> From: Ramon Leon
> Looking at the handle count, I'm seeing a fresh image start with
around
> 40 or so, and an image that's been up a bit, pushing 5000, much more
> than any other process on the box.

OK, this feels like a promising source.

> I'm still waiting for another crash,
> but this seems a likely suspect, any more ideas?

If it's a networking issue, copies of handle.exe and tdimon.exe (both
from www.sysinternals.com) may be useful - if I recall correctly, they
may tell you for what the handles are being used.  Then it's a case of
reviewing the code that opens that kind of thing and seeing whether it
disposes of the object correctly afterwards - could be a VM issue, could
be an image issue.

		- Peter