Question
Applies to
7314 views
Critical_Structure_Corruption Windows 8.1 ntoskrnl.exe
Hi,
I'm getting blue screen with that message. I saw minidump files with that content :
==================================================
Dump File : 103013-39437-01.dmp
Crash Time : 30.10.2013 01:25:33
Bug Check String :
Bug Check Code : 0x00000109
Parameter 1 : a3a01f58`98a8b558
Parameter 2 : b3b72bde`eb27eb43
Parameter 3 : ffffe000`02021c20
Parameter 4 : 00000000`0000001c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+14dca0
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+14dca0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\103013-39437-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 9600
Dump File Size : 295.336
Dump File Time : 30.10.2013 01:28:22
==================================================
==================================================
Dump File : 103013-18734-01.dmp
Crash Time : 30.10.2013 00:42:40
Bug Check String :
Bug Check Code : 0x00000109
Parameter 1 : a3a01f58`92ed150f
Parameter 2 : b3b72bde`e56c4aea
Parameter 3 : ffffe000`02004710
Parameter 4 : 00000000`0000001c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+14dca0
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+14dca0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\103013-18734-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 9600
Dump File Size : 295.304
Dump File Time : 30.10.2013 00:43:50
==================================================
==================================================
Dump File : 103013-28234-01.dmp
Crash Time : 30.10.2013 00:14:22
Bug Check String :
Bug Check Code : 0x00000109
Parameter 1 : a3a01f58`95a32c5c
Parameter 2 : b3b72bde`e8226247
Parameter 3 : ffffe000`0205ec20
Parameter 4 : 00000000`0000001c
Caused By Driver : ntoskrnl.exe
Caused By Address : ntoskrnl.exe+14dca0
File Description :
Product Name :
Company :
File Version :
Processor : x64
Crash Address : ntoskrnl.exe+14dca0
Stack Address 1 :
Stack Address 2 :
Stack Address 3 :
Computer Name :
Full Path : C:\WINDOWS\Minidump\103013-28234-01.dmp
Processors Count : 8
Major Version : 15
Minor Version : 9600
Dump File Size : 295.296
Dump File Time : 30.10.2013 00:15:30
==================================================
Can i get any help, explanation or suggestions?
Abuse history
Answer
Thanks!
All of the attached DMP files are of the CRITICAL_STRUCTURE_CORRUPTION (109) bug check.
This indicates that the kernel has detected critical kernel code or data corruption.
There are generally two causes for this bug check:
All of the attached DMP files are of the CRITICAL_STRUCTURE_CORRUPTION (109) bug check.
This indicates that the kernel has detected critical kernel code or data corruption.
There are generally two causes for this bug check:
- A driver has inadvertently, or deliberately, modified critical kernel code or data. Microsoft Windows Server 2003 with Service Pack 1 (SP1) and later versions of Windows for x64-based computers do not allow the kernel to be patched except through authorized
Microsoft-originated hot patches. For more information, see
Patching Policy for x64-based Systems.
- A hardware corruption occurred. For example, the kernel code or data could have been stored in memory that failed.
------------------------
In your loaded drivers list, dtsoftbus01.sys is listed which is the Daemon Tools driver. Daemon Tools is a very popular cause of BSOD's in 7/8 based systems. Please uninstall Daemon Tools. Alternative imaging programs are: MagicISO, Power ISO, etc.
sptd.sys also came along with the Daemon Tools install. SCSI Pass Through Direct Host - Daemon Tools (known BSOD issues with Win7 & 8). Remove ASAP with the following tool - http://www.duplexsecure.com/en/downloads
If the above do not help, there may be possible conflicts being caused by ESET and I am going to recommend removal and replacing it with Windows 8's built-in Windows Defender for temporary troubleshooting purposes:
ESET removal - http://kb.eset.com/esetkb/index?page=content&id=SOLN2788
Regards,
Patrick
Debugger/Reverse Engineer.
Abuse history
