User32.dll was relocated in memory

G

Guest

After installing the latest "security patch" today, on the reboot, I got an
error message saying
that user32.dll was relocated in memory because HHCTRL.OCX occupied an
address reserved for user32. Has anybody else seen this, and how is it
fixed? Win-XP / SP2
 
G

Guest

Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
http://www.microsoft.com/technet/security/bulletin/ms07-017.mspx


http://support.microsoft.com/kb/925902
Known issues
After you install this security update on a Windows XP Service Pack 2
(SP2)-based computer, Realtek HD Audio Control Panel (Rthdcpl.exe) may not
start. Additionally, you receive an error message that is similar to the
following:
Rthdcpl.exe - Illegal System DLL Relocation
The system DLL user32.dll was relocated in memory. The application will not
run properly. The relocation occurred because the DLL
C:\Windows\System32\Hhctrl.ocx occupied an address range reserved for Windows
system DLLs. The vendor supplying the DLL should be contacted for a new DLL.

Update for Windows XP (KB935448)
Install this update to resolve an issue where the Realtek HD Audio Control
Panel may not start after you install security update KB925902 (MS07-017) and
security update KB928843 (MS07-008).
http://www.microsoft.com/downloads/...88-3131-429C-8FCB-F7B3B0FD3D86&displaylang=en
Supported Operating Systems: Windows XP Service Pack 2
 
G

Guest

Thanks for the rapid response. I did the "Update for Windows XP (KB935448) "
and
the problem went away. Thanks again for pointing out the patch for the patch!
 
G

Guest

I applied hotfix 935448, but after restarting Windows the message has not
gone away. I use Firefox rather than IE, does that make a difference ?

Basjoe
 
W

Wigster

I don't have Realtek HD audio, but I get exactly the same error appearing
when I try to launch Matlab 2007a and also the setup.exe program for
Ghostscript 8.56. It's only been 20 minutes that I've used my machine, so
there may well be more of these issues.

This started happening after I installed the KB925902. I then found the
KB935448 patch and installed that and it's made no difference.

Any ideas? I tempted to just go back to yesterday's config, despite the
vulnerability.
 
J

Jeff

Wigster said:
I don't have Realtek HD audio, but I get exactly the same error
appearing when I try to launch Matlab 2007a and also the setup.exe
program for Ghostscript 8.56. It's only been 20 minutes that I've
used my machine, so there may well be more of these issues.

This started happening after I installed the KB925902. I then found
the KB935448 patch and installed that and it's made no difference.

Any ideas? I tempted to just go back to yesterday's config, despite
the vulnerability.

OK, now you've got me worried. Maye we should just uninstall KB925902 ?

Jeff
 
W

Wigster

I'm getting the exact same problem with ghostscript (PDFcreator) and
the calculator icon on my 'vista' dock thing, also at the same time as
this error appeared TeXnicCenter also stopped working properly.

The above update did not fix the problem... Any suggestions ?

Just checked MikTeX: it seems the TeXify command has this problem too.
 
W

Wigster

Turns out there is a conflict with the changed theme for XP (I am using
crystalxp.net Vista Inspirat brico pack). Unistalling that has fixed all my
issues.
 
G

Guest

Hi TaurArian,

We do have WSUS for our network and I would like to add this fix into the
WSUS so that all systems in the network will get this fix automatically, but
during my normal Synchronization this fix is not downloading, is there any
way to manualy add this fix into my WSUS server.
 
G

Guest

TaurArian said:
Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
http://www.microsoft.com/technet/security/bulletin/ms07-017.mspx


http://support.microsoft.com/kb/925902
Known issues
After you install this security update on a Windows XP Service Pack 2
(SP2)-based computer, Realtek HD Audio Control Panel (Rthdcpl.exe) may not
start. Additionally, you receive an error message that is similar to the
following:
Rthdcpl.exe - Illegal System DLL Relocation
The system DLL user32.dll was relocated in memory. The application will not
run properly. The relocation occurred because the DLL
C:\Windows\System32\Hhctrl.ocx occupied an address range reserved for Windows
system DLLs. The vendor supplying the DLL should be contacted for a new DLL.

Update for Windows XP (KB935448)
Install this update to resolve an issue where the Realtek HD Audio Control
Panel may not start after you install security update KB925902 (MS07-017) and
security update KB928843 (MS07-008).
http://www.microsoft.com/downloads/...88-3131-429C-8FCB-F7B3B0FD3D86&displaylang=en
Supported Operating Systems: Windows XP Service Pack 2
 
G

Guest

TaurArian said:
Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
http://www.microsoft.com/technet/security/bulletin/ms07-017.mspx


http://support.microsoft.com/kb/925902
Known issues
After you install this security update on a Windows XP Service Pack 2
(SP2)-based computer, Realtek HD Audio Control Panel (Rthdcpl.exe) may not
start. Additionally, you receive an error message that is similar to the
following:
Rthdcpl.exe - Illegal System DLL Relocation
The system DLL user32.dll was relocated in memory. The application will not
run properly. The relocation occurred because the DLL
C:\Windows\System32\Hhctrl.ocx occupied an address range reserved for Windows
system DLLs. The vendor supplying the DLL should be contacted for a new DLL.

Update for Windows XP (KB935448)
Install this update to resolve an issue where the Realtek HD Audio Control
Panel may not start after you install security update KB925902 (MS07-017) and
security update KB928843 (MS07-008).
http://www.microsoft.com/downloads/...88-3131-429C-8FCB-F7B3B0FD3D86&displaylang=en
Supported Operating Systems: Windows XP Service Pack 2
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top