BSOD Server 2008r2 during tsadmin remote control

Posted on 2013-12-19
Last Modified: 2014-05-22
Our development group recently moved from a 64bit 2003r2 terminal server to a 64bit 2008r2 terminal server.  We use tsadmin (remote desktop manager) to remote control each other because it's quick and easy to do.  

In server 2008r2 the system falls on its face about 50% of the time, and comes back with a BSOD clue as shown below.  I found and applied the patch from here ... - but it happened again today.

We can use other remote control products, but this is really easy and quick.  Love to get this fixed!!  Does anyone have any ideas?

Problem signature:
  Problem Event Name:      BlueScreen
  OS Version:      6.1.7601.
  Locale ID:      1033

Additional information about the problem:
  BCCode:      3b
  BCP1:      00000000C0000005
  BCP2:      FFFFF960001BE5FA
  BCP3:      FFFFF88006D2EDA0
  BCP4:      0000000000000000
  OS Version:      6_1_7601
  Service Pack:      1_0
  Product:      18_3

Files that help describe the problem:

Read our privacy statement online:

If the online privacy statement is not available, please read our privacy statement offline:
Question by:tarkmyler
LVL 14

Expert Comment

by:Rob Miners
ID: 39731036
Can you upload this file for us to have a look at.

Files that help describe the problem:

Author Comment

ID: 39732158
As you requested...
LVL 91

Accepted Solution

nobus earned 500 total points
ID: 39732274
itpoints to PROCESS_NAME:  devenv.exe   This  processbelongs to  Microsoft Visual Studio (version 2005)
you can uninstall, or update it for testing
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.


Expert Comment

by:Ratnesh Mishra
ID: 39737855
Its a clear case of access violation . In which there is a confusion between application regarding virtual memory address causing bug check
Additional information about the problem:
  BCCode:      3b
  BCP1:      00000000C0000005

Preliminary analysis says the process name is "devenv.exe" however last control transferred to the memory address fffff960001be5fa which belogs to memory address of win32k.sys .

So we can say the cause happened due to win32k.sys . WE also found the Win32k.sys file version is 6.1.7601.18300 however the latest is available [ ] , if possible you can contact microsoft for latest hot fix for win32k.sys . Hopefully this will fix the issue.

If not then you may try uninstalling "Microsoft Visual Studio" .

Author Comment

ID: 40085077
Removing the visual studio 2005 remnants using the Control Panel -> Programs -> Remove VS2k5 Runtime worked!
LVL 91

Expert Comment

ID: 40085540
tx for feedback !

Featured Post

What Security Threats Are You Missing?

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

Preface Having the need * to contact many different companies with different infrastructures * do remote maintenance in their network required us to implement a more flexible routing solution. As RAS, PPTP, L2TP and VPN Client connections are no…
In a hurry?.. scroll down to "HERE's HOW TO DO IT" Section. Greetings All, I was going to post this as question/solution, but its seems more appropriate as an article considering its length.  I felt it important to illucidate all the details c…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now