"user32.dll was relocated" and other adventures

I run Windows XP and during the last two weeks I have had a progressive challenge which seems to have started after I installed a new HP printer:

• computer randomly locking up
• McAfee bug (simply uninstalled McAfee, as I have long used AVG and not keen on the quirks of McAfee -- which came with my computer ...) -- installed AVG for virus protection
• immediately starting getting a periodic (est. bi-hourly) Windows message that my Firewall was turned off, and then it would automatically turn right back on ...
• then -- two days ago I got the following message:

"The System DLL user32.dll was relocated in memory. The application will not run properly. The relocation occurred because the DLL C:\Windows\system 32\HHCTRL.OCX occupied an address range reserved for Windows system DLLs. The vendor supplying the DLL should be contacted for a new DLL."

So-o, despite defrag, daily AVG and Ad Aware scans, googling for possible explanations/solutions -- thus finding this fine site (and purchasing/running Spyware Doctor) this problem remains.

In addition, this morning's AVG report cited that, in addition to the user32/dll "change" the ntoskrnl.exe has a "change" too.

Bottom line: Computer running slow and performance going downhill.

Suggestions? I am feebly attempting to work online between "not responding" messages (as I have a deadline to meet) and must to get this resolved. :major

... Help!

 

While AVG is mentioned in my post (and thank you, Z, for pointing out the resource link) the greater issues for me are: 1) the error message (as cited in my original post) as well as the faulty performance, and 2) the fact that my firewall is automatically turning itself off and then back on for no apparent reason.

As a mentioned, I have checked for "malware" and performed other maintenance tasks to no avail.

Specific questions:
1) Should I attempt to download user32.dll? Would doing so eliminate the problems I am having with faulty performance?

2) And, does anyone have any input regarding why my firewall would turn off and on?

In appreciation ... I have already benefited from this great resource.

 

Yes, thanks, zbd21
that leads to microsoft download, and it works, as I had the same problem, and unfortunately, the error on the pc ,does not guide you to the fix, another fix for microsoft fixes.
Apparently its a Realtek conflict.
http://support.microsoft.com/default.aspx/kb/935448/en-us

Thanks for the lead from
Patti MacLeod
Microsoft MVP - Windows Shell/User

 

Patti: Thanks for the link! I downloaded the fix and it eliminated the "relocation" problem. (Hoping it eliminates the s-l-o-w and problematic operations, too.)

Do you have any suggestions regarding the matter of my firewall turning off and on?

 

There is not a third-party security software that I am aware of and I have searched my computer and program files to no avail. I have also performed searches at Microsoft and via Google for solutions to this problem. (NOTE: This Windows pop-up message started when I uninstalled McAfee.)

Regarding a virus scan, I run AVG every day and I have also checked for malware.

My system is not a member of a domain [checked by: r-click My Computer | Properties | Computer Name > Workgroup cited (not domain)]

 

Try getting a log.
log on as an administrator

Open Windows Firewall.
Advanced tab, under Security Logging, click Settings.

Enable logging of unsuccessful inbound connection attempts, click the Log dropped packets box.
Enable logging of successful outbound connections, clickthe Log successful connections box.
It picks up allowed connecrions.


Security logging is not enabled by default

Might find a culprit, in a log file next time it does it

 

Thanks so much for your time. I do have a log as I had already enabled this function for "Log dropped packets" (and upon reading your post, I just added "Log of successful connections") ...

What should I look for on the log?

 

I would look for anything allowed that you do not think should be--If you post anything you think looks wrong, here, I am sure there will be someone who could check it for you.
You say you do not have third party software, so Windows is your only firewall ?
Zone alarm, and other firewalls like to run without any conflict from Windows, so will usually ask to be allowed to turn it off.
It is possible from these logs ,that we might pinpoint a culprit.

 

It might be Mc Afee , although removed, leaving a file behind, if nothing else shows, you can try running ccleaner, http://www.majorgeeks.com/download4191.html
Otherwise, try
start, run, sfc /scannow,insert your XP disc, and keep pressing the retry , until completed, as this should fix Windows protected files that might be corrupted by the uninstall. It can take some time to complete, but is often worth the effort.

 

Ran ccleaner; operating with greater speed :cool ; there were several conflicts.

Have just restarted my computer and so far ... No Windows pop-up message warning me that my firewall is off. Hope this is a good sign!

Thanks so much for all the great pointers and instruction!

 

Thanks SO much for the link! I have worn myself out trying to fix this dll problem but the link you provided solved it! I am very glad I remembered MajorGeeks had a forum. I usually use Cnet but sometimes the replies are so darn technical they are hard to understand. Happy Easter to MajorGeeks.