Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Irql_not_less_or_equal

13 Nov 2010   #1

Windows 7 Ultimate 32bit

Once again a blue screen problem, please help me resolve it. I just recently installed Kaspersky and this problem started, very slow computer, sluggish and constant BSOD.

My System SpecsSystem Spec
13 Nov 2010   #2

Win 8 Release candidate 8400

Quote   Quote: Originally Posted by debdutta View Post
Once again a blue screen problem, please help me resolve it. I just recently installed Kaspersky and this problem started, very slow computer, sluggish and constant BSOD.

As I figured your comodo firewall and kaspersky. These were caused by cmdgaurd.sys (comodo firewall) You should remove both and replace with Microsoft Security Essential and win 7 firewall.

Microsoft (R) Windows Debugger Version 6.11.0001.404 X86
Copyright (c) Microsoft Corporation. All rights reserved.

Loading Dump File [C:\Users\K\Desktop\110710-17625-01.dmp]
Mini Kernel Dump File: Only registers and stack trace are available

Symbol search path is: SRV*C:\Symbols*;srv*e:\symbols
Executable search path is: 
Windows 7 Kernel Version 7600 MP (2 procs) Free x86 compatible
Product: WinNt, suite: TerminalServer SingleUserTS
Built by: 7600.16617.x86fre.win7_gdr.100618-1621
Machine Name:
Kernel base = 0x82c52000 PsLoadedModuleList = 0x82d9a810
Debug session time: Sun Nov  7 09:30:31.849 2010 (GMT-5)
System Uptime: 0 days 5:40:49.240
Loading Kernel Symbols
Loading User Symbols
Loading unloaded module list
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

Use !analyze -v to get detailed debugging information.

BugCheck A, {83ffffe4, 2, 1, 82ce5bee}

Unable to load image \SystemRoot\System32\DRIVERS\cmdguard.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
Probably caused by : cmdguard.sys ( cmdguard+11de9 )

Followup: MachineOwner

0: kd> !analyze -v
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *

An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arg1: 83ffffe4, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000001, bitfield :
    bit 0 : value 0 = read operation, 1 = write operation
    bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 82ce5bee, address which referenced memory

Debugging Details:

WRITE_ADDRESS: GetPointerFromAddress: unable to read from 82dba718
Unable to read MiSystemVaType memory at 82d9a160


82ce5bee 8901            mov     dword ptr [ecx],eax




PROCESS_NAME:  firefox.exe

TRAP_FRAME:  89d1b824 -- (.trap 0xffffffff89d1b824)
ErrCode = 00000002
eax=0004a3a6 ebx=0000001c ecx=83ffffe4 edx=00000000 esi=8481e628 edi=84defe38
eip=82ce5bee esp=89d1b898 ebp=89d1b8c0 iopl=0         nv up ei ng nz na pe cy
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010287
82ce5bee 8901            mov     dword ptr [ecx],eax  ds:0023:83ffffe4=????????
Resetting default scope

LAST_CONTROL_TRANSFER:  from 82ce5bee to 82c9882b

89d1b824 82ce5bee badb0d00 00000000 00000001 nt!KiTrap0E+0x2cf
89d1b8c0 82ce230e 8481e628 849d4544 8481e630 nt!MiInsertPageInFreeOrZeroedList+0x238
89d1b900 82cf9330 c0013bb0 89d1ba88 02770000 nt!MiPfnShareCountIsZero+0x18c
89d1ba14 82d0bad4 c0013ba8 c0013ba8 c19eb5d0 nt!MiDeletePteRun+0x403
89d1bb1c 82d05e41 02770000 02775fff cbc9ecec nt!MiDeleteVirtualAddresses+0x3c1
89d1bbb4 82c9544a ffffffff 89d1bcd8 89d1bce4 nt!NtFreeVirtualMemory+0x60b
89d1bbb4 82c93401 ffffffff 89d1bcd8 89d1bce4 nt!KiFastCallEntry+0x12a
89d1bc3c 96fad568 ffffffff 89d1bcd8 89d1bce4 nt!ZwFreeVirtualMemory+0x11
89d1bcdc 96fae920 00000000 00000000 00000000 win32k!SURFACE::bDeleteSurface+0x291
89d1bcf0 96f8e423 00000000 00000000 fe122008 win32k!SURFREF::bDeleteSurface+0x14
89d1bd04 96f8fc08 35051405 002be688 35051405 win32k!bDeleteSurface+0x20
89d1bd18 8de1cde9 35051405 002be688 89d1bd34 win32k!NtGdiDeleteObjectApp+0x7f
WARNING: Stack unwind information not available. Following frames may be wrong.
89d1bd28 82c9544a 35051405 002be69c 774164f4 cmdguard+0x11de9
89d1bd28 774164f4 35051405 002be69c 774164f4 nt!KiFastCallEntry+0x12a
002be69c 00000000 00000000 00000000 00000000 0x774164f4


8de1cde9 ??              ???


SYMBOL_NAME:  cmdguard+11de9

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: cmdguard

IMAGE_NAME:  cmdguard.sys


FAILURE_BUCKET_ID:  0xA_cmdguard+11de9

BUCKET_ID:  0xA_cmdguard+11de9

Followup: MachineOwner
My System SpecsSystem Spec
13 Nov 2010   #3

Windows 7 Ultimate 32bit

Oh, the comodo firewall one was my previous BSOD which i resolved by uninstalling comodo internet security, the recent two are main problem...should i remove kaspersky ?
My System SpecsSystem Spec

13 Nov 2010   #4

64-bit Windows 8.1 Pro

Yes.... follow Kens' advice... cmdgaurd.sys is still being loaded, so rename it to cmdgaurd.bak so that it doesn't load at startup....
My System SpecsSystem Spec
13 Nov 2010   #5

Windows 7 Ultimate 32bit


Where and how can i locate cmdguard.sys. COMODO Programs Manager doesnt finds any such driver or service.
My System SpecsSystem Spec
13 Nov 2010   #6

64-bit Windows 8.1 Pro

Simply open c:/windows/system32/drivers locate the driver and rename it ... easy peasy..

My System SpecsSystem Spec


Thread Tools

Similar help and support threads
Thread Forum
Hi Guys. I know there are loads of posts about this IRQL_NOT_LESS_OR_EQUAL problem. I've looked at Blue Screen of Death (BSOD) Posting Instructions I've downloaded and run DM Log Collector which saved txt files in SFdebugFiles folder. Even though the smallest file is 2kb the...
BSOD Help and Support
This BSOD is really driving me CRAZY. Every now and then it crashes, I really don't know what to do. I have two guesses for this... Nvidia drivers or bad memory My logs are in the attachment, can somebody give me a light please? PS: Sorry for not being much descriptive, I don't know...
BSOD Help and Support
irql not less or equal if this is the first time you've seen this stop error screen, restart your computer. If this screen appears again, follow these steps: check to make sure any new hardware.... technical information: stop: 0x0000000a (0x0000000000000000, 0x00000000000000002, 0x...
Hardware & Devices
Please help. Suddenly I am receiving this blue screen 4-5 times a day. Initially I thought that my memory was the problem so I replaced the RAM and the problem persists. I am running Windows 7 64 bit (full version), the PC is a custom built Shuttle (SA76GT) with an AMD Quad Core processors,...
BSOD Help and Support
- windows 7 x64 bit - the original installed OS on the system? yes - an OEM or full retail version? full retail - OEM = came pre-installed on system - Full Retail = you purchased it from retailer - What is the age of system (hardware)? 3 weeks old besides video card about a yr - What is...
BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 10:47.
Twitter Facebook Google+