From: Sarav1980 on
Log file
IISState version 3.3.1

Fri Sep 03 10:39:46 2010

OS = Windows 2003 Server
Executable: dllhost.exe
PID = 8364

Note: Thread times are formatted as HH:MM:SS.ms

***********************
Thread ID: 0
System Thread ID: 830
Kernel Time: 0:0:0.31
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0007fcd4 7c827d29 ntdll!KiFastSystemCallRet
01 0007fcd8 77e61d1e ntdll!ZwWaitForSingleObject+0xc
02 0007fd48 77e61c8d kernel32!WaitForSingleObjectEx+0xac
03 0007fd5c 77727b21 kernel32!WaitForSingleObject+0x12
04 0007fd78 77728683
ole32!CSurrogateProcessActivator::WaitForSurrogateTimeout+0x55
05 0007fd90 01001383 ole32!CoRegisterSurrogateEx+0x1dd
06 0007ff1c 010016a1 dllhost!WinMain+0xe3
07 0007ffc0 77e6f23b dllhost!WinMainCRTStartup+0x182
08 0007fff0 00000000 kernel32!BaseProcessStart+0x23

Thread ID: 1
System Thread ID: 26e8
Kernel Time: 23:25:15.343
User Time: 6:51:42.828
*** WARNING: Unable to verify checksum for
c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_6716d46f\mscorlib.dll
*** ERROR: Module load completed but symbols could not be loaded for
c:\windows\assembly\nativeimages1_v1.1.4322\mscorlib\1.0.5000.0__b77a5c561934e089_6716d46f\mscorlib.dll
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
succeeded
Loaded Son of Strike data table version 5 from
"C:\WINDOWS\Microsoft.NET\Framework\v1.1.4322\mscorwks.dll"
Thread 1
ESP EIP
009bf068 7c82860c [FRAME: NDirectMethodFrameStandalone] [DEFAULT] I4
System.Net.UnsafeNclNativeMethods/OSSOCK.recv(I,I,I4,ValueClass
System.Net.Sockets.SocketFlags)
009bf07c 033119df [DEFAULT] [hasThis] I4
System.Net.Sockets.Socket.Receive(SZArray UI1,I4,I4,ValueClass
System.Net.Sockets.SocketFlags)
009bf0bc 0331184f [DEFAULT] [hasThis] I4
System.Net.Sockets.NetworkStream.Read(SZArray UI1,I4,I4)
009bf0e8 03174fda [DEFAULT] [hasThis] SZArray UI1
Vistacomp.Core.Connection.RunVistaProgram(String,SZArray
UI1,String,I4,I4,I4,I4)
009bf2a8 791dc58d [FRAME: GCFrame]
009bf3a0 791dc58d [FRAME: ECallMethodFrame] [DEFAULT] [hasThis] Object
System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(Class
System.Reflection.MethodBase,SZArray Object,Object,I4,Boolean,ByRef SZArray
Object)
009bf3c4 799d1693 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(Class
System.Runtime.Remoting.Messaging.IMessage,I4,Boolean)
009bf428 79aecc50 [DEFAULT] Class
System.Runtime.Remoting.Messaging.IMethodReturnMessage
System.Runtime.Remoting.RemotingServices.ExecuteMessage(Class
System.MarshalByRefObject,Class
System.Runtime.Remoting.Messaging.IMethodCallMessage)
009bf438 0317493c [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.LocalInvoke(Class
System.Runtime.Remoting.Messaging.IMessage)
009bf470 03174769 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.Invoke(Class
System.Runtime.Remoting.Messaging.IMessage)
009bf480 0317390e [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.RemoteDispatchHelper(String,ByRef
Boolean)
009bf490 031738bf [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.System.EnterpriseServices.IRemoteDispatch.RemoteDispatchNotAutoDone(String)
009bf57c 7920de5d [FRAME: ComMethodFrame]


Begin System Thread Information

# ChildEBP RetAddr
00 009bef5c 7c826fe9 ntdll!KiFastSystemCallRet
01 009bef60 71b22438 ntdll!NtDeviceIoControlFile+0xc
02 009beff0 71c02fee mswsock!WSPRecv+0x1c6
03 009bf038 00edb34f ws2_32!recv+0x83
WARNING: Frame IP not in any known module. Following frames may be wrong.
04 009bf0a8 0331184f 0xedb34f
05 009bf0d8 03174fda 0x331184f
06 009bf120 791dc58d 0x3174fda
07 009bf140 793439e7 mscorwks!CallDescrWorker+0x30
08 009bf270 79343c1e mscorwks!CallDescrWithObjectArray+0x3bb
09 009bf360 03181910 mscorwks!CStackBuilderSink::PrivateProcessMessage+0x16c
0a 009bf418 79aecc50 0x3181910
0b 009bf468 03174769 mscorlib_79990000+0x15cc50
0c 009bf540 00eda179 0x3174769
0d 009bf5a4 77ce33e1 0xeda179
0e 009bf9a4 77ce1968 RPCRT4!NdrStubCall2+0x299
0f 009bf9fc 7778d01b RPCRT4!CStdStubBuffer_Invoke+0x3f
10 009bfa40 7778cfc8 ole32!SyncStubInvoke+0x37
11 009bfa88 776c120b ole32!StubInvoke+0xa7
12 009bfb64 776c0bf5 ole32!CCtxComChnl::ContextInvoke+0xec
13 009bfb80 7778d2a7 ole32!MTAInvoke+0x1a
14 009bfbb0 7778cd66 ole32!AppInvoke+0xa3
15 009bfc84 7778d2c6 ole32!ComInvokeWithLockAndIPID+0x2c5
16 009bfcd0 77c7ff7a ole32!ThreadInvoke+0x2e3
17 009bfd04 77c8042d RPCRT4!DispatchToStubInCNoAvrf+0x38
18 009bfd58 77c80353 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x11f
19 009bfd7c 77c7e0d4 RPCRT4!RPC_INTERFACE::DispatchToStub+0xa3
1a 009bfdbc 77c7e080 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xc0
1b 009bfdfc 77c812f0 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x41e
1c 009bfe20 77c88678 RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x127
1d 009bff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x430
1e 009bff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
1f 009bffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
20 009bffb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
21 009bffec 00000000 kernel32!BaseThreadStart+0x34

Thread ID: 5
System Thread ID: 2980
Kernel Time: 23:31:18.437
User Time: 6:46:29.296
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 5
ESP EIP
00a7f068 7c82860c [FRAME: NDirectMethodFrameStandalone] [DEFAULT] I4
System.Net.UnsafeNclNativeMethods/OSSOCK.recv(I,I,I4,ValueClass
System.Net.Sockets.SocketFlags)
00a7f07c 033119df [DEFAULT] [hasThis] I4
System.Net.Sockets.Socket.Receive(SZArray UI1,I4,I4,ValueClass
System.Net.Sockets.SocketFlags)
00a7f0bc 0331184f [DEFAULT] [hasThis] I4
System.Net.Sockets.NetworkStream.Read(SZArray UI1,I4,I4)
00a7f0e8 03174fda [DEFAULT] [hasThis] SZArray UI1
Vistacomp.Core.Connection.RunVistaProgram(String,SZArray
UI1,String,I4,I4,I4,I4)
00a7f2a8 791dc58d [FRAME: GCFrame]
00a7f3a0 791dc58d [FRAME: ECallMethodFrame] [DEFAULT] [hasThis] Object
System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(Class
System.Reflection.MethodBase,SZArray Object,Object,I4,Boolean,ByRef SZArray
Object)
00a7f3c4 799d1693 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(Class
System.Runtime.Remoting.Messaging.IMessage,I4,Boolean)
00a7f428 79aecc50 [DEFAULT] Class
System.Runtime.Remoting.Messaging.IMethodReturnMessage
System.Runtime.Remoting.RemotingServices.ExecuteMessage(Class
System.MarshalByRefObject,Class
System.Runtime.Remoting.Messaging.IMethodCallMessage)
00a7f438 0317493c [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.LocalInvoke(Class
System.Runtime.Remoting.Messaging.IMessage)
00a7f470 03174769 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.Invoke(Class
System.Runtime.Remoting.Messaging.IMessage)
00a7f480 0317390e [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.RemoteDispatchHelper(String,ByRef
Boolean)
00a7f490 031738bf [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.System.EnterpriseServices.IRemoteDispatch.RemoteDispatchNotAutoDone(String)
00a7f57c 7920de5d [FRAME: ComMethodFrame]


Begin System Thread Information

# ChildEBP RetAddr
00 00a7ef5c 7c826fe9 ntdll!KiFastSystemCallRet
01 00a7ef60 71b22438 ntdll!NtDeviceIoControlFile+0xc
02 00a7eff0 71c02fee mswsock!WSPRecv+0x1c6
03 00a7f038 00edb34f ws2_32!recv+0x83
WARNING: Frame IP not in any known module. Following frames may be wrong.
04 00a7f0a8 0331184f 0xedb34f
05 00a7f0d8 03174fda 0x331184f
06 00a7f120 791dc58d 0x3174fda
07 00a7f140 793439e7 mscorwks!CallDescrWorker+0x30
08 00a7f270 79343c1e mscorwks!CallDescrWithObjectArray+0x3bb
09 00a7f360 03181910 mscorwks!CStackBuilderSink::PrivateProcessMessage+0x16c
0a 00a7f418 79aecc50 0x3181910
0b 00a7f468 03174769 mscorlib_79990000+0x15cc50
0c 00a7f540 00eda179 0x3174769
0d 00a7f5a4 77ce33e1 0xeda179
0e 00a7f9a4 77ce1968 RPCRT4!NdrStubCall2+0x299
0f 00a7f9fc 7778d01b RPCRT4!CStdStubBuffer_Invoke+0x3f
10 00a7fa40 7778cfc8 ole32!SyncStubInvoke+0x37
11 00a7fa88 776c120b ole32!StubInvoke+0xa7
12 00a7fb64 776c0bf5 ole32!CCtxComChnl::ContextInvoke+0xec
13 00a7fb80 7778d2a7 ole32!MTAInvoke+0x1a
14 00a7fbb0 7778cd66 ole32!AppInvoke+0xa3
15 00a7fc84 7778d2c6 ole32!ComInvokeWithLockAndIPID+0x2c5
16 00a7fcd0 77c7ff7a ole32!ThreadInvoke+0x2e3
17 00a7fd04 77c8042d RPCRT4!DispatchToStubInCNoAvrf+0x38
18 00a7fd58 77c80353 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x11f
19 00a7fd7c 77c7e0d4 RPCRT4!RPC_INTERFACE::DispatchToStub+0xa3
1a 00a7fdbc 77c7e080 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xc0
1b 00a7fdfc 77c812f0 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x41e
1c 00a7fe20 77c88678 RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x127
1d 00a7ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x430
1e 00a7ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
1f 00a7ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
20 00a7ffb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
21 00a7ffec 00000000 kernel32!BaseThreadStart+0x34





Thread ID: 11
System Thread ID: 2c1c
Kernel Time: 0:0:0.187
User Time: 0:0:0.156
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 11
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 0326ff40 7c826f69 ntdll!KiFastSystemCallRet
01 0326ff44 77e41ed5 ntdll!NtDelayExecution+0xc
02 0326ffac 792ef7c4 kernel32!SleepEx+0x68
03 0326ffb8 77e6482f mscorwks!ThreadpoolMgr::TimerThreadStart+0x23
04 0326ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 12
System Thread ID: 2328
Kernel Time: 0:0:0.968
User Time: 0:0:0.828
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 12
Not a managed thread.


Begin System Thread Information

# ChildEBP RetAddr
00 033efee0 7c826f69 ntdll!KiFastSystemCallRet
01 033efee4 77e41ed5 ntdll!NtDelayExecution+0xc
02 033eff4c 77e424fd kernel32!SleepEx+0x68
03 033eff5c 792ef24c kernel32!Sleep+0xf
04 033effb8 77e6482f mscorwks!ThreadpoolMgr::GateThreadStart+0x54
05 033effec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 13
System Thread ID: 2d9c
Kernel Time: 23:26:41.468
User Time: 6:49:27.796
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 13
ESP EIP
0342f068 7c82860c [FRAME: NDirectMethodFrameStandalone] [DEFAULT] I4
System.Net.UnsafeNclNativeMethods/OSSOCK.recv(I,I,I4,ValueClass
System.Net.Sockets.SocketFlags)
0342f07c 033119df [DEFAULT] [hasThis] I4
System.Net.Sockets.Socket.Receive(SZArray UI1,I4,I4,ValueClass
System.Net.Sockets.SocketFlags)
0342f0bc 0331184f [DEFAULT] [hasThis] I4
System.Net.Sockets.NetworkStream.Read(SZArray UI1,I4,I4)
0342f0e8 03174fda [DEFAULT] [hasThis] SZArray UI1
Vistacomp.Core.Connection.RunVistaProgram(String,SZArray
UI1,String,I4,I4,I4,I4)
0342f2a8 791dc58d [FRAME: GCFrame]
0342f3a0 791dc58d [FRAME: ECallMethodFrame] [DEFAULT] [hasThis] Object
System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(Class
System.Reflection.MethodBase,SZArray Object,Object,I4,Boolean,ByRef SZArray
Object)
0342f3c4 799d1693 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(Class
System.Runtime.Remoting.Messaging.IMessage,I4,Boolean)
0342f428 79aecc50 [DEFAULT] Class
System.Runtime.Remoting.Messaging.IMethodReturnMessage
System.Runtime.Remoting.RemotingServices.ExecuteMessage(Class
System.MarshalByRefObject,Class
System.Runtime.Remoting.Messaging.IMethodCallMessage)
0342f438 0317493c [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.LocalInvoke(Class
System.Runtime.Remoting.Messaging.IMessage)
0342f470 03174769 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.Invoke(Class
System.Runtime.Remoting.Messaging.IMessage)
0342f480 0317390e [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.RemoteDispatchHelper(String,ByRef
Boolean)
0342f490 031738bf [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.System.EnterpriseServices.IRemoteDispatch.RemoteDispatchNotAutoDone(String)
0342f57c 7920de5d [FRAME: ComMethodFrame]


Begin System Thread Information

# ChildEBP RetAddr
00 0342ef5c 7c826fe9 ntdll!KiFastSystemCallRet
01 0342ef60 71b22438 ntdll!NtDeviceIoControlFile+0xc
02 0342eff0 71c02fee mswsock!WSPRecv+0x1c6
03 0342f038 00edb34f ws2_32!recv+0x83
WARNING: Frame IP not in any known module. Following frames may be wrong.
04 0342f0a8 0331184f 0xedb34f
05 0342f0d8 03174fda 0x331184f
06 0342f120 791dc58d 0x3174fda
07 0342f140 793439e7 mscorwks!CallDescrWorker+0x30
08 0342f270 79343c1e mscorwks!CallDescrWithObjectArray+0x3bb
09 0342f360 03181910 mscorwks!CStackBuilderSink::PrivateProcessMessage+0x16c
0a 0342f418 79aecc50 0x3181910
0b 0342f468 03174769 mscorlib_79990000+0x15cc50
0c 0342f540 00eda179 0x3174769
0d 0342f5a4 77ce33e1 0xeda179
0e 0342f9a4 77ce1968 RPCRT4!NdrStubCall2+0x299
0f 0342f9fc 7778d01b RPCRT4!CStdStubBuffer_Invoke+0x3f
10 0342fa40 7778cfc8 ole32!SyncStubInvoke+0x37
11 0342fa88 776c120b ole32!StubInvoke+0xa7
12 0342fb64 776c0bf5 ole32!CCtxComChnl::ContextInvoke+0xec
13 0342fb80 7778d2a7 ole32!MTAInvoke+0x1a
14 0342fbb0 7778cd66 ole32!AppInvoke+0xa3
15 0342fc84 7778d2c6 ole32!ComInvokeWithLockAndIPID+0x2c5
16 0342fcd0 77c7ff7a ole32!ThreadInvoke+0x2e3
17 0342fd04 77c8042d RPCRT4!DispatchToStubInCNoAvrf+0x38
18 0342fd58 77c80353 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x11f
19 0342fd7c 77c7e0d4 RPCRT4!RPC_INTERFACE::DispatchToStub+0xa3
1a 0342fdbc 77c7e080 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xc0
1b 0342fdfc 77c812f0 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x41e
1c 0342fe20 77c88678 RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x127
1d 0342ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x430
1e 0342ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
1f 0342ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
20 0342ffb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
21 0342ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 14
System Thread ID: 28b8
Kernel Time: 23:26:40.875
User Time: 6:48:13.531
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 14
ESP EIP
0346f068 7c82860c [FRAME: NDirectMethodFrameStandalone] [DEFAULT] I4
System.Net.UnsafeNclNativeMethods/OSSOCK.recv(I,I,I4,ValueClass
System.Net.Sockets.SocketFlags)
0346f07c 033119df [DEFAULT] [hasThis] I4
System.Net.Sockets.Socket.Receive(SZArray UI1,I4,I4,ValueClass
System.Net.Sockets.SocketFlags)
0346f0bc 0331184f [DEFAULT] [hasThis] I4
System.Net.Sockets.NetworkStream.Read(SZArray UI1,I4,I4)
0346f0e8 03174fda [DEFAULT] [hasThis] SZArray UI1
Vistacomp.Core.Connection.RunVistaProgram(String,SZArray
UI1,String,I4,I4,I4,I4)
0346f2a8 791dc58d [FRAME: GCFrame]
0346f3a0 791dc58d [FRAME: ECallMethodFrame] [DEFAULT] [hasThis] Object
System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(Class
System.Reflection.MethodBase,SZArray Object,Object,I4,Boolean,ByRef SZArray
Object)
0346f3c4 799d1693 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(Class
System.Runtime.Remoting.Messaging.IMessage,I4,Boolean)
0346f428 79aecc50 [DEFAULT] Class
System.Runtime.Remoting.Messaging.IMethodReturnMessage
System.Runtime.Remoting.RemotingServices.ExecuteMessage(Class
System.MarshalByRefObject,Class
System.Runtime.Remoting.Messaging.IMethodCallMessage)
0346f438 0317493c [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.LocalInvoke(Class
System.Runtime.Remoting.Messaging.IMessage)
0346f470 03174769 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.Invoke(Class
System.Runtime.Remoting.Messaging.IMessage)
0346f480 0317390e [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.RemoteDispatchHelper(String,ByRef
Boolean)
0346f490 031738bf [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.System.EnterpriseServices.IRemoteDispatch.RemoteDispatchNotAutoDone(String)
0346f57c 7920de5d [FRAME: ComMethodFrame]


Begin System Thread Information

# ChildEBP RetAddr
00 0346ef5c 7c826fe9 ntdll!KiFastSystemCallRet
01 0346ef60 71b22438 ntdll!NtDeviceIoControlFile+0xc
02 0346eff0 71c02fee mswsock!WSPRecv+0x1c6
03 0346f038 00edb34f ws2_32!recv+0x83
WARNING: Frame IP not in any known module. Following frames may be wrong.
04 0346f0a8 0331184f 0xedb34f
05 0346f0d8 03174fda 0x331184f
06 0346f120 791dc58d 0x3174fda
07 0346f140 793439e7 mscorwks!CallDescrWorker+0x30
08 0346f270 79343c1e mscorwks!CallDescrWithObjectArray+0x3bb
09 0346f360 03181910 mscorwks!CStackBuilderSink::PrivateProcessMessage+0x16c
0a 0346f418 79aecc50 0x3181910
0b 0346f468 03174769 mscorlib_79990000+0x15cc50
0c 0346f540 00eda179 0x3174769
0d 0346f5a4 77ce33e1 0xeda179
0e 0346f9a4 77ce1968 RPCRT4!NdrStubCall2+0x299
0f 0346f9fc 7778d01b RPCRT4!CStdStubBuffer_Invoke+0x3f
10 0346fa40 7778cfc8 ole32!SyncStubInvoke+0x37
11 0346fa88 776c120b ole32!StubInvoke+0xa7
12 0346fb64 776c0bf5 ole32!CCtxComChnl::ContextInvoke+0xec
13 0346fb80 7778d2a7 ole32!MTAInvoke+0x1a
14 0346fbb0 7778cd66 ole32!AppInvoke+0xa3
15 0346fc84 7778d2c6 ole32!ComInvokeWithLockAndIPID+0x2c5
16 0346fcd0 77c7ff7a ole32!ThreadInvoke+0x2e3
17 0346fd04 77c8042d RPCRT4!DispatchToStubInCNoAvrf+0x38
18 0346fd58 77c80353 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x11f
19 0346fd7c 77c7e0d4 RPCRT4!RPC_INTERFACE::DispatchToStub+0xa3
1a 0346fdbc 77c7e080 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xc0
1b 0346fdfc 77c812f0 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x41e
1c 0346fe20 77c88678 RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x127
1d 0346ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x430
1e 0346ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
1f 0346ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
20 0346ffb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
21 0346ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 15
System Thread ID: 2870
Kernel Time: 23:31:1.546
User Time: 6:47:37.281
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 15
ESP EIP
034af068 7c82860c [FRAME: NDirectMethodFrameStandalone] [DEFAULT] I4
System.Net.UnsafeNclNativeMethods/OSSOCK.recv(I,I,I4,ValueClass
System.Net.Sockets.SocketFlags)
034af07c 033119df [DEFAULT] [hasThis] I4
System.Net.Sockets.Socket.Receive(SZArray UI1,I4,I4,ValueClass
System.Net.Sockets.SocketFlags)
034af0bc 0331184f [DEFAULT] [hasThis] I4
System.Net.Sockets.NetworkStream.Read(SZArray UI1,I4,I4)
034af0e8 03174fda [DEFAULT] [hasThis] SZArray UI1
Vistacomp.Core.Connection.RunVistaProgram(String,SZArray
UI1,String,I4,I4,I4,I4)
034af2a8 791dc58d [FRAME: GCFrame]
034af3a0 791dc58d [FRAME: ECallMethodFrame] [DEFAULT] [hasThis] Object
System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(Class
System.Reflection.MethodBase,SZArray Object,Object,I4,Boolean,ByRef SZArray
Object)
034af3c4 799d1693 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(Class
System.Runtime.Remoting.Messaging.IMessage,I4,Boolean)
034af428 79aecc50 [DEFAULT] Class
System.Runtime.Remoting.Messaging.IMethodReturnMessage
System.Runtime.Remoting.RemotingServices.ExecuteMessage(Class
System.MarshalByRefObject,Class
System.Runtime.Remoting.Messaging.IMethodCallMessage)
034af438 0317493c [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.LocalInvoke(Class
System.Runtime.Remoting.Messaging.IMessage)
034af470 03174769 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.Invoke(Class
System.Runtime.Remoting.Messaging.IMessage)
034af480 0317390e [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.RemoteDispatchHelper(String,ByRef
Boolean)
034af490 031738bf [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.System.EnterpriseServices.IRemoteDispatch.RemoteDispatchNotAutoDone(String)
034af57c 7920de5d [FRAME: ComMethodFrame]


Begin System Thread Information

# ChildEBP RetAddr
00 034aef5c 7c826fe9 ntdll!KiFastSystemCallRet
01 034aef60 71b22438 ntdll!NtDeviceIoControlFile+0xc
02 034aeff0 71c02fee mswsock!WSPRecv+0x1c6
03 034af038 00edb34f ws2_32!recv+0x83
WARNING: Frame IP not in any known module. Following frames may be wrong.
04 034af0a8 0331184f 0xedb34f
05 034af0d8 03174fda 0x331184f
06 034af120 791dc58d 0x3174fda
07 034af140 793439e7 mscorwks!CallDescrWorker+0x30
08 034af270 79343c1e mscorwks!CallDescrWithObjectArray+0x3bb
09 034af360 03181910 mscorwks!CStackBuilderSink::PrivateProcessMessage+0x16c
0a 034af418 79aecc50 0x3181910
0b 034af468 03174769 mscorlib_79990000+0x15cc50
0c 034af540 00eda179 0x3174769
0d 034af5a4 77ce33e1 0xeda179
0e 034af9a4 77ce1968 RPCRT4!NdrStubCall2+0x299
0f 034af9fc 7778d01b RPCRT4!CStdStubBuffer_Invoke+0x3f
10 034afa40 7778cfc8 ole32!SyncStubInvoke+0x37
11 034afa88 776c120b ole32!StubInvoke+0xa7
12 034afb64 776c0bf5 ole32!CCtxComChnl::ContextInvoke+0xec
13 034afb80 7778d2a7 ole32!MTAInvoke+0x1a
14 034afbb0 7778cd66 ole32!AppInvoke+0xa3
15 034afc84 7778d2c6 ole32!ComInvokeWithLockAndIPID+0x2c5
16 034afcd0 77c7ff7a ole32!ThreadInvoke+0x2e3
17 034afd04 77c8042d RPCRT4!DispatchToStubInCNoAvrf+0x38
18 034afd58 77c80353 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x11f
19 034afd7c 77c7e0d4 RPCRT4!RPC_INTERFACE::DispatchToStub+0xa3
1a 034afdbc 77c7e080 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xc0
1b 034afdfc 77c812f0 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x41e
1c 034afe20 77c88678 RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x127
1d 034aff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x430
1e 034aff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
1f 034affac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
20 034affb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
21 034affec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 16
System Thread ID: 2d50
Kernel Time: 23:31:9.765
User Time: 6:44:36.281
Thread Type: Managed Thread. Possible ASP.Net page or other .Net worker
Thread 16
ESP EIP
0352f068 7c82860c [FRAME: NDirectMethodFrameStandalone] [DEFAULT] I4
System.Net.UnsafeNclNativeMethods/OSSOCK.recv(I,I,I4,ValueClass
System.Net.Sockets.SocketFlags)
0352f07c 033119df [DEFAULT] [hasThis] I4
System.Net.Sockets.Socket.Receive(SZArray UI1,I4,I4,ValueClass
System.Net.Sockets.SocketFlags)
0352f0bc 0331184f [DEFAULT] [hasThis] I4
System.Net.Sockets.NetworkStream.Read(SZArray UI1,I4,I4)
0352f0e8 03174fda [DEFAULT] [hasThis] SZArray UI1
Vistacomp.Core.Connection.RunVistaProgram(String,SZArray
UI1,String,I4,I4,I4,I4)
0352f2a8 791dc58d [FRAME: GCFrame]
0352f3a0 791dc58d [FRAME: ECallMethodFrame] [DEFAULT] [hasThis] Object
System.Runtime.Remoting.Messaging.StackBuilderSink.PrivateProcessMessage(Class
System.Reflection.MethodBase,SZArray Object,Object,I4,Boolean,ByRef SZArray
Object)
0352f3c4 799d1693 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.Runtime.Remoting.Messaging.StackBuilderSink.SyncProcessMessage(Class
System.Runtime.Remoting.Messaging.IMessage,I4,Boolean)
0352f428 79aecc50 [DEFAULT] Class
System.Runtime.Remoting.Messaging.IMethodReturnMessage
System.Runtime.Remoting.RemotingServices.ExecuteMessage(Class
System.MarshalByRefObject,Class
System.Runtime.Remoting.Messaging.IMethodCallMessage)
0352f438 0317493c [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.LocalInvoke(Class
System.Runtime.Remoting.Messaging.IMessage)
0352f470 03174769 [DEFAULT] [hasThis] Class
System.Runtime.Remoting.Messaging.IMessage
System.EnterpriseServices.ServicedComponentProxy.Invoke(Class
System.Runtime.Remoting.Messaging.IMessage)
0352f480 0317390e [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.RemoteDispatchHelper(String,ByRef
Boolean)
0352f490 031738bf [DEFAULT] [hasThis] String
System.EnterpriseServices.ServicedComponent.System.EnterpriseServices.IRemoteDispatch.RemoteDispatchNotAutoDone(String)
0352f57c 7920de5d [FRAME: ComMethodFrame]


Begin System Thread Information

# ChildEBP RetAddr
00 0352ef5c 7c826fe9 ntdll!KiFastSystemCallRet
01 0352ef60 71b22438 ntdll!NtDeviceIoControlFile+0xc
02 0352eff0 71c02fee mswsock!WSPRecv+0x1c6
03 0352f038 00edb34f ws2_32!recv+0x83
WARNING: Frame IP not in any known module. Following frames may be wrong.
04 0352f0a8 0331184f 0xedb34f
05 0352f0d8 03174fda 0x331184f
06 0352f120 791dc58d 0x3174fda
07 0352f140 793439e7 mscorwks!CallDescrWorker+0x30
08 0352f270 79343c1e mscorwks!CallDescrWithObjectArray+0x3bb
09 0352f360 03181910 mscorwks!CStackBuilderSink::PrivateProcessMessage+0x16c
0a 0352f418 79aecc50 0x3181910
0b 0352f468 03174769 mscorlib_79990000+0x15cc50
0c 0352f540 00eda179 0x3174769
0d 0352f5a4 77ce33e1 0xeda179
0e 0352f9a4 77ce1968 RPCRT4!NdrStubCall2+0x299
0f 0352f9fc 7778d01b RPCRT4!CStdStubBuffer_Invoke+0x3f
10 0352fa40 7778cfc8 ole32!SyncStubInvoke+0x37
11 0352fa88 776c120b ole32!StubInvoke+0xa7
12 0352fb64 776c0bf5 ole32!CCtxComChnl::ContextInvoke+0xec
13 0352fb80 7778d2a7 ole32!MTAInvoke+0x1a
14 0352fbb0 7778cd66 ole32!AppInvoke+0xa3
15 0352fc84 7778d2c6 ole32!ComInvokeWithLockAndIPID+0x2c5
16 0352fcd0 77c7ff7a ole32!ThreadInvoke+0x2e3
17 0352fd04 77c8042d RPCRT4!DispatchToStubInCNoAvrf+0x38
18 0352fd58 77c80353 RPCRT4!RPC_INTERFACE::DispatchToStubWorker+0x11f
19 0352fd7c 77c7e0d4 RPCRT4!RPC_INTERFACE::DispatchToStub+0xa3
1a 0352fdbc 77c7e080 RPCRT4!RPC_INTERFACE::DispatchToStubWithObject+0xc0
1b 0352fdfc 77c812f0 RPCRT4!LRPC_SCALL::DealWithRequestMessage+0x41e
1c 0352fe20 77c88678 RPCRT4!LRPC_ADDRESS::DealWithLRPCRequest+0x127
1d 0352ff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x430
1e 0352ff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
1f 0352ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
20 0352ffb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
21 0352ffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 17
System Thread ID: 2618
Kernel Time: 0:0:0.15
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 009ffe18 7c827859 ntdll!KiFastSystemCallRet
01 009ffe1c 77c885ac ntdll!NtReplyWaitReceivePortEx+0xc
02 009fff84 77c88792 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0x198
03 009fff8c 77c8872d RPCRT4!RecvLotsaCallsWrapper+0xd
04 009fffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0x9d
05 009fffb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
06 009fffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 18
System Thread ID: c00
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 003dfec8 7c8277f9 ntdll!KiFastSystemCallRet
01 003dfecc 77e5bea2 ntdll!NtRemoveIoCompletion+0xc
02 003dfef8 4a7ef40f kernel32!GetQueuedCompletionStatus+0x29
03 003dff74 4a7ef6aa COMSVCS!WORK_QUEUE::WorkerLoop+0x66
04 003dff84 77bcb530 COMSVCS!WORK_QUEUE::ThreadLoop+0x19
05 003dffb8 77e6482f msvcrt!_endthreadex+0xa3
06 003dffec 00000000 kernel32!BaseThreadStart+0x34




Thread ID: 19
System Thread ID: f2c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.

No remote call being made

# ChildEBP RetAddr
00 00b4ff70 7c826f69 ntdll!KiFastSystemCallRet
01 00b4ff74 77c8884c ntdll!NtDelayExecution+0xc
02 00b4ff8c 77c88768 RPCRT4!TIMER::Wait+0x2b
03 00b4ffac 77c7b110 RPCRT4!BaseCachedThreadRoutine+0xe8
04 00b4ffb8 77e6482f RPCRT4!ThreadStartRoutine+0x1b
05 00b4ffec 00000000 kernel32!BaseThreadStart+0x34

*****

Dump name is formatted as: PID-Timestamp.dmp

Creating C:\Documents and
Settings\a-athiyappans\Desktop\IISstate\output\8364-1283506921.dmp - mini
user dump