In the past couple of weeks, we have encountered several of our Windows Server 2008 R2 systems with the following application log error message.

Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4e0ae736
Exception code: 0xc000071f
Fault offset: 0x000000000006f1ac
Faulting process id: 0x2cb0
Faulting application start time: 0x01cc3699e8228365
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 3bee30dd-a29a-11e0-a794-a4badb0b2997

In some, but not all, instances, this error is followed by the failure of the Server service, which in turn causes other problems on the server - file shares no longer being available, SharePoint crashing, user profiles unavailable, etc.
While most of these servers have McAfee Solidifer and Symantec EndPoint Protection running, they do not share any other common attributes. Some are file servers, some are application servers, and others are database servers. The errors do not
seem to occur at the same time, and there do not seem to be any other errors that occur at the same time. But they are occurring, sometimes but not always daily.
Does any one have any ideas of what the problem could be?

There is an amazing pack of free network admin tools. click here to download it

to find the root cause of the problem why ntdll is crashing you need to generate the dump file using ADPLUS. After you generate the dump file it has to be read to find the real cause.

http://support.microsoft.com/kb/286350

more help can be found here

http://www.dumpanalysis.org/blog/index.php/2008/09/12/adplus-in-21-seconds-and-13-steps/




http://www.virmansec.com/blogs/skhairuddin


Need to support users over the internet? click here try our remote control online beta

Hi,

I also would like to suggest you test the issue in Clean Boot to narrow down the possible third party software conflicts. For the detailed steps, please
refer to the following Microsoft KB article:

How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7

http://support.microsoft.com/kb/929135


What’s the result in Clean Boot?

Regards,
Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Need to support users over the internet? click here try our remote control online beta