Application pool terminated unexpectedly

From: Brian L. (699df88b-2059788708_at_news.postalias)
Date: 11/02/04 

Date: Tue, 2 Nov 2004 08:05:53 -0500

Hello,

I'm experiencing what appears to be the same problem as other people. That
is, IIS stops serving pages with the message "A process serving application
pool 'DefaultAppPool' terminated unexpectedly. The process id was '1908'.
The process exit code was '0x80'". Now the cause and background for my case
are likely different from others, so I'll explain.

We are currently rebuilding from scratch a NLB, Application center clustered
(2 members) web server environment due to an irreparable configuration
mistake on the initial 2 servers. Without going into unnecessary detail, the
initial 2 servers both got built with their partitions completely out of
whack. This presents a problem for disaster recovery, and needed to be
fixed.

So in rebuilding the boxes, part of the standard procedure is to run
vulnerability scans against the machine to make sure there are no
'surprises'. We have always used Nessus for this. As it stands now I have a
condition where almost every scan I run against the rebuilt web server
causes the message below to show up in the event log. Along with this, the
web server reports Service Unavailable when you try to access any page after
the message below is generated.

I have tried to narrow down specific problem areas of the otherwise standard
practice scan I'm running, but have only succeeded in frustrating myself.
Whenever I think I have the problem isolated to a specific function, it
happens again. I'm not asking for help related to Nessus, since this is
obviously not the place for that. I'm convinced there is either some
misconfiguration or other problem that exists and is causing the crash.

I've tried to follow several other threads that I've seen with the same exit
code and error messages, but there never seems to be a solution in the
thread. I've tried using the debugging tools (IISdump, windbg) but it is not
very easy for me to comprehend :) I'll attach what I had below. Any help
would be appreciated! Thanks

-------------------------
Event:

Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 1009
Date: 10/20/2004
Time: 9:58:51 AM
User: N/A
Computer: WEBSERVER01
Description:
A process serving application pool 'DefaultAppPool' terminated unexpectedly.
The process id was '1908'. The process exit code was '0x80'.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

-------------------------
Dump info from windbg:

Microsoft (R) Windows Debugger Version 6.3.0017.0
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File
[C:\IISDebugTools\logs\20041025-105506\Process_Shut_Down--2636_dllhost_AC_Lo
g_Consumer.dmp]
User Mini Dump File with Full Memory: Only application data is available

Comment: 'Generated by IISDBG'
Windows Server 2003 Version 3790 MP (2 procs) Free x86 compatible
Product: Server, suite: TerminalServer SingleUserTS Blade
Debug session time: Mon Oct 25 11:05:16 2004
System Uptime: 26 days 19:24:26.062
Process Uptime: 0 days 0:21:30.000
Symbol search path is: SRV*downstream
store*http://msdl.microsoft.com/download/symbols

Executable search path is:
...............................................................
eax=000000c0 ebx=00000000 ecx=00000000 edx=00000000 esi=00000000
edi=00000000
eip=7ffe0304 esp=0067ffa0 ebp=0067ffb8 iopl=0 nv up ei pl zr na po nc
cs=001b ss=0023 ds=0023 es=0023 fs=003b gs=0000 efl=00000246
SharedUserData!SystemCallStub+0x4:
7ffe0304 c3 ret

Relevant Pages

  • Error 1002 - IIS 6 being automatically disabled...
    ... series of failures in the processserving that application pool. ... see Help and Support Center at ... A process serving application pool 'DefaultAppPool' terminated unexpectedly. ...
    (microsoft.public.inetserver.iis)
  • problem with DefaultAppPool in IIS
    ... 'DefaultAppPool' terminated unexpectedly". ... Application pool 'DefaultAppPool' is being automatically ... A process serving application pool 'DefaultAppPool' terminated ... The process exit code was ...
    (microsoft.public.windows.server.sbs)
  • Re: Error 1002 - IIS 6 being automatically disabled...
    ... DefaultAppPool, which causes the application pool to disable itself, ... DefaultAppPool, and see if they contain any coding errors. ... see Help and Support Center at ... > A process serving application pool 'DefaultAppPool' suffered a fatal ...
    (microsoft.public.inetserver.iis)
  • Re: Error 1002 - IIS 6 being automatically disabled...
    ... >series of failures in the processserving that application pool. ... see Help and Support Center at ... >A process serving application pool 'DefaultAppPool' terminated unexpectedly. ...
    (microsoft.public.inetserver.iis)
  • Faulting application w3wp.exe
    ... Faulting application w3wp.exe, version 6.0.3790.0, faulting module unknown, ... A process serving application pool 'DefaultAppPool' suffered a fatal ...
    (microsoft.public.inetserver.iis)