Memory error

You should not have Microsoft Security Essentials running anymore on a Windows XP system. It is no longer supported ( neither Windows XP nor Microsoft Security Essentials ). So uninstall Microsoft Security Essentials right now and get something else installed when we finish.

Did you knowlingly install Zoola Games Manager and is it something still used?


Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista or Win 7, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - (no file)
O2 - BHO: (no name) - {A3BC75A2-1F87-4686-AA43-5347D756017C} - (no file)
O2 - BHO: Browser Address Error Redirector - {CA6319C0-31B7-401E-A518-A07C3DB8F777} - C:\Program Files\BAE\BAE.dll
O3 - Toolbar: (no name) - {98889811-442D-49dd-99D7-DC866BE87DBC} - (no file)
O4 - HKCU\..\Run: [SPYKILLER] C:\Program Files\Anonymizer\sk\SpyWareKiller.exe /BOOT /SCAN
O4 - HKCU\..\Run: [PRIVANAL] "C:\Program Files\Messenger\msmsgs.exe" /background
O16 - DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455} (ExentInf Class) -
O18 - Protocol: avgsecuritytoolbar - {F2DDE6B2-9684-4A55-86D4-E255E237B77C} - C:\Program Files\AVG\AVG10\Toolbar\IEToolbar.dll (file missing)
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)

Also optionally have HijackThis fix the below items which are a waste of system resources and slowing your PC down.
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [dellsupportcenter] "C:\Program Files\Dell Support Center\bin\sprtcmd.exe" /P DellSupportCenter
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.2\Apps\apdproxy.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\Hp\HP Software Update\HPWuSchd2.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-21-3145831897-4004210399-3440971838-500\..\Run: [DellSupport] "C:\Program Files\Dell Support\DSAgnt.exe" /startup (User 'Administrator')

After clicking Fix, exit HJT.

Now run this Disable/Remove Windows Messenger to remove Windows Messenger. Do not confuse Windows Messenger with MSN Messenger because they are not the same. Windows Messenger is a frequent cause of popups.

Uninstall the below programs. If you do not find them or they will not uninstall, just keep going.
J2SE Runtime Environment 5.0 Update 6
Java 7 Update 25
Java(TM) 6 Update 20

Now install the current version of Sun Java from:

• Go here for 64 bit OS = Sun Java 64 bit Runtime Environment Make sure that when you see the form asking about installing Ask Toolbar that you uncheck this.
• Go here for 32 bit OS = Sun Java 32 bit Runtime Environment Make sure that when you see the form asking about installing Ask Toolbar that you uncheck this.

Make sure that when you install the new version of Java that you uncheck the Install the Ask Toolbar junkware checkbox. You do not want to add the stuff junk that most people consider malware to your PC. Also just in case Oracle changes the Java installation in the future to possible install other junk, uncheck all but just installing Java.

Please download OTM by Old Timer and save it to your Desktop.

• Run OTM.exe by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).
• Copy the lines from the below codebox to the clipboard by highlighting ALL of them and pressing CTRL + C
  (or, after highlighting, right-click and choose Copy): Do not include the word Code: which is just a title line of
  the code box

Code:

:Processes
explorer.exe

:Services
IBUpdaterService
AVG Security Toolbar Service
gupdate
gupdatem
[Suspicious.Path] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\Zoola Games Manager 
 
:Files
C:\Program Files\AVG\AVG10
C:\Documents and Settings\Ann Kohls\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data
C:\Documents and Settings\Ann Kohls\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data
C:\Documents and Settings\Ann Kohls\Start Menu\Programs\BitGuard
C:\WINDOWS\Tasks\At1.job
C:\WINDOWS\Tasks\At2.job
C:\WINDOWS\Tasks\At3.job
C:\WINDOWS\Tasks\At4.job
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3145831897-4004210399-3440971838-1006Core.job
C:\WINDOWS\Tasks\GoogleUpdateTaskUserS-1-5-21-3145831897-4004210399-3440971838-1006UA.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
C:\WINDOWS\Tasks\Microsoft Antimalware Scheduled Scan.job
C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Logon.job
C:\Documents and Settings\Ann Kohls\Local Settings\Application Data\a.zip
C:\Documents and Settings\Ann Kohls\Local Settings\Application Data\AVG Security Toolbar
C:\Documents and Settings\Ann Kohls\Local Settings\Application Data\BcsKtYcHW.dll
C:\Documents and Settings\Ann Kohls\Local Settings\Application Data\d1NJm3Vp784
C:\Documents and Settings\All Users\Start Menu\Programs\Microsoft Security Essentials.lnk

:Reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"SPYKILLER"=-
"PRIVANAL"=-
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentVersion\Run]
"MSC"=-
"HP Software Update"=-
[HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Windows\CurrentVersion\run]
"swg"=-
"SPYKILLER"=-
"PRIVANAL"=-
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Conduit]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}]
[-HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\IBUpdaterService]
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\BabSolution]
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Internet Explorer\Approved Extensions\{4D2D3B0F-69BE-477A-90F5-FDDB05357975}]
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}]
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectNewTabPageShow (22Find)
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Internet Explorer\TabbedBrowsing\bProtectShowTabsWelcome (22Find)
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{2EECD738-5844-4A99-B4B6-146BF802613B}]
[-HKEY_USERS\S-1-5-21-3145831897-4004210399-3440971838-1006\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{98889811-442D-49DD-99D7-DC866BE87DBC}]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}]
[-HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{96bd48dd-741b-41ae-ac4a-aff96ba00f7e}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"bProtectTabs"=-
:Commands
[purity]
[EmptyTemp]
[start explorer]
[Reboot]

• Return to OTM, right click in the Paste List of Files/Folders to Move window (under the yellow bar
  ) and choose Paste.
• Now click the large http://forums.majorgeeks.com/chaslang/images/MoveIt!.png button.
• If OTM asks to reboot your computer, allow it to do so. The report should appear in Notepad after the reboot.
• Close OTM.

Now navigate to the C:\_OTM\MovedFiles folder ( assuming your Windows drive is C). This is where your log will be
saved in the form of Date and Time mmddyyyy_hhmmss.log. Just look for the most recent .log file. Attach
this log file to your next message.

Now please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.
• Run the tool by double-clicking it. If you are using Windows Vista or Seven, right-mouse click it and select Run as Administrator.
• The tool will open and start scanning your system.
• Note: That JRT may reset your home page to a google default so you will need to restore your home page setting if this happens.
• Please be patient as this can take a while to complete depending on your system's specifications.
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.
• Attach JRT.txt to your next message.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, Win7 or Win8, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• the C:\_OTM\MovedFiles log
• the JRT.TXT log
• C:\MGlogs.zip

Make sure you tell me how things are working now!

 

My first instruction was to uninstall Microsoft Security Essentials but I still see it installed and running. It no longer will work with Windows XP because both are not supported anymore. You MUST uninstall it now and then install a different antivirus program.

I would not upgrade Win XP to Win 7. I would do a clean install; however this PC is a little old and slow by todays standards and also does not have enough memory. It may be rather slow if you install Win 7 on it.

The Java error is likely due to the fact that XP is no longer supported by Oracle too ( they make Java ). You could check out the below but I have never tried it:

http://stackoverflow.com/questions/20965564/installing-jdk8-on-windows-xp-advapi32-dll-error