several ways to overcome such errors occurred
Illegal System DLL Relocation
The system DLL user32.dll was relocated in memory. The application Will not run properly. The Relocation occurred Because the DLL C: \ WINDOWS \ system32 \ shell32.dll occupied and the address range reserved for Windows system DLLs. The vendor supplying the DLL Should Be contacted for a new DLL.
1.Menimpa with a copy shell32.dll file from another computer, this file is located at C: \ WINDOWS \ system32 \ (OS computer must be the same. Komp1 and komp2 eg using windows XP SP2)
this is due to the destruction of the files that caused by false alarms or cleaning system.
2.Scan using the latest antispyware. (Try with Ansav, use plugins RegistryFx) this is usually caused because the computer is ever attacked by a trojan.
characteristics: some installation files can not be executed due to invalid hook.
try to repair the registry by copying the code below into the notepad (Text Editor),.
[Version]
Signature = “$ Windows NT $”
Provider = WardanaPro
[DefaultInstall]
AddReg = Write
DelReg = Delete
[Write]
HKCR,. Bat,,, “batfile”
HKCR,. Cmd,,, “cmdfile”
HKCR,. Js,,, “jsfile”
HKCR,. Vbs,,, “VBSfile”
HKCR,. Reg,,, “regfile”
HKCR,. Exe,,, “exefile”
HKCR,. Scr,,, “scrfile”
HKCR,. Com,,, “comfile”
HKCR,. Pif,,, “piffile”
HKCR, batfile \ shell \ open \ command ,,,”"”% 1 “”% * ”
HKCR, cmdfile \ shell \ open \ command ,,,”"”% 1 “”% * ”
HKCR, JSFile \ shell \ open \ command ,,,”% SystemRoot% \ System32 \ wscript.exe “”% 1 “”% * ”
HKCR, VBSFile \ Shell \ open \ command ,,,”% SystemRoot% \ System32 \ wscript.exe “”% 1 “”% * ”
HKCR, regfile \ shell \ open \ command,,, “regedit.exe”% 1 “”
HKCR, exefile \ shell \ open \ command ,,,”"”% 1 “”% * ”
HKCR, comfile \ shell \ open \ command ,,,”"”% 1 “”% * ”
HKCR, piffile \ shell \ open \ command ,,,”"”% 1 “”% * ”
HKCR, batFile \ Shell \ Edit \ Command ,,,”% SystemRoot% \ System32 \ Notepad.exe% 1 ”
HKCR, cmdFile \ Shell \ Edit \ Command ,,,”% SystemRoot% \ System32 \ Notepad.exe% 1 ”
HKCR, JSFile \ Shell \ Edit \ Command ,,,”% SystemRoot% \ System32 \ Notepad.exe% 1 ”
HKCR, VBSFile \ Shell \ Edit \ Command ,,,”% SystemRoot% \ System32 \ Notepad.exe% 1 ”
HKCR, regfile \ Shell \ Edit \ Command ,,,”% SystemRoot% \ System32 \ Notepad.exe% 1 ”
HKCR, batfile \ DefaultIcon ,,,”% SystemRoot% \ System32 \ shell32.dll, -153 ”
HKCR, cmdfile \ DefaultIcon ,,,”% SystemRoot% \ System32 \ shell32.dll, -153 ”
HKCR, JSFile \ DefaultIcon ,,,”% SystemRoot% \ System32 \ wscript.exe, 3 ”
HKCR, VBSfile \ DefaultIcon ,,,”% SystemRoot% \ System32 \ wscript.exe, 2 ”
HKCR, exefile \ DefaultIcon ,,,”% 1 ”
HKCR, comfile \ DefaultIcon ,,,”% SystemRoot% \ System32 \ shell32.dll, 2 ”
HKCR, batfile, FriendlyTypeName, 0, “MS-DOS Batch File”
HKCR, cmdfile, FriendlyTypeName, 0, “Windows NT Command Script”
HKCR, JSFile, FriendlyTypeName, 0, “@% SystemRoot% \ System32 \ wshext.dll, -4804″
HKCR, VBSFile, FriendlyTypeName, 0, “@% SystemRoot% \ System32 \ wshext.dll, -4802″
HKCR, ScrFile, FriendlyTypeName, 0, “Screen Saver”
HKCR, comfile, FriendlyTypeName, 0, “MS-DOS Application”
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Explorer \ Advanced, ShowSuperHidden, 0×00010001, 1
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon, Shell, 0, “Explorer.exe”
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Winlogon, Userinit, 0, “@% SystemRoot% \ system32 \ userinit.exe”
HKLM, SYSTEM \ CurrentControlSet \ Control \ Session Manager, BootExecute, 0, “AUTOCHECK Autochk *”
HKLM, SYSTEM \ CurrentControlSet \ Control \ Session Manager \ Environment, ComSpec, 0, “% SystemRoot% \ system32 \ cmd.exe”
HKLM, SYSTEM \ CurrentControlSet \ Control \ safeboot, AlternateShell, 0, “cmd.exe”
HKLM, SYSTEM \ CurrentControlSet \ Services \ PugPlay, ImagePath, 0, “% SystemRoot% \ system32 \ services.exe”
HKLM, SYSTEM \ CurrentControlSet \ Services \ srservice, ImagePath, 0, “% SystemRoot% \ system32 \ svchost.exe-k netsvcs”
HKLM, SYSTEM \ CurrentControlSet \ Services \ MSIServer, ImagePath, 0, “% SystemRoot% \ system32 \ msiexec.exe / V”
HKLM, SYSTEM \ ControlSet001 \ Control \ safeboot, AlternateShell, 0, “cmd.exe”
HKLM, SYSTEM \ ControlSet002 \ Control \ safeboot, AlternateShell, 0, “cmd.exe”
HKLM, SYSTEM \ CurrentControlSet \ Control \ safeboot, AlternateShell, 0, “cmd.exe”
HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, LegalNoticeText, 0, “”
HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, LegalNoticeCaption, 0, “”
[Delete]
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFind
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoRun
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoDesktop
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFileAssociate
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFolderOptions
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoFileMenu
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoDrives
HKCU, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoTrayContextMenu
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableCMD
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableRegistryTools
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableRegedit
HKCU, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableTaskMgr
HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, DisableTaskMgr
HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ System, NoFolderOptions
HKLM, SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer, NoTrayContextMenu
HKLM, Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ WinOldApp, Disabled
HKCR, batfile, NeverShowExt
HKCR, cmdfile, NeverShowExt
HKCR, VBSFile, NeverShowExt
HKCR, JSFile, NeverShowExt
HKCR, exefile, NeverShowExt
HKCR, comfile, NeverShowExt
HKCR, pifile, NeverShowExt
HKCR, scrfile, NeverShowExt
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ cmd.exe
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ msconfig.exe
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ regedit.exe
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ Regedt32.exe
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ taskmgr.exe
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ attrib.exe
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ install.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ setup.exe, Debugger
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ Taskkill.exe
HKLM, SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ Image File Execution Options \ tasklist.exe
save with any name, with *. inf
right click and select install
if still unfinished, perhaps another way to do that is by upgrading service Pack windows. for example you are using Service Pack 2, then you can upgraded into Service Pack 3.