Go to C:\Windows\System32\dllcache (it's system hidden, you may have to enter direct into address bar)
Delete ntdll.dll from there (or replace it with the new one). Then delete ntdll from its original location and replace with the working copy
You'll get a "Windows Protection" warning which you can safely ignore
EDIT:
However, it should be noted that unless something malicious has altered ALL copies of ntdll on your system, deleting the "bad" copy in the original location should automatically replace it with the "default" copy. So unless you've been attacked by a virus or something else, it's likely you already have the correct version of it (because when Windows stops you from deleting the file, it doesn't actually stop you - it simply replaces it with a fresh copy. Unless the one from dllcache is corrupt too, which is unlikely)
09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0