W3SVC counters & w3wp.exe Event Frustration!

Giganews Newsgroups
Subject: W3SVC counters & w3wp.exe Event Frustration!
Posted by:  Jody (Jo…@discussions.microsoft.com)
Date: Sat, 14 Jul 2007

ENVIRONMENT:
==========
Windows Server 2003 SE SP-2 / IIS 6.0
Celeron 1.8 GHz 512MB Ram
MySQL 4.1 / PHP 5.1.6

I have separate application pools configured for high traffic and PHP sites.
Other sites that are low traffic and strictly HTML all share the Default
Application Pool.

Although this system is understandably being pushed to it’s resource limits,
everything has been running pretty well for a long time considering. I will
upgrade when I can afford it. In the meantime I must make this system work as
best I can until then.

ISSUES:
=====
I have had the following event warnings and errors for months without
resolve. I have researched this and posted all over the internet and the best
advice I get is to apply a patch that is already present on my system and
included in SP-2.  I believe this issue is the underlying cause that is
responsible for other recent performance problems such as high CPU
utilization buy some high traffic PHP sites, one in particular that began
only after a unexpected shutdown on the 9th.

TYPICAL SYSTEM LOG EVENTS Daily & Frequent:
===============================
Event Type:  Warning
Event Source:  W3SVC
Event Category:  None
Event ID:  1009
Description:
A process serving application pool 'WEBSITE NAME' terminated unexpectedly.
The process id was '4660'. The process exit code was '0xc0000005'.

TYPICAL APPLICATION LOG EVENTS Daily & Frequent:
==================================
Event Type:  Error
Event Source:  Application Error
Event Category:  (100)
Event ID:  1000
Description:
Faulting application w3wp.exe, version 6.0.3790.3959, faulting module
unknown, version 0.0.0.0, fault address 0x01335f90.

Event Type:  Warning
Event Source:  Userenv
Event Category:  None
Event ID:  1524
Description:
Windows cannot unload your classes registry file - it is still in use by
other applications or services. The file will be unloaded when it is no
longer in use.

Event Type:  Error
Event Source:  W3CTRS
Event Category:  None
Event ID:  2001
Description:
It has taken too long to refresh the W3SVC counters, the stale counters are
being used instead.

TYPICL APPLICATION LOG EVENTS THAT HAPPEN EVERY SEVERAL DAYS Same Events in
same sequence:
===================================================
Event Type:  Warning
Event Source:  Perflib
Event Category:  None
Event ID:  2003
Description:
The configuration information of the performance library
"C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not match the
trusted performance library information stored in the registry. The functions
in this library will not be treated as trusted.

Event Type:  Warning
Event Source:  Perflib
Event Category:  None
Event ID:  2003
Description:
The configuration information of the performance library
"C:\WINDOWS\system32\infoctrs.dll" for the "InetInfo" service does not match
the trusted performance library information stored in the registry. The
functions in this library will not be treated as trusted.

Event Type:  Warning
Event Source:  Perflib
Event Category:  None
Event ID:  2003
Description:
The configuration information of the performance library
"C:\WINDOWS\system32\perfts.dll" for the "TermService" service does not match
the trusted performance library information stored in the registry. The
functions in this library will not be treated as trusted.

THEN EVENTUALLY ONE OF THESE: And a Crash
===============================
Event Type:  Warning
Event Source:  USER32
Event Category:  None
Event ID:  1076
Date:      7/9/2007
Time:      7:27:37 AM
Description:
The reason supplied by user SERVER\USER for the last unexpected shutdown of
this computer is: System Failure: Stop error
Reason Code: 0x805000f
Bug ID:
Bugcheck String: 0x0000007f (0x00000008, 0x80042000, 0x00000000, 0x00000000)
Comment: 0x0000007f (0x00000008, 0x80042000, 0x00000000, 0x00000000)

Replies