BSOD ntfs.sys?

[hwmgr]

I am recently getting a BSOD whenever i try to surf the web using firefox, tried uninstalling it, using chrome, then chrome was OK for 3-4hrs., and then suddenly now i can't run neither firefox or chrome, the only thing now i can use is IE8, which is'nt experiencing any BSOD's.
Here a screenshot of BSOD:

I can use everything else, even heavy games and photoshop, but bsod just appears when ff or chrome connects to the web..
Ran chkdsk in /r mode, completed with no errors, but still getting this bsod.

And here's a view of dump file created using dumpchk:

Loading dump file C:\WINDOWS\Minidump\Mini061012-01.dmp
----- 32 bit Kernel Mini Dump Analysis

DUMP_HEADER32:
MajorVersion 0000000f
MinorVersion 00000a28
DirectoryTableBase 3d89d000
PfnDataBase 81975000
PsLoadedModuleList 805634c0
PsActiveProcessHead 80569658
MachineImageType 0000014c
NumberProcessors 00000002
BugCheckCode 00000024
BugCheckParameter1 001902fe
BugCheckParameter2 a8d1d7e0
BugCheckParameter3 a8d1d4dc
BugCheckParameter4 f6d74600
PaeEnabled 00000000
KdDebuggerDataBlock 805532e0
MiniDumpFields 00000dff

TRIAGE_DUMP32:
ServicePackBuild 00000300
SizeOfDump 00010000
ValidOffset 0000fffc
ContextOffset 00000320
ExceptionOffset 000007d0
MmOffset 00001068
UnloadedDriversOffset 000010a0
PrcbOffset 00001878
ProcessOffset 000024c8
ThreadOffset 00002728
CallStackOffset 00002980
SizeOfCallStack 00000dac
DriverListOffset 000039c0
DriverCount 00000076
StringPoolOffset 00005cc8
StringPoolSize 00001018
BrokenDriverOffset 00000000
TriageOptions 00000041
TopOfStack a8d1d254
DebuggerDataOffset 00003730
DebuggerDataSize 00000290
DataBlocksOffset 00006ce0
DataBlocksCount 00000007


Windows XP Kernel Version 2600 (Service Pack 3) MP (2 procs) Free x86 compatible

Kernel base = 0x804d7000 PsLoadedModuleList = 0x805634c0
Debug session time: Sun Jun 10 23:03:34 2012
System Uptime: 0 days 0:30:39
start end module name
804d7000 80700000 nt Checksum: 0021C758 Timestamp: Tue Oct 25 19:
08:26 2011 (4EA6BBD2)

Unloaded modules:
aa005000 aa030000 kmixer.sys Timestamp: unavailable (00000000)
f7b54000 f7b55000 drmkaud.sys Timestamp: unavailable (00000000)
aa030000 aa053000 aec.sys Timestamp: unavailable (00000000)
aa198000 aa1a5000 DMusic.sys Timestamp: unavailable (00000000)
aa1a8000 aa1b6000 swmidi.sys Timestamp: unavailable (00000000)
f7a2e000 f7a30000 splitter.sys Timestamp: unavailable (00000000)
f7894000 f7899000 Cdaudio.SYS Timestamp: unavailable (00000000)
f799c000 f799f000 Sfloppy.SYS Timestamp: unavailable (00000000)
f788c000 f7891000 Flpydisk.SYS Timestamp: unavailable (00000000)
f7884000 f788b000 Fdc.SYS Timestamp: unavailable (00000000)

Finished dump check

 

[ksiemb]

The file ntfs.sys may be corrupt, the registry may be corrupt, some type of malware or other infection may be masquerading as the file. But it is rather strange you can boot ok, and only the two browsers you mentioned would not work, but IE did.

You can use the Windows CD recovery console to rename the HDD module & copy it from the CD,
http://support.microsoft.com/kb/555531

If issue persists afterwards, you probably have an infection, IMO.

 

[hwmgr]

I tried that copy thing, but still the bsod was there, then i completely removed both chrome and firefox, defraged my drive thoroughly with perfectdisk, and then again installed firefox, and Voila.., no more crashes.
I highly doubt for an infection, as i have scanned with kaspersky, avast, malwarebytes, and no infections were found.

But Perfectdisk shows one block greyed out in the middle of all free space, named $BadClus, which was'nt there earlier, and due to that, a large block of MFT appears everytime i reboot, i think this block was causing the BSOD, and defragging has made firefox to install outside this block..

How to fix this problem???

 

[Hawkeye22]

But Perfectdisk shows one block greyed out in the middle of all free space, named $BadClus, which was'nt there earlier, and due to that, a large block of MFT appears everytime i reboot, i think this block was causing the BSOD, and defragging has made firefox to install outside this block..

http://farm8.staticflickr.com/7239/7361570202_3948e50bc1_b.jpg​

Use HDTune or some other free utility to check the SMART status of your drive. It sounds like you have bad sectors which is causing reallocated sectors. If you run out of spare sectors, you will be in trouble. Looking at your smart values, check for reallocated sector count and current pending sectors. Also not anything note listed as OK. It might be time to backup the drive and get a new one.

http://en.wikipedia.org/wiki/S.M.A.R.T.#ATA_S.M.A.R.T._attributes

 

[hwmgr]

Here's Health Status by HDTune:

HD Tune Pro: WDC WD1600AAJS-60Z0A0 Health

ID Current Worst ThresholdData Status
(01) Raw Read Error Rate 200 200 51 50 ok
(03) Spin Up Time 137 136 21 4116 ok
(04) Start/Stop Count 99 99 0 1616 ok
(05) Reallocated Sector Count 200 200 140 0 ok
(07) Seek Error Rate 200 200 51 0 ok
(09) Power On Hours Count 95 95 0 4032 ok
(0A) Spin Retry Count 100 100 51 0 ok
(0B) Calibration Retry Count 100 100 0 0 ok
(0C) Power Cycle Count 99 99 0 1574 ok
(B8) End To End Error Detection 100 100 97 0 ok
(BB) Reported Uncorrectable Errors 38 12 0 212 ok
(BC) Command Timeout 100 95 0 196732 ok
(BE) Airflow Temperature 57 52 40 43 ok
(C0) Unsafe Shutdown Count 200 200 0 359 ok
(C1) Load Cycle Count 200 200 0 1616 ok
(C4) Reallocated Event Count 200 200 0 0 ok
(C5) Current Pending Sector 200 200 0 3 warning
(C6) Offline Uncorrectable 200 200 0 0 ok
(C7) Ultra DMA CRC Error Count 200 200 0 0 ok
(C8) Write Error Rate 200 200 0 0 ok

Health Status : warning


I ran Error test, it found two bad blocks:

Also, my Western Digital Diagnostic tool shows error while quick test:

 

[Hawkeye22]

Strange that the current pending sector count is up, yet it reports your reallocated sector count as ok. If WD's datalifeguard reports a problem and your drive is still under warranty, I'd back up your data and (RMA) exchange the drive for a new one.

 

[hwmgr]

Strange that the current pending sector count is up, yet it reports your reallocated sector count as ok. If WD's datalifeguard reports a problem and your drive is still under warranty, I'd back up your data and (RMA) exchange the drive for a new one.

Yes, it's under warranty, i'll place the RMA for it..
Strange that it'll be 3rd RMA in past year.. (Two have been in May Last Year..)