Application Error EventID 1000 RRS feed

  • Question

  • EventID 1000, Application Error:

    Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7a5f8 Faulting module name: KERNELBASE.dll, version: 6.1.7601.23796, time stamp: 0x59028e59 Exception code: 0xe0434352 Fault offset: 0x0000c54f Faulting process id: 0x364 Faulting application start time: 0x01d3254e0034e43e

    Faulting application path: C:\Windows\SysWOW64\inetsrv\w3wp.exe

    Faulting module path: C:\Windows\syswow64\KERNELBASE.dll

    Report Id: 4688c95a-9146-11e7-b906-0050568233ec

    I have used Debug Diagnostics to check the dump file but I am unsure what it interprets to:


    Report for WER91B9.tmp.mdmp

    Type of Analysis Performed  Crash Analysis
    Machine Name
    Operating System  Windows Server 2008 R2 Service Pack 1
    Number Of Processors
    Process ID  868
    Process Image  C:\Windows\SysWOW64\inetsrv\w3wp.exe
    System Up-Time  113 day(s) 13:45:43
    Process Up-Time  00:36:18
    Thread 43 - System ID 6504

    .NET Call Stack

    Full Call Stack
    Function    Arg 1    Arg 2    Arg 3    Arg 4  Source
    KERNELBASE!RaiseException+58    e0434352    00000001    00000005    2132ec30
    clr!RaiseTheExceptionInternalOnly+27f    00000000    0a12d680    2132ec88    00000000
    clr!RaiseTheException+86    00000004    2132edec    64997f72    2132ecbc
    clr!RaiseTheExceptionInternalOnly+30e    00000004    00000004    00000000    96112497
    clr!RealCOMPlusThrow+2f    ffe29047    00000000    288b5f00    2132ee01
    clr!Thread::RaiseCrossContextException+371    00000000    2132ee3c    ffe2937f    1aee1c0e
    clr!Thread::DoADCallBack+2d2    00000002    01a86ed4    00000000    01000001
    clr!UM2MDoADCallBack+92    ffffffff    004aa8b8    2132ef54    00000010
    0x004aa935    00b91b9c    00e1caf4    0000000c    00000000
    webengine4!W3_MGD_HANDLER::ProcessNotification+5a    64f2db80    6839a2f4    2132efc8    6499091a
    webengine4!ProcessNotificationCallback+32    00e1caf4    ffe2922f    2132eff5    2132eff7
    clr!UnManagedPerAppDomainTPCount::DispatchWorkItem+1ce    2132eff5    2132eff7    00060006    288b5f00
    clr!ThreadpoolMgr::ExecuteWorkRequest+42    ffe29257    6495e6c8    00000000    1f5da668
    clr!ThreadpoolMgr::WorkerThreadStart+36c    00000000    00000002    2132f0a8    75fc1b66
    clr!Thread::intermediateThreadProc+4d    1f5da668    2132f9a8    77bc9902    1f5da668
    kernel32!BaseThreadInitThunk+e    1f5da668    1e3a81ea    00000000    00000000
    ntdll!__RtlUserThreadStart+70    64a2b2e3    1f5da668    ffffffff    77c575cc
    ntdll!_RtlUserThreadStart+1b    64a2b2e3    1f5da668    00000000    00000000
    Exception Information

    In WER91B9.tmp.mdmp the assembly instruction at KERNELBASE!RaiseException+58 in C:\Windows\SysWOW64\KERNELBASE.dll from Microsoft Corporation has caused a CLR Exception on thread 43 with the following error information:
        Type:   NOT_FOUND
        Message:   NOT_FOUND

    Would you be able to help us on this please on why this issue is happening? It recycled by itself and now it is working fine. Is there anything we can do to prevent this issue from happening again?

    Friday, September 8, 2017 7:10 AM

All replies

  • Hello Kimberly, 

    I recently had an issue in production where w3wp.exe was faulting with a stack overflow.  I used WinDbg to triage so you could do something similar.

    Please see this TechNet wiki article and let me know if it is helpful.

    Cheers, Jeff

    Sunday, September 10, 2017 11:39 PM