Microsoft KB Archive/935448

= Certain programs may not start, and you receive an error message on a computer that is running Windows XP Service Pack 2: &quot;Illegal System DLL Relocation&quot; =

Article ID: 935448

Article Last Modified on 8/30/2007

-

APPLIES TO

 Microsoft Windows XP Service Pack 2, when used with:  Microsoft Windows XP Professional

 Microsoft Windows XP Home Edition

 Microsoft Windows XP Tablet PC Edition

 Microsoft Windows XP Media Center Edition 2002</li></ul> </li></ul>

-

<div class="symptoms_section">

Symptoms of the problem
Certain programs may not start after you install security update 925902 (MS07-017) and security update 928843 (MS07-008) on a computer that is running Microsoft Windows XP with Service Pack 2 (SP2). Additionally, you may receive an error message that resembles the following:

- Illegal System DLL Relocation

The system DLL user32.dll was relocated in memory. The application will not run properly. The relocation occurred because the DLL C:\Windows\System32\Hhctrl.ocx occupied an address range reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL.

<div class="resolution_section">

Steps to resolve the problem
You may find it easier to follow the steps if you print this article first.

To resolve this problem, follow these steps: <ol> Install all important updates from the following Microsoft Web site:

http://update.microsoft.com/microsoftupdate

</li> Try to run the program that did not start again. If the program starts and if you do not receive the error message in the &quot;Symptoms of the problem&quot; section, you are finished. If the error continues, follow steps 3 through 5.</li> Visit the following Microsoft Web site:

http://www.microsoft.com/downloads/details.aspx?familyid=74AD4188-3131-429C-8FCB-F7B3B0FD3D86&displaylang=en

</li> Click Download, and then click Run. If the Download button is not available, you must first click Validate to validate your copy of Windows.</li> Follow the instructions that appear on the screen to install update 935448.</li></ol>

<div class="moreinformation_section">

Similar problems and solutions
You may receive a similar error message that references Shell32.dll when you run AVG Anti-Virus Control Center from Grisoft, Inc. This problem occurs if you are also running BricoPack Vista Inspirat from CrystalXP. To resolve this problem, uninstall BricoPack Vista Inspirat.

Note This is not a problem with AVG Anti-Virus Control Center or with Windows. This problem is not resolved when you install update 935448.

<div class="moreinformation_section">

Cause of the problem
The Hhctrl.ocx file that is included in security update 928843 and the User32.dll file that is included in security update 925902 have conflicting base addresses. This problem occurs if a program loads the Hhctrl.ocx file before the program loads the User32.dll file. Microsoft has confirmed that this problem affects the following third-party applications.

Notes
 * If you receive a similar message when you use another program, install the update that is mentioned in this article. If we confirm that other programs are affected by this problem, we will update this article with more information.
 * This problem does not occur with version 1.64 of the Realtek HD Audio Control Panel.

Update deployment information
To resolve this problem, use one of the following methods, as appropriate for your situation.

Important Windows Update and Microsoft Update only detect the affected versions of Realtek HD Audio Control Panel, ElsterFormular, TUGZip, and CD-Tag. However, other programs are affected by this problem. Therefore, if update 935448 is not installed on the computer by using Method 1 or by using Windows Server Update Services (WSUS) in Method 2, use Method 3.

Method 1: Install update 935448 by using Automatic Updates or by using Microsoft Update

To use Microsoft Update, visit the following Microsoft Web site:

http://update.microsoft.com/microsoftupdate

Method 2: Deploy update 935448 in an enterprise by using Windows Server Update Services (WSUS) or Microsoft Systems Management Server (SMS)

IT professionals can use WSUS or SMS to deploy this update in an enterprise. For more information about WSUS or SMS, visit the following Microsoft Web sites:

http://technet.microsoft.com/en-us/wsus/default.aspx

http://www.microsoft.com/smserver/default.mspx

Method 3: Install update 935448 from the Microsoft Download Center

The following file is available for download from the Microsoft Download Center:

Download the 935448 package now.

Release Date: April 3, 2007

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Known issues

Security update 928843 (MS07-008) and update 935448 contain Hhctrl.ocx files that have the same version number. If you install security update 928843 (MS07-008) after you install update 935448, you must reinstall update 935448.

Prerequisites

To apply this hotfix, you must have Windows XP Service Pack 2 (SP2) installed on the computer.

Installation information

To install this update without requiring any user intervention and without restarting the computer, administrators can use the following command:

WindowsXP-KB935448-x86-ENU /quiet /norestart

Note Restart the computer, and then verify that the installation was successful if you use the /quiet or the /restart switches. You should also review the KB935448.log file for information about any errors that occur when you use the /quiet switch. For more information about the setup switches that are supported by this update, click the following article number to view the article in the Microsoft Knowledge Base:

262841 Command-line switches for Windows software update packages

Restart information You may have to restart the computer after you apply this update.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For Service branch SP2GDR

For Service branch SP2QFE

Note When you install this update, the installer checks whether one or more of the files that are being updated on the system have previously been updated by a Microsoft hotfix. If you have previously installed a hotfix to update one of these files, the installer copies the SP2QFE files to your computer. Otherwise, the installer copies the SP2GDR file to your computer. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

824994 Description of the contents of Windows XP Service Pack 2 and Windows Server 2003 software update packages

Verify that the update is installed

To verify that this update is installed, use the following methods:  Method 1: Compare the version of the file that is installed on your computer to the version that is documented in the &quot;File information&quot; section.</li> Method 2: Verify the files that this update installed by reviewing the following registry subkey:

Note This registry subkey may not contain a complete list of the installed files. Also, this registry subkey may not be created correctly if an administrator or an OEM integrates or slipstreams the update into the Windows installation source files.</li></ul>

Removal information

To remove this security update, use the Add or Remove Programs item in Control Panel. Administrators can also use the Spuninst.exe utility to remove this security update. The Spuninst.exe utility is located in the following folder:

%windir%\$NTUninstallKB935448$\Spuninst

To remove this update without requiring any user intervention and without restarting the computer, administrators can use the following command:

%windir%\$NTUninstallKB935448$\Spuninst\Spuninst.exe /quiet /norestart

For more information about switches that are supported by the Spuninst.exe utility, see the &quot;Command-line Options for Removing Software Updates&quot; section of the following Microsoft Technet Web page:

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/deployment/winupdte.mspx#EQQAG

Status of the problem
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the &quot;Applies to&quot; section.

Technical revisions
The following table lists significant technical revisions to this article. The revision number and the last review date in this article might indicate minor editorial revisions or structural revisions to this article that are not included in the table.

Keywords: atdownload kbwinxpsp3fix kbfix kbbug kbqfe kbpubtypekc KB935448

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.