Solved BSOD on restartWindows 8.1 Pro 0xc000021a

mobiuspizza · Sep 10, 2014

BSOD on restart Windows 8.1 Pro 0xc000021a

I just upgraded my PC from Windows 7 to 8.1 and now I am getting BSOD with code 0xc000021a whenever I restart my PC.
Please help! Many thanks

blueelvis · Sep 12, 2014

Hi MobiusPizza & Welcome to the forums ^_^,

I have analyzed your dump files and below has been provided an analysis of the same for informative purposes :-

Code:

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************


WINLOGON_FATAL_ERROR (c000021a)
The Winlogon process terminated unexpectedly.
Arguments:
Arg1: ffffc0009223f570, String that identifies the problem.
Arg2: ffffffffc0000005, Error Code.
Arg3: 00007ffce39a000a
Arg4: 000000831b53e0c0


1: kd> kbRetAddr           : Args to Child                                                           : Call Site
fffff803`08594779 : 00000000`0000004c 00000000`c000021a ffffd001`cfc5f3f8 ffffe001`33bf0840 : nt!KeBugCheckEx
fffff803`0858c909 : ffffe001`33597300 ffffd001`cbaf77a0 00000000`00000000 00000000`00000002 : [COLOR=#ff0000]nt!PopGracefulShutdown+0x2c9[/COLOR]
fffff803`083767b3 : ffffe001`35b224e0 00000000`00000000 00000000`00000000 ffffe001`33597040 : nt! ?? ::OKHAJAOM::`string'+0xb69
fffff803`0836ec00 : fffff803`087a67d1 00000000`00000001 ffffd001`cbaf7a58 00000000`c0000004 : nt!KiSystemServiceCopyEnd+0x13
fffff803`087a67d1 : 00000000`00000001 ffffd001`cbaf7a58 00000000`c0000004 ffffd001`cbdb2180 : nt!KiServiceLinkage
fffff803`086dc843 : 00000000`00000000 00000000`00000000 ffffd001`cbdb2180 ffffe001`33597180 : nt! ?? ::NNGAKEGL::`string'+0x65101
fffff803`0825efee : fffff803`0825ef34 00000000`00000000 00000000`00000002 ffffe001`33597040 : nt!PopPolicyWorkerAction+0x63
fffff803`0826aadb : fffff803`00000002 ffffd001`cbaf7bd0 00000000`80000000 ffffe001`33597040 : nt!PopPolicyWorkerThread+0xba
fffff803`082e6794 : ffffe001`3596b040 ffffe001`33597040 ffffe001`33597040 ffffe001`2806c040 : nt!ExpWorkerThread+0x293
fffff803`083715c6 : fffff803`084fd180 ffffe001`33597040 ffffe001`3596b040 00000000`00000000 : nt!PspSystemThreadStartup+0x58
00000000`00000000 : ffffd001`cbaf8000 ffffd001`cbaf2000 00000000`00000000 00000000`00000000 : nt!KiStartSystemThread+0x16

As we can see that the Graceful Shutdown was called but that resulted into a bugcheck. According to the exception, this would mean that a critical process was terminated unexpectedly.. If we dump the 1st and 4th Parameters of the Dump File :-

Code:

1: kd> da ffffc0009223f570
ffffc000`9223f570  [COLOR=#ff0000][B]"Windows SubSystem"[/B][/COLOR]
1: kd> da 00007ffce39a000a
00007ffc`e39a000a  ".A..jt"

Below is a list of the 3rd party drivers present on your system :-

Code:

**************************Thu Sep 11 05:26:44.364 2014 (UTC + 5:30)**************************
[COLOR=#ff0000][U][B]wdcsam64.sys                  Wed Apr 16 14:09:08 2008 (4805BB2C)[/B][/U][/COLOR]
LGVirHid.sys                  Tue Nov 24 07:06:48 2009 (4B0B38B0)
LGBusEnum.sys                 Tue Nov 24 07:06:48 2009 (4B0B38B0)
[B][U]truecrypt.sys                 Thu Sep  1 18:12:30 2011 (4E5F7DB6)[/U][/B]
RXBSKNL.SYS                   Sun Apr 15 11:49:06 2012 (4F8A685A)
HECIx64.sys                   Tue Jul  3 03:44:58 2012 (4FF21D62)
LGSHidFilt.Sys                Thu May 30 20:46:33 2013 (51A76D51)
L1C63x64.sys                  Tue Jul 16 12:26:31 2013 (51E4EE9F)
intelppm.sys                  Thu Aug 22 14:16:35 2013 (5215CFEB)
aswTdi.SYS                    Thu Dec 19 18:23:43 2013 (52B2EC57)
rxfcv.sys                     Tue Jan 28 14:33:48 2014 (52E77274)
[B][U]dtsoftbus01.sys               Fri Feb 21 15:19:36 2014 (53072130)[/U][/B]
AMDACPKSL.SYS                 Wed Mar 12 05:19:44 2014 (531FA118)
AtihdWB6.sys                  Wed Mar 12 05:20:02 2014 (531FA12A)
atikmpag.sys                  Fri Apr 18 06:37:07 2014 (53507ABB)
atikmdag.sys                  Fri Apr 18 07:43:16 2014 (53508A3C)
dump_iaStorA.sys              Sat May  3 04:36:56 2014 (53642510)
iaStorA.sys                   Sat May  3 04:36:56 2014 (53642510)
aswHwid.sys                   Thu Jun 26 17:01:26 2014 (53AC048E)
aswMonFlt.sys                 Thu Jun 26 17:02:51 2014 (53AC04E3)
aswRdr2.sys                   Thu Jun 26 17:03:28 2014 (53AC0508)
aswSnx.sys                    Thu Jun 26 17:04:44 2014 (53AC0554)
aswRvrt.sys                   Thu Jun 26 17:05:39 2014 (53AC058B)
aswVmm.sys                    Thu Jun 26 17:05:49 2014 (53AC0595)
aswSP.sys                     Wed Jul  2 23:08:12 2014 (53B44384)
RapportCerberus64_80049.sys   Sun Jul 27 17:01:17 2014 (53D4E305)
RapportKE64.sys               Thu Jul 31 18:26:22 2014 (53DA3CF6)
RapportEI64.sys               Thu Jul 31 18:26:23 2014 (53DA3CF7)
RapportPG64.sys               Thu Jul 31 18:26:37 2014 (53DA3D05)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Sep 11 04:49:59.688 2014 (UTC + 5:30)**************************
L1C63x64.sys                  Mon Apr  1 08:45:17 2013 (5158FBC5)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Thu Sep 11 04:41:00.835 2014 (UTC + 5:30)**************************
atikmpag.sys                  Sat Jul  5 06:56:52 2014 (53B7545C)
atikmdag.sys                  Sat Jul  5 07:09:13 2014 (53B75741)

Code:
Then please run the following DISM commands to see if there's any problems with the system (from an elevated (Run as administrator) Command Prompt). Press Enter after each one:
Code:

Code:

Dism /Online /Cleanup-Image /ScanHealth

Code:

Code:

Dism /Online /Cleanup-Image /CheckHealth

If the problem is fixable, you can use this command to repair it (from an elevated (Run as administrator) Command Prompt). Press Enter after typing it:
Code:

Code:

Dism /Online /Cleanup-Image /RestoreHealth

From this article: Repair a Windows Image

Once this is done also run sfc.exe /scannow from an elevated (Run as administrator) Command Prompt to check for further corruption.

If the problem is still not solved then please remove the driver highlighted in RED as it is very well known to cause BSOD's. The Driver is associated with Western Digital Software.

Also, remove the Daemon Tools till the time we are troubleshooting. Let me know how it goes ^_^

mobiuspizza · Sep 12, 2014

Thanks a lot blueelvis! I ran scannow and DSIM though it didn't find any errors. Then I tried to uninstall the Western Digital driver and it seems to have done the trick.

blueelvis · Sep 12, 2014

mobiuspizza said:
Thanks a lot blueelvis! I ran scannow and DSIM though it didn't find any errors. Then I tried to uninstall the Western Digital driver and it seems to have done the trick.

Glad to hear that the issue has been resolved ^_^

Solved BSOD on restartWindows 8.1 Pro 0xc000021a

mobiuspizza

New Member

My Computer

System One

blueelvis

OMG Debugger!

My Computer

System One

mobiuspizza

New Member

My Computer

System One

blueelvis

OMG Debugger!

My Computer

System One