w3wp.exe crash (Exception code: 0xc0000005)

Published Feb 11 2019 06:59 AM 37.9K Views
Microsoft

IIS uses worker processes (w3wp.exe file in Windows) to handle client requests. If w3wp.exe crashes, your users cannot access to your application until the process starts again. In Event Viewer, you may see the exception codes 0xc0000005 and 0xe0434352 recorded during crashes.

 

Exception descriptions from Event Viewer are below. “Faulting module name” refers to the component that causes the crash.

 

Event ID: 1000

Faulting application name: w3wp.exe, version: 10.0.14393.0, time stamp: 0x57899b8a

Faulting module name: KERNELBASE.dll, version: 10.0.14393.2608, time stamp: 0x5bd1340d

Exception code: 0xe0434352

Event ID: 1000

Faulting application name: w3wp.exe, version: 10.0.14393.0, time stamp: 0x57899b8a

Faulting module name: OraOps12.dll, version: 2.121.1.0, time stamp: 0x52002676

Exception code: 0xc0000005

1.png

Solution

Based on the logs above, there are two exception codes that lead to the root cause:

  • Exception code 0xc0000005: It translates into ERROR_ACCESS_DENIED (Source). What to do:
    • Check the file permissions. The application pool identity of your application pool should have read and write permissions on the website’s folder (A related topic).
    • Check the Antivirus logs. There might be a record indicating the file access block. You can temporarily disable antivirus software and monitor the system.
    • Look for the faulting module name. In the logs above, it is OraOps12.dll. This is a part of Oracle Data Access Components (ODAC). Upgrading or repairing the related module could fix the issue.
  • Exception code 0xe0434352: This is a generic CLR exception code. It is thrown when there is an internal issue in the application. In most cases, it is either System.NullReferenceException or System.ArgumentException
    • There is no straightforward way to solve these kind of issues. I would recommend debugging the application in Visual Studio to get more details. In case you don’t have access to the source code, you can use DebugDiag or WinDbg for further troubleshooting.
7 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-1085612%22%20slang%3D%22en-US%22%3ERe%3A%20w3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085612%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%3C%2FP%3E%3CP%3Ei%20am%20getting%20error%20my%20server%20.On%20which%20their%20is%20no%20visual%20studio%20on%20server%20.%3C%2FP%3E%3CP%3EAfter%20that%20i%20am%20getting%20this%20error%20please%20suggest%20me%20solution%20.%3C%2FP%3E%3CP%3EError%20%3A-%3C%2FP%3E%3CP%3EFaulting%20application%20name%3A%20w3wp.exe%2C%20version%3A%2010.0.14393.0%2C%20time%20stamp%3A%200x57899b8a%3CBR%20%2F%3EFaulting%20module%20name%3A%20KERNELBASE.dll%2C%20version%3A%2010.0.14393.3383%2C%20time%20stamp%3A%200x5ddcba29%3CBR%20%2F%3EException%20code%3A%200x80000003%3CBR%20%2F%3EFault%20offset%3A%200x00000000000c5f72%3CBR%20%2F%3EFaulting%20process%20id%3A%200x3c88%3CBR%20%2F%3EFaulting%20application%20start%20time%3A%200x01d5c1108acdd6c9%3CBR%20%2F%3EFaulting%20application%20path%3A%20c%3A%5Cwindows%5Csystem32%5Cinetsrv%5Cw3wp.exe%3CBR%20%2F%3EFaulting%20module%20path%3A%20C%3A%5Cwindows%5CSystem32%5CKERNELBASE.dll%3CBR%20%2F%3EReport%20Id%3A%20d54b0a50-b834-4e29-a950-24923cb73ae1%3CBR%20%2F%3EFaulting%20package%20full%20name%3A%3CBR%20%2F%3EFaulting%20package-relative%20application%20ID%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-334351%22%20slang%3D%22en-US%22%3Ew3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-334351%22%20slang%3D%22en-US%22%3E%3CP%3EIIS%20uses%20worker%20processes%20(w3wp.exe%20file%20in%20Windows)%20to%20handle%20client%20requests.%20If%20w3wp.exe%20crashes%2C%20your%20users%20cannot%20access%20to%20your%20application%20until%20the%20process%20starts%20again.%20In%20Event%20Viewer%2C%20you%20may%20see%20the%20exception%20codes%26nbsp%3B%3CSTRONG%3E0xc0000005%20%3C%2FSTRONG%3Eand%26nbsp%3B%3CSTRONG%3E0xe0434352%3C%2FSTRONG%3E%26nbsp%3Brecorded%20during%20crashes.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EException%20descriptions%20from%20Event%20Viewer%20are%20below.%20%E2%80%9CFaulting%20module%20name%E2%80%9D%20refers%20to%20the%20component%20that%20causes%20the%20crash.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CBLOCKQUOTE%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3E%3CSTRONG%20style%3D%22box-sizing%3A%20border-box%3B%20font-weight%3A%20bold%3B%22%3EEvent%20ID%3A%201000%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EFaulting%20application%20name%3A%20w3wp.exe%2C%20version%3A%2010.0.14393.0%2C%20time%20stamp%3A%200x57899b8a%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EFaulting%20module%20name%3A%20KERNELBASE.dll%2C%20version%3A%2010.0.14393.2608%2C%20time%20stamp%3A%200x5bd1340d%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EException%20code%3A%200xe0434352%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3E%3CSTRONG%20style%3D%22box-sizing%3A%20border-box%3B%20font-weight%3A%20bold%3B%22%3EEvent%20ID%3A%201000%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EFaulting%20application%20name%3A%20w3wp.exe%2C%20version%3A%2010.0.14393.0%2C%20time%20stamp%3A%200x57899b8a%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EFaulting%20module%20name%3A%20OraOps12.dll%2C%20version%3A%202.121.1.0%2C%20time%20stamp%3A%200x52002676%3C%2FP%3E%0A%3CP%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%20margin%3A%200px%3B%22%3EException%20code%3A%200xc0000005%3C%2FP%3E%0A%3C%2FBLOCKQUOTE%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20537px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F72629iEAFC6AAEE706DF6C%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%221.png%22%20title%3D%221.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-1766523618%22%20id%3D%22toc-hId-1766523618%22%20id%3D%22toc-hId-1766523618%22%20id%3D%22toc-hId-1766523618%22%20id%3D%22toc-hId-1766523618%22%20id%3D%22toc-hId-1766523618%22%20id%3D%22toc-hId-1766523618%22%20id%3D%22toc-hId-1766523618%22%3ESolution%3C%2FH2%3E%0A%3CP%3EBased%20on%20the%20logs%20above%2C%20there%20are%20two%20exception%20codes%20that%20lead%20to%20the%20root%20cause%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%3CSTRONG%3EException%20code%200xc0000005%3A%3C%2FSTRONG%3E%26nbsp%3BIt%20translates%20into%20ERROR_ACCESS_DENIED%20(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fopenspecs%2Fwindows_protocols%2Fms-erref%2F18d8fbe8-a967-4f1c-ae50-99ca8e491d2d%3Fredirectedfrom%3DMSDN%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ESource%3C%2FA%3E).%20What%20to%20do%3A%3C%2FLI%3E%0A%3CUL%3E%0A%3CLI%3ECheck%20the%20file%20permissions.%20The%20application%20pool%20identity%20of%20your%20application%20pool%20should%20have%20read%20and%20write%20permissions%20on%20the%20website%E2%80%99s%20folder%20(%3CA%20href%3D%22https%3A%2F%2Fforums.iis.net%2Fpost%2F1968647.aspx%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EA%20related%20topic%3C%2FA%3E).%3C%2FLI%3E%0A%3CLI%3ECheck%20the%20Antivirus%20logs.%20There%20might%20be%20a%20record%20indicating%20the%20file%20access%20block.%20You%20can%20temporarily%20disable%20antivirus%20software%20and%20monitor%20the%20system.%3C%2FLI%3E%0A%3CLI%3ELook%20for%20the%20faulting%20module%20name.%20In%20the%20logs%20above%2C%20it%20is%3CCODE%3EOraOps12.dll%3C%2FCODE%3E.%20This%20is%20a%20part%20of%20Oracle%20Data%20Access%20Components%20(ODAC).%20Upgrading%20or%20repairing%20the%20related%20module%20could%20fix%20the%20issue.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CLI%3E%3CSTRONG%3EException%20code%200xe0434352%3A%3C%2FSTRONG%3E%26nbsp%3BThis%20is%20a%20generic%20CLR%20exception%20code.%20It%20is%20thrown%20when%20there%20is%20an%20internal%20issue%20in%20the%20application.%20In%20most%20cases%2C%20it%20is%20either%20%3CCODE%3ESystem.NullReferenceException%3C%2FCODE%3E%20or%20%3CCODE%3ESystem.ArgumentException%3C%2FCODE%3E%3C%2FLI%3E%0A%3CUL%3E%0A%3CLI%3EThere%20is%20no%20straightforward%20way%20to%20solve%20these%20kind%20of%20issues.%20I%20would%20recommend%20debugging%20the%20application%20in%20Visual%20Studio%20to%20get%20more%20details.%20In%20case%20you%20don%E2%80%99t%20have%20access%20to%20the%20source%20code%2C%20you%20can%20use%20DebugDiag%20or%20WinDbg%20for%20further%20troubleshooting.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FUL%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-334351%22%20slang%3D%22en-US%22%3E%3CP%3E%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23ffffff%3B%20color%3A%20%23333333%3B%20cursor%3A%20text%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3EIf%20w3wp.exe%20crashes%2C%20your%20users%20cannot%20access%20to%20your%20application%20until%20the%20process%20starts%20again.%20In%20Event%20Viewer%2C%20you%20may%20see%20the%20exception%20codes%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20bold%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3E0xc0000005%20%3C%2FSTRONG%3E%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23ffffff%3B%20color%3A%20%23333333%3B%20cursor%3A%20text%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3Eand%26nbsp%3B%3C%2FSPAN%3E%3CSTRONG%20style%3D%22box-sizing%3A%20border-box%3B%20color%3A%20%23333333%3B%20font-family%3A%20%26amp%3Bquot%3B%20segoeui%26amp%3Bquot%3B%2C%26amp%3Bquot%3Blato%26amp%3Bquot%3B%2C%26amp%3Bquot%3Bhelvetica%20neue%26amp%3Bquot%3B%2Chelvetica%2Carial%2Csans-serif%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20bold%3B%20letter-spacing%3A%20normal%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3E0xe0434352%3C%2FSTRONG%3E%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23ffffff%3B%20color%3A%20%23333333%3B%20cursor%3A%20text%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3E%26nbsp%3Brecorded%20during%20crashes.%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1085937%22%20slang%3D%22en-US%22%3ERe%3A%20w3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1085937%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F503999%22%20target%3D%22_blank%22%3E%40Atul1993%3C%2FA%3E%20I%20would%20recommend%20collecting%20a%20dump%20file%20with%20DebugDiag%20to%20find%20out%20the%20stack%20trace%20and%20underlying%20issue%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1459848%22%20slang%3D%22en-US%22%3ERe%3A%20w3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1459848%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3EI%20have%20almost%20error%2C%20could%20you%20please%20tell%20me%20how%20you%20fix%20%3F%20Thx%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFaulting%20application%20name%3A%20w3wp.exe%2C%20version%3A%2010.0.14393.0%2C%20time%20stamp%3A%200x57899135%3CBR%20%2F%3EFaulting%20module%20name%3A%20KERNELBASE.dll%2C%20version%3A%2010.0.14393.3659%2C%20time%20stamp%3A%200x5e9140ea%3CBR%20%2F%3EException%20code%3A%200xe0434352%3CBR%20%2F%3EFault%20offset%3A%200x000dc562%3CBR%20%2F%3EFaulting%20process%20id%3A%200x2280%3CBR%20%2F%3EFaulting%20application%20start%20time%3A%200x01d640f70f7dc258%3CBR%20%2F%3EFaulting%20application%20path%3A%20C%3A%5CWindows%5CSysWOW64%5Cinetsrv%5Cw3wp.exe%3CBR%20%2F%3EFaulting%20module%20path%3A%20C%3A%5CWindows%5CSystem32%5CKERNELBASE.dll%3CBR%20%2F%3EReport%20Id%3A%2070f61ea0-a109-4206-8313-cc807c165e18%3CBR%20%2F%3EFaulting%20package%20full%20name%3A%3CBR%20%2F%3EFaulting%20package-relative%20application%20ID%3A%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1563157%22%20slang%3D%22en-US%22%3ERe%3A%20w3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1563157%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20All%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20are%20getting%20the%20following%20error%2C%20ie%20IIS%20crash.%3C%2FP%3E%3CP%3EPlease%20suggest%20me%20solution%20.%3C%2FP%3E%3CP%3EError%20%3A-%3C%2FP%3E%3CP%3EFaulting%20application%20name%3A%20w3wp.exe%2C%20version%3A%2010.0.14393.0%2C%20time%20stamp%3A%200x57899b8a%3CBR%20%2F%3EFaulting%20module%20name%3A%20ntdll.dll%2C%20version%3A%2010.0.14393.3383%2C%20time%20stamp%3A%200x5e8d4386%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3EParvathi%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1577331%22%20slang%3D%22en-US%22%3ERe%3A%20w3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1577331%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F748155%22%20target%3D%22_blank%22%3E%40Parvathi_012503%3C%2FA%3E%26nbsp%3Band%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F698060%22%20target%3D%22_blank%22%3E%40mrflchen%3C%2FA%3E%2C%20thank%20you%20for%20your%20comments.%20The%20error%20messages%20you%20posted%20don't%20provide%20details%20about%20the%20root%20cause.%20Most%20of%20the%20time%2C%20there%20is%20another%20event%20log%20recorded%20right%20before%20the%20crash.%20That%20event%20log%20should%20have%20an%20error%20message%20and%20stack%20trace%20related%20to%20the%20crash.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EYou%20can%20also%20use%20DebugDiag%20to%20collect%20a%20crash%20dump%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1593177%22%20slang%3D%22en-US%22%3ERe%3A%20w3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1593177%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Nedim%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAs%20you%20suggested%2C%20I%20collected%20event%20log%20for%20IIS%20crash%201000%20error.%20Could%20you%20please%20find%20the%20Event%20log%2C%20before%20IIS%20crash%20and%20let%20me%20know%20the%20solution.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22IIS%20Crash%20Error_1000.png%22%20style%3D%22width%3A%20563px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F212747iD2966BEFBEC81680%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20title%3D%22IIS%20Crash%20Error_1000.png%22%20alt%3D%22IIS%20Crash%20Error_1000.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3EParvathi%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1593203%22%20slang%3D%22en-US%22%3ERe%3A%20w3wp.exe%20crash%20(Exception%20code%3A%200xc0000005)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1593203%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F748155%22%20target%3D%22_blank%22%3E%40Parvathi_012503%3C%2FA%3E%2C%20unfortunately%2C%20it%20looks%20like%20there%20hasn't%20been%20a%20log%20recorded%20that%20may%20show%20the%20root%20cause.%20In%20this%20case%2C%20I%20would%20recommend%20collecting%20a%20dump%20file%20by%20using%20Crash%20rule%20in%20%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fdownload%2Fdetails.aspx%3Fid%3D58210%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EDebugDiag%3C%2FA%3E.%20You%20can%20analyze%20the%20dump%20file%20by%20using%20DebugDiag%20Analysis%20that%20comes%20with%20the%20same%20installation%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20require%20Microsoft's%20assistance%20analyzing%20the%20dump%20file%20and%20troubleshooting%20the%20issue%20further%2C%20I'd%20appreciate%20it%20if%20you%20create%20a%20support%20request%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhub%2F4343728%2Fsupport-for-business%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhub%2F4343728%2Fsupport-for-business%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Jan 02 2020 08:37 AM
Updated by: