Why is my memory so low?

[davemaynard11]

Hi guys

I need some serious help hear! This thread may be technical, but I am not technically minded!!

I ran a net stat command just to find out what was running in my machine. Now, I ran this one cold when I wasn’t connected to the Internet and found this;
BTW I used command prompt and type "netstat" in!

TCP 127.0.0.1:44334-Established
TCP 127.0.0.1:1030- Established
TCP 127.0.0.1:1036- Established
TCP 127.0.0.1:1034- Established
TCP 127.0.0.1:1025- Established
TCP 127.0.0.1:1032- Established.

Now: I have 512mb of physical memory, and ONLY 130MB available (according to Task Manager.)

Are the above connections IRC Trojans and is that why I have so little memory. I used to run NAV; could traces of that still be there? They are not running in the processes tab.

If they are IRC Trojans, None of them have been detected by Spybot, Ad-Aware, MS Defender or Spyware Doctor or Avast! For that matter. I did run a boot scan with avast! And found nothing.  I have NOT shown my IP address for obvious reason!

I use Skype and sometimes the other person cannot hear me, my head set IS working! Could this be part of it?!

HELP!!!!   :'(

[mauserme]

You should scan with Ewido (Windows XP) or A-Squared

http://www.ewido.net/en/download/

and also try TCPView to see if this will identify the processes making the connections

http://www.sysinternals.com/Utilities/TcpView.html

Do you have a software firewall?

[davemaynard11]

Sorry for the long delay:

My ISP's Spam Filter had filtered out the e-mail telling me I had a response and I only checked it today!

I do have a personal firewall Kerio; the free edition. 

I have tried Ewido and am now about to try a-squared.
Ewido did find adware mini bug.

I will post back the results of my a-squared scan.

Thanks for your help

Dave

[mauserme]

Hi Dave,

Have you run TCPView?

Minibug isn't a big deal - just part of weather bug which can be easily removed.

The connection on Port 44334 might be your firewall

http://www.kerio.com/manual/kpf/en/ch09s01.html

But you could search your computer for *kwm*.* if you get a chance.

[davemaynard11]

Hi

Sorry for the delay: work and me coming down with the 'flu (influenza!!) today.  Plus flipping ISP’s Spam filter!

Have just run TCP View and there are no malicious connections. It must just have been my paranoia!

I did however find traces of several AV software that I tried; Norton, Panda and Kaspersky; so I deleted them and that seems to have perked up the machine!

Thanks for your help and I need a lie down now! 

Dave.

[Lisandro]

I did however find traces of several AV software that I tried; Norton, Panda and Kaspersky

To Norton:

1) Remove NAV through Add/Remove programs from Control Panel. Boot.
2) Use Symantec removal tool following the three steps defined in the SymNRT tool info.
3) Boot.


To KAV, see: http://forum.avast.com/index.php?topic=12079.15
KAV removal tool: http://www.ice-kav.com/utilities.php
http://www.ice-kav.com/downloads/util/KAV_Registry_Clean.zip


These are false detections due to Panda active scan: http://forum.avast.com/index.php?topic=12432.msg104932#msg104932

IMSCAN.DLL
PAVDLL.DLL
PAV.SIG
APVXD.VX2
APVXD.VXD

C:\windows\system32\active scan\pskavs.dll
C:\system volume information \_restore{ ... }\*.dll


Be happy in a system with just one antivirus 

[davemaynard11]

Hi peeps!

Feeling much better now, despite a hangover but I digress!

Thanks for the list of removal tools, I have run them and hopefully should have only one AV software running (Avast!!)

I was actually trying out that AV software’s before NAV's Subscription ran out. Then my Dad renewed it. I was listening to a podcast (Leo Laport's) and he said take ‘erm off; so I did!

Then one of my Skype buddies recommended Avast! So I gave it a try a few weeks back and have loved it ever since!

Anyway enough of my praises keep up the good work guys and I will remain an Avast! Customer for life!

If this does not make sense, it’s because I am hung-over; plenty of coffee and sleep for me before work tomorrow at 6 AM UK time!

Bye

Dave