W3SVC 1013 IIS进程锁死

事件类型:警告
事件来源:W3SVC
事件种类:无
事件 ID:1013
日期:2004-12-2
事件:10:43:29
用户:N/A
计算机:DELL2600
描述:
为应用程序池 'DefaultAppPool' 提供服务的进程关闭时间超过了限制。进程 ID 是 '5816'。

---

The Inetinfo.exe process repeatedly crashes and restarts, and "Event ID 7031" and "Event ID 7034" error events are repeatedly logged in the System log in Windows Server 2003

SYMPTOMS

Important This update was originally released to address situations where the SMTP service could cause the Inetinfo.exe process to unexpectedly fail. This update has now been superseded by the Microsoft Security Bulletin MS04-035 security update.

After you restart a Microsoft Windows Server 2003-based computer that is running the Simple Mail Transfer Protocol (SMTP) service with or without Microsoft Exchange Server 2003, the Inetinfo.exe process unexpectedly crashes and then restarts. This problem occurs several times. The Error Reporting dialog box appears on the screen every time that the Inetinfo.exe process crashes.

Additionally, the following events are repeatedly logged in the system event log:

Source: Service Control Manager
Type: Error
Event ID: 7031
Description:
The IIS Admin Service service terminated unexpectedly. It has done this x time(s). Source: Service Control Manager
Type: Error
Event ID: 7034
Description:
The Simple Mail Transport Protocol (SMTP) service terminated unexpectedly. It has done this x time(s).

Note You may also see additional "Event ID 7034" error events logged by services that are dependent on the IIS Admin Service. If Exchange Server 2003 is installed, the following event may be logged in the Application event log:
Source: Microsoft Exchange Server
Type: Error
Event ID: 1000
Description:
Faulting application inetinfo.exe, version 6.0.3790.0, stamp 3e8000f7, faulting module unknown, version 0.0.0.0, stamp 00000000, debug? 0, fault address 0xdbdf9645.

CAUSE

This problem is caused by a problem in the Windows Server 2003 SMTP service.

RESOLUTION

The resolution for this problem is now available in the security update that is provided in the following Microsoft Knowledge Base article:

885881 MS04-035: Vulnerability in SMTP could allow remote code execution in Microsoft Windows Server 2003

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For additional information about this same issue in Windows Server 2000, click the following article number to view the article in the Microsoft Knowledge Base:

885264 The Inetinfo.exe process repeatedly crashes and restarts, and "Event ID 7031" and "Event ID 7034" error events are repeatedly logged in the system log in Windows 2000 Server

For additional information about standard terminology that is used to describe Microsoft software updates, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates