In the past couple of weeks, we have encountered several of our Windows Server 2008 R2 systems with the following application log error message. Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1 Faulting module name: ntdll.dll, version: 6.1.7600.16385, time stamp: 0x4e0ae736 Exception code: 0xc000071f Fault offset: 0x000000000006f1ac Faulting process id: 0x2cb0 Faulting application start time: 0x01cc3699e8228365 Faulting application path: C:\Windows\system32\svchost.exe Faulting module path: C:\Windows\SYSTEM32\ntdll.dll Report Id: 3bee30dd-a29a-11e0-a794-a4badb0b2997 In some, but not all, instances, this error is followed by the failure of the Server service, which in turn causes other problems on the server - file shares no longer being available, SharePoint crashing, user profiles unavailable, etc. While most of these servers have McAfee Solidifer and Symantec EndPoint Protection running, they do not share any other common attributes. Some are file servers, some are application servers, and others are database servers. The errors do not seem to occur at the same time, and there do not seem to be any other errors that occur at the same time. But they are occurring, sometimes but not always daily. Does any one have any ideas of what the problem could be?

to find the root cause of the problem why ntdll is crashing you need to generate the dump file using ADPLUS. After you generate the dump file it has to be read to find the real cause. http://support.microsoft.com/kb/286350 more help can be found here http://www.dumpanalysis.org/blog/index.php/2008/09/12/adplus-in-21-seconds-and-13-steps/ http://www.virmansec.com/blogs/skhairuddin

Hi, I also would like to suggest you test the issue in Clean Boot to narrow down the possible third party software conflicts. For the detailed steps, please refer to the following Microsoft KB article: How to troubleshoot a problem by performing a clean boot in Windows Vista or in Windows 7 http://support.microsoft.com/kb/929135 What’s the result in Clean Boot? Regards, Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.