Crend King (Old Profile)

When I intend to manually load the user32.dll into memory, after loading the sections and calling its DllMain, an error message appears that the system dll was relocated in memory.

If I load it at its preferred ImageBase and thus do not do relocation, this error occurs. However, if I load it into a system choosed address (pass NULL to VirtualAlloc), no error occurs. I can confirm that the loading position of the sections of user32.dll are as correct as the specification tells. Could anyone tell me why

Sincerely thanks!



Re: Visual C++ General Illegal System DLL Relocation?

Ted.

sounds to me that some other DLL in your process is already in memory at the perferred base address of user32.dll. Check carefully with dependency walker which addresses all the DLLs of the process have (preferred base) and are actually used (actual base - you need to use the "profile" feature of dependency walker)



Re: Visual C++ General Illegal System DLL Relocation?

Crend King

The Dependency Walker is helpful, though my problem is still not resolved.

Actually, my intention is to manually load an EXE into a host process, the PELoader, and its dependent modules, the dlls, and finally execute it. The current problem is that, when calling the entry point of some dll, it will throw exception, usually accessing invalid memory address.

The PELoader originally only need KERNEL32.dll and the dependent NTDLL.dll. However, when I try to call the DllMain() of the dlls, in Dependency Walker, I can see other denpendent dlls are correctly imported and called. I think this implies that this way of using dll is somewhat also available.

I do not know if anyone here has relative experience of this field. If someone could give me any advice, I will be grateful!





Re: Visual C++ General Illegal System DLL Relocation?

Anonymous

right hello evry one when i downloaded the windows update 'security update for windows' it restarted my system wen downloaded now it comes up with this error name 'system DLL relocation' i need some help to get rid of this any one who can help i would be highly greatfull




Re: Visual C++ General Illegal System DLL Relocation?

Anonymous

Thank God I am not alone! I got exactly the same message after downloading windows update and restating my computer. I've got no clue of what is going on.



Re: Visual C++ General Illegal System DLL Relocation?

DJ-of-E

Omg, seriously. I, too, installed today's security update only to see this message pop up. What's going on




Re: Visual C++ General Illegal System DLL Relocation?

MSFiend

OMFG. I just installed the most recent Windows update today, as well! I looked at the date of the original poster and figured that this was a dated forum, but then I looked at the last three posted dated today.

Yes, just a moment ago, I installed MS's latest security update and I'm getting the same message at bootup:

The system dll user32.dll was relocated in memory. The application will not run properly. Yada, Yada.

Of course, with all MS messages, it basically shucks responsibility to third parties by instructing me to contact the "vendor supplying the DLL should be contacted for a new DLL."
Typical MS response.

Anyway, I'm gonna go back to a restore point just before the update. I'm sure if this propagates, ZDNet or someplace like that will have news on another MS Security Update that MS dropped the ball on.




Re: Visual C++ General Illegal System DLL Relocation?

Anonymous

Oh good so i'm not the only one, hope that someone finds an answer soon cos it's doing my nut!

Already tried a system restore & it didn't work.





Re: Visual C++ General Illegal System DLL Relocation?

dan

hy please help lol, rite i downloaded the latest update and also gt the same message and also when i tryed a system restore it came back incomplete. what can i do. i dont actually no much about pc's



Re: Visual C++ General Illegal System DLL Relocation?

Matt Berry

System restore doesn't appear to work. Anyone know how we get a proper answer on this thing Anyone found a link yet




Re: Visual C++ General Illegal System DLL Relocation?

MSFiend

Okay, folks, I'm back after doing a "system restore" to the point prior to installing the security update today. I'm not getting the message anymore.

I'm thinking, tell me if I'm wrong, that the following security fix that was released today:

Microsoft Security Bulletin MS07-017
Vulnerabilities in GDI Could Allow Remote Code Execution (925902)
http://www.microsoft.com/technet/security/Bulletin/MS07-017.mspx

...is the culprit. And, I think, there may have been two releases today. Not sure. Regardless, going back to a restore point just before I installed the update helped me avoid the message. I hope all of you have automatic restore points created on a regular basis.

Restore points can be found at:

Start Button / Help and Support / Pick a Task... then choose "Undo changes to your computer with System Restore"

Let us know if it works for you. If so, let's get the word out, people!

P.S.

I just noticed that System Restore is not working for some. It worked for me, but I make regular restore points at EVERY change. I went back to the point BEFORE the update I made with MS's Security Update. Not AT that point.

However, I understand that, for some, a restore may not work. I had actually uninstalled a piece of software after the update, then had to reuninstall it after the restore to help fix some ancillary issues that arose out of today's security update.

Nonetheless, MS should come up with a fix. They must. It appears to be propagating, and no one should rely on a restore point for a fix. But truly, doesn't MS ever beta test these things anymore Slackers!




Re: Visual C++ General Illegal System DLL Relocation?

Matt Berry

No, system restore failed. Had a restore point on 31st March. Doesn't say why it failed, it just states that it couldn't be used.




Re: Visual C++ General Illegal System DLL Relocation?

Matt Berry

Found something.

Check this out http://support.microsoft.com/ kbid=925902




Re: Visual C++ General Illegal System DLL Relocation?

MSFiend

Great job, Matt! Looks like that issue definitely pertains to me. I'll look further into it and, if I feel comfortable with the solution, will reinstall the update with the hotfix following. Thx, Matt!




Re: Visual C++ General Illegal System DLL Relocation?

Matt Berry

Don't know you on earth to contact for the hotfix tho!