IIS crash dump results




We have a iis crash :

Analysis Summary
Type Description Recommendation
Error In w3wp.exe.dmp the assembly instruction at
asp!CPerfData::Add_REQTOTALBYTEIN+1f in
\\?\C:\WINDOWS\system32\inetsrv\asp.dll from Microsoft Corporation has caused
an access violation exception (0xC0000005) when trying to write to memory
location 0x0f750018 on thread 6
Please follow up with the vendor Microsoft Corporation for
\\?\C:\WINDOWS\system32\inetsrv\asp.dll

Information DebugDiag determined that this dump file (w3wp.exe.dmp) is a
crash dump and did not perform any hang analysis. If you wish to enable
combined crash and hang analysis for crash dumps, edit the
CrashHangAnalysis.asp script (located in the DebugDiag\Scripts folder) and
set the g_DoCombinedAnalysis constant to True.





Analysis Details



Your browser settings are currently prohibiting this report's scripts from
running.

This is preventing some features of this analysis report from displaying
properly. To enable scripts to run, right-click the security warning above
and choose "Allow Blocked Content..." or enable the "Allow active content to
run in files on My Computer*" setting on the Advanced tab of your "Internet
Options" dialog to avoid being prompted in the future





Table Of Contents
w3wp.exe.dmp

Faulting Thread

Faulting Module Information



Report for w3wp.exe.dmp




Report for w3wp.exe.dmp
Type of Analysis Performed Crash Analysis
Machine Name HNODE7
Operating System Windows Server 2003 Service Pack 2
Number Of Processors 4
Process ID 12008
Process Image c:\WINDOWS\system32\inetsrv\w3wp.exe
System Up-Time 00:00:00
Process Up-Time 00:00:45


Thread 6 - System ID 14808

Function Arg 1 Arg 2 Arg 3 Source
ntdll!KiFastSystemCallRet 77e61d1e 0000099c 00000000
ntdll!ZwWaitForSingleObject+c 0000099c 00000000 00f9a1a0
kernel32!WaitForSingleObjectEx+ac 0000099c 0001d4c0 00000000
kernel32!WaitForSingleObject+12 0000099c 0001d4c0 00f9c290
faultrep!MyCallNamedPipe+15b 00f9e290 00f9c290 00000092
faultrep!StartManifestReport+1d5 00f9fa10 00f9f2cc ffffffff
faultrep!ReportFault+3d2 00f9fa10 ffffffff 00000001
kernel32!UnhandledExceptionFilter+494 00f9fa10 00f9fa10 010015e6

w3wp!WpUnhandledExceptionFilter+3d 00f9fa10 00f9fa10 00000000
ISAPI_Rewrite+5f89f 00f9fa10 77ecb7c0 77e761b7
iispasswordfilter!GetFilterVersion+1524e 00f9fa10 77e61ac1
00f9fa18
kernel32!BaseThreadStart+4a 00f9fa18 00000000 00f9fa18
kernel32!_except_handler3+61 00f9fafc 00f9ffdc 00f9fb18
ntdll!ExecuteHandler2+26 00f9fafc 00f9ffdc 00f9fb18
ntdll!ExecuteHandler+24 00f99000 00f9fb18 00f9fafc
ntdll!KiUserExceptionDispatcher+e 00f99000 00f9fb18 00f9fafc
asp!CPerfData::Add_REQTOTALBYTEIN+1f 00000083 5a3229f4 010ad4c8

asp!HttpExtensionProc+105 010ad4c8 010ac208 010ace58
w3isapi!ProcessIsapiRequest+214 010ad438 709e792d 00f9fe50
w3core!W3_ISAPI_HANDLER::IsapiDoWork+3fd 00000000 00000000
010ac208
w3core!W3_ISAPI_HANDLER::DoWork+b0 00f9fee8 010ac208 00000000
w3core!W3_HANDLER::MainDoWork+16e 010ac208 00000000 00f9fec4
w3core!W3_CONTEXT::ExecuteCurrentHandler+53 010ac210 010ac208
00000001
w3core!W3_CONTEXT::ExecuteHandler+51 00000001 00f9fee8 0003bdf0

w3core!W3_STATE_HANDLE_REQUEST::DoWork+9a 00000000 00000000
00000000
w3core!W3_MAIN_CONTEXT::DoWork+a6 00000000 00000000 00000000
w3core!W3_MAIN_CONTEXT::OnNewRequest+55 010ab740 010ab740
5a361650
w3dt!UL_NATIVE_REQUEST::DoStateProcess+48 00038780 0003878c
00f9ff5c
w3dt!UL_NATIVE_REQUEST::DoWork+7f 0000037f 00000000 010ab744
w3dt!OverlappedCompletionRoutine+1a 00000000 0000037f 010ab744
w3tp!THREAD_POOL_DATA::ThreadPoolThread+73 00000000 00038858
5a300000
w3tp!THREAD_POOL_DATA::ThreadPoolThread+24 00038780 00000000
00000000
w3tp!THREAD_MANAGER::ThreadManagerThread+39 00038858 00000000
00000000
kernel32!BaseThreadStart+34 5a301d70 00038858 00000000




ASP!CPERFDATA::ADD_REQTOTALBYTEIN+1FIn w3wp.exe.dmp the assembly instruction
at asp!CPerfData::Add_REQTOTALBYTEIN+1f in
\\?\C:\WINDOWS\system32\inetsrv\asp.dll from Microsoft Corporation has caused
an access violation exception (0xC0000005) when trying to write to memory
location 0x0f750018 on thread 6

Module Information
Image Name: \\?\C:\WINDOWS\system32\inetsrv\asp.dll Symbol Type: PDB
Base address: 0x709e0000 Time Stamp: Tue Nov 27 02:43:51 2007
Checksum: 0x00064415 Comments:
COM DLL: False Company Name: Microsoft Corporation
ISAPIExtension: False File Description: Active Server Pages
ISAPIFilter: False File Version: 6.0.3790.4195 (srv03_sp2_gdr.071126-1204)
Managed DLL: False Internal Name: asp.dll
VB DLL: False Legal Copyright: © Microsoft Corporation. All rights
reserved.
Loaded Image Name: asp.dll Legal Trademarks:
Mapped Image Name: c:\symcache\asp.dll\474B846763000\asp.dll Original
filename: asp.dll
Module name: asp Private Build:
Single Threaded: False Product Name: Internet Information Services
Module Size: 396.00 KBytes Product Version: 6.0.3790.4195
Symbol File Name:
c:\symcache\asp.pdb\38E004336A2A4FAF88199383CEAD54A82\asp.pdb Special
Build: &









Script Summary
Script Name Status Error Code Error Source Error Description Source Line
CrashHangAnalysis.asp Completed



Can anyone tell me the cause ?


.



Relevant Pages

  • RE: IIS crash dump results
    ... Please follow up with the vendor Microsoft Corporation for ... crash dump and did not perform any hang analysis. ... Faulting Module Information ... Script Summary ...
    (microsoft.public.inetserver.iis)
  • Re: on input form showing error message for duplicate entry.
    ... my SITE will not crash. ... you can 'what if' the daylights out of this script. ... this scenario DOES NOT exist in this script. ... | i think, there is no sense to speak more about it, think again about my ...
    (alt.php)
  • RE: How to ensure a script to run when system crashes
    ... If the latter (Crash) there is no way to run some code AFTER the system has ... Your best bet is disabling Wake-On-Lan in the BIOS which should disable your ... I am running wmi script to enable one of the LAN connections during system ... for shut down but the unload event is not called when the system crashes. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: on input form showing error message for duplicate entry.
    ... this age you should to handle all, everytime some1 whants to crash you site ... i think, there is no sense to speak more about it, think again about my ... it means we can write to parts of script ...
    (alt.php)
  • RE: Kernel Panic
    ... I think I see what caused the kernel to crash. ... >and slapped a 1GB SCSI disk on it (the system isn't intended ... >>I just wrote a little shell script that, ...
    (FreeBSD-Security)