ntdll.dll Windows Explorer Problems

kakarottkash

Junior Member
Mar 11, 2004
1
0
0
Hi I am having problems with Windows Explorer, quiet frequently i get these errors occuring in my Event Viewer.

Faulting application explorer.exe, version 6.0.2800.1106, faulting module ntdll.dll, version 5.1.2600.1217, fault address 0x000085c0.

Basically what happens is that my desktop refresh's and the system tray loses its icons, not all the icons disapear, but the ones i am using like Bittorent Icons, Mirc Icons and many other icons disapear and also the any programs opened on the task bar disapear too. It really ANNOYING as i cant bring those icons back to the systray, and the actuall programs are still working as i checked in Processes in Windows Task Manager. What I find weird is that its just looking through windows explorer which triggers this off, it can be any folder and all of suddent the desktop refreshes and lists the error in event viewer.

So what I have been doing is looking for possible solutions to this problem, so far all have failed, I have Format Reload many times with XP pro and i seem to find this error occurs when i install SP1a, I have had a look on google and it mentions this Ntdll.dll file had an exploit which the new version of the file eleminates. What made it even stranger is that its just not my pc doing this, I went to a freinds house and his was also giving him this NtDll.dll error. I have checked my memory for any errors and it seems fine, i used some different memory as a test and it still did the same problems.

I tried many things before i did format reload, i uninstalled Norton and Zonealarm, as for services well i turned of the ones i didnt need or ever use. Also i did many Spybot and Adware Scans and they found hardly anything exciting, just some Data miner cookies. But lets forget about my past OS installation, this problem occurs from fresh format reload.

Here all i have done:

1. Formatted NTFS Partition and Installed XP Pro
2. Installed Device drivers for System (please check my siganeture for details on driver revisions i am using)
3. Installed SP1a and also Critical Updates
4. (All Services are Running as default and i have not ammended any) (also Scanned Hard disk with Spybot and Adaware)
5. And hey presto ntdll.dll Problem is now back and Explorer keeps crashing

And I did check that http://www.eventid.net site, and it had no information to do with this particular problem. Just to let everyone know:

Source: Application Error
Event ID: 1000


Well i havent installed SP2 beta for a while, im not sure wether IE6 is SP2 patched. All i know is i have installed SP1a and all the critcal updates of the Microsoft Windows Update page. Thats all I do and then the problems occur with Windows Explorer, just as a note i never have a problem with IE6 explorer, its always when im browsing through Windows Explorer.

When i dont have SP1a and Critical updates installed, i never get this error what so ever.

I am aware that ntdll.dll file gets renewed when you install one of the updates. This is the update Q815021_WXP_SP2_x86_ENU.exe

http://www.microsoft.com/downloads/...7D-F2D5-47B8-AB98-77BA7501B00B&displaylang=en

This patch relates to IIS exploitation, but i dont even have IIS installed so would i need this patch, i mean surely i dont right? How can someone exploit something when its not actually installed?

So can someone tell me if this Q815021 update is included in SP1a or is it in the critical updates, I am assuming that if i dont I avoid changing my ntdll.dll file which originally installs of the WinXP CD that it might solve my problem.

Just to also let you know I did try extracting the original ntdll.dll file of my WinXP CD in the recovery console and replacing the newer version which comes with the SP1a or Critical Updates, when i did this it gave me BSOD and told me that i had error with ntdll.dll file, so that didnt work, luckly i backed up the new file and replaced it and windows booted back up ok.

So if anyones got any ideas on how i can avoid installing the new version of ntdll.dll then i would love you forever ^_^

ps: Just to let everyone know, my i have made sure my system has all the latest drivers ect and when i was diagnosing this issue i made sure Zonealarm and Norton Anti Virus was not installed, and used default windows build in firewall. I tried disabling many services too and made sure i started without any programs at start up. I also checked my memory and also tried using some other memory and it still kept doing the same thing.

Here is my Build Specification:

Asus A7V600-X (Latest Bios 1002)
AMD Athlon XP 1800+ (1533 Mhz)
Bus Speed 133Mhz
1x Kingston 512MB KVR400X64C3A/512
80GB IBM HDD (Primary)
100GB Western Digital HDD (Secondary)
Sony DVDRW DRU-510A (Firmware 1.0d)
LG DVDROM DRD8160B (Firmware 1.03)
SoundBlaster Audigy 1 Platinum + Live Drive
Standard 3.5 Flopply Drive
Enermax EG375P SFMA Noisetaker 375 Watt PSU
MSI G4MX460-VTP Dual Head 64mb DDR Video Card
Zalman CNPS5100-Cu CPU Cooler
Zalman ZM80HP Silent VGA Heatpipe
Alcatel SpeedTouch USB ADSL Modem
FireStorm Dual Analog 2 Joypad
17inch TFT Mitac LC-AE
APC BACK-UPS 600 UPS


Windows XP Professional (5.01.2600 Build) Sp1a
Direct X 9.0b
Nvidia Driver 53.03 (6.14.10.5303)
Via Driver VIA Hyperion 4in1 451v
ZoneAlarm Pro with Webfiltering 4.5.538.001
Norton Antivirus 2004