Friday, 15 May 2009

Remote desktop crashes after asking for IP address.

This is an extract from the blog of Tomasz Modelski and placed here so I don't ever loose the information. Great find Tomasz!

Written by:Tomasz Modelski
2009-02-27 16:50:42Z

For a few days Microsoft Remote Desktop Connection crashes while attempt to connect to virtual machine.

Errors in event viewer are:

* Faulting application mstsc.exe, version 6.0.6001.18000, faulting module mstscax.dll, version 6.0.6001.18000, fault address 0x0015b2f5.
* Fault bucket 675065036. [I’m really curious what’s it means :-) ]

Sometimes I really don’t like Microsoft.
Remote Desktop can’t be uninstalled and reinstalled, it’s not in Add/Remove Programs list and it’s not windows component.

After a lot search on google I’ve found this :
http://www.daniweb.com/forums/thread155652.html
and solution like this :

* Created a new folder "RDP" in %windir%
* Copy "mstsc.exe" and "mstscax.dll" from "C:\Windows\ $NtServicePackUninstall$" to this folder
* Copy the folder "en-US" "from C:\Windows\System32" to this folder
* Copy the "mstsc.exe.mui" and "mstscax.dll.mui" from "C:\Windows\ $NtServicePackUninstall$" to "C:\Windows\RDP\en-US"

IT WORKS !!
mstsc.exe from new folder RDP works, connects to my virtual machines.
It’s old version of Remote Desktop, but nevermind, alternative to reinstall system is worse that using it.

3 comments:

Anonymous said...

I feel in-built remote desktop software are not as equipped as specialized ones to provide complete Remote PC Control. You can take a look at RHUB http://www.rhubcom.com remote support. It has got some excellent features such as instant remote control, faster remote access, remote reboot, firewall and proxy-compliance, file transfer, chat and recording.

Spakkenkhrist said...

For the benefit of anyone else that finds this thread via google, I found this was caused by a trojan called Zbot, see this thread:

http://social.technet.microsoft.com/Forums/en/itproxpsp/thread/602b0cd5-8974-4899-a664-78bdaee1db78

so the original poster's solution may get RDP working but still leave you open to this malware.

Removal instructions:

http://support.kaspersky.com/faq/?qid=208280039

Anonymous said...

@Spakkenkhrist:
Thank you for your warning on trojan !
Regards, Petar