BSOD while shutting down

[Luckystar]

Hey guys, got a funny one here.

Last when I was shutting my PC down, it took forever, I mean i went and a cup of tea and get my shirt ready for today. By then i thought it had shutdown until it came to bed time. Went through the door and what d'ya know a BSOD.

My PC had been taking a while to shutdown, for ages but just ignored it as when i shutdown i leave the room and let it do its thing, unless i turn it off at bedtime and i then notice the time it takes to shutdown.

The error code was 0xf3

If anyone can be as so kind to give us a hand out here. Please. I think its time to sort this out.

Thanks a bunch in advance

Lucky

 

[Jonathan_King]

Usually the cause of long shutdown times is a program taking forever to close. Anti-virus programs are big culprits, but not always.

This BSOD looks as if it was caused by Bitlocker.

Microsoft (R) Windows Debugger Version 6.11.0001.404 AMD64
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\Jonathan\Desktop\033010-21340-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (4 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02a61000 PsLoadedModuleList = 0xfffff800`02c9ee50
Debug session time: Mon Mar 29 17:48:33.297 2010 (GMT-4)
System Uptime: 0 days 2:32:15.888
Loading Kernel Symbols
...............................................................
................................................................
..................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck F3, {c3a2b, c39c5, 1, ffffffffc0000054}

Probably caused by : cng.sys ( cng!GatherRandomKey+22c )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

DISORDERLY_SHUTDOWN (f3)
No free pages available to continue operations.
Because applications are not terminated and drivers are
not unloaded, they can continue to access pages even after
the modified writer has terminated.  This can cause the
system to run out of pages since the pagefile(s) cannot be used.
Arguments:
Arg1: 00000000000c3a2b, Total number of dirty pages
Arg2: 00000000000c39c5, Number of dirty pages destined for the pagefile(s).
Arg3: 0000000000000001, Internal flags.
Arg4: ffffffffc0000054, Most recent modified write error status.

Debugging Details:
------------------


CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0xF3

PROCESS_NAME:  System

CURRENT_IRQL:  0

TRAP_FRAME:  fffff880bce59fc0 -- (.trap 0xfffff880bce59fc0)
NOTE: The trap frame does not contain all registers.
Some register values may be zeroed or incorrect.
rax=0000000000000005 rbx=0000000000000000 rcx=0000000000000000
rdx=fffff80002d09900 rsi=0000000000000000 rdi=0000000000000000
rip=fffff80002d69839 rsp=fffff880bce5a150 rbp=fffff880bce5a700
 r8=0000000000000000  r9=fffffa8009055760 r10=fffffa8005df75e0
r11=0000000000000005 r12=0000000000000000 r13=0000000000000000
r14=0000000000000000 r15=0000000000000000
iopl=0         nv up ei pl nz na pe nc
nt!ExpGetProcessInformation+0x26b:
fffff800`02d69839 41894644        mov     dword ptr [r14+44h],eax ds:5730:00000000`00000044=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from fffff80002b9d94f to fffff80002ad2f00

STACK_TEXT:  
fffff880`bce59d08 fffff800`02b9d94f : 00000000`000000f3 00000000`000c3a2b 00000000`000c39c5 00000000`00000001 : nt!KeBugCheckEx
fffff880`bce59d10 fffff800`02b9da24 : fffff8a0`00000001 fffff800`000000f3 00000000`c0000054 00000000`00001400 : nt!MiNoPagesLastChance+0x57f
fffff880`bce59e00 fffff800`02a7f22a : 00000000`00000000 fffff880`bce59ec0 00000000`00000001 00000000`00000001 : nt!MiWaitForFreePage+0xc4
fffff880`bce59e60 fffff800`02ad0fee : 00000000`00000001 fffffa80`05df7610 fffffa80`09055700 fffffa80`06673030 : nt! ?? ::FNODOBFM::`string'+0x44545
fffff880`bce59fc0 fffff800`02d69839 : 00000000`00000000 fffffa80`05df7610 fffffa80`05df7610 fffff8a0`02471b90 : nt!KiPageFault+0x16e
fffff880`bce5a150 fffff800`02dcda06 : fffff8a0`024690a8 00000000`0001ff58 fffff880`bce5a2e0 00000000`00000000 : nt!ExpGetProcessInformation+0x26b
fffff880`bce5a2a0 fffff800`02dcee49 : fffff8a0`024690a8 fffffa80`6365734b 00000000`00000000 fffff880`bce5ac20 : nt!ExpQuerySystemInformation+0xf14
fffff880`bce5a640 fffff800`02ad2153 : fffff880`bce5a710 fffff800`02ad10fd 00000000`00000001 fffffa80`06339310 : nt!NtQuerySystemInformation+0x4d
fffff880`bce5a680 fffff800`02ace6f0 : fffff880`0144ba9c fffffa80`054f2000 fffff880`bce5a844 00000000`0000e150 : nt!KiSystemServiceCopyEnd+0x13
fffff880`bce5a818 fffff880`0144ba9c : fffffa80`054f2000 fffff880`bce5a844 00000000`0000e150 fffff880`100b9128 : nt!KiServiceLinkage
fffff880`bce5a820 fffff880`0144b56d : fffffa80`06339310 00000000`00000000 00000000`20206f49 00000000`00000050 : cng!GatherRandomKey+0x22c
fffff880`bce5abe0 fffff800`02dcc541 : fffff880`bce5ace8 fffff800`02c77f60 fffff800`02c753d4 fffffa80`093ceb60 : cng!scavengingWorkItemRoutine+0x3d
fffff880`bce5ac80 fffff800`02ae0161 : fffff800`02a910dc fffff800`02a910dc fffffa80`093ceb60 fffffa80`093ceb60 : nt!IopProcessWorkItem+0x3d
fffff880`bce5acb0 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!ExpWorkerThread+0x111


STACK_COMMAND:  kb

FOLLOWUP_IP: 
cng!GatherRandomKey+22c
fffff880`0144ba9c 83ff20          cmp     edi,20h

SYMBOL_STACK_INDEX:  a

SYMBOL_NAME:  cng!GatherRandomKey+22c

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: cng

IMAGE_NAME:  cng.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc814

FAILURE_BUCKET_ID:  X64_0xF3_cng!GatherRandomKey+22c

BUCKET_ID:  X64_0xF3_cng!GatherRandomKey+22c

Followup: MachineOwner
---------

I suggest running a system files check. Open an elevated command prompt and enter sfc /scannow.


You may also want to try a Repair Install if the problem persists.

 

[RhapsodyOfFire]

So what caused the problem? It is best to post the solving method so other users can understand the reason behind such issues and be able to fix it.