1
123name123
Hello,
We have a Windows Server 2008 R2 SP1 running sharepoint 2007.
We are seeing IIS crashing here are the eventvwr entries:
Log Name: Application
Source: Application Error
Date: 7/30/2018 8:24:10 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7afa2
Faulting module name: onetutil.dll, version: 12.0.6690.5000, time stamp: 0x528679e9
Exception code: 0xc0000005
Fault offset: 0x00000000000abd9f
Faulting process id: 0xb54
Faulting application start time: 0x01d428002f5cfaa5
Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
Faulting module path: C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\12\BIN\onetutil.dll
Report Id: 759272f9-93f3-11e8-b790-005056984d98
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-07-30T12:24:10.000000000Z" />
<EventRecordID>149188</EventRecordID>
<Channel>Application</Channel>
<Computer></Computer>
<Security />
</System>
<EventData>
<Data>w3wp.exe</Data>
<Data>7.5.7601.17514</Data>
<Data>4ce7afa2</Data>
<Data>onetutil.dll</Data>
<Data>12.0.6690.5000</Data>
<Data>528679e9</Data>
<Data>c0000005</Data>
<Data>00000000000abd9f</Data>
<Data>b54</Data>
<Data>01d428002f5cfaa5</Data>
<Data>c:\windows\system32\inetsrv\w3wp.exe</Data>
<Data>C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\12\BIN\onetutil.dll</Data>
<Data>759272f9-93f3-11e8-b790-005056984d98</Data>
</EventData>
</Event>
users have reported sharepoint going down every night and a reboot in the morning is required to resolve the issue, note that the above event only happens once and a while and not daily.
Log Name: Application
Source: Windows Error Reporting
Date: 7/26/2018 8:46:19 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer:
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0
Problem signature:
P1: w3wp.exe
P2: 7.5.7601.17514
P3: 4ce7afa2
P4: Microsoft.SharePoint
P5: 12.0.0.0
P6: 52854828
P7: 10a
P8: 2c
P9: System.UnauthorizedAccess
P10:
Attached files:
C:\Windows\Temp\WER63E0.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER63F1.tmp.hdmp
C:\Windows\Temp\WERA44B.tmp.mdmp
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_477ade561771260a3548756887f2ebf26496e62_cab_070da9d5
Analysis symbol:
Rechecking for solution: 0
Report Id: d95e8ce9-90d1-11e8-a1d1-005056984d98
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-07-26T12:46:19.000000000Z" />
<EventRecordID>148818</EventRecordID>
<Channel>Application</Channel>
<Computer></Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>CLR20r3</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>w3wp.exe</Data>
<Data>7.5.7601.17514</Data>
<Data>4ce7afa2</Data>
<Data>Microsoft.SharePoint</Data>
<Data>12.0.0.0</Data>
<Data>52854828</Data>
<Data>10a</Data>
<Data>2c</Data>
<Data>System.UnauthorizedAccess</Data>
<Data>
</Data>
<Data>
C:\Windows\Temp\WER63E0.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER63F1.tmp.hdmp
C:\Windows\Temp\WERA44B.tmp.mdmp</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_477ade561771260a3548756887f2ebf26496e62_cab_070da9d5</Data>
<Data>
</Data>
<Data>0</Data>
<Data>d95e8ce9-90d1-11e8-a1d1-005056984d98</Data>
<Data>4</Data>
</EventData>
</Event>
Continue reading...
We have a Windows Server 2008 R2 SP1 running sharepoint 2007.
We are seeing IIS crashing here are the eventvwr entries:
Log Name: Application
Source: Application Error
Date: 7/30/2018 8:24:10 AM
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
Faulting application name: w3wp.exe, version: 7.5.7601.17514, time stamp: 0x4ce7afa2
Faulting module name: onetutil.dll, version: 12.0.6690.5000, time stamp: 0x528679e9
Exception code: 0xc0000005
Fault offset: 0x00000000000abd9f
Faulting process id: 0xb54
Faulting application start time: 0x01d428002f5cfaa5
Faulting application path: c:\windows\system32\inetsrv\w3wp.exe
Faulting module path: C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\12\BIN\onetutil.dll
Report Id: 759272f9-93f3-11e8-b790-005056984d98
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Application Error" />
<EventID Qualifiers="0">1000</EventID>
<Level>2</Level>
<Task>100</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-07-30T12:24:10.000000000Z" />
<EventRecordID>149188</EventRecordID>
<Channel>Application</Channel>
<Computer></Computer>
<Security />
</System>
<EventData>
<Data>w3wp.exe</Data>
<Data>7.5.7601.17514</Data>
<Data>4ce7afa2</Data>
<Data>onetutil.dll</Data>
<Data>12.0.6690.5000</Data>
<Data>528679e9</Data>
<Data>c0000005</Data>
<Data>00000000000abd9f</Data>
<Data>b54</Data>
<Data>01d428002f5cfaa5</Data>
<Data>c:\windows\system32\inetsrv\w3wp.exe</Data>
<Data>C:\PROGRA~1\COMMON~1\MICROS~1\WEBSER~1\12\BIN\onetutil.dll</Data>
<Data>759272f9-93f3-11e8-b790-005056984d98</Data>
</EventData>
</Event>
users have reported sharepoint going down every night and a reboot in the morning is required to resolve the issue, note that the above event only happens once and a while and not daily.
Log Name: Application
Source: Windows Error Reporting
Date: 7/26/2018 8:46:19 AM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer:
Description:
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0
Problem signature:
P1: w3wp.exe
P2: 7.5.7601.17514
P3: 4ce7afa2
P4: Microsoft.SharePoint
P5: 12.0.0.0
P6: 52854828
P7: 10a
P8: 2c
P9: System.UnauthorizedAccess
P10:
Attached files:
C:\Windows\Temp\WER63E0.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER63F1.tmp.hdmp
C:\Windows\Temp\WERA44B.tmp.mdmp
These files may be available here:
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_477ade561771260a3548756887f2ebf26496e62_cab_070da9d5
Analysis symbol:
Rechecking for solution: 0
Report Id: d95e8ce9-90d1-11e8-a1d1-005056984d98
Report Status: 4
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Windows Error Reporting" />
<EventID Qualifiers="0">1001</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-07-26T12:46:19.000000000Z" />
<EventRecordID>148818</EventRecordID>
<Channel>Application</Channel>
<Computer></Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>0</Data>
<Data>CLR20r3</Data>
<Data>Not available</Data>
<Data>0</Data>
<Data>w3wp.exe</Data>
<Data>7.5.7601.17514</Data>
<Data>4ce7afa2</Data>
<Data>Microsoft.SharePoint</Data>
<Data>12.0.0.0</Data>
<Data>52854828</Data>
<Data>10a</Data>
<Data>2c</Data>
<Data>System.UnauthorizedAccess</Data>
<Data>
</Data>
<Data>
C:\Windows\Temp\WER63E0.tmp.WERInternalMetadata.xml
C:\Windows\Temp\WER63F1.tmp.hdmp
C:\Windows\Temp\WERA44B.tmp.mdmp</Data>
<Data>C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_w3wp.exe_477ade561771260a3548756887f2ebf26496e62_cab_070da9d5</Data>
<Data>
</Data>
<Data>0</Data>
<Data>d95e8ce9-90d1-11e8-a1d1-005056984d98</Data>
<Data>4</Data>
</EventData>
</Event>
Continue reading...