We have a problem with a fairly new install (nothing much changed/installed other than added some shares, users and imported mail)... However it's starting to reboot on a regular basis. I doubt it's a hardware fault given that the same service crashes everytime, but you never know. The server is fully patched too, with latest drivers and MS updates. There is no antivirus installed at the moment.
The error log shows:
Log Name: Application
Source: Application Error
Date: 08/06/2011 10:31:59
Event ID: 1000
Task Category: (100)
Level: Error
Keywords: Classic
User: N/A
Computer: SERVER01.xxx.local
Description:
Faulting application name: svchost.exe, version: 6.1.7600.16385, time stamp: 0x4a5bc3c1
Faulting module name: ntdll.dll, version: 6.1.7601.17514, time stamp: 0x4ce7c8f9
Exception code: 0xc0000005
Fault offset: 0x000000000002baad
Faulting process id: 0x358
Faulting application start time: 0x01cc2224d13a7e7f
Faulting application path: C:\Windows\system32\svchost.exe
Faulting module path: C:\Windows\SYSTEM32\ntdll.dll
Report Id: 284d6b87-91b2-11e0-bbc0-3c4a92f7be26
I did see this KB article: http://support.microsoft.com/kb/2401588/en-us but not sure it relates to the same issue, faulting module is different.
Anybody experienced this before or know if this hotfix would fix the issue?
Thanks.