Microsoft (R) Windows Debugger Version 10.0.25200.1003 AMD64 Copyright (c) Microsoft Corporation. All rights reserved. Loading Dump File [C:\Users\elvmx\Desktop\MEMORY.DMP] Kernel Bitmap Dump File: Kernel address space is available, User address space may not be available. Primary dump contents written successfully Symbol search path is: srv* Executable search path is: Windows 10 Kernel Version 22621 MP (20 procs) Free x64 Product: WinNt, suite: TerminalServer SingleUserTS Edition build lab: 22621.1.amd64fre.ni_release.220506-1250 Machine Name: Kernel base = 0xfffff805`4a200000 PsLoadedModuleList = 0xfffff805`4ae12fe0 Debug session time: Sat Dec 3 15:06:10.124 2022 (UTC 8:00) System Uptime: 0 days 20:50:03.804 Loading Kernel Symbols ............................................................... ................................................................ ................................................................ ............................ Loading User Symbols PEB is paged out (Peb.Ldr = 00000000`00665018). Type ".hh dbgerr001" for details Loading unloaded module list .............................. For analysis of this file, run !analyze -v nt!KeBugCheckEx: fffff805`4a6288f0 48894c2408 mov qword ptr [rsp 8],rcx ss:0018:ffff9c0f`221478e0=0000000000000001 17: kd> !analyze -v ******************************************************************************* * * * Bugcheck Analysis * * * ******************************************************************************* APC_INDEX_MISMATCH (1) This is a kernel internal error. The most common reason to see this BugCheck is when a filesystem or a driver has a mismatched number of calls to disable and re-enable APCs. The key data item is the Thread->CombinedApcDisable field. This consists of two separate 16-bit fields, the SpecialApcDisable and the KernelApcDisable. A negative value of either indicates that a driver has disabled special or normal APCs (respectively) without re-enabling them; a positive value indicates that a driver has enabled special or normal APCs (respectively) too many times. Arguments: Arg1: 00007ffca78521c4, Address of system call function or worker routine Arg2: 0000000000000010, Thread->ApcStateIndex Arg3: 0000000000000000, (Thread->SpecialApcDisable << 16) | Thread->KernelApcDisable Arg4: ffff9c0f22147aa0, Call type (0 - system call, 1 - worker routine) Debugging Details: ------------------ KEY_VALUES_STRING: 1 Key : Analysis.CPU.mSec Value: 1296 Key : Analysis.DebugAnalysisManager Value: Create Key : Analysis.Elapsed.mSec Value: 1486 Key : Analysis.IO.Other.Mb Value: 19 Key : Analysis.IO.Read.Mb Value: 0 Key : Analysis.IO.Write.Mb Value: 30 Key : Analysis.Init.CPU.mSec Value: 468 Key : Analysis.Init.Elapsed.mSec Value: 455082 Key : Analysis.Memory.CommitPeak.Mb Value: 104 Key : Bugcheck.Code.DumpHeader Value: 0x1 Key : Bugcheck.Code.KiBugCheckData Value: 0x1 Key : Bugcheck.Code.Register Value: 0x1 Key : Dump.Attributes.AsUlong Value: 1000 Key : Dump.Attributes.DiagDataWrittenToHeader Value: 1 Key : Dump.Attributes.ErrorCode Value: 0 Key : Dump.Attributes.LastLine Value: Dump completed successfully. Key : Dump.Attributes.ProgressPercentage Value: 100 Key : WER.OS.Branch Value: ni_release Key : WER.OS.Timestamp Value: 2022-05-06T12:50:00Z Key : WER.OS.Version Value: 10.0.22621.1 FILE_IN_CAB: MEMORY.DMP DUMP_FILE_ATTRIBUTES: 0x1000 BUGCHECK_CODE: 1 BUGCHECK_P1: 7ffca78521c4 BUGCHECK_P2: 10 BUGCHECK_P3: 0 BUGCHECK_P4: ffff9c0f22147aa0 BLACKBOXBSD: 1 (!blackboxbsd) BLACKBOXNTFS: 1 (!blackboxntfs) BLACKBOXPNP: 1 (!blackboxpnp) BLACKBOXWINLOGON: 1 PROCESS_NAME: wemeetapp.exe STACK_TEXT: ffff9c0f`221478d8 fffff805`4a63dfa9 : 00000000`00000001 00007ffc`a78521c4 00000000`00000010 00000000`00000000 : nt!KeBugCheckEx ffff9c0f`221478e0 fffff805`4a63de6b : ffffd206`06a79080 ffffd206`08918080 00000000`0021fda0 ffffd206`12058b10 : nt!KiBugCheckDispatch 0x69 ffff9c0f`22147a20 00007ffc`a78521c4 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : nt!KiSystemServiceExitPico 0x380 00000000`0021de08 00000000`00000000 : 00000000`00000000 00000000`00000000 00000000`00000000 00000000`00000000 : 0x00007ffc`a78521c4 SYMBOL_NAME: nt!KiSystemServiceExitPico 380 MODULE_NAME: nt IMAGE_NAME: ntkrnlmp.exe STACK_COMMAND: .cxr; .ecxr ; kb BUCKET_ID_FUNC_OFFSET: 380 FAILURE_BUCKET_ID: 0x1_SysCallNum_1004_nt!KiSystemServiceExitPico OS_VERSION: 10.0.22621.1 BUILDLAB_STR: ni_release OSPLATFORM_TYPE: x64 OSNAME: Windows 10 FAILURE_ID_HASH: {57f068fd-11c1-c416-0cbf-7ad2e5bcd3d4} Followup: MachineOwner ---------
Hi,I'mDyari.Thanksforreachingout.Iwillbehappytoassistyouinthisregard.KindlycheckC:\Windows\MinidumpandcopyavailableminidumpfilestothedesktopthensharethemviaOneDriveorGoogleDriveinordertobeanalyzedandindicatewhichfileiscausingthecrash.Regards,你好，迪亚里。感谢您伸出援手。我很乐意在这方面为您提供帮助。请检查C:\Windows\Minidump并将可用的minidump文件复制到桌面，然后通过OneDrive或GoogleDrive共享它们，以便分析并指出导致崩溃的文件。问候，
这是我的dump文件。https://1drv.ms/u/s!AniavWXIkJ6-jla_AyPuHNFczhn9?e=ilvR5h谢谢您。此是否有帮助？是否抱歉，这没有帮助。太棒了！感谢你的反馈。你对此的满意度如何?感谢你的反馈，它能帮助改进网站。你对此的满意度如何?感谢你的反馈。
你好，感谢分享minidump文件，抱歉晚了minidump文件没有命名任何驱动程序，仅表明ntkrnlmp.exe是一个Windows组件，这意味着其他原因导致系统出现故障，或者它可能是通常由于驱动程序不兼容而发生的内存损坏。您的计算机是否生成了更多小型转储文件以供进一步分析？
谢谢您。我这边没有显示更多的转储文件了。此是否有帮助？是否抱歉，这没有帮助。太棒了！感谢你的反馈。你对此的满意度如何?感谢你的反馈，它能帮助改进网站。你对此的满意度如何?感谢你的反馈。
如果只出现一次，可能是更新驱动或驱动不兼容造成的。如果它经常发生，请尝试以下步骤来解决此问题：1-检查更新：转到设置>更新和安全>检查更新>安装所有待处理的更新2-使用DDU免费工具完全卸载显卡驱动：https://www-guru3d-com.translate.goog/files-det.然后，安装制造商网站上提供的最新驱动程序。3-卸载任何第三方安全软件并使用免费的Malwarebytes扫描病毒和恶意软件：https://www-malwarebytes-com.translate.goog/mwb.4-以管理员身份运行命令提示符。键入此命令并按回车键：dism.exe/online/cleanup-image/restorehealth然后，键入此命令并按回车键：sfc/scannow5-如果您要超频您的PC，请尝试以它们的库存速度运行所有东西（CPU、GPU、系统内存）。看看问题是否仍然可以重现。或者，关闭XMP配置文件或将其设置为自动。6-从制造商的网站下载并安装最新版本的BIOS和芯片组驱动程序。7-使用免费实用程序MemTest86测试RAM，然后运行完整的8次扫描以测试您的RAM是否存在物理错误：https://www-tenforums-com.translate.goog/tutori.8-运行Windows内存诊断：https://www-howtogeek-com.translate.goog/260813.运行硬盘诊断：https://www-lifewire-com.translate.goog/free-ha.9-如果您愿意这样做，请取出所有系统内存条，检查它们是否有任何明显的缺陷，然后将它们重新插入插槽。确保它们正确安装在插槽中。如果您安装了多根系统内存并且您怀疑其中一根有故障，则可以尝试的一件事是一次仅使用一根内存模块重现该问题。这将帮助您隔离故障模块。10-如果执行上述步骤后问题仍然存在，请启用驱动程序验证程序并让计算机崩溃3次，然后将其禁用并共享新创建的minidump文件：https://www-tenforums-com.translate.goog/tutori.请随时询问您是否需要进一步的帮助。
好的，谢谢您。此是否有帮助？是否抱歉，这没有帮助。太棒了！感谢你的反馈。你对此的满意度如何?感谢你的反馈，它能帮助改进网站。你对此的满意度如何?感谢你的反馈。
不用客气。乐意效劳.
