postcard exe and known trojans can't remove

Delete this file: FGMGR32C.exe
It should be listed here:
C:\WINDOWS\SYSTEM\FGMGR32C.exe



click Start> Run> type in Msconfig tap enter key.
look in the Startup.

You can uncheck these. If you decide you still want these, you can always recheck them.

TaskPanl
fgmgr32c
GhostStartTrayApp
mimboot
mmtask
mm_tray
qttask
RealPlay
Weather

After you uncheck it and rebooting, you'll be using Selective startup.
When you see the box popup that tells you that, just put a Check in the Box to not show that when you startup. That's how I run mine.

Reboot and let me know how it's running.

I looked in the system folder and can not locate the fgmgr.exe file yes i looked both caps on off As for the start up I dont use ghost or weather can we totally rid them? i think the qttask is required for my active sync for my Ipaq? once again I will be gone all day so no rush Thanks

Do a file search for fgmgr.exe or fgmgr.dll and delete if found.

Look in Add/Remove Programs and see if Weather is listed, if so, remove from there.

Ghost is part of Symantec.

1.Click on Start | Settings | Control Panel
2.In the control panel double-click on Add / Remove Programs
3.Look through the list of installed programs for any item that says either "Norton" or "Symantec" or "LiveUpdate". (for example "Symantec AntiVirus Corporate Edition" or "Norton AntiVirus 2000")
4.For each "Norton", "Symantec", or "LiveUpdate" item, select the item and click Add / Remove. Follow the instructions, and click Yes or Yes to all when prompted.
When you are done there should be no items in the list that say "Norton", "Symantec", or "LiveUpdate".
5.Click OK to close the Add / Remove Programs window.
6.Reboot your computer if it hasn't already automatically rebooted.
7.Delete the c:\Program Files\Symantec AntiVirus (or c:\Program Files\Norton) folder.
8.Delete the c:\Program Files\Symantec folder.
9.Delete the c:\Program Files\Common Files\Symantec Shared folder.

If uninstalling Symantec AntiVirus using Add / Remove Programs does not work, you can use the directions on this Symantec website to manually remove all elements of Symantec Antivirus from your computer.
http://service1.symantec.com/SUPPORT/ent-s…src=bar_sch_nam

Hello,
sorry for the delays, I can not find the fgmgr file so I moved on to the add remove nothing there for norton, there was one in the program area, deleted it, then tried to delete msn gaming & msn tool bar suite in the programs area an acess was denied, then i got an error message so I sent and it came back as Drwatson debugging and locked up my system, i could open windows but nothing would close so I rebooted from the task mgr, whick showed no processes runing and 82% cpu usage, then upon roboot I did the the msconfig below is the list in there:

these items are checked
lxbkmgr
Nwiz.exe
NvCpl.
Wkufind
a blank area but it is checked
desktop managergps (for my ipaq)
avgcc
a blank area but it is checked
justsched
adproxy
ctfmon
wcescomm (for my ipaq)
mssysmgr
googletoolbar notifer
adobereader speed launcher
microsoftoffice

these items are there but not checked
mixer
mmkeyboard
mouse
lxsupmon
nerocheck
qttask
thats all that is there again I will be gone till late this eve so no rush, Thank you in advance

Uncheck these.

blank area but it is checked
a blank area but it is checked
mssysmgr
googletoolbar notifer


This one could be a Trojan:
justsched

Find it's location and check it here: You'll need the exact location

Please go to http://virusscan.jotti.org , click on Browse, and upload the following file for analysis:

C:\???\justsched.exe

Then click Submit. Allow the file to be scanned, and then please copy and paste the results here for me to see.


If Jotti is too busy you can try these.

http://www.kaspersky.com/scanforvirus.html


http://www.virustotal.com/en/indexf.html

Hello, Here is the scan I also went thru most of the other start up files and the results were all the same the only one I could not find is the nwiz.exe no path and it tells me the file is invalid.??? Service load: 0% 100% File: jusched.exe Status: OK(Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database) MD5 edf5d27c6d244740418903626df5741a Packers detected: - Scanner results Scan taken on 16 Feb 2007 17:26:50 (GMT) AntiVir Found nothing ArcaVir Found nothing Avast Found nothing AVG Antivirus Found nothing BitDefender Found nothing ClamAV Found nothing Dr.Web Found nothing F-Prot Antivirus Found nothing F-Secure Anti-Virus Found nothing Fortinet Found nothing Kaspersky Anti-Virus Found nothing NOD32 Found nothing Norman Virus Control Found nothing VirusBuster Found nothing VBA32 Found nothing

Nwiz.exe
Associated with the newer versions of nVidia graphics cards drivers. Allows you to immensely improve desktop layouts by setting preferences and optimizations. However, this isn't necessary for the operation of your system .

You can remove any programs I had you install

Log looks good


You need to create a new Clean restore point.

Note: This will remove all previous Restore Points

Turn off System Restore:

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Check Turn off System Restore.
Click Apply, and then click OK.

Restart your computer, turn it back on.

On the Desktop, right-click My Computer.
Click Properties.
Click the System Restore tab.
Remove the Check Turn off System Restore.
Click Apply, and then click OK.

Double-click My Computer.
Click the Tools menu, and then click Folder Options.
Click the View tab.
Check "Hide file extensions for known file types."
Under the "Hidden files" folder, Uncheck "Show hidden files and folders."
Check "Hide protected operating system files."
Click Apply, and then click OK.



If you dont have any programs like these, I would recommend that you get them.
Spywareblaster,
Spywareguard.


Also get a FREE FIREWALL and FREE ANTI VIRUS if you need one.

Only run one Anti-Virus and Firewall program.

It is critical to have both a firewall and anti virus to protect your system.

Keep your system up to date and run Adaware & Spybot, once a week works, and hopefully you will be ok from here on. Both are available below.

Do not use Ad-aware if you have McAfee's VirusScan and AntiSpyware


Safe Surfing.

I would also suggest you read this:
So how did I get infected in the first place?
by Tony Klein

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php