Pantalla Azul en un TS

Sres. Tengo un problema, en alguas ocaciones mi servidor TS se va a pantalla
azul y desconosco el motivo, lo que hice fue analizar el memmory.dmp el cual
les anexo para ver si hay alguien que me pueda indicar como resolver este
problema y evitar que se este reiniciando con pantalla azul.


gracias de antemano
-



Microsoft (R) Windows Debugger Version 6.6.0007.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [\\cdamex1\c$$\WINDOWS\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: C:\Symbols\Windows2003
Executable search path is:
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (4 procs) Free
x86 compatible
Product: Server, suite: TerminalServer
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Tue Mar 13 18:46:12.701 2007 (GMT-6)
System Uptime: 0 days 11:56:14.294
Loading Kernel Symbols
...
Loading User Symbols
PEB is paged out (Peb.Ldr = 7ffdf00c). Type ".hh dbgerr001" for details
Loading unloaded module list
...
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck AB, {13, 1818, 0, 43}

Probably pool corruption caused by Tag: Gpff

Followup: MachineOwner


0: kd> !analyze -v
*******************************************************************************
*
*
* Bugcheck Analysis
*
*
*
*******************************************************************************

SESSION_HAS_VALID_POOL_ON_EXIT (ab)
Caused by a session driver not freeing its pool allocations prior to a
session unload. This indicates a bug in win32k.sys, atmfd.dll,
rdpdd.dll or a video driver.
Arguments:
Arg1: 00000013, session ID
Arg2: 00001818, number of paged pool bytes that are leaking
Arg3: 00000000, number of nonpaged pool bytes that are leaking
Arg4: 00000043, total number of paged and nonpaged allocations that are
leaking.
nonpaged allocations are in the upper half of this word,
paged allocations are in the lower half of this word.

Debugging Details:



CORRUPTING_POOL_TAG: Gpff

DEFAULT_BUCKET_ID: DRIVER_FAULT

BUGCHECK_STR: 0xAB

PROCESS_NAME: csrss.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from 8092ea6f to 80827451

STACK_TEXT:
f3c1fc24 8092ea6f 000000ab 00000013 00001818 nt!KeBugCheckEx+0x1b
f3c1fc68 809ab017 89504310 89504310 00000000
nt!MiCheckSessionPoolAllocations+0x107
f3c1fce8 8084c1a7 89504310 00000000 876e7020
nt!MiDereferenceSessionFinal+0x183
f3c1fd04 8094b539 89504310 876e7020 876e7260
nt!MmCleanProcessAddressSpace+0x6b
f3c1fd8c 8094b68d 00000000 00000000 876e7020 nt!PspExitThread+0x5f1
f3c1fda4 80948bc0 876e7020 00000000 00000001
nt!PspTerminateThreadByPointer+0x4b
f3c1fddc 8088d4d2 bf92b980 882b8180 00000000 nt!PspSystemThreadStartup+0x3c
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MiCheckSessionPoolAllocations+107
8092ea6f 5f pop edi

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MiCheckSessionPoolAllocations+107

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: CORRUPTING_POOLTAG_Gpff

BUCKET_ID: CORRUPTING_POOLTAG_Gpff

Followup: MachineOwner