Delf said:
When the page hangs, iisstate gives :
Opened log file 'C:\iisstate\output\IISState-3296.log'
***********************
Starting new log output
IISState version 3.3.1
Tue May 10 11:34:16 2005
OS = Windows XP
Executable: inetinfo.exe
PID = 3296
Note: Thread times are formatted as HH:MM:SS.ms
***********************
Thread ID: 0
System Thread ID: cd4
Kernel Time: 0:0:0.296
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 0006f870 7c91e288 ntdll!KiFastSystemCallRet
01 0006f874 7c801875 ntdll!NtReadFile+0xc
02 0006f8dc 77dbb3cb kernel32!ReadFile+0x16c
03 0006f908 77dbb25f ADVAPI32!ScGetPipeInput+0x2a
04 0006f97c 77e07dcc ADVAPI32!ScDispatcherLoop+0x3f
05 0006fbbc 01002924 ADVAPI32!StartServiceCtrlDispatcherA+0x93
06 0006fcfc 01003150 inetinfo!StartDispatchTable+0x383
07 0006ff44 0100350a inetinfo!main+0x797
08 0006ffc0 7c816d4f inetinfo!mainCRTStartup+0x125
09 0006fff0 00000000 kernel32!BaseProcessStart+0x23
Thread ID: 1
System Thread ID: f18
Kernel Time: 0:0:0.31
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 005bfcc0 7c91e9c0 ntdll!KiFastSystemCallRet
01 005bfcc4 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 005bfd28 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 005bfd3c 671628ff kernel32!WaitForSingleObject+0x12
04 005bfd64 01002512 iisadmin!ServiceEntry+0x1e7
05 005bffa0 77dbb48b inetinfo!InetinfoStartService+0x2ca
06 005bffb4 7c80b50b ADVAPI32!ScSvcctrlThreadA+0x12
07 005bffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 2
System Thread ID: 7f8
Kernel Time: 0:0:0.125
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 006dfddc 7c91e9ab ntdll!KiFastSystemCallRet
01 006dfde0 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 006dfe7c 77d1bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 006dfed8 77d1bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 006dfef4 619ac634 USER32!MsgWaitForMultipleObjects+0x1f
05 006dff80 77c0a3b0 IisRTL!SchedulerWorkerThread+0xaf
06 006dffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 006dffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 3
System Thread ID: 520
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 0097fe18 7c91e399 ntdll!KiFastSystemCallRet
01 0097fe1c 77e56703 ntdll!NtReplyWaitReceivePortEx+0xc
02 0097ff80 77e56c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0xf4
03 0097ff88 77e56a3b RPCRT4!RecvLotsaCallsWrapper+0xd
04 0097ffa8 77e56c0a RPCRT4!BaseCachedThreadRoutine+0x79
05 0097ffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
06 0097ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 4
System Thread ID: d44
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 009bff1c 7c91d85c ntdll!KiFastSystemCallRet
01 009bff20 7c8023ed ntdll!NtDelayExecution+0xc
02 009bff78 7c802451 kernel32!SleepEx+0x61
03 009bff88 774b2fcb kernel32!Sleep+0xf
04 009bff94 774b314d ole32!CROIDTable::WorkerThreadLoop+0x14
05 009bffa4 774a0000 ole32!CRpcThread::WorkerLoop+0x1e
06 009bffb4 7c80b50b ole32!_imp__RegQueryValueExA <PERF> (ole32+0x0)
07 009bffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 5
System Thread ID: 5d4
Kernel Time: 0:0:0.31
User Time: 0:0:0.15
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 009ffe18 7c91e399 ntdll!KiFastSystemCallRet
01 009ffe1c 77e56703 ntdll!NtReplyWaitReceivePortEx+0xc
02 009fff80 77e56c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0xf4
03 009fff88 77e56a3b RPCRT4!RecvLotsaCallsWrapper+0xd
04 009fffa8 77e56c0a RPCRT4!BaseCachedThreadRoutine+0x79
05 009fffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
06 009fffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 6
System Thread ID: b68
Kernel Time: 0:0:0.78
User Time: 0:0:0.15
Thread Type: Other
# ChildEBP RetAddr
00 00a3fbc0 7c91e9ab ntdll!KiFastSystemCallRet
01 00a3fbc4 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00a3fc60 77d1bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00a3fcbc 77d1bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00a3fcd8 71b972bd USER32!MsgWaitForMultipleObjects+0x1f
05 00a3fd24 5ad5fae5 INFOCOMM!IIS_SERVICE::StartServiceOperation+0x234
06 00a3fd64 01002512 w3svc!ServiceEntry+0x1ab
07 00a3ffa0 77dbb48b inetinfo!InetinfoStartService+0x2ca
08 00a3ffb4 7c80b50b ADVAPI32!ScSvcctrlThreadA+0x12
09 00a3ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 7
System Thread ID: d74
Kernel Time: 0:0:0.0
User Time: 0:0:0.15
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00abff48 7c91e31b ntdll!KiFastSystemCallRet
01 00abff4c 7c80cbd9 ntdll!ZwRemoveIoCompletion+0xc
02 00abff78 66339b3a kernel32!GetQueuedCompletionStatus+0x29
03 00abffb4 7c80b50b ISATQ!AtqPoolThread+0x40
04 00abffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 8
System Thread ID: 868
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 00d3fe18 7c91e399 ntdll!KiFastSystemCallRet
01 00d3fe1c 77e56703 ntdll!NtReplyWaitReceivePortEx+0xc
02 00d3ff80 77e56c22 RPCRT4!LRPC_ADDRESS::ReceiveLotsaCalls+0xf4
03 00d3ff88 77e56a3b RPCRT4!RecvLotsaCallsWrapper+0xd
04 00d3ffa8 77e56c0a RPCRT4!BaseCachedThreadRoutine+0x79
05 00d3ffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
06 00d3ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 9
System Thread ID: e2c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00d7fea4 7c91e9ab ntdll!KiFastSystemCallRet
01 00d7fea8 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00d7ff44 77dc9b26 kernel32!WaitForMultipleObjectsEx+0x12c
03 00d7ffb4 7c80b50b ADVAPI32!WmipEventPump+0x230
04 00d7ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 10
System Thread ID: ecc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Possible ASP page. Possible DCOM activity
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
No remote call being made
# ChildEBP RetAddr
00 00afff6c 7c91d85c ntdll!KiFastSystemCallRet
01 00afff70 77e56b03 ntdll!NtDelayExecution+0xc
02 00afff88 77e56a86 RPCRT4!TIMER::Wait+0x2b
03 00afffa8 77e56c0a RPCRT4!BaseCachedThreadRoutine+0xc4
04 00afffb4 7c80b50b RPCRT4!ThreadStartRoutine+0x1a
05 00afffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 11
System Thread ID: 4a4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Compression Thread
# ChildEBP RetAddr
00 00dbff18 7c91e9c0 ntdll!KiFastSystemCallRet
01 00dbff1c 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 00dbff80 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 00dbff94 6eba34e4 kernel32!WaitForSingleObject+0x12
04 00dbffb4 7c80b50b compfilt!CompressionThread+0x25
05 00dbffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 12
System Thread ID: 26c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00e1ff98 7c91d85c ntdll!KiFastSystemCallRet
01 00e1ff9c 7c9379d4 ntdll!NtDelayExecution+0xc
02 00e1ffb4 7c80b50b ntdll!RtlpTimerThread+0x47
03 00e1ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 13
System Thread ID: bfc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00e5ff88 7c91d85c ntdll!KiFastSystemCallRet
01 00e5ff8c 7c920b09 ntdll!NtDelayExecution+0xc
02 00e5ffb4 7c80b50b ntdll!RtlpIOWorkerThread+0x3f
03 00e5ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 14
System Thread ID: e04
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00e9fce8 7c91e9ab ntdll!KiFastSystemCallRet
01 00e9fcec 7c93a0d5 ntdll!ZwWaitForMultipleObjects+0xc
02 00e9ffb4 7c80b50b ntdll!RtlpWaitThread+0x13d
03 00e9ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 15
System Thread ID: b98
Kernel Time: 0:0:0.78
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00f2fe24 7c91e9ab ntdll!KiFastSystemCallRet
01 00f2fe28 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00f2fec4 77d1bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00f2ff20 77d1bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00f2ff3c 5ad6ae75 USER32!MsgWaitForMultipleObjects+0x1f
05 00f2ff80 77c0a3b0 w3svc!CMTACallbackThread::Thread+0x4f
06 00f2ffb4 7c80b50b msvcrt!_endthreadex+0xa9
07 00f2ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 16
System Thread ID: 47c
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Other
# ChildEBP RetAddr
00 00f6fe58 7c91e9ab ntdll!KiFastSystemCallRet
01 00f6fe5c 7c8094f2 ntdll!ZwWaitForMultipleObjects+0xc
02 00f6fef8 77d1bbfe kernel32!WaitForMultipleObjectsEx+0x12c
03 00f6ff54 77d1bcad USER32!RealMsgWaitForMultipleObjectsEx+0x13e
04 00f6ff70 5ad5fdbf USER32!MsgWaitForMultipleObjects+0x1f
05 00f6ffb4 7c80b50b w3svc!OleHackThread+0xac
06 00f6ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 17
System Thread ID: 744
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 00fafe04 7c91e9c0 ntdll!KiFastSystemCallRet
01 00fafe08 71994033 ntdll!ZwWaitForSingleObject+0xc
02 00fafe44 71995fa7 mswsock!SockWaitForSingleObject+0x1a0
03 00faff38 719f2e67 mswsock!WSPSelect+0x25f
04 00faff88 6633692c WS2_32!select+0xb8
05 00faffac 6633699e ISATQ!ATQ_BMON_SET::BmonThreadFunc+0x23
06 00faffb4 7c80b50b ISATQ!BmonThreadFunc+0xd
07 00faffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 18
System Thread ID: b40
Kernel Time: 0:0:0.15
User Time: 0:0:0.31
Thread Type: HTTP Listener
# ChildEBP RetAddr
00 0093ff48 7c91e31b ntdll!KiFastSystemCallRet
01 0093ff4c 7c80cbd9 ntdll!ZwRemoveIoCompletion+0xc
02 0093ff78 66339b3a kernel32!GetQueuedCompletionStatus+0x29
03 0093ffb4 7c80b50b ISATQ!AtqPoolThread+0x40
04 0093ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 19
System Thread ID: efc
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: Idle ASP thread
# ChildEBP RetAddr
00 0116feb8 7c91e9c0 ntdll!KiFastSystemCallRet
01 0116febc 7c8025db ntdll!ZwWaitForSingleObject+0xc
02 0116ff20 7c802542 kernel32!WaitForSingleObjectEx+0xa8
03 0116ff34 7611b811 kernel32!WaitForSingleObject+0x12
04 0116ffb4 7c80b50b comsvcs!CEventRegistrar::InitThread+0x103
05 0116ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 20
System Thread ID: e60
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 0137fef8 7c91d85c ntdll!KiFastSystemCallRet
01 0137fefc 7c8023ed ntdll!NtDelayExecution+0xc
02 0137ff54 7c802451 kernel32!SleepEx+0x61
03 0137ff64 79e8de84 kernel32!Sleep+0xf
04 0137ffb4 7c80b50b aspnet_isapi!ThreadGateThreadProc+0x6a
05 0137ffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 21
System Thread ID: 948
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
Thread Type: ASP
Executing Page: ASP.dll symbols not found. Unable to locate ASP page.
Continuing with other analysis.
# ChildEBP RetAddr
00 013bff4c 7c91e31b ntdll!KiFastSystemCallRet
01 013bff50 7c80cbd9 ntdll!ZwRemoveIoCompletion+0xc
02 013bff7c 79e8dda8 kernel32!GetQueuedCompletionStatus+0x29
03 013bffb4 7c80b50b aspnet_isapi!ThreadPoolThreadProc+0x6e
04 013bffec 00000000 kernel32!BaseThreadStart+0x37
Thread ID: 22
System Thread ID: 1b4
Kernel Time: 0:0:0.0
User Time: 0:0:0.0
...