BSOD: Stop Code - Critical Structure Corruption

Neighbour

Member
Joined
Mar 16, 2018
Posts
6
Hello Everyone,

If someone could please save my life with this problem because I am seriously being worried for my future. Everything depends on work done and saved on my computer but as soon as BlueScreen Error occurs, i loss everything. It is happening all the time for the past 3 weeks. I have been spending 12+ hours per day to try to find solution on my own but nothing works.

Recently BlueScreen error messages start to occur and it destroyed all my unsaved and even saved work I am doing. Extremely annoying and I am very much worried because it could occur next time just about anywhen, although it occurs usually once per 90 minutes. My os is Windows 10 64bit.

The content of bluescreen error is: "Your PC ran into a problem and needs to restart. We're just collecting some error info, and then we'll restart for you." There is also an increasing %complete counter and when it hits 100%, pc restarts and destroys all the work I have done. It happened that even if the work is saved, it still destroys it. I have wasted tens of hours of my lost work done. It also says "For more information about this issue and possible fixes visit windows.com/stopcode" and ''Stop Code: CRITICAL STRUCTURE CORRUPTION"

The .dmp file from Minidumps folder is in attachment.

Another required file is in attachment too.

Already did a lot of research this and found that main cause could be outdated drivers so I updated them all. Each and every driver is successfully updated but it doesn't help. I was on malware cleaning forum where expert reviewed my case, did a lot of potential malware/viruses scan and everything is clean. Used many cleaning programs. All is clean.

Also did the following in cmd.exe:

sfc.exe /scannow

and then

dism.exe /online /cleanup-image /restorehealth

didn't help. Not even after reboot.

Also tried to clear cookies, even flash cookies (cache), also cleaned registry. Nothing helps.

I also runned Memory Test using bootable USB Key. No errors were found. Done many researches on my own but now i have to ask for your help. It is getting so urgent and severity of the problem is so high that I have no other choice anymore.

No ''?'' or ''!'' symbols in Device Manager either. I already updated all my drivers but not even this helps. Of course possibility still exist that particular driver is corrupted.

For almost each new .dmp file I did analyzing using OsrOnline and it is all the time showing the same legitimate (safe) file in expected location (System32) in order to be considered as safe. You can see in attached file (dmp inside rar) what name of the file is.

What else could I do? I have tons of work to do on my computer and cannot move further because of this bluescreen error. Please if someone could help me what to do, i would appreciate a lot!
 

Attachments

Hello and welcome! This error usually means a bad HDD. Let's run an initial test:

GSmartControl
Follow the instructions below to test your hard drive health with GSmartControl:


For now I only want a screenshot of you Attributes tab.







  • Download GSmartControl and save it on your Desktop;
  • Execute gsmartcontrol.exe; Let the install complete and launch the programme.
  • Identify your drive in the list, and double-click on it to bring up it's window (usually you'll find your drive by it's size or it's brand name);
  • Go in the Perform Tests tab, then select Extended Self-test in the Test type drop-down list and click on Execute (this test can take a few hours to complete);
  • Once the test is over, the results will be displayed at the bottom of the window. Please copy and paste these results in your next reply;
  • Also, go in the Attributes tab and if you have any entries highlighted in red or pink, take a screenshot of the GSmartControl window and attach it in your next reply;
    info_failing.png
 
Thank you for your reply. I would like to mention that I also attached, with a little delay, the file ''SysnativeFileCollectionApp'' to my first message.

The scan you mentioned took only few SECONDS to complete and I double checked that chosen is really Extended self test. I then clicked on ''Save As'' button to create and saved the log. However you said screenshot of Attributes only. It is attached to this message.
 

Attachments

  • screenshot-neighbour.jpg
    screenshot-neighbour.jpg
    146.1 KB · Views: 10
I can't say with absolute certainty and I know you said someone already looked into it but I suspect you do have a malware problem. Looking at the dump file you provided there are a couple of drivers loading with random looking filenames which is something malware does to try avoiding detection.
Code:
4: kd> lmvm zxbnsjak
Browse full module list
start             end                 module name
fffff801`2e0e0000 fffff801`2e0e7000   zxbnsjak   (deferred)             
    Image path: \SystemRoot\System32\drivers\zxbnsjak.sys
    Image name: [COLOR=#ff0000]zxbnsjak.sys[/COLOR]
    Browse all global symbols  functions  data
    Timestamp:        Mon Jul 13 16:19:47 2009 (4A5BC113)
    CheckSum:         000065ED
    ImageSize:        00007000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4
4: kd> lmvm hshzeqxyz
Browse full module list
start             end                 module name
fffff801`2fbd0000 fffff801`2fbf8000   hshzeqxyz   (deferred)             
    Image path: hshzeqxyz.sys
    Image name: [COLOR=#ff0000]hshzeqxyz.sys[/COLOR]
    Browse all global symbols  functions  data
    Timestamp:        Wed Jan 17 04:49:02 2018 (5A5F463E)
    CheckSum:         00029E8E
    ImageSize:        00028000
    Translations:     0000.04b0 0000.04e4 0409.04b0 0409.04e4

I haven't been able to find anything about drivers with those filenames in my searches. Unless you know those are legitimate drivers I'd consider them very suspect.
 
cwsink thank you for your reply. Are you saying next step is to delete your RED font filenames? But I am unable to find first file anywhere. (hidding system files is OFF)
 
Your HDD is damaged as I suspected. Urgently backup your data.

And what should I do then as first next step? I have too much important data and custom settings in applications (they cannot be backed up) so I cannot reinstall/format my hard drive. Please tell me how to solve this problem. Every single moment I am being extremely worried that first next second bluescreen error will occur again...
 
Firstly secure your data, then provide FRST logs:

Step#1 - FRST Scan
1. Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the 64-bit Version so please ensure you download that one.
2. Right click to run as administrator. When the tool opens click Yes to disclaimer.
3. Please ensure you place a check mark in the Addition.txt check box at the bottom of the form before running (if not already).
4. Press Scan button.
5. It will produce a log called FRST.txt in the same directory the tool is run from (which should now be the desktop)
6. Please attach the log back here.
7. Another log (Addition.txt - also located in the same directory as FRST64.exe) will be generated Please also attach that along with the FRST.txt with your reply.
 
The usual recommendation is to go the the Security Arena and ask for help removing the malware from your system. I'd recommend referring them to your post here so they can see what I'm seeing in the dump.
 
Yes, definitely post these in Security Arena.

Bluescreen error Critical Structure Corruption is not a part of malware infection, I believe so. Furthermore I don't think my computer has any malware expect R6LSTMP4.DAT located on System32 which is all the time being recognized by MBAM and impossible to be permanently deleted. I apologize for commenting (further asking) your decision. Although I fully respect your knowledge and don't have any doubts at it, but do you think the assistance in Security Arena would solve BSOD (blue screen error)? I would still say my computer is clean and Critical Structure Corruption is a part of kernel problem. It doesn't have much to do with potential malware if any. In Minidumps file is all the time being reported csrss.exe file which is actually legitimate and clean file upon my multiple checking. Please don't understand my comment that I would disrespect what you are saying. I only wanted to state the summary of my past work done: cleaning malware and making computer clean. Do you think assistance in Security Arena would solve the problem which is most likely not related to malware (bsod)?
 
I don't think malware removal would essentially stop the BSOD-ing as I believe the reason for the BSODs is the fact that you have a damaged HDD. Personally, I would back up the data, and replace the drive as soon as possible. Then, monitor for crashes. If there are any after this, post back.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top