I have a Windows 2003 server which is getting some strange entries logged,
entires which I am uinable to trace the source of.

When I log in via RDC I get an application popup saying that the IIS worker
process blew its top.

There are usually 5 entries of two different types.

The first is:

Event Type:    Error
Event Source:    .NET Runtime
Event Category:    None
Event ID:    0
Date:        14/03/2006
Time:        10:35:37
User:        N/A
Computer:    CRSCOMDEV01
Description:
The description for Event ID ( 0 ) in Source ( .NET Runtime ) cannot be
found. The local computer may not have the necessary registry information or
message DLL files to display messages from a remote computer. You may be able
to use the /AUXSOURCE= flag to retrieve this description; see Help and
Support for details. The following information is part of the event: Unable
to open shim database version registry key - v2.0.50727.00000.

there are usually 2 of these either side of the second type:

Event Type:    Error
Event Source:    Application Error
Event Category:    (100)
Event ID:    1000
Date:        14/03/2006
Time:        10:28:31
User:        N/A
Computer:    CRSCOMDEV01
Description:
Faulting application w3wp.exe, version 6.0.3790.1830, faulting module
webengine.dll, version 2.0.50727.42, fault address 0x00002fec.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 41 70 70 6c 69 63 61 74   Applicat
0008: 69 6f 6e 20 46 61 69 6c   ion Fail
0010: 75 72 65 20 20 77 33 77   ure  w3w
0018: 70 2e 65 78 65 20 36 2e   p.exe 6.
0020: 30 2e 33 37 39 30 2e 31   0.3790.1
0028: 38 33 30 20 69 6e 20 77   830 in w
0030: 65 62 65 6e 67 69 6e 65   ebengine
0038: 2e 64 6c 6c 20 32 2e 30   .dll 2.0
0040: 2e 35 30 37 32 37 2e 34   .50727.4
0048: 32 20 61 74 20 6f 66 66   2 at off
0050: 73 65 74 20 30 30 30 30   set 0000
0058: 32 66 65 63               2fec    

I have looked on the web and only found something about registry access
being required for certain keys - I have granted such access but still
getting the same thing.

Please help!