Samueli
2003-12-12 17:06:27 UTC
Hello all,
I'm a having a problem in IIS 5 with all web services
shutting down & restarting a coupld of times a day.
The event log usually looks like this:
1.)Application popup: inetinfo.exe - Application Error :
The instruction at "0x77f952f8" referenced memory
at "0x00ce8000". The memory could not be "read".
2.)The IIS Admin Service service terminated unexpectedly.
It has done this 1 time(s). The following corrective
action will be taken in 1 milliseconds: Run the configured
recovery program.
3.)The FTP Publishing Service service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 0 milliseconds: No
action.
4.)The Network News Transport Protocol (NNTP) service
terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 0
milliseconds: No action.
5.)The Simple Mail Transport Protocol (SMTP) service
terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 0
milliseconds: No action.
6.)The World Wide Web Publishing Service service
terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 0
milliseconds: No action.
7.)IIS stop command received from user NT
AUTHORITY\SYSTEM. The logged data is the status code.
For additional information specific to this message please
visit the Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp.
8.)The Microsoft NNTP Service 5.00.0984 Version:
5.0.2195.6702 Virtual server 1 has been started.
9.)The Microsoft NNTP Service 5.00.0984 Version:
5.0.2195.6702 has been started.
10.)IIS start command received from user NT
AUTHORITY\SYSTEM. The logged data is the status code.
For additional information specific to this message please
visit the Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp.
This all happens within 15 seconds.
I've been doing much research on the web & at
microsoft.com & have come across many hotfixes with some
related to viruses, but I can apply none of them since I
am on service pack 4, & all the updates are for service
pack 2. I actually did the autoupdate yesterday 12/11, so
I am currently uptodate on updates.
I've also downloaded the hotfix checker, but that wasn't
of much use.
Virus sig's are up to date, & recently scanned system,
There are no other application log entries that take palce
anywhere near these errors.
c:\winnt\system32\logfiles logs show nothing around these
events.
I have the .net architecture installed, & am running php &
mysql, although everything has ran fine for over 3 months
without any errors in event viewer.
Right now I have Visual Studio waiting to debug this error:
1.)Application popup: inetinfo.exe - Application Error :
The instruction at "0x77f952f8" referenced memory
at "0x00ce8000". The memory could not be "read".
the next time it comes up.
I've also found in other threads the use of
iisstate -p <PID> -sc <enter>, but I do not know where to
find this program.
Please, please, any help would be greatly appreciated.
Even though this only brings problems to the server a
couple times a day for about 30 seconds total, I'm still
having to deal with corrupt databases because of this.
I'm a having a problem in IIS 5 with all web services
shutting down & restarting a coupld of times a day.
The event log usually looks like this:
1.)Application popup: inetinfo.exe - Application Error :
The instruction at "0x77f952f8" referenced memory
at "0x00ce8000". The memory could not be "read".
2.)The IIS Admin Service service terminated unexpectedly.
It has done this 1 time(s). The following corrective
action will be taken in 1 milliseconds: Run the configured
recovery program.
3.)The FTP Publishing Service service terminated
unexpectedly. It has done this 1 time(s). The following
corrective action will be taken in 0 milliseconds: No
action.
4.)The Network News Transport Protocol (NNTP) service
terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 0
milliseconds: No action.
5.)The Simple Mail Transport Protocol (SMTP) service
terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 0
milliseconds: No action.
6.)The World Wide Web Publishing Service service
terminated unexpectedly. It has done this 1 time(s). The
following corrective action will be taken in 0
milliseconds: No action.
7.)IIS stop command received from user NT
AUTHORITY\SYSTEM. The logged data is the status code.
For additional information specific to this message please
visit the Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp.
8.)The Microsoft NNTP Service 5.00.0984 Version:
5.0.2195.6702 Virtual server 1 has been started.
9.)The Microsoft NNTP Service 5.00.0984 Version:
5.0.2195.6702 has been started.
10.)IIS start command received from user NT
AUTHORITY\SYSTEM. The logged data is the status code.
For additional information specific to this message please
visit the Microsoft Online Support site located at:
http://www.microsoft.com/contentredirect.asp.
This all happens within 15 seconds.
I've been doing much research on the web & at
microsoft.com & have come across many hotfixes with some
related to viruses, but I can apply none of them since I
am on service pack 4, & all the updates are for service
pack 2. I actually did the autoupdate yesterday 12/11, so
I am currently uptodate on updates.
I've also downloaded the hotfix checker, but that wasn't
of much use.
Virus sig's are up to date, & recently scanned system,
There are no other application log entries that take palce
anywhere near these errors.
c:\winnt\system32\logfiles logs show nothing around these
events.
I have the .net architecture installed, & am running php &
mysql, although everything has ran fine for over 3 months
without any errors in event viewer.
Right now I have Visual Studio waiting to debug this error:
1.)Application popup: inetinfo.exe - Application Error :
The instruction at "0x77f952f8" referenced memory
at "0x00ce8000". The memory could not be "read".
the next time it comes up.
I've also found in other threads the use of
iisstate -p <PID> -sc <enter>, but I do not know where to
find this program.
Please, please, any help would be greatly appreciated.
Even though this only brings problems to the server a
couple times a day for about 30 seconds total, I'm still
having to deal with corrupt databases because of this.