Random 98SE Windows Explorer Illegal Operation 2

[wackydj]

This is an ongoing problem which all past efforts have faild to resolve; a Kernel 32.DLL error appears randomly even when no operations are being performed on the PC. I have removed all start up programmes except Scan reg. Have run SFC (but not in safe mode) and restored Kernal32 from the windows 98SE CD, and also disabled my firewall..however the problem still exists and although it does not effect windows if the box is closed right away, windows does freeze if the error box is left. It does however appear more often when checking stuff like My Computer and disc space. Any help on getting rid of this problem would be very very welcome.

wackydj

 

[TekTippy4U]

Ohh
Right click each one, and choose "Properties" -->
"General Tab"--> Post the SIZE (in bytes) located in the between the ( ).....
and the "Modified" / "Created" --> DATES
and "Version Tab" --> Version (4.10.1998 or similar)

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[wackydj]

Hi TT4U

All done, results found are:

user 32.dll = c:\windows\system
size 54kb version 4.10.2223 dated June 2002

User 32.dll = c:\windows\options\cabs
size 204kb version 4.10.2223 dated Oct 2003

Kernel.dll = c:\programme files\dazzle\onDVD
No detals available

Explorer.exe = C:\windows
size 176kb dated 1999

Explorer.exe = c:\windows\dump
size 176kb dated 1999

Explorer.exe = c:\windows\helpdesk\sfc
size 176kb dated 1999

I have not changed anything on these files but await advice

Thanks again for your persistance

wackydj

 

[TekTippy4U]

You Must be very specific with File sizes and dates
For User32.dll
Look in between the Parenthesis (69,632) in "Properties" > General Tab
I suspect 4.10.2223 because of HotFix or SP1 or something which is OK BUT it shouldn't be 54K..(need EXACT to know for sure)

Your User32.dll is the wrong Size...should be ;
Version: 4.10.0.2222
Windows 98 Second Edition 69,632 4/23/1999 win98_42.cab \win98

Even the User32.dll in your CAB directory is Misplaced and Wrong!

DO YOU HAVE THE WIN98 SE CD?

---------------------------------------------

it's Kernel32.dll not Kernel.dll
---------------------------------------------

Explorer is Fine, if it's Properties Match this
176KB (180,224 bytes) 196,608 bytes used
------------------------------------------------

NOW ;
Explorer.exe = c:\windows\helpdesk\sfc
size 176kb dated 1999 (NEED the Exact Date - 4/23/1999?????) It's ok if, because This one is a Backup for System File Checker......Leave Alone

Explorer.exe = c:\windows\dump
size 176kb dated 1999
DELETE This one (What is this "Dump" folder?)...maybe delete the whole Folder

If Kernel32.dll is OK......(So Post that on next)... .AND you have 98SE CDROM....we'll replace User32.dll as well as DELETING that Second Explorer.exe in Dump.
If this stuff was caused by Spyware / Malware...you may need to boot to DOS....I can help. If you try to DELETE the Dump explorer.exe and you get errors (post the exact error)....let me know.

We'll try normally first

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[TekTippy4U]

Hi WackyDj
I'm just going to Post some instructions for replacing those files cause I won't be available till atleast tomorrow;

Put the 98SE CDROM in the tray

you'll Extract ONE FILE at a time....now
Start > Run SFC
use the "Extract one file from installation disk"
Enter the file name User32.dll
Click START
"Restore from" - navigate to D:\Win98 (if D:\ is your CDROM drive)
"Save file in" - navigate to the folder where the file belongs)

User32.dll and Kernel32.dll both belong in C:\WINDOWS\SYSTEM

Delete any other copies...EXCEPT those found in
c:\windows\helpdesk\sfc

Reboot


TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[wackydj]

Thanks TT4U

This is a spacific listing of files and sizes

USER32.dll

1. C:\\windows\system
size (55.296 bytes) 65,536 bytes free
created friday 21st June 2002
modified February 16th 2000
Version 4.10.2223

2. C:\windows\options\cabs
size (55,296 bytes) 65,536 bytes free
created Sunday July 14 2002
modified Wednesday February 16 2000
version 4.10.2223

Kernel32.dll

1. C:\windows\system
size (471,040 bytes) 491,520 bytes used
created (unknown)
modified Friday April 23 1999
version 4.10.2222

2. C:\windows\helpdesk\SFC
size (471,040 bytes) 491,520 bytes used
created tuesday June 03 2004
modified Friday april 23 1999
version 4.10.2222

Explorer.exe

1. C:\windows
size (180,224 bytes) 196,608 bytes used)
created (unknown)
modified friday april 23 1999
version 4.72.3110.1

2. C:\windows\dump
size (180,224 bytes) 196,608 bytes used
created (unknown)
modified Friday april 23 1999
version 4.72.3110.1

3. C:\windows\helpdesk\SFC
size (180,224 bytes) 196,608 bytes free
created Tuesday June 03 2004
modified Friday april 23 1999
version 4.72.3110.1

Yes I have my 98SE disc. will now delete c:\windows\dump
and try replacing files. will geg back with results tonight.
Thanks again

wackydj

 

[wackydj]

One quick thing

My error has reapeared twice during this posting and on attemting to delete DUMP I was warned that it was a programme which would fail to run if deleated, I have left it in place for now. look forward to hearing from you.

wackydj

 

[TekTippy4U]

what program???
I mean - I don't know what's in that folder.....do you?
You may have created it and put a program in there.....

Either way the file should go.......Delete Explorer.exe in DUMP...you don't need a copy except for the C:\WINDOWS (it's the Correct size)

Leave ALL in C:\windows\helpdesk\SFC Alone...they're fine

Kernel32.dll is Correct....leave that alone
--------------------------------------------
THREE PROBLEMS so far
User32.dll is NOT correct
Replace it using System File Checker with the steps I outlined above - use the CDROM to extract the New Copy from, not the Cab files on HDD.

Delete Explorer.exe in DUMP (it may be a Trojan version too, but most likely a copy only).

Delete that PROFILE Key (Home) in the Registry as we talked about before.

The worst may be - later - you have to add a HotFix again and SE shutdown supplement. Depending on your processor and chipset.
see and save these pages;

http://support.microsoft.com/default.aspx?scid=kb;EN-US;206071

http://support.microsoft.com/default.aspx?scid=kb;en-us;240075

http://support.microsoft.com/default.aspx?scid=kb;EN-US;239887

What is in that DUMP Folder???
If nothing that you want , I'll tell you how to delete it in DOS
Do all above steps please and then post back


TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[wackydj]

Hi TT4u

Have deleated DUMP with no problems and restored user32.dll and explorer.exe from disk. So far so good but experience says wait....Im away from PC until Tuesday so will report back then. Been running now for 4 hours without problem...

Thanks again for you help

Talk soon

wackydj

 

[TekTippy4U]

can I do my dance now?



TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs

 

[wackydj]

TT4U
I think you can...Still not sure what the problem was but IT HAS NOT HAPPEND TONIGHT!!!
DO YOUR DANCE

Thank you so much

wackydj

 

[TekTippy4U]

the Problem?
All of the above

Faulty User32.dll (and copies)
Spyware (Kazaa, Dump, and many more)
Profiles (Home)
Copies of System Files trying to access the same area of memory at the same time.
Etc,,etc
Keep it clean!
See FAQ760-3862 and FAQ760-4866
and this too

http://www.mvps.org/winhelp2002/unwanted.htm

TT4U

Notification:
These are just my thoughts....and should be carefully measured against other opinions.
Backup All Important Data/Docs