.NET Runtime Event Log Entries

14 Mar 2006 11:00 AM

BLsunev

I have a Windows 2003 server which is getting some strange entries logged,
entires which I am uinable to trace the source of.

When I log in via RDC I get an application popup saying that the IIS worker
process blew its top.

There are usually 5 entries of two different types.

The first is:

Event Type:    Error
Event Source:    .NET Runtime
Event Category:    None
Event ID:    0
Date:        14/03/2006
Time:        10:35:37
User:        N/A
Computer:    CRSCOMDEV01
Description:
The description for Event ID ( 0 ) in Source ( .NET Runtime ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be able
to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: Unable
to open shim database version registry key - v2.0.50727.00000.

there are usually 2 of these either side of the second type:

Event Type:    Error
Event Source:    Application Error
Event Category:    (100)
Event ID:    1000
Date:        14/03/2006
Time:        10:28:31
User:        N/A
Computer:    CRSCOMDEV01
Description:
Faulting application w3wp.exe, version 6.0.3790.1830, faulting module
webengine.dll, version 2.0.50727.42, fault address 0x00002fec.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 77 33 77   ure w3w
0018: 70 2e 65 78 65 20 36 2e   p.exe 6.
0020: 30 2e 33 37 39 30 2e 31   0.3790.1
0028: 38 33 30 20 69 6e 20 77   830 in w
0030: 65 62 65 6e 67 69 6e 65   ebengine
0038: 2e 64 6c 6c 20 32 2e 30   .dll 2.0
0040: 2e 35 30 37 32 37 2e 34   .50727.4
0048: 32 20 61 74 20 6f 66 66   2 at off
0050: 73 65 74 20 30 30 30 30   set 0000
0058: 32 66 65 63               2fec

I have looked on the web and only found something about registry access
being required for certain keys - I have granted such access but still
getting the same thing.

Please help!

--
Shaun Venus

15 Mar 2006 6:21 AM

Steven Cheng[MSFT]

Hi Shaun,

Welcome to the MSDN newsgroup.

Regarding on the error entries you provided, most of them are concerning
with some registry accessing or eventviewer reading setting. The only entry
related to the ASP.NET application should be the last one which include the
following statement:

===============
Faulting application w3wp.exe, version 6.0.3790.1830, faulting module
webengine.dll, version 2.0.50727.42, fault address 0x00002fec.
===============

w3wp.exe should be IIS 6 worker process which can host ASP.NET applcation.
BTW, for ASP.NET 2.0 , the new exception handling policy will make the
worker process be ended when there is unhandled exception in ASP.NET
application:

http://support.microsoft.com/default.aspx?scid=kb;en-us;911816

Therefore, we can check whether there could be any unhandled exceptions
occuring in any ASP.NET 2.0 applications running on that server machine.

Regards,

Steven Cheng
Microsoft Online Support

Get Secure! www.microsoft.com/security
(This posting is provided "AS IS", with no warranties, and confers no
rights.)