Windows 2003 BSOD 4e DUMP DATA

I have a Windows 2003 SBS server that keeps crashing a few times a week. I have 2 identical servers and they both are having issues. Ram has been replaced with brand new ram already. Swapped server hardware with the other identical one and still same problem. Hardware is Epox EP-5M800P-M. Anyone have ideas on the cause?

Opened log file 'c:\debuglog.txt'

Microsoft (R) Windows Debugger Version 6.8.0004.0 X86
Copyright (c) Microsoft Corporation. All rights reserved.


Loading Dump File [C:\WINDOWS\MEMORY.DMP]
Kernel Complete Dump File: Full address space is available

Symbol search path is: SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
Executable search path is: C:\WINDOWS;C:\WINDOWS\system32;C:\WINDOWS\system32\drivers
Windows Server 2003 Kernel Version 3790 (Service Pack 1) MP (2 procs) Free x86 compatible
Product: LanManNt, suite: SmallBusiness TerminalServer SmallBusinessRestricted SingleUserTS
Built by: 3790.srv03_sp1_rtm.050324-1447
Kernel base = 0x80800000 PsLoadedModuleList = 0x808a6ea8
Debug session time: Thu Jan 3 02:34:38.505 2008 (GMT-7)
System Uptime: 5 days 15:36:20.046
Loading Kernel Symbols
..............................................................................................................
Loading User Symbols

Loading unloaded module list
......
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck 4E, {8d, 6d5e1, 16010001, c0006fd0}





Probably caused by : memory_corruption ( nt!MmZeroPageThread+303 )

Followup: MachineOwner
---------

1: kd> !analyze -v;r;kv;lmtn;.logclose;q
*******************************************************************************
* *
* Bugcheck Analysis *
* *
*******************************************************************************

PFN_LIST_CORRUPT (4e)
Typically caused by drivers passing bad memory descriptor lists (ie: calling
MmUnlockPages twice with the same list, etc). If a kernel debugger is
available get the stack trace.
Arguments:
Arg1: 0000008d,
Arg2: 0006d5e1
Arg3: 16010001
Arg4: c0006fd0

Debugging Details:
------------------






BUGCHECK_STR: 0x4E_8d

DEFAULT_BUCKET_ID: INTEL_CPU_MICROCODE_ZERO

PROCESS_NAME: System

CURRENT_IRQL: 2

LAST_CONTROL_TRANSFER: from 8085a06d to 80827451

STACK_TEXT:
f789ed44 8085a06d 0000004e 0000008d 0006d5e1 nt!KeBugCheckEx+0x1b
f789eda4 808e7e92 f789eddc 80948bb2 80086000 nt!MmZeroPageThread+0x303
f789edac 80948bb2 80086000 00000000 00000000 nt!Phase1Initialization+0x12
f789eddc 8088d4d2 808e7e80 80086000 00000000 nt!PspSystemThreadStartup+0x2e
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND: kb

FOLLOWUP_IP:
nt!MmZeroPageThread+303
8085a06d cc int 3

SYMBOL_STACK_INDEX: 1

SYMBOL_NAME: nt!MmZeroPageThread+303

FOLLOWUP_NAME: MachineOwner

MODULE_NAME: nt

DEBUG_FLR_IMAGE_TIMESTAMP: 42435b14

IMAGE_NAME: memory_corruption

FAILURE_BUCKET_ID: 0x4E_8d_nt!MmZeroPageThread+303

BUCKET_ID: 0x4E_8d_nt!MmZeroPageThread+303

Followup: MachineOwner
---------

eax=f772713c ebx=0006d5e1 ecx=00000000 edx=00000001 esi=f7727120 edi=0006d5e1
eip=80827451 esp=f789ed2c ebp=f789ed44 iopl=0 nv up ei ng nz na pe nc
cs=0008 ss=0010 ds=0023 es=0023 fs=0030 gs=0000 efl=00000286
nt!KeBugCheckEx+0x1b:
80827451 5d pop ebp
ChildEBP RetAddr Args to Child
f789ed44 8085a06d 0000004e 0000008d 0006d5e1 nt!KeBugCheckEx+0x1b (FPO: [Non-Fpo])
f789eda4 808e7e92 f789eddc 80948bb2 80086000 nt!MmZeroPageThread+0x303 (FPO: [Non-Fpo])
f789edac 80948bb2 80086000 00000000 00000000 nt!Phase1Initialization+0x12 (FPO: [Non-Fpo])
f789eddc 8088d4d2 808e7e80 80086000 00000000 nt!PspSystemThreadStartup+0x2e (FPO: [Non-Fpo])
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16
start end module name
80800000 80a53000 nt ntkrpamp.exe Thu Mar 24 17:28:04 2005 (42435B14)
80a53000 80a7f000 hal halmacpi.dll Thu Mar 24 17:28:37 2005 (42435B35)
b841c000 b8432a00 dump_viamraid dump_viamraid.sys Mon Nov 07 02:22:28 2005 (436F1CD4)
b84f3000 b84fd000 dump_diskdump dump_diskdump.sys Thu Mar 24 17:28:56 2005 (42435B48)
b8893000 b88be000 RDPWD RDPWD.SYS Thu Mar 24 17:27:16 2005 (42435AE4)
b8ac7000 b8ac7980 ScanMemory32 ScanMemory32.sys Tue Jun 21 01:27:34 2005 (42B7CF76)
b9584000 b9743180 tm_cfw tm_cfw.sys Wed Feb 28 02:07:39 2007 (45E5465B)
b9a3c000 b9a53c00 tmcomm tmcomm.sys Wed Aug 01 01:46:56 2007 (46B04880)
b9ac4000 b9acf000 TDTCP TDTCP.SYS Thu Mar 24 17:27:15 2005 (42435AE3)
b9f72000 b9f9c000 Fastfat Fastfat.SYS Thu Mar 24 17:40:20 2005 (42435DF4)
ba0b4000 ba104000 HTTP HTTP.sys Thu Mar 24 17:40:36 2005 (42435E04)
ba1ec000 ba1ef480 hwmdr hwmdr.SYS Fri Dec 09 02:30:49 2005 (43994EC9)
ba3ac000 ba40b000 srv srv.sys Thu Mar 24 17:40:19 2005 (42435DF3)
ba433000 ba467000 mrxdav mrxdav.sys Thu Mar 24 17:30:11 2005 (42435B93)
ba631000 ba660d80 exifs exifs.sys Fri Apr 02 00:08:21 2004 (406D1165)
ba661000 ba6a3000 TmXPFlt TmXPFlt.sys Sun Sep 16 23:40:39 2007 (46EE2167)
ba6cb000 ba7dc460 VSApiNt VSApiNt.sys Sun Sep 16 23:30:42 2007 (46EE1F12)
ba9d4000 ba9e9000 Cdfs Cdfs.SYS Thu Mar 24 17:40:55 2005 (42435E17)
ba9e9000 ba9fa000 Fips Fips.SYS Thu Mar 24 17:40:33 2005 (42435E01)
ba9fa000 baa70000 mrxsmb mrxsmb.sys Thu Mar 24 17:41:13 2005 (42435E29)
baa98000 baac8000 rdbss rdbss.sys Thu Mar 24 17:40:49 2005 (42435E11)
baac8000 baaf2000 afd afd.sys Thu Mar 24 17:40:43 2005 (42435E0B)
baaf2000 bab23000 netbt netbt.sys Thu Mar 24 17:40:31 2005 (42435DFF)
bab23000 bab84000 tcpip tcpip.sys Thu Mar 24 17:40:31 2005 (42435DFF)
bab84000 bab9d000 ipsec ipsec.sys Thu Mar 24 17:40:49 2005 (42435E11)
babbd000 babc4000 parvdm parvdm.sys Tue Mar 25 00:03:49 2003 (3E7FFF55)
babe5000 babecd80 v2imount v2imount.sys Mon Jan 15 10:02:33 2007 (45ABB3A9)
bac0d000 bac1a000 TmPreFlt TmPreFlt.sys Sun Sep 16 23:40:39 2007 (46EE2167)
bacb5000 bacc9000 usbhub usbhub.sys Thu Mar 24 17:30:46 2005 (42435BB6)
bacf3000 bad33000 update update.sys Thu Mar 24 17:40:27 2005 (42435DFB)
bad33000 bad6a000 rdpdr rdpdr.sys Thu Mar 24 17:30:20 2005 (42435B9C)
bad6a000 bad7d000 raspptp raspptp.sys Thu Mar 24 17:40:43 2005 (42435E0B)
bad7d000 bad97000 ndiswan ndiswan.sys Thu Mar 24 17:40:46 2005 (42435E0E)
bad97000 badac000 rasl2tp rasl2tp.sys Thu Mar 24 17:40:29 2005 (42435DFD)
bae2c000 bae36000 Dxapi Dxapi.sys Tue Mar 25 00:06:01 2003 (3E7FFFD9)
bae4c000 bae5f000 i8042prt i8042prt.sys Thu Mar 24 17:41:05 2005 (42435E21)
bae5f000 bae77000 parport parport.sys Thu Mar 24 17:28:25 2005 (42435B29)
bae77000 bae8c000 serial serial.sys Thu Mar 24 17:28:29 2005 (42435B2D)
bae8c000 baeb6000 USBPORT USBPORT.SYS Thu Mar 24 17:30:43 2005 (42435BB3)
baede000 baf06000 ks ks.sys Thu Mar 24 17:41:03 2005 (42435E1F)
baf06000 baf1a000 redbook redbook.sys Thu Mar 24 17:28:46 2005 (42435B3E)
baf1a000 baf2f000 cdrom cdrom.sys Thu Mar 24 17:28:57 2005 (42435B49)
baf2f000 baf4a000 VIDEOPRT VIDEOPRT.SYS Thu Mar 24 17:29:53 2005 (42435B81)
baf7d000 baf7dc80 GetBINFile GetBINFile.SYS Thu Nov 25 19:08:32 2004 (41A69020)
baf85000 baf85880 epcpuid epcpuid.SYS Thu Mar 17 19:32:13 2005 (423A3DAD)
bf800000 bf9cf000 win32k win32k.sys Thu Mar 24 17:40:09 2005 (42435DE9)
bf9cf000 bf9e5000 dxg dxg.sys Thu Mar 24 17:27:25 2005 (42435AED)
bff40000 bff48000 framebuf framebuf.dll Tue Mar 25 02:46:25 2003 (3E802571)
f7216000 f7234f80 symsnap symsnap.sys Wed Oct 03 12:22:43 2007 (4703EC03)
f7235000 f725a000 fltMgr fltMgr.sys Thu Mar 24 17:30:25 2005 (42435BA1)
f725a000 f726d000 CLASSPNP CLASSPNP.SYS Thu Mar 24 17:40:23 2005 (42435DF7)
f726d000 f728c000 SCSIPORT SCSIPORT.SYS Thu Mar 24 17:40:26 2005 (42435DFA)
f728c000 f72a2a00 viamraid viamraid.sys Mon Nov 07 02:22:28 2005 (436F1CD4)
f72a3000 f72bf000 atapi atapi.sys Thu Mar 24 17:28:49 2005 (42435B41)
f72bf000 f72e9000 volsnap volsnap.sys Thu Mar 24 17:29:10 2005 (42435B56)
f72e9000 f7315000 dmio dmio.sys Thu Mar 24 17:30:02 2005 (42435B8A)
f7315000 f733c000 ftdisk ftdisk.sys Thu Mar 24 17:29:00 2005 (42435B4C)
f733c000 f7352000 pci pci.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7352000 f7386000 ACPI ACPI.sys Thu Mar 24 17:34:09 2005 (42435C81)
f7487000 f7490000 WMILIB WMILIB.SYS Tue Mar 25 00:13:00 2003 (3E80017C)
f7497000 f74a6000 isapnp isapnp.sys Tue Mar 25 00:16:35 2003 (3E800253)
f74a7000 f74b4000 PCIIDEX PCIIDEX.SYS Thu Mar 24 17:28:48 2005 (42435B40)
f74b7000 f74c7000 MountMgr MountMgr.sys Thu Mar 24 17:27:23 2005 (42435AEB)
f74c7000 f74d2000 PartMgr PartMgr.sys Thu Mar 24 17:40:34 2005 (42435E02)
f74d7000 f74e7000 disk disk.sys Thu Mar 24 17:28:58 2005 (42435B4A)
f74e7000 f74f3000 Dfs Dfs.sys Thu Mar 24 17:30:28 2005 (42435BA4)
f74f7000 f7507000 uagp35 uagp35.sys Thu Mar 24 17:34:11 2005 (42435C83)
f7507000 f7511000 crcdisk crcdisk.sys Thu Mar 24 17:29:40 2005 (42435B74)
f7527000 f7536000 raspppoe raspppoe.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7547000 f7550000 mssmbios mssmbios.sys Thu Mar 24 17:34:14 2005 (42435C86)
f7557000 f7562000 fdc fdc.sys Thu Mar 24 17:28:43 2005 (42435B3B)
f7567000 f7571000 kbdclass kbdclass.sys Tue Mar 25 00:03:10 2003 (3E7FFF2E)
f7577000 f7581000 mouclass mouclass.sys Tue Mar 25 00:03:09 2003 (3E7FFF2D)
f7587000 f7594000 netbios netbios.sys Thu Mar 24 17:33:21 2005 (42435C51)
f7597000 f75a1000 serenum serenum.sys Thu Mar 24 17:28:27 2005 (42435B2B)
f75a7000 f75b2000 Msfs Msfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
f75b7000 f75c0000 ndistapi ndistapi.sys Thu Mar 24 17:34:11 2005 (42435C83)
f75c7000 f75d3000 vgapnp vgapnp.sys Thu Mar 24 17:29:55 2005 (42435B83)
f75e7000 f75f4000 Npfs Npfs.SYS Thu Mar 24 17:30:04 2005 (42435B8C)
f75f7000 f7606000 termdd termdd.sys Thu Mar 24 17:27:15 2005 (42435AE3)
f7607000 f7610000 watchdog watchdog.sys Thu Mar 24 17:30:19 2005 (42435B9B)
f7617000 f7622000 ptilink ptilink.sys Thu Mar 24 17:28:25 2005 (42435B29)
f7637000 f7640000 raspti raspti.sys Thu Mar 24 17:34:16 2005 (42435C88)
f7647000 f7656000 intelppm intelppm.sys Thu Mar 24 17:28:40 2005 (42435B38)
f7657000 f7661000 flpydisk flpydisk.sys Tue Mar 25 00:04:32 2003 (3E7FFF80)
f7667000 f7672000 TDI TDI.SYS Thu Mar 24 17:35:34 2005 (42435CD6)
f7677000 f7685000 msgpc msgpc.sys Thu Mar 24 17:33:31 2005 (42435C5B)
f7687000 f7690e00 fetnd5 fetnd5.sys Tue Oct 01 09:24:50 2002 (3D99CC52)
f7697000 f76a5000 NDProxy NDProxy.SYS Thu Mar 24 17:34:13 2005 (42435C85)
f76b7000 f76c4000 wanarp wanarp.sys Thu Mar 24 17:34:07 2005 (42435C7F)
f76e0000 f7707000 KSecDD KSecDD.sys Thu Mar 24 17:28:53 2005 (42435B45)
f7707000 f770f000 kdcom kdcom.dll Tue Mar 25 00:08:00 2003 (3E800050)
f770f000 f7717000 BOOTVID BOOTVID.dll Tue Mar 25 00:07:58 2003 (3E80004E)
f7717000 f771e000 viaide viaide.sys Tue Mar 25 00:04:49 2003 (3E7FFF91)
f771f000 f7726000 dmload dmload.sys Tue Mar 25 00:08:08 2003 (3E800058)
f772f000 f7736000 GEARAspiWDM GEARAspiWDM.sys Mon Aug 07 10:11:27 2006 (44D7743F)
f775f000 f7764180 usbuhci usbuhci.sys Thu Mar 24 17:30:45 2005 (42435BB5)
f7787000 f778f000 Fs_Rec Fs_Rec.SYS Tue Mar 25 00:08:36 2003 (3E800074)
f778f000 f7795a00 usbehci usbehci.sys Thu Mar 24 17:30:43 2005 (42435BB3)
f7797000 f779e000 Null Null.SYS Tue Mar 25 00:03:05 2003 (3E7FFF29)
f779f000 f77a6000 Beep Beep.SYS Tue Mar 25 00:03:04 2003 (3E7FFF28)
f77a7000 f77af000 mnmdd mnmdd.SYS Tue Mar 25 00:07:53 2003 (3E800049)
f77af000 f77b7000 RDPCDD RDPCDD.sys Tue Mar 25 00:03:05 2003 (3E7FFF29)
f77b7000 f77bf000 audstub audstub.sys Tue Mar 25 00:09:12 2003 (3E800098)
f77c7000 f77cf000 rasacd rasacd.sys Tue Mar 25 00:11:50 2003 (3E800136)
f77ef000 f77f6000 dxgthk dxgthk.sys Tue Mar 25 00:05:52 2003 (3E7FFFD0)
f7842000 f7861000 Mup Mup.sys Thu Mar 24 17:40:49 2005 (42435E11)
f7861000 f7897000 NDIS NDIS.sys Thu Mar 24 17:40:26 2005 (42435DFA)
f79af000 f79b0280 swenum swenum.sys Thu Mar 24 17:27:42 2005 (42435AFE)
f79b3000 f79b4580 USBD USBD.SYS Tue Mar 25 00:10:39 2003 (3E8000EF)
f7b4a000 f7bdf000 Ntfs Ntfs.sys Thu Mar 24 17:40:29 2005 (42435DFD)

Unloaded modules:
b9284000 b9290000 vga.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
bae1c000 bae26000 dump_scsiport.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
ba9bd000 ba9d4000 dump_viamraid.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f7537000 f7545000 imapi.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f76a7000 f76b3000 vga.sys
Timestamp: unavailable (00000000)
Checksum: 00000000
f777f000 f7787000 Sfloppy.SYS
Timestamp: unavailable (00000000)
Checksum: 00000000
Closing open log file c:\debuglog.txt

 

Bugcheck 4E and the BUCHKEY_ID INTEL_CPU_MICROCODE_ZERO are the symptom of faulty memory. Probably the ram or CPU is faulty. Run memtest to stress test the ram.