unexpected server restart, debuglog.txt below

Hi,
I've had an unexpected server restart and can't figure out what casued the issue. I have generated a debuglog which is listed below.

OS = Windows 2003 server std SBS build 3790
DELL poweredge SC1420
1 x 3Ghz Zeon Proc
3GB RAM
3 x SCSI drives (1 array)

I would much appreciate any help regards this.

------------------------------------
Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.6.0003.5
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\MEMORY.DMP]
Kernel Summary Dump File: Only kernel address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 MP (2 procs) Free x86 compatible
Product: LanManNt, suite: SmallBusiness TerminalServer SmallBusinessRestricted SingleUserTS
Built by: 3790.srv03_rtm.030324-2048
Kernel base = 0x804de000 PsLoadedModuleList = 0x8057b6a8
Debug session time: Wed Feb 21 07:52:09.109 2007 (GMT+0)
System Uptime: 4 days 11:29:20.870
Loading Kernel Symbols
.....................................................................................................................
Loading User Symbols
Loading unloaded module list
.....
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck C5, {730020, 2, 1, 80567e9c}

*** ERROR: Module load completed but symbols could not be loaded for e1000325.sys
Probably caused by : Pool_Corruption ( nt!ExDeferredFreePool+1b9 )

Followup: Pool_corruption
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

DRIVER_CORRUPTED_EXPOOL (c5)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high. This is
caused by drivers that have corrupted the system pool. Run the driver
verifier against any new (or suspect) drivers, and if that doesn't turn up
the culprit, then use gflags to enable special pool.
Arguments:
Arg1: 00730020, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, value 0 = read operation, 1 = write operation
Arg4: 80567e9c, address which referenced memory

Debugging Details:
------------------


BUGCHECK_STR: 0xC5_2

CURRENT_IRQL: 2

FAULTING_IP:
nt!ExDeferredFreePool+1b9
80567e9c 8937 mov [edi],esi

DEFAULT_BUCKET_ID: DRIVER_FAULT

LAST_CONTROL_TRANSFER: from 804e2f58 to 805435b9

STACK_TEXT:
f78b67bc 804e2f58 0000000a 00730020 00000002 nt!KeBugCheckEx+0x19
f78b67bc 80567e9c 0000000a 00730020 00000002 nt!KiTrap0E+0x224
f78b6884 80567fe8 80583240 87d7ea08 00000000 nt!ExDeferredFreePool+0x1b9
f78b68d4 b7aa076b 88363748 66694354 80567240 nt!ExFreePoolWithTag+0x4cd
f78b68e8 b7aa07af 88363748 88363748 00000000 tcpip!IPFreeBuff+0x2b
f78b68fc b7aa0ce3 86fea008 88659d1e 89ba636e tcpip!FreeRH+0x1f
f78b6950 b7aa0fef 89b107f0 89b107f0 bb981ce8 tcpip!ReassembleFragment+0x4f5
f78b698c b7a9401f 89b107f0 89b107f0 89ba6018 tcpip!IPReassemble+0x1bf
f78b6a48 b7a79ddf 89b107f0 89ba602c 00000342 tcpip!IPRcvPacket+0x71f
f78b6a88 b7a79e51 00000000 89b39da0 89ba600a tcpip!ARPRcvIndicationNew+0x147
f78b6ac4 f723c540 89db0008 00000000 00000002 tcpip!ARPRcvPacket+0x66
f78b6b18 ba7b9a6c 89feb2f0 f78b6b9c 00000006 NDIS!ethFilterDprIndicateReceivePacket+0x1cc
WARNING: Stack unwind information not available. Following frames may be wrong.
f78b6b3c ba7b9fa2 f78b6b5c f78b6b9c 00000006 e1000325+0xa6c
f78b6b54 ba7c0a37 8a142d58 f78b6b9c 00000006 e1000325+0xfa2
f78b6b74 ba7c2285 89d8e008 00000000 f78b6b9c e1000325+0x7a37
f78b6cac ba7be61e 89d8e008 00000000 f78b6ce7 e1000325+0x9285
f78b6cdc ba7b94f4 00d8e008 f722d025 8a142d58 e1000325+0x561e
f78b6d50 804e61f7 00000000 0000000e 00000000 e1000325+0x4f4
f78b6d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x37


STACK_COMMAND: .bugcheck ; kb

FOLLOWUP_IP:
nt!ExDeferredFreePool+1b9
80567e9c 8937 mov [edi],esi

SYMBOL_STACK_INDEX: 2

FOLLOWUP_NAME: Pool_corruption

SYMBOL_NAME: nt!ExDeferredFreePool+1b9

MODULE_NAME: Pool_Corruption

IMAGE_NAME: Pool_Corruption

DEBUG_FLR_IMAGE_TIMESTAMP: 0

FAILURE_BUCKET_ID: 0xC5_2_nt!ExDeferredFreePool+1b9

BUCKET_ID: 0xC5_2_nt!ExDeferredFreePool+1b9

Followup: Pool_corruption
---------

eax=f772f13c ebx=0000000a ecx=f7731fa0 edx=40000000 esi=f772f120 edi=00730020
eip=805435b9 esp=f78b67a4 ebp=f78b67bc iopl=0 nv up ei ng nz na po nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x19:
805435b9 5d pop ebp
ChildEBP RetAddr Args to Child
f78b67bc 804e2f58 0000000a 00730020 00000002 nt!KeBugCheckEx+0x19 (FPO: [Non-Fpo])
f78b67bc 80567e9c 0000000a 00730020 00000002 nt!KiTrap0E+0x224 (FPO: [0,0] TrapFrame @ f78b67d8)
f78b6884 80567fe8 80583240 87d7ea08 00000000 nt!ExDeferredFreePool+0x1b9 (FPO: [Non-Fpo])
f78b68d4 b7aa076b 88363748 66694354 80567240 nt!ExFreePoolWithTag+0x4cd (FPO: [Non-Fpo])
f78b68e8 b7aa07af 88363748 88363748 00000000 tcpip!IPFreeBuff+0x2b (FPO: [1,0,0])
f78b68fc b7aa0ce3 86fea008 88659d1e 89ba636e tcpip!FreeRH+0x1f (FPO: [1,0,0])
f78b6950 b7aa0fef 89b107f0 89b107f0 bb981ce8 tcpip!ReassembleFragment+0x4f5 (FPO: [Non-Fpo])
f78b698c b7a9401f 89b107f0 89b107f0 89ba6018 tcpip!IPReassemble+0x1bf (FPO: [Non-Fpo])
f78b6a48 b7a79ddf 89b107f0 89ba602c 00000342 tcpip!IPRcvPacket+0x71f (FPO: [Non-Fpo])
f78b6a88 b7a79e51 00000000 89b39da0 89ba600a tcpip!ARPRcvIndicationNew+0x147 (FPO: [Non-Fpo])
f78b6ac4 f723c540 89db0008 00000000 00000002 tcpip!ARPRcvPacket+0x66 (FPO: [Non-Fpo])
f78b6b18 ba7b9a6c 89feb2f0 f78b6b9c 00000006 NDIS!ethFilterDprIndicateReceivePacket+0x1cc (FPO: [Non-Fpo])
WARNING: Stack unwind information not available. Following frames may be wrong.
f78b6b3c ba7b9fa2 f78b6b5c f78b6b9c 00000006 e1000325+0xa6c
f78b6b54 ba7c0a37 8a142d58 f78b6b9c 00000006 e1000325+0xfa2
f78b6b74 ba7c2285 89d8e008 00000000 f78b6b9c e1000325+0x7a37
f78b6cac ba7be61e 89d8e008 00000000 f78b6ce7 e1000325+0x9285
f78b6cdc ba7b94f4 00d8e008 f722d025 8a142d58 e1000325+0x561e
f78b6d50 804e61f7 00000000 0000000e 00000000 e1000325+0x4f4
f78b6d54 00000000 0000000e 00000000 00000000 nt!KiIdleLoop+0x37 (FPO: [0,0,0])
start end module name
804de000 80744000 nt ntkrnlmp.exe Tue Mar 25 08:39:34 2003 (3E8015C6)
80744000 8076c000 hal halmacpi.dll Tue Mar 25 07:07:28 2003 (3E800030)
acef4000 acf21000 Fastfat Fastfat.SYS Tue Mar 25 08:00:16 2003 (3E800C90)
acfb9000 acfbbd00 KAPFA KAPFA.SYS Mon Dec 06 05:59:15 2004 (41B3F533)
adec0000 adee2000 RDPWD RDPWD.SYS Tue Mar 25 07:03:00 2003 (3E7FFF24)
adf0a000 adf5f000 sfsz sfsz.sys Tue Apr 18 23:53:06 2006 (44456DD2)
ae167000 ae1bf000 HTTP HTTP.sys Tue Mar 25 08:55:21 2003 (3E801979)
ae21b000 ae21d6c0 mdmxsdk mdmxsdk.sys Wed Apr 09 21:48:53 2003 (3E948735)
ae327000 ae386000 srv srv.sys Tue Mar 25 08:49:51 2003 (3E80182F)
ae3ae000 ae3e0000 mrxdav mrxdav.sys Tue Mar 25 07:09:13 2003 (3E800099)
ae492000 ae4c1ca0 exifs exifs.sys Tue Jun 03 07:37:51 2003 (3EDC423F)
ae4c2000 ae4f1000 afd afd.sys Tue Mar 25 07:40:50 2003 (3E800802)
ae4f1000 ae509000 Cdfs Cdfs.SYS Tue Mar 25 08:17:19 2003 (3E80108F)
b4878000 b4882000 TDTCP TDTCP.SYS Tue Mar 25 07:02:52 2003 (3E7FFF1C)
b5185000 b5186300 ZetMPD ZetMPD.sys Wed Apr 19 05:04:34 2006 (4445B6D2)
b7880000 b7893000 Fips Fips.SYS Tue Mar 25 08:54:59 2003 (3E801963)
b78b1000 b791e000 mrxsmb mrxsmb.sys Tue Mar 25 07:09:09 2003 (3E800095)
b7946000 b7972000 rdbss rdbss.sys Tue Mar 25 07:09:06 2003 (3E800092)
b7972000 b7985900 savonaccesscontrol savonaccesscontrol.sys Thu Jan 05 15:43:55 2006 (43BD3EBB)
b79f8000 b7a06000 HIDCLASS HIDCLASS.SYS Tue Mar 25 07:10:17 2003 (3E8000D9)
b7a08000 b7a11000 hidusb hidusb.sys Tue Mar 25 07:10:17 2003 (3E8000D9)
b7a38000 b7a6d000 netbt netbt.sys Fri Jul 18 18:15:49 2003 (3F182B45)
b7a77000 b7ad9000 tcpip tcpip.sys Fri Aug 01 18:08:19 2003 (3F2A9E83)
b7aee000 b7b0a000 ipsec ipsec.sys Tue Mar 25 07:55:45 2003 (3E800B81)
b7b42000 b7b47f00 HIDPARSE HIDPARSE.SYS Tue Mar 25 07:10:13 2003 (3E8000D5)
b7d1b000 b7d22000 parvdm parvdm.sys Tue Mar 25 07:03:49 2003 (3E7FFF55)
b8043000 b8050000 netbios netbios.sys Tue Mar 25 07:09:53 2003 (3E8000C1)
b822a000 b8237000 wanarp wanarp.sys Tue Mar 25 07:11:22 2003 (3E80011A)
b823a000 b8249000 msgpc msgpc.sys Tue Mar 25 07:10:12 2003 (3E8000D4)
b824a000 b8256000 Npfs Npfs.SYS Tue Mar 25 07:08:59 2003 (3E80008B)
b825a000 b8264000 Msfs Msfs.SYS Tue Mar 25 07:08:56 2003 (3E800088)
b829a000 b82a6000 vga vga.sys Tue Mar 25 07:08:03 2003 (3E800053)
b8370000 b8375e00 savonaccessfilter savonaccessfilter.sys Thu Jan 05 15:43:47 2006 (43BD3EB3)
b8378000 b8380000 rasacd rasacd.sys Tue Mar 25 07:11:50 2003 (3E800136)
b8380000 b8388000 RDPCDD RDPCDD.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)
b9800000 b9808000 mnmdd mnmdd.SYS Tue Mar 25 07:07:53 2003 (3E800049)
b9808000 b980f000 Beep Beep.SYS Tue Mar 25 07:03:04 2003 (3E7FFF28)
b9810000 b9817000 Null Null.SYS Tue Mar 25 07:03:05 2003 (3E7FFF29)
b9818000 b9820000 Fs_Rec Fs_Rec.SYS Tue Mar 25 07:08:36 2003 (3E800074)
b9ef1000 b9f04000 usbhub usbhub.sys Tue Mar 25 07:10:46 2003 (3E8000F6)
ba171000 ba17b000 HidBatt HidBatt.sys Tue Mar 25 07:16:30 2003 (3E80024E)
ba478000 ba4ab000 update update.sys Tue Mar 25 08:59:59 2003 (3E801A8F)
ba4ab000 ba4df000 rdpdr rdpdr.sys Tue Mar 25 07:09:30 2003 (3E8000AA)
ba4df000 ba4f4000 raspptp raspptp.sys Tue Mar 25 08:19:09 2003 (3E8010FD)
ba4f4000 ba50f000 ndiswan ndiswan.sys Tue Mar 25 08:48:19 2003 (3E8017D3)
ba50f000 ba526000 rasl2tp rasl2tp.sys Tue Mar 25 07:54:46 2003 (3E800B46)
ba526000 ba53a000 redbook redbook.sys Tue Mar 25 07:04:38 2003 (3E7FFF86)
ba53a000 ba54e000 cdrom cdrom.sys Tue Mar 25 07:05:18 2003 (3E7FFFAE)
ba54e000 ba566000 serial serial.sys Tue Mar 25 07:40:08 2003 (3E8007D8)
ba566000 ba57d000 parport parport.sys Tue Mar 25 07:03:56 2003 (3E7FFF5C)
ba57d000 ba593000 i8042prt i8042prt.sys Tue Mar 25 09:01:43 2003 (3E801AF7)
ba593000 ba639300 HSF_CNXT HSF_CNXT.sys Mon Nov 17 13:58:00 2003 (3FB8D3E8)
ba63a000 ba738800 HSF_DP HSF_DP.sys Mon Nov 17 13:56:13 2003 (3FB8D37D)
ba739000 ba763000 ks ks.sys Tue Mar 25 08:47:36 2003 (3E8017A8)
ba763000 ba796d00 HSFHWBS2 HSFHWBS2.sys Mon Nov 17 13:59:18 2003 (3FB8D436)
ba797000 ba7b8e80 USBPORT USBPORT.SYS Tue Mar 25 07:10:43 2003 (3E8000F3)
ba7b9000 ba7e4000 e1000325 e1000325.sys Mon Nov 22 18:38:39 2004 (41A2322F)
ba7e4000 ba7fd000 VIDEOPRT VIDEOPRT.SYS Tue Mar 25 07:08:02 2003 (3E800052)
ba7fd000 ba850d80 ati2mpad ati2mpad.sys Fri Jul 19 02:13:20 2002 (3D3767B0)
baa05000 baa08c80 ZetBus ZetBus.sys Wed Apr 19 05:04:07 2006 (4445B6B7)
baa73000 baa7d000 Dxapi Dxapi.sys Tue Mar 25 07:06:01 2003 (3E7FFFD9)
baa93000 baa9c000 dump_diskdump dump_diskdump.sys Tue Mar 25 07:05:15 2003 (3E7FFFAB)
baaa3000 baab2000 termdd termdd.sys Tue Mar 25 07:02:52 2003 (3E7FFF1C)
baab3000 baabc000 raspti raspti.sys Tue Mar 25 07:11:36 2003 (3E800128)
baac3000 baace000 ptilink ptilink.sys Tue Mar 25 07:03:51 2003 (3E7FFF57)
baad3000 baade000 TDI TDI.SYS Tue Mar 25 07:14:28 2003 (3E8001D4)
baae3000 baaf1000 raspppoe raspppoe.sys Tue Mar 25 07:11:37 2003 (3E800129)
bab6b000 bab73000 audstub audstub.sys Tue Mar 25 07:09:12 2003 (3E800098)
bac9f000 baca3e00 usbehci usbehci.sys Tue Mar 25 07:10:40 2003 (3E8000F0)
baca7000 bacabe80 usbuhci usbuhci.sys Tue Mar 25 07:10:43 2003 (3E8000F3)
bf800000 bf9c6000 win32k win32k.sys Tue Mar 25 08:40:49 2003 (3E801611)
bf9c6000 bfa1c680 ati2drad ati2drad.dll Tue Mar 25 09:43:37 2003 (3E8024C9)
bff60000 bff7b000 RDPDD RDPDD.dll Tue Mar 25 20:12:05 2003 (3E80B815)
bff80000 bff96000 dxg dxg.sys Tue Mar 25 09:46:23 2003 (3E80256F)
f71ea000 f720c000 Mup Mup.sys Tue Mar 25 08:55:58 2003 (3E80199E)
f720c000 f724d000 NDIS NDIS.sys Tue Mar 25 08:45:35 2003 (3E80172F)
f724d000 f72ea000 Ntfs Ntfs.sys Tue Mar 25 07:40:05 2003 (3E8007D5)
f72ea000 f730b000 KSecDD KSecDD.sys Tue Mar 25 07:05:39 2003 (3E7FFFC3)
f730b000 f7321000 CLASSPNP CLASSPNP.SYS Tue Mar 25 07:38:14 2003 (3E800766)
f7321000 f7332620 afamgt afamgt.sys Thu Nov 06 19:50:26 2003 (3FAAA602)
f7333000 f7358000 SCSIPORT SCSIPORT.SYS Fri Jul 23 22:53:49 2004 (410188ED)
f7358000 f7393040 aarich aarich.sys Thu Jul 01 00:38:09 2004 (40E34EE1)
f7394000 f73b0000 atapi atapi.sys Tue Mar 25 07:04:48 2003 (3E7FFF90)
f73b0000 f73d1000 volsnap volsnap.sys Thu Aug 28 19:51:03 2003 (3F4E4F17)
f73d1000 f73fb000 dmio dmio.sys Tue Mar 25 07:08:14 2003 (3E80005E)
f73fb000 f7420000 ftdisk ftdisk.sys Tue Mar 25 07:05:26 2003 (3E7FFFB6)
f7420000 f7435000 pci pci.sys Tue Mar 25 07:16:40 2003 (3E800258)
f7435000 f7466000 ACPI ACPI.sys Tue Mar 25 07:16:21 2003 (3E800245)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 07:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 07:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Tue Mar 25 07:04:44 2003 (3E7FFF8C)
f74b7000 f74c6000 MountMgr MountMgr.sys Tue Mar 25 07:03:05 2003 (3E7FFF29)
f74c7000 f74d5000 PartMgr PartMgr.sys Tue Mar 25 08:04:02 2003 (3E800D72)
f74d7000 f74e6000 disk disk.sys Tue Mar 25 07:05:20 2003 (3E7FFFB0)
f74e7000 f74f3000 Dfs Dfs.sys Tue Mar 25 07:09:52 2003 (3E8000C0)
f74f7000 f7500000 crcdisk crcdisk.sys Tue Mar 25 07:07:23 2003 (3E80002B)
f7507000 f7510000 ndistapi ndistapi.sys Tue Mar 25 07:11:28 2003 (3E800120)
f7527000 f7535000 NDProxy NDProxy.SYS Tue Mar 25 07:11:30 2003 (3E800122)
f7627000 f7631000 flpydisk flpydisk.sys Tue Mar 25 07:04:32 2003 (3E7FFF80)
f7657000 f7663000 processr processr.sys Tue Mar 25 07:07:36 2003 (3E800038)
f7667000 f7670000 watchdog watchdog.sys Tue Mar 25 07:09:01 2003 (3E80008D)
f7677000 f7684000 Modem Modem.SYS Tue Mar 25 07:14:40 2003 (3E8001E0)
f7687000 f7692000 fdc fdc.sys Tue Mar 25 07:04:31 2003 (3E7FFF7F)
f7697000 f76a1000 kbdclass kbdclass.sys Tue Mar 25 07:03:10 2003 (3E7FFF2E)
f76a7000 f76b1000 mouclass mouclass.sys Tue Mar 25 07:03:09 2003 (3E7FFF2D)
f76b7000 f76c1000 serenum serenum.sys Tue Mar 25 07:04:01 2003 (3E7FFF61)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 07:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 07:07:58 2003 (3E80004E)
f7717000 f771e000 pciide pciide.sys Tue Mar 25 07:04:46 2003 (3E7FFF8E)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 07:08:08 2003 (3E800058)
f7727000 f772e1c0 cercsr6 cercsr6.sys Thu Nov 06 19:50:22 2003 (3FAAA5FE)
f7787000 f778e1c0 dump_cercsr6 dump_cercsr6.sys Thu Nov 06 19:50:22 2003 (3FAAA5FE)
f779f000 f77a6000 dxgthk dxgthk.sys Tue Mar 25 07:05:52 2003 (3E7FFFD0)
f7897000 f7899800 compbatt compbatt.sys Tue Mar 25 07:16:28 2003 (3E80024C)
f789b000 f789e880 BATTC BATTC.SYS Tue Mar 25 07:16:20 2003 (3E800244)
f789f000 f78a2100 ZetSFD ZetSFD.sys Wed Apr 19 05:04:17 2006 (4445B6C1)
f79d9000 f79da200 swenum swenum.sys Tue Mar 25 07:03:22 2003 (3E7FFF3A)
f79e3000 f79e4580 USBD USBD.SYS Tue Mar 25 07:10:39 2003 (3E8000EF)

Unloaded modules:
b719b000 b719d000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b863f000 b8641000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
f7993000 f7995000 KASEYAHA.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
b8033000 b8041000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
b9820000 b9828000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Usually bugcheck code C5 is related to faulty ram. Run memtest to stress test the ram. However a minidump is insufficient to confirm the culprit. Post more debug report here if you have.