how can kill svlmngr.exe?

My computer is winxp+sp1,and when i double click the iexplore's icon on
desktop,then nothing happen.And the computer is running very slowly.And in
cmd mode,i run the fport to check it,and there are many
c:\windows\system32\svlmngr.exe processes.
Then i reboot the computer in dos mode,and delete svlmngr.exe.I boot the
computer into winxp,just after a little while,the computer is running very
slowly,as previously i use fport,and there also are many svlmngr.exe.Run
netstat -an,found the computer send many packets to many ip address,and use
444,135,80 port.
How can i kill svlmngr.exe?
Txs.

Hi,

It's probably a trojan, and there is a check built in to recreate it if it's
missing. What you need to do is run an updated antivirus program in safe
mode to assist in removal.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Associate Expert - WindowsXP Expert Zone
www.microsoft.com/windowsxp/expertzone
Windows help - www.rickrogers.org

"harrycat" <harrycat@163.com> wrote in message
news:uuY5P%23SDGHA.2704@TK2MSFTNGP15.phx.gbl...
> My computer is winxp+sp1,and when i double click the iexplore's icon on
> desktop,then nothing happen.And the computer is running very slowly.And in
> cmd mode,i run the fport to check it,and there are many
> c:\windows\system32\svlmngr.exe processes.
> Then i reboot the computer in dos mode,and delete svlmngr.exe.I boot the
> computer into winxp,just after a little while,the computer is running very
> slowly,as previously i use fport,and there also are many svlmngr.exe.Run
> netstat -an,found the computer send many packets to many ip address,and
> use
> 444,135,80 port.
> How can i kill svlmngr.exe?
> Txs.
>
>

harrycat wrote:

> My computer is winxp+sp1,and when i double click the iexplore's icon
> on desktop,then nothing happen.And the computer is running very
> slowly.And in cmd mode,i run the fport to check it,and there are many
> c:\windows\system32\svlmngr.exe processes.
> Then i reboot the computer in dos mode,and delete svlmngr.exe.I boot
> the computer into winxp,just after a little while,the computer is
> running very slowly,as previously i use fport,and there also are many
> svlmngr.exe.Run netstat -an,found the computer send many packets to
> many ip address,and use 444,135,80 port.
> How can i kill svlmngr.exe?
> Txs.

You apparently have malware on your computer. A lot of malware will
respawn if you delete one of its files. You have to clean up your
computer. Here are general malware removal steps to follow
systematically:

http://www.elephantboycomputers.com/...moving_Malware

After your computer is 100% virus/malware-free, you should upgrade your
operating system to Service Pack 2. Do not do this without proper
preparation however; post back if you need help in preparing for SP2.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

From: "harrycat" <harrycat@163.com>

| My computer is winxp+sp1,and when i double click the iexplore's icon on
| desktop,then nothing happen.And the computer is running very slowly.And in
| cmd mode,i run the fport to check it,and there are many
| c:\windows\system32\svlmngr.exe processes.
| Then i reboot the computer in dos mode,and delete svlmngr.exe.I boot the
| computer into winxp,just after a little while,the computer is running very
| slowly,as previously i use fport,and there also are many svlmngr.exe.Run
| netstat -an,found the computer send many packets to many ip address,and use
| 444,135,80 port.
| How can i kill svlmngr.exe?
| Txs.
|



If you are using any version of Sun Java that is prior to JRE Version 5.0, then
you are are strongly urged to remove any/all versions that are prior to JRE
Version 5.0. There are vulnerabilities in them and they are actively being exploited.
It is possible that is how you got infected with malware.

Therefore, it is highly suggested that if there are any prior versions of Sun Java
to Version 5 on the PC that they be removed and Sun Java JRE Version 5.0 Update 6
be installed ASAP.

http://www.java.com/en/download/manual.jsp


For non-viral malware...

Please download, install and update the following software...

* Ad-aware SE v1.06
http://www.lavasoft.de/
http://www.lavasoftusa.com/

* SpyBot Search and Destroy v1.4
http://security.kolla.de/

After the software is updated, I suggest scanning the system in Safe Mode.

I also suggest downloading, installing and updating BHODemon for any Browser Helper Objects
that may be on the PC.

* BHODemon

http://www.majorgeeks.com/downloadge...4332b4b8b8442d

For viral malware...

* Download MULTI_AV.EXE from the URL --
http://www.ik-cs.com/programs/virtools/Multi_AV.exe

To use this utility, perform the following...
Execute; Multi_AV.exe { Note: You must use the default folder C:\AV-CLS }
Choose; Unzip
Choose; Close

Execute; C:\AV-CLS\StartMenu.BAT
{ or Double-click on 'Start Menu' in C:\AV-CLS }

NOTE: You may have to disable your software FireWall or allow WGET.EXE to go through your
FireWall to allow it to download the needed AV vendor related files.

C:\AV-CLS\StartMenu.BAT -- { or Double-click on 'Start Menu' in C:\AV-CLS}
This will bring up the initial menu of choices and should be executed in Normal Mode.
This way all the components can be downloaded from each AV vendor's web site.
The choices are; Sophos, Trend, McAfee, Kaspersky, Exit this menu and Reboot the PC.

You can choose to go to each menu item and just download the needed files or you can
download the files and perform a scan in Normal Mode. Once you have downloaded the files
needed for each scanner you want to use, you should reboot the PC into Safe Mode [F8 key
during boot] and re-run the menu again and choose which scanner you want to run in Safe
Mode. It is suggested to run the scanners in both Safe Mode and Normal Mode.

When the menu is displayed hitting 'H' or 'h' will bring up a more comprehensive PDF help
file. http://www.ik-cs.com/multi-av.htm


* * * Please report back your results * * *


--
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm