I am having an issue with FTP on a 2008 R2 Standard server running IIS 7. The admin that worked here before me would literally reboot the server every time a developer would have issues with the FTP service. I am trying to find out the root cause of the
issue to find a long term solution. This is what is happening:
About once a week the server will start rejecting FTP connection attempts. with error "A connection to the server could not be established". When this happens I also cannot log in via FTP locally on the machine itself. I then open the Server Manager and
look in Web Services to see that the FTPSVC is in the "stopping state". To stop the process I have to manually terminate the svchost.exe associated with the ftpsvc. After the process is terminated I can see that the ftpsvc process start again, but FTP connections
are still broken.
I then used Debug Diag and ran a Full User Dump on the svchost.exe process for ftpsvc and received some Warnings. The problem is that I do not fully understand what the report says. I am hoping someone will be able to look at this and let me know what next
steps I should take.
This thread is waiting on the local RpcSs service to complete a COM activation request inanother COM server process.
Analysis Summary
<div id="analysisSummaryGroup"> <div class="summaryGroup mt20 normalText" id="warningsAnalysisSummarySection"> <div></div> <div class="groupTitle summaryGroupLabel Warning">
![]()
Warning</div> <div class="group mt20">
The following threads in svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp are waiting on the localRpcSs service to complete a COM activation request in another COM server process.
( 5 )
5.56% of threads blocked (1 threads)
| The thread(s) in question is/are waiting on a CoCreateInstance call to return. Further analysis ofthe process hosting the particular component (not the RpcSs service) should be performed to determine why these calls have not completed. More information for the particular component(s) that the thread(s) in
question is/are attempting to instantiate can be found in the thread detail for each thread listed in the Description pane to the left. |
</div> </div> </div>
<div class="mt40"></div>
<div class="analysisDetailsSection"> <div class="expandCollapseButton-expanded" id="btnAnalysisDetails"></div> <div class="sectionHeader mt40">Analysis Details</div> <div id="analysisDetailsGroup"> <div class="normalText group" id="group"> <div class="mt20"
id="B1" data-debug-rule="CrashHangAnalysis" data-debug-details="parent"> <div class="expandCollapseButton-expanded21x21" id="btnB1"></div> <div class="groupTitle mt20 ml35">
CrashHangAnalysis
</div> <div class="normalText group" id="B1group"> <div class="mt20 dump" id="B1C1" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="dump"> <div class="expandCollapseButton-expanded21x21"
id="btnB1C1"></div> <div class="groupTitle mt20 ml35">
Report for svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp
</div> <div class="normalText group" id="B1C1group"> <div class="mt20 normalText">
Type of Analysis Performed | Hang Analysis |
Machine Name | IIS4 |
Operating System | Windows Server 2008 R2Service Pack 1 |
Number Of Processors | 8 |
Process ID | 3284 |
Process Image | C:\Windows\System32\svchost.exe |
Command Line | C:\Windows\system32\svchost.exe -k ftpsvc |
System Up-Time | 2 day(s) 09:35:54 |
Process Up-Time | 00:07:38 |
Processor Type | X64 |
Process Bitness | 64-Bit |
</div> <div class="mt20 custom" id="CPUB1C1" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="custom"> <div class="groupTitle mt20">
Top 5 Threads by CPU time
</div> <div class="normalText group" id="CPUB1C1group"> <div class="mt20 normalText">
Note - Times include both user mode and kernel mode for each thread
Thread ID:3 | Total CPU Time: 00:00:00.171 | Entry Point for Thread: ftpsvc!FTPServiceThreadProc |
Thread ID:2 | Total CPU Time: 00:00:00.015 | Entry Point for Thread: sechost!ScSvcctrlThreadA |
Thread ID:6 | Total CPU Time: 00:00:00.015 | Entry Point for Thread: ftpsvc!THREAD_MANAGER::ThreadManagerThread |
Thread ID:5 | Total CPU Time: 00:00:00.015 | Entry Point for Thread: ftpsvc!THREAD_MANAGER::ThreadManagerThread |
Thread ID:0 | Total CPU Time: 00:00:00.015 | Entry Point for Thread: svchost!wmainCRTStartup |
</div> </div> </div> <div class="mt20 custom" id="CLRInformationB1C1" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="custom"> <div class="groupTitle mt20">
CLR Information
</div> <div class="normalText group" id="CLRInformationB1C1group"> <div class="mt20 normalText">
</div> </div> </div> <div class="mt20" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp"
data-debug-rule="CrashHangAnalysis" data-debug-details="threadsummary"> <div class="expandCollapseButton-expanded21x21" id="btnB1C1D-1"></div> <div class="groupTitle mt20 ml35">
Thread Report
</div> <div class="normalText group" id="B1C1D-1group"> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs0">
6 Threads (33% of all threads) have this same call stack.
Note: Grouping of identical threads can be disabled in the 'Preferences' tab of the Analysis Options<div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread9768" role="tabpanel" aria-expanded="true" aria-hidden="false"
aria-labelledby="ui-id-1" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 9 - System ID 9768
</div> <div class="normalText group" id="B1C1Thread9768group"> <div class="mt20 normalText">
Entry point | ftpsvc!AD_LOOKUP_MANAGER::WorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> <div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread11868" role="tabpanel" aria-expanded="false" aria-hidden="true" aria-labelledby="ui-id-2" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual
Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 10 - System ID 11868
</div> <div class="normalText group" id="B1C1Thread11868group"> <div class="mt20 normalText">
Entry point | ftpsvc!AD_LOOKUP_MANAGER::WorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> <div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread10648" role="tabpanel" aria-expanded="false" aria-hidden="true" aria-labelledby="ui-id-3" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual
Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 11 - System ID 10648
</div> <div class="normalText group" id="B1C1Thread10648group"> <div class="mt20 normalText">
Entry point | ftpsvc!AD_LOOKUP_MANAGER::WorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> <div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread21820" role="tabpanel" aria-expanded="false" aria-hidden="true" aria-labelledby="ui-id-4" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual
Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 12 - System ID 21820
</div> <div class="normalText group" id="B1C1Thread21820group"> <div class="mt20 normalText">
Entry point | ftpsvc!AD_LOOKUP_MANAGER::WorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> <div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread22092" role="tabpanel" aria-expanded="false" aria-hidden="true" aria-labelledby="ui-id-5" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual
Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 13 - System ID 22092
</div> <div class="normalText group" id="B1C1Thread22092group"> <div class="mt20 normalText">
Entry point | ftpsvc!AD_LOOKUP_MANAGER::WorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> <div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread4308" role="tabpanel" aria-expanded="false" aria-hidden="true" aria-labelledby="ui-id-6" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual
Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 14 - System ID 4308
</div> <div class="normalText group" id="B1C1Thread4308group"> <div class="mt20 normalText">
Entry point | ftpsvc!AD_LOOKUP_MANAGER::WorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread9768" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread9768group"> <div class="mt20 normalText">
|
---|
ntdll!NtWaitForMultipleObjects+a |
KERNELBASE!WaitForMultipleObjectsEx+e8 |
kernel32!WaitForMultipleObjects+b0 |
ftpsvc!AD_LOOKUP_MANAGER::WorkerThread+ee |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs1">
2 Threads (11% of all threads) have this same call stack.
Note: Grouping of identical threads can be disabled in the 'Preferences' tab of the Analysis Options<div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread9000" role="tabpanel" aria-expanded="true" aria-hidden="false"
aria-labelledby="ui-id-7" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 1 - System ID 9000
</div> <div class="normalText group" id="B1C1Thread9000group"> <div class="mt20 normalText">
Entry point | ntdll!TppWorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> <div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread9116" role="tabpanel" aria-expanded="false" aria-hidden="true" aria-labelledby="ui-id-8" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual
Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 17 - System ID 9116
</div> <div class="normalText group" id="B1C1Thread9116group"> <div class="mt20 normalText">
Entry point | ntdll!TppWorkerThread |
Create time | 1/17/2016 6:37:54 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread9000" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread9000group"> <div class="mt20 normalText">
|
---|
ntdll!ZwWaitForWorkViaWorkerFactory+a |
ntdll!TppWorkerThread+2c9 |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs2">
2 Threads (11% of all threads) have this same call stack.
Note: Grouping of identical threads can be disabled in the 'Preferences' tab of the Analysis Options<div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread8988" role="tabpanel" aria-expanded="true" aria-hidden="false"
aria-labelledby="ui-id-9" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 15 - System ID 8988
</div> <div class="normalText group" id="B1C1Thread8988group"> <div class="mt20 normalText">
Entry point | ftpsvc!THREAD_MANAGER::ThreadManagerThread |
Create time | 1/17/2016 6:36:56 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> <div class="mt20 thread ui-tabs-panel ui-widget-content ui-corner-bottom" id="B1C1Thread1308" role="tabpanel" aria-expanded="false" aria-hidden="true" aria-labelledby="ui-id-10" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual
Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"> <div class="groupTitle mt20">
Thread 16 - System ID 1308
</div> <div class="normalText group" id="B1C1Thread1308group"> <div class="mt20 normalText">
Entry point | ftpsvc!THREAD_MANAGER::ThreadManagerThread |
Create time | 1/17/2016 6:37:00 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread8988" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread8988group"> <div class="mt20 normalText">
|
---|
ntdll!ZwRemoveIoCompletion+a |
KERNELBASE!GetQueuedCompletionStatus+39 |
kernel32!GetQueuedCompletionStatusStub+11 |
ftpsvc!THREAD_POOL_DATA::ThreadPoolThread+56 |
ftpsvc!THREAD_MANAGER::ThreadManagerThread+67 |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs3"> <div class="mt20 thread" id="B1C1Thread10976" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 0 - System ID 10976
</div> <div class="normalText group" id="B1C1Thread10976group"> <div class="mt20 normalText">
Entry point | svchost!wmainCRTStartup |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.015 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread10976" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread10976group"> <div class="mt20 normalText">
|
---|
ntdll!ZwWaitForSingleObject+a |
KERNELBASE!WaitForSingleObjectEx+79 |
sechost!ScSendResponseReceiveControls+13b |
sechost!ScDispatcherLoop+121 |
sechost!StartServiceCtrlDispatcherW+14e |
svchost!wmain+110 |
svchost!ScCreateWellKnownSids+2fd |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs4"> <div class="mt20 thread" id="B1C1Thread10840" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 2 - System ID 10840
</div> <div class="normalText group" id="B1C1Thread10840group"> <div class="mt20 normalText">
Entry point | sechost!ScSvcctrlThreadA |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.015 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread10840" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread10840group"> <div class="mt20 normalText">
|
---|
ntdll!ZwWaitForSingleObject+a |
KERNELBASE!WaitForSingleObjectEx+79 |
ftpsvc!ServiceMain+d5 |
svchost!ServiceStarter+1e8 |
sechost!ScSvcctrlThreadA+25 |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs5"> <div class="mt20 thread" id="B1C1Thread18124" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 3 - System ID 18124
</div> <div class="normalText group" id="B1C1Thread18124group"> <div class="mt20 normalText">
Entry point | ftpsvc!FTPServiceThreadProc |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.140 |
Time spent in kernel mode | 0 Days 00:00:00.031 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread18124" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread18124group"> <div class="mt20 normalText">
|
---|
ntdll!NtDelayExecution+a |
KERNELBASE!SleepEx+ab |
ftpsvc!FTP_SITE_MANAGER::StopAllSites+30a |
ftpsvc!FTP_SERVICE::OnServiceStop+49 |
ftpsvc!NT_SERVICE::RunService+2f3 |
ftpsvc!FTPServiceThreadProc+d3 |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs6"> <div class="mt20 thread" id="B1C1Thread5188" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 4 - System ID 5188
</div> <div class="normalText group" id="B1C1Thread5188group"> <div class="mt20 normalText">
Entry point | ntdll!TppWaiterpThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread5188" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread5188group"> <div class="mt20 normalText">
|
---|
ntdll!NtWaitForMultipleObjects+a |
ntdll!TppWaiterpThread+14d |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs7"> <div class="mt20 thread" id="B1C1Thread21864" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 5 - System ID 21864
</div> <div class="normalText group" id="B1C1Thread21864group"> <div class="mt20 normalText">
Entry point | ftpsvc!THREAD_MANAGER::ThreadManagerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.015 |
This thread is waiting on the local
RpcSs service to complete a COM activation request in
another COM server process.
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread21864" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread21864group"> <div class="mt20 normalText">
|
---|
ntdll!ZwAlpcSendWaitReceivePort+a |
rpcrt4!LRPC_CCALL::SendReceive+156 |
rpcrt4!I_RpcSendReceive+42 |
ole32!ThreadSendReceive+40 |
ole32!CRpcChannelBuffer::SwitchAptAndDispatchCall+a3 |
ole32!CRpcChannelBuffer::SendReceive2+11b |
ole32!CAptRpcChnl::SendReceive+52 |
ole32!CCtxComChnl::SendReceive+68 |
ole32!NdrExtpProxySendReceive+45 |
rpcrt4!NdrpClientCall3+2e2 |
ole32!ObjectStublessClient+11d |
ole32!ObjectStubless+42 |
ole32!CRpcResolver::CreateInstance+211 |
ole32!CClientContextActivator::CreateInstance+156 |
ole32!ActivationPropertiesIn::DelegateCreateInstance+5e |
ole32!ICoCreateInstanceEx+5f5 |
ole32!CoCreateInstance+17b |
ftpsvc!FTP_SERVERP::UpdateFtpHost+f3 |
ftpsvc!FTP_SERVERP::GetReferencedProcessHost+2d |
ftpsvc!CUSTOM_PROVIDER_ENTRY::LoadCustomProviderNoLock+12d |
ftpsvc!CUSTOM_PROVIDER_ENTRY::GetReferencedProvider+62 |
ftpsvc!FTP_SESSION::CallLogProvider+14a |
ftpsvc!FTP_SESSION::Log+45a |
ftpsvc!FTP_SESSION::Initialize+4ac |
ftpsvc!FTP_SITE_MANAGER::OnNewConnection+a4 |
ftpsvc!FTP_ENDPOINT_CONNECTION::AsyncCompletionRoutine+95 |
ftpsvc!FTP_ASYNC_SOCKET::OnNewConnectionCompletion+24a |
ftpsvc!FTP_ASYNC_SOCKET::AsyncCompletionRoutine+34 |
ftpsvc!FTP_ASYNC_CONTEXT::OverlappedCompletionRoutine+34 |
ftpsvc!THREAD_POOL_DATA::ThreadPoolThread+d0 |
ftpsvc!THREAD_MANAGER::ThreadManagerThread+67 |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
This thread is calling
CoCreateInstance to create a component with CLSID =
"{00000000-0000-0000-0000-000000000000}"</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs8"> <div class="mt20 thread" id="B1C1Thread6428" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 6 - System ID 6428
</div> <div class="normalText group" id="B1C1Thread6428group"> <div class="mt20 normalText">
Entry point | ftpsvc!THREAD_MANAGER::ThreadManagerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.015 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread6428" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread6428group"> <div class="mt20 normalText">
|
---|
ntdll!NtDelayExecution+a |
KERNELBASE!SleepEx+ab |
iisutil!_chkstk+688 |
iisutil!CReaderWriterLock3::_LockSpin+bd |
ftpsvc!CUSTOM_PROVIDER_ENTRY::GetReferencedProvider+32 |
ftpsvc!FTP_SESSION::CallLogProvider+14a |
ftpsvc!FTP_SESSION::Log+45a |
ftpsvc!FTP_SESSION::Initialize+4ac |
ftpsvc!FTP_SITE_MANAGER::OnNewConnection+a4 |
ftpsvc!FTP_ENDPOINT_CONNECTION::AsyncCompletionRoutine+95 |
ftpsvc!FTP_ASYNC_SOCKET::OnNewConnectionCompletion+24a |
ftpsvc!FTP_ASYNC_SOCKET::AsyncCompletionRoutine+34 |
ftpsvc!FTP_ASYNC_CONTEXT::OverlappedCompletionRoutine+34 |
ftpsvc!THREAD_POOL_DATA::ThreadPoolThread+d0 |
ftpsvc!THREAD_MANAGER::ThreadManagerThread+67 |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs9"> <div class="mt20 thread" id="B1C1Thread6260" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 7 - System ID 6260
</div> <div class="normalText group" id="B1C1Thread6260group"> <div class="mt20 normalText">
Entry point | ftpsvc!SSL_CERT_STORE::DeletionWorkerThread |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread6260" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread6260group"> <div class="mt20 normalText">
|
---|
ntdll!ZwWaitForSingleObject+a |
KERNELBASE!WaitForSingleObjectEx+79 |
ftpsvc!SSL_CERT_STORE::DeletionWorkerThread+1b |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> <div class="ui-tabs ui-widget ui-widget-content ui-corner-all" id="B1C1_Tabs10"> <div class="mt20 thread" id="B1C1Thread7224" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis"
data-debug-details="thread"> <div class="groupTitle mt20">
Thread 8 - System ID 7224
</div> <div class="normalText group" id="B1C1Thread7224group"> <div class="mt20 normalText">
Entry point | nativerd!NOTIFICATION_THREAD::ThreadProc |
Create time | 1/17/2016 6:31:36 PM |
Time spent in user mode | 0 Days 00:00:00.000 |
Time spent in kernel mode | 0 Days 00:00:00.000 |
</div> </div> </div> </div> <div class="ml35 mb20"> <div class="mt20 thread" id="B1C1Thread7224" data-debug-dump="svchost.exe__PID__3284__Date__01_17_2016__Time_06_39_08PM__439__Manual Dump.dmp" data-debug-rule="CrashHangAnalysis" data-debug-details="thread"><div class="normalText group" id="B1C1Thread7224group"> <div class="mt20 normalText">
|
---|
ntdll!ZwRemoveIoCompletion+a |
KERNELBASE!GetQueuedCompletionStatus+39 |
kernel32!GetQueuedCompletionStatusStub+11 |
nativerd!NOTIFICATION_THREAD::ThreadProc+71 |
kernel32!BaseThreadInitThunk+d |
ntdll!RtlUserThreadStart+1d |
</div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div> </div>
<div class="mt40"></div>
<div class="analysisRuleSummarySection" id="Table_Summary"> <div class="expandCollapseButton-expanded" id="btnRuleSummary"></div> <div class="sectionHeader mt40">Analysis Rule Summary</div> <div class="group mt20 normalText" id="ruleSummaryGroup">
CrashHangAnalysis - v (2.2.0.14) | Completed |
</div> </div>