Many users are receiving the following error when a remote desktop session is ended. They are unable to remote in again if this error is on the screen. This is causing me to have to go to the remote system and click away the error. Once the error is off the screen they can remote in again. I'm guessing whatever this program is, its restarting it self after the error is gone. This does not happen every single time, but it does happen often.
Users are remoting from a Laptop running windows XP Pro SP2, into a desktop running windows XP Pro SP2. Some do it over a VPN, into the network. Some do it without VPN. Happens either way. They are not using any options when using Remote Desktop. Just using default settings. No /console or anything like that. The clients are using remote desktop version 6.0.
Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Time: 4:55:31 PM
Application popup: SAS window: winlogon.exe - Application Error : The instruction at "0x00000000" referenced memory at "0x00000000". The memory could not be "read".
I have tried the following:
Installed all .net framework updates
Fully updated windows with critical and optional updates.
Run SFC /scannow (did not find anything wrong)
Someone thought it could be Netsky, so I ran a Netsky cleanup tool and it did not find Netsky virus.
If anyone needs any more info, please comment and I'll put it up as soon as possible.