thread ID: a94
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\RPCRT4.dll -
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\system32\ole32.dll -
OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00adff84 77c2778c ntdll!KiFastSystemCallRet
01 00adff8c 77c2f7e3 RPCRT4!NdrOleFree+0x3c5
02 00adffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x186
03 00adffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 00adffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 5
System Thread ID: 25f0
Kernel Time: 0:0:0.218
User Time: 0:0:2.953
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorsvr.dll
-
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0196faec 77e4ba42 ntdll!KiFastSystemCallRet
01 0196fb00 791d6134 kernel32!WaitForSingleObject+0x12
02 0196fb24 791fe95c mscorsvr!GetCompileInfo+0x241c
03 0196ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 0196ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 6
System Thread ID: 2cdc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
*** ERROR: Symbol file could not be found.  Defaulted to export
symbols for c:\windows\system32\inetsrv\W3TP.dll -
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00cdff54 5a44249e ntdll!KiFastSystemCallRet
01 00cdff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0x89
02 00cdffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
03 00cdffb8 77e4608b W3TP+0x1db9
04 00cdffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 7
System Thread ID: 1af4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d1ff54 5a44249e ntdll!KiFastSystemCallRet
01 00d1ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0x89
02 00d1ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
03 00d1ffb8 77e4608b W3TP+0x1db9
04 00d1ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 8
System Thread ID: 1fa0
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d5ff54 5a44249e ntdll!KiFastSystemCallRet
01 00d5ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0x89
02 00d5ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
03 00d5ffb8 77e4608b W3TP+0x1db9
04 00d5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 9
System Thread ID: 898
Kernel Time: 0:0:0.46
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00d9ff54 5a44249e ntdll!KiFastSystemCallRet
01 00d9ff8c 5a4426bc W3TP!THREAD_POOL::PostCompletion+0x89
02 00d9ffa0 5a441db9 W3TP!THREAD_POOL::~THREAD_POOL+0x153
03 00d9ffb8 77e4608b W3TP+0x1db9
04 00d9ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 10
System Thread ID: 1264
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00e5ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00e5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 11
System Thread ID: 1264
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 00e5ffb8 77e4608b ntdll!KiFastSystemCallRet
01 00e5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 12
System Thread ID: 2530
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

OLE32.dll Symbols not found. Unable to proceed with DCOM check.
Continuing other analysis.

# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0188ff84 77c2778c ntdll!KiFastSystemCallRet
01 0188ff8c 77c2f7e3 RPCRT4!NdrOleFree+0x3c5
02 0188ffac 77c2de88 RPCRT4!I_RpcTransGetThreadEvent+0x186
03 0188ffb8 77e4608b RPCRT4!I_RpcLogEvent+0xe92
04 0188ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 13
System Thread ID: 20a4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 018cffb8 77e4608b ntdll!KiFastSystemCallRet
01 018cffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 14
System Thread ID: 1c9c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0192f5ec 77e4ba42 ntdll!KiFastSystemCallRet
01 0192f600 791d6134 kernel32!WaitForSingleObject+0x12
02 0192f624 791fe95c mscorsvr!GetCompileInfo+0x241c
03 0192ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 0192ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 15
System Thread ID: 2988
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 019af66c 77e4ba42 ntdll!KiFastSystemCallRet
01 019af680 791d6134 kernel32!WaitForSingleObject+0x12
02 019af6a4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 019affb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 019affec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 16
System Thread ID: 2490
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01afffb8 77e4608b ntdll!KiFastSystemCallRet
01 01afffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 17
System Thread ID: 214c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02b5ffb8 77e4608b ntdll!KiFastSystemCallRet
01 02b5ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 18
System Thread ID: 2ddc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01b3febc 77e224c1 ntdll!KiFastSystemCallRet
01 01b3fecc 791bc166 kernel32!Sleep+0xf
02 01b3ffb8 77e4608b mscorsvr!Ordinal74+0xc166
03 01b3ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 19
System Thread ID: 2fc4
Kernel Time: 0:0:0.234
User Time: 0:0:4.234
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01b7fe6c 77e4ba42 ntdll!KiFastSystemCallRet
01 01b7fe80 791d6134 kernel32!WaitForSingleObject+0x12
02 01b7fea4 791fe95c mscorsvr!GetCompileInfo+0x241c
03 01b7ffb8 77e4608b mscorsvr!GetAssemblyMDImport+0x19719
04 01b7ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 20
System Thread ID: 348
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01cbff1c 77e4109d ntdll!KiFastSystemCallRet
01 01cbff38 7922fce6 kernel32!WaitForMultipleObjects+0x18
02 01cbffa0 7922fc5d mscorsvr!CoInitializeCor+0x8a32
03 01cbffb8 77e4608b mscorsvr!CoInitializeCor+0x89a9
04 01cbffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 21
System Thread ID: 25a8
Kernel Time: 0:0:0.0
User Time: 0:0:0.203
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f4ff70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f4ff84 7920369d kernel32!WaitForSingleObject+0x12
02 01f4ffac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01f4ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01f4ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 22
System Thread ID: 1b48
Kernel Time: 0:0:0.0
User Time: 0:0:0.250
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01f8fe70 77e4ba42 ntdll!KiFastSystemCallRet
01 01f8fe84 7920369d kernel32!WaitForSingleObject+0x12
02 01f8feac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01f8ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01f8ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 23
System Thread ID: 24fc
Kernel Time: 0:0:0.0
User Time: 0:0:0.156
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 01fcfd70 77e4ba42 ntdll!KiFastSystemCallRet
01 01fcfd84 7920369d kernel32!WaitForSingleObject+0x12
02 01fcfdac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 01fcffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 01fcffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 24
System Thread ID: 17c
Kernel Time: 0:0:0.0
User Time: 0:0:0.140
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0200fc70 77e4ba42 ntdll!KiFastSystemCallRet
01 0200fc84 7920369d kernel32!WaitForSingleObject+0x12
02 0200fcac 79227e07 mscorsvr!GetAssemblyMDImport+0x1e45a
03 0200ffb8 77e4608b mscorsvr!CoInitializeCor+0xb53
04 0200ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 25
System Thread ID: 29ac
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0204fea4 77e4109d ntdll!KiFastSystemCallRet
01 0204fec0 7926ed87 kernel32!WaitForMultipleObjects+0x18
02 0204fee0 792034b2 mscorsvr!CoEEShutDownCOM+0x2348a
03 0204ff24 7922ec3f mscorsvr!GetAssemblyMDImport+0x1e26f
04 0204ffb8 77e4608b mscorsvr!CoInitializeCor+0x798b
05 0204ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 26
System Thread ID: 2eb8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0236ffac 791cfb1a ntdll!KiFastSystemCallRet
01 0236ffec 00000000 mscorsvr!Ordinal74+0x1fb1a




Thread ID: 27
System Thread ID: 1954
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 0315ffb8 77e4608b ntdll!KiFastSystemCallRet
01 0315ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 28
System Thread ID: 2470
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 02a1ff90 79248c93 ntdll!KiFastSystemCallRet
01 02a1ffb8 77e4608b mscorsvr!GetMetaDataPublicInterfaceFromInternal
+0x1734
02 02a1ffec 00000000 kernel32!GetModuleFileNameA+0xeb




Thread ID: 29
System Thread ID: 568
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
WARNING: Stack unwind information not available. Following frames may
be wrong.
00 031cffb8 77e4608b ntdll!KiFastSystemCallRet
01 031cffec 00000000 kernel32!GetModuleFileNameA+0xeb

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\iisstate\output\8940-1231745857.dmp - user full dump
Dump successfully written

*****

Closing open log file C:\iisstate\output\IISState.log

19-Jan-09 09:18 PM

If you need timely and assured assistance, you should pay and contact
Microsoft PSS for a support contract.

In the case that the issue is a bug in Microsoft code, the support is
free.

If the issue is not in Microsoft code, then you will pay for the
support which will lead you towards the real culprit and resolution.

In other words, if the issue is time-sensitive, as it is for
production systems, contacting support is always a good choice because
you will make progress towards resolution and may even fix the issue
for free.

On the other hand, looking for free support or searching for other
possibly related crashes and resolution -- that will be a waste of
time. Free support is not guaranteed to be timely nor assured, and
searching for fixes by stack trace is unlikely to ever yield results
because most crashes are unique.

Your stacks show memory corruption but no clear suspects. If it is as
reproducible as you say, it should be easy to trap and get to a
resolution with Pageheap.


//David
http://w3-4u.blogspot.com
http://blogs.msdn.com/David.Wang
//