Home All Groups Group Topic Archive Search About

Assistance interpreting IISState log

Author
26 Apr 2006 12:07 AM
Listyanna Goodspeed
We installed 2 servers with Windows 2003 with SP1.
IIS 6 installed with .Net Framework v1.1.4322
I am not a web developer and the vendor is still researching, thus, I am
seeking for advice and assistance.

We continue to receive the following errors that occur sporadically.

System Log:
Application popup: w3wp.exe - Application Error : The instruction at
"0x60093f4d" referenced memory at "0x00000000". The memory could not be
"read".

A process serving application pool 'ECMExec' suffered a fatal communication
error with the World Wide Web Publishing Service. The process id was '6744'.
The data field contains the error number.

A process serving application pool 'ECMExec' terminated unexpectedly. The
process id was '5728'. The process exit code was '0xc0000005'.

Application Log:
Error: File /ECMExec/logon.asp  Unexpected error. A trappable error
(C0000005) occurred in an external object. The script cannot continue
running..

-----
I've checked permissions and have given the IIS_WPG and Network Service
accounts the appropriate rights to the following folders:
systemroot\help\iishelp\common
systemroot\system32\inetsrv\asp compiled templates
systemroot\iis temporary compressed files

Are there other folders that I have to provide rights to?

------
Below is the output of the IISState log.  Any suggestions?

***********************
Starting new log output
IISState version 3.0

Tue Apr 25 18:32:00 2006

OS = Windows 2003 Server
Executable: inetinfo.exe
PID =  5980

Note: Thread times are formatted as HH:MM:SS.ms

***********************




Thread ID: 0
System Thread ID: 288
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr 
00 0006f99c 7c821b84 ntdll!KiFastSystemCallRet
01 0006f9a0 77e41942 ntdll!NtReadFile+0xc
02 0006fa08 77f795ab kernel32!ReadFile+0x16c
03 0006fa34 77f7943c ADVAPI32!ScGetPipeInput+0x2a
04 0006faa8 77fb2ec9 ADVAPI32!ScDispatcherLoop+0x51
05 0006fcec 010027be ADVAPI32!StartServiceCtrlDispatcherA+0x93
06 0006fe1c 01002969 inetinfo!StartDispatchTable+0x277
07 0006ff44 0100339d inetinfo!main+0x117
08 0006ffc0 77e523cd inetinfo!mainCRTStartup+0x12f
09 0006fff0 00000000 kernel32!BaseProcessStart+0x23




Thread ID: 1
System Thread ID: f4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr 
00 0082fe14 7c822124 ntdll!KiFastSystemCallRet
01 0082fe18 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0082fe88 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0082fe9c 01002ebf kernel32!WaitForSingleObject+0x12
04 0082ffb8 77e66063 inetinfo!W3SVCThreadEntry+0x3d
05 0082ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 2
System Thread ID: 1530
Kernel Time: 0:0:0.62
User Time: 0:0:0.15
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr 
00 0086fcb8 7c822124 ntdll!KiFastSystemCallRet
01 0086fcbc 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0086fd2c 77e6ba12 kernel32!WaitForSingleObjectEx+0xac
03 0086fd40 649f26a4 kernel32!WaitForSingleObject+0x12
04 0086fd68 010024b3 iisadmin!ServiceEntry+0x28a
05 0086ffa4 77f79348 inetinfo!InetinfoStartService+0x2cc
06 0086ffb8 77e66063 ADVAPI32!ScSvcctrlThreadA+0x21
07 0086ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 3
System Thread ID: 1728
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr 
00 00c3ff9c 7c821364 ntdll!KiFastSystemCallRet
01 00c3ffa0 7c81fe26 ntdll!NtDelayExecution+0xc
02 00c3ffb8 77e66063 ntdll!RtlpTimerThread+0x47
03 00c3ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 4
System Thread ID: 1aac
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr 
00 00c7ff70 7c821bf4 ntdll!KiFastSystemCallRet
01 00c7ff74 7c83ad75 ntdll!NtRemoveIoCompletion+0xc
02 00c7ffb8 77e66063 ntdll!RtlpWorkerThread+0x3d
03 00c7ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 5
System Thread ID: 1934
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr 
00 00d4feac 7c822114 ntdll!KiFastSystemCallRet
01 00d4feb0 77e6711b ntdll!NtWaitForMultipleObjects+0xc
02 00d4ff58 77e61075 kernel32!WaitForMultipleObjectsEx+0x11a
03 00d4ff74 56f951ef kernel32!WaitForMultipleObjects+0x18
04 00d4ffa0 56f96a06 COADMIN!NOTIFY_CONTEXT::GetNextContext+0x67
05 00d4ffb8 77e66063 COADMIN!NOTIFY_CONTEXT::NotifyThreadProc+0x5f
06 00d4ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 6
System Thread ID: 1e48
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr 
00 0170fcec 7c822114 ntdll!KiFastSystemCallRet
01 0170fcf0 7c83acfd ntdll!NtWaitForMultipleObjects+0xc
02 0170ffb8 77e66063 ntdll!RtlpWaitThread+0x161
03 0170ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 7
System Thread ID: b80
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr 
00 0164fe18 7c821c54 ntdll!KiFastSystemCallRet
01 0164fe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 0164ff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 0164ff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 0164ffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 0164ffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 0164ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 8
System Thread ID: 17a0
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page.  Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr 
00 00bffe18 7c821c54 ntdll!KiFastSystemCallRet
01 00bffe1c 77c7538c ntdll!ZwReplyWaitReceivePortEx+0xc
02 00bfff84 77c5778f RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 00bfff8c 77c5f7dd RPCRT4!RecvLotsaCallsWrapper+0xd
04 00bfffac 77c5de88 RPCRT4!BaseCachedThreadRoutine+0x9d
05 00bfffb8 77e66063 RPCRT4!ThreadStartRoutine+0x1b
06 00bfffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 9
System Thread ID: 17f8
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Status: Thread is in a WAIT state.
Thread Type: Other
# ChildEBP RetAddr 
00 0168ff1c 7c822124 ntdll!KiFastSystemCallRet
01 0168ff20 77e6baa8 ntdll!NtWaitForSingleObject+0xc
02 0168ff90 776b2332 kernel32!WaitForSingleObjectEx+0xac
03 0168ffac 776b2374 ole32!CRpcThread::WorkerLoop+0x5c
04 0168ffb8 77e66063 ole32!CRpcThreadCache::RpcWorkerThreadEntry+0x20
05 0168ffec 00000000 kernel32!BaseThreadStart+0x34

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating Z:\Program Files\IIS Resources\IISState\output\5980-1146007922.dmp
- user full dump
Dump successfully written

*****

Closing open log file Z:\Program Files\IIS
Resources\IISState\output\IISState.log

AddThis Social Bookmark Button