I also have an issue in event viewer with "C:\Windows\SysWOW64\ntdll.dll".
I run my task under "Current User Account" with "Run whether the user is logged on or not".
I will now try to disable ipv6. Then I disable ipv6 I got a yellow exclamation point device manager on "Teredo Tunneling Pseudo-Interface - this device cannot start (code 10)"
Then I enable ipv6 again, "Teredo Tunneling Pseudo-Interface - this device cannot start (code 10)" doesn't disappear, so I had to use "Registry Backup" so everything is as it was before.
"Disable IPv6-Microsoft Fix it 50409" modified some registry entries and "Enable IPv6-Microsoft Fix it 50440" didn't help to restore it as it was before.
There is an incident in event viewer with version 0.9.2, 0.9.6, 0.9.8 and 1.2.0. for me and I get it only once in a while.
I will try to do backup by using "system user account" in task scheduler.
I have the task scheduler to do a backup at windows startup and I have tried to startup a couple a times, no issues so far.
Tomas