Web Server Memory 4 GB but w3wp.exe reach 210 MB IIS Stuck

Tech-Archive recommends: Fix windows errors by optimizing your registry

We have a serious issue, please see this. We have two web servers. There are
two physical machines with 100% same hardware & software configuration.
Running with Server 2003 & IIS 6.0 with 4 GB RAM. One web server is for
Internal users & other for External users. A Classic ASP application running
on both servers. In the company approx 100 user use it. When I see Task
Manager of Internal Server here is a process w3wp.exe, when this task reach
approx 1.5 GB the IIS hang, and we required to reset IIS. But it is not very
big issue. The issue is that the 2nd server which is for external user, IIS
hang when w3wp.exe reach approx only 210 MB. Both server have same
configuration and have same application installed on it. To access these
servers, the External & also the Internal user, goes through a Firewall.

When the IIS stuck, the System Event Viewer not give any error message.

We use a software IISDiagnosticTool, so when IIS stuck, it give a very long
log which is not understandable to us.

.

Relevant Pages

  • Re: Microsoft Security Advisory MS 03-007
    ... > You say "IIS servers are actively being compromised already, ... -- permissions are checked on httpext.dll to see if Anonymous request using ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Focus-Microsoft)
  • RE: Microsoft Security Advisory MS 03-007
    ... announcement covers IIS 5.1 but not IIS 6, ... > You say "IIS servers are actively being compromised already, ... -- permissions are checked on httpext.dll to see if Anonymous request ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Bugtraq)
  • Re: Microsoft Security Advisory MS 03-007
    ... announcement covers IIS 5.1 but not IIS 6, ... > You say "IIS servers are actively being compromised already, ... -- permissions are checked on httpext.dll to see if Anonymous request ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Bugtraq)
  • RE: Microsoft Security Advisory MS 03-007
    ... announcement covers IIS 5.1 but not IIS 6, ... > You say "IIS servers are actively being compromised already, ... through, and if it carried the exploit, compromise could occur. ... CONFIGURATIONS OF THE IIS LOCKDOWN TOOL DO LEAVE WEBDAV ...
    (Focus-Microsoft)
  • Re: Howto refresh IIS 6 Application pool identity credential info
    ... The Application Servers are load balanced clustered, ... HostHeader names in IIS, it has a CNAME in DNS referencing ... Only account A has access to database DB-A ...
    (microsoft.public.inetserver.iis.security)