BSOD Windows 7 ultimate 64-bit

Here's the dump info:

Anyone have any clue on what could be causing this? It's very randomly happening. Not always doing the same thing when it happens.


...............................................................
................................................................
..........................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them. A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 000000007792040a, address of system function (system call)
Arg2: 0000000000000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: 000000000000ffff, Thread->KernelApcDisable
Arg4: fffff8800b497ca0, Previous KernelApcDisable

Debugging Details:
------------------


FAULTING_IP:
+0
00000000`7792040a c3 ret

CUSTOMER_CRASH_COUNT: 1

DEFAULT_BUCKET_ID: VISTA_DRIVER_FAULT

BUGCHECK_STR: 0x1

PROCESS_NAME: explorer.exe

CURRENT_IRQL: 0

LAST_CONTROL_TRANSFER: from fffff80002ed3469 to fffff80002ed3f00

STACK_TEXT:
fffff880`0b497a68 fffff800`02ed3469 : 00000000`00000001 00000000`7792040a 00000000`00000000 00000000`0000ffff : nt!KeBugCheckEx
fffff880`0b497a70 fffff800`02ed33a0 : ffffffff`ffffffff 00000000`0cccca98 00000000`0cccca80 00000000`00000024 : nt!KiBugCheckDispatch+0x69
fffff880`0b497bb0 00000000`7792040a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`0cccce68 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7792040a


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!KiSystemServiceExit+245
fffff800`02ed33a0 4883ec50 sub rsp,50h

SYMBOL_STACK_INDEX: 2

SYMBOL_NAME: nt!KiSystemServiceExit+245

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

IMAGE_NAME: ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP: 4a5bc600

FAILURE_BUCKET_ID: X64_0x1_nt!KiSystemServiceExit+245

BUCKET_ID: X64_0x1_nt!KiSystemServiceExit+245

Followup: MachineOwner
---------

rax=fffff8800b497b70 rbx=0000000000000000 rcx=0000000000000001
rdx=000000007792040a rsi=000000000bf69540 rdi=000000000cccd000
rip=fffff80002ed3f00 rsp=fffff8800b497a68 rbp=fffff8800b497ca0
r8=0000000000000000 r9=000000000000ffff r10=fffff8800b497ca0
r11=fffffa800947eb60 r12=0000000080004005 r13=000000000cccd3c0
r14=ffffffffffffffff r15=0000000000000000
iopl=0 nv up ei ng nz na pe nc
cs=0010 ss=0018 ds=002b es=002b fs=0053 gs=002b efl=00000282
nt!KeBugCheckEx:
fffff800`02ed3f00 48894c2408 mov qword ptr [rsp+8],rcx ss:0018:fffff880`0b497a70=0000000000000001
Child-SP RetAddr : Args to Child : Call Site
fffff880`0b497a68 fffff800`02ed3469 : 00000000`00000001 00000000`7792040a 00000000`00000000 00000000`0000ffff : nt!KeBugCheckEx
fffff880`0b497a70 fffff800`02ed33a0 : ffffffff`ffffffff 00000000`0cccca98 00000000`0cccca80 00000000`00000024 : nt!KiBugCheckDispatch+0x69
fffff880`0b497bb0 00000000`7792040a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245 (TrapFrame @ fffff880`0b497c20)
00000000`0cccce68 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7792040a
start end module name
fffff800`00bb6000 fffff800`00bc0000 kdcom kdcom.dll Mon Jul 13 20:31:07 2009 (4A5BDFDB)
fffff800`02e19000 fffff800`02e62000 hal hal.dll Mon Jul 13 20:27:36 2009 (4A5BDF08)
fffff800`02e62000 fffff800`0343f000 nt ntkrnlmp.exe Mon Jul 13 18:40:48 2009 (4A5BC600)
fffff880`00c00000 fffff880`00c3b000 SYMEFA64 SYMEFA64.SYS Mon Nov 23 19:35:40 2009 (4B0B386C)
fffff880`00c3b000 fffff880`00c60000 CBUFS CBUFS.sys Thu Jan 07 11:33:49 2010 (4B461AFD)
fffff880`00c70000 fffff880`00cb4000 mcupdate_GenuineIntel mcupdate_GenuineIntel.dll Mon Jul 13 20:29:10 2009 (4A5BDF66)

Thanks everyone for responding.

Here's the two dumps.

I have read that link and many others.. But it doesn't tell you how to fix it.

What were you doing at the time of the crash?

They can be doing anything. It's very random. One of the times he was opening his shortcut to User Files (my docs, music, etc) Other he was in Remote desktop session.

mariemorgan said:

Thanks everyone for responding.

Here's the two dumps.

I have read that link and many others.. But it doesn't tell you how to fix it.

Hi and welcome

These both were caused by an APC_INDEX_MISMATCH
Usual causes: Checked build kernel error. I suspect that this can be caused by something else, as I've seen 2 of these over the past several months - and none appeared to be a checked build

Because this is an unusal case I would

Update your BIOS

Run a system file check

If you are overclocking stop.


Let us know the results

Code:

012910-87781-01.dmp    1/29/2010 3:21:36 PM    APC_INDEX_MISMATCH    0x00000001    00000000`7792040a    00000000`00000000    00000000`0000ffff    fffff880`0b497ca0    ntoskrnl.exe    ntoskrnl.exe+71f00                    x64        C:\Users\K\Desktop\012910-87781-01.dmp    2    15    7600    
012910-99653-01.dmp    1/29/2010 2:49:06 PM    APC_INDEX_MISMATCH    0x00000001    00000000`7749040a    00000000`00000000    00000000`0000ffff    fffff880`08579ca0    ntoskrnl.exe    ntoskrnl.exe+71f00                    x64        C:\Users\K\Desktop\012910-99653-01.dmp    2    15    7600

Drivers that need updating

Code:

SSPORT.sys        fffff880`0397c000    fffff880`03984000    0x00008000    0x42fbda34    8/11/2005 6:07:32 PM                        
mdmxsdk.sys        fffff880`02972000    fffff880`02976280    0x00004280    0x449716be    6/19/2006 4:27:26 PM                        
secdrv.SYS        fffff880`03944000    fffff880`0394f000    0x0000b000    0x4508052e    9/13/2006 8:18:38 AM                        
xaudio64.sys        fffff880`03996000    fffff880`0399e000    0x00008000    0x456cd810    11/28/2006 7:45:04 PM                        
CAX_CNXT.sys        fffff880`06a51000    fffff880`06b19000    0x000c8000    0x458c403a    12/22/2006 3:29:46 PM                        
CAXHWAZL.sys        fffff880`05912000    fffff880`05966000    0x00054000    0x458c4077    12/22/2006 3:30:47 PM                        
CAX_DPV.sys        fffff880`06876000    fffff880`069f0000    0x0017a000    0x458c4114    12/22/2006 3:33:24 PM                        
SFEP.sys        fffff880`0502d000    fffff880`0502fc80    0x00002c80    0x46b2beb9    8/3/2007 12:35:53 AM                        
PxHlpa64.sys        fffff880`01000000    fffff880`0100bd00    0x0000bd00    0x47d88a39    3/12/2008 8:58:17 PM                        
ArcSoftKsUFilter.sys        fffff880`06b66000    fffff880`06b70000    0x0000a000    0x47f4acbc    4/3/2008 5:09:00 AM                        
iaStor.sys        fffff880`0100f000    fffff880`0111d000    0x0010e000    0x4805479b    4/15/2008 7:26:03 PM                        
dump_iaStor.sys        fffff880`02c00000    fffff880`02d0e000    0x0010e000    0x4805479b    4/15/2008 7:26:03 PM                        
rimssn64.sys        fffff880`05000000    fffff880`0501e000    0x0001e000    0x48400944    5/30/2008 9:03:48 AM                        
RTKVHD64.sys        fffff880`06659000    fffff880`067bfc00    0x00166c00    0x48645cd6    6/26/2008 10:21:58 PM                        
elrawdsk.sys        fffff880`04130000    fffff880`0413a000    0x0000a000    0x488b65ed    7/26/2008 12:59:09 PM                        
risdsn64.sys        fffff880`051dd000    fffff880`051f5000    0x00018000    0x48acb935    8/20/2008 7:39:17 PM                        
purendis.sys        fffff880`069f0000    fffff880`069fc000    0x0000c000    0x490695a0    10/27/2008 11:31:28 PM                        
pnarp.sys        fffff880`06860000    fffff880`0686c000    0x0000c000    0x4906a9ac    10/28/2008 12:57:00 AM                        
RimSerial_AMD64.sys        fffff880`04830000    fffff880`04837c00    0x00007c00    0x492addcd    11/24/2008 12:01:01 PM

Analysis

Code:

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\Users\K\Desktop\012910-87781-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*d:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x64
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16385.amd64fre.win7_rtm.090713-1255
Machine Name:
Kernel base = 0xfffff800`02e62000 PsLoadedModuleList = 0xfffff800`0309fe50
Debug session time: Fri Jan 29 16:18:07.198 2010 (GMT-5)
System Uptime: 0 days 0:31:10.446
Loading Kernel Symbols
...............................................................
................................................................
..........................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 1, {7792040a, 0, ffff, fffff8800b497ca0}

Probably caused by : ntkrnlmp.exe ( nt!KiSystemServiceExit+245 )

Followup: MachineOwner
---------

1: kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

APC_INDEX_MISMATCH (1)
This is a kernel internal error. The most common reason to see this
bugcheck is when a filesystem or a driver has a mismatched number of
calls to disable and re-enable APCs. The key data item is the
Thread->KernelApcDisable field. A negative value indicates that a driver
has disabled APC calls without re-enabling them.  A positive value indicates
that the reverse is true. This check is made on exit from a system call.
Arguments:
Arg1: 000000007792040a, address of system function (system call)
Arg2: 0000000000000000, Thread->ApcStateIndex << 8 | Previous ApcStateIndex
Arg3: 000000000000ffff, Thread->KernelApcDisable
Arg4: fffff8800b497ca0, Previous KernelApcDisable

Debugging Details:
------------------


FAULTING_IP: 
+633a952f01d6db30
00000000`7792040a c3              ret

CUSTOMER_CRASH_COUNT:  1

DEFAULT_BUCKET_ID:  VISTA_DRIVER_FAULT

BUGCHECK_STR:  0x1

PROCESS_NAME:  explorer.exe

CURRENT_IRQL:  0

LAST_CONTROL_TRANSFER:  from fffff80002ed3469 to fffff80002ed3f00

STACK_TEXT:  
fffff880`0b497a68 fffff800`02ed3469 : 00000000`00000001 00000000`7792040a 00000000`00000000 00000000`0000ffff : nt!KeBugCheckEx
fffff880`0b497a70 fffff800`02ed33a0 : ffffffff`ffffffff 00000000`0cccca98 00000000`0cccca80 00000000`00000024 : nt!KiBugCheckDispatch+0x69
fffff880`0b497bb0 00000000`7792040a : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExit+0x245
00000000`0cccce68 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x7792040a


STACK_COMMAND:  kb

FOLLOWUP_IP: 
nt!KiSystemServiceExit+245
fffff800`02ed33a0 4883ec50        sub     rsp,50h

SYMBOL_STACK_INDEX:  2

SYMBOL_NAME:  nt!KiSystemServiceExit+245

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: nt

IMAGE_NAME:  ntkrnlmp.exe

DEBUG_FLR_IMAGE_TIMESTAMP:  4a5bc600

FAILURE_BUCKET_ID:  X64_0x1_nt!KiSystemServiceExit+245

BUCKET_ID:  X64_0x1_nt!KiSystemServiceExit+245

Followup: MachineOwner
---------

Ok I'll update the BIOS and run a SFC next time i'm out at that client.

We are not overclocking.

Thanks for your help.