Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    Star Lounger survivor78's Avatar
    Join Date
    Jan 2010
    Location
    Connecticut
    Posts
    69
    Thanks
    3
    Thanked 2 Times in 2 Posts

    How to completely disable realsched.exe

    Yet another irritation: RealPlayer has a component called realsched.exe that will automatically check for software updates. I, however always prefer to manually update my software so do not need this to work. I use Win Patrol to, among other things, watch for changes made to my startup list and usually after having clicked "no" once or twice that effectively stops a program from re-attempting to implant a startup program. However with realsched.exe nothing I do will stop Real Player from trying to install realsched! I have disabled it in Win Patrol, I have unchecked every option within Real Player that automatically checks for anything including the Message Center, I have manually killed the realsched.exe process in Task Manager and have checked msconfig and found nothing. All this while Real Player isn't even running!

    Now I must be missing something and am no computing novice, but can see no reason why realsched.exe will not stay dead!
    HP Pavillion Elite HPE-127 c-b Intel Core i5 750 2.67 Ghz 8 GB RAM one 2 TB Hdd, and one 3 TB Hdd with one 3TB external HDD Win 7 Home Premium 64, GeForce GT 220 1 Gig Vram; Sony Vaio laptop with Intel i3 330-M 2.13 Ghz 4 GB RAM 500 GB Hdd Win 7 Home Premium 64; not to mention an HTC One (the older model) and a Nexus 7(2013)

    --------------------------------

    Dogs Aren't Our Whole Life
    BUT
    They Make Our Life Whole.

    --------------------------------

  2. #2
    Super Moderator BATcher's Avatar
    Join Date
    Feb 2008
    Location
    A cultural area in SW England
    Posts
    3,414
    Thanks
    33
    Thanked 195 Times in 175 Posts
    Rename the executable to RealSched.wasexe , perhaps?
    BATcher

    Time prevents everything happening all at once...

  3. #3
    4 Star Lounger
    Join Date
    Jun 2011
    Location
    Hampshire (the old one)
    Posts
    525
    Thanks
    21
    Thanked 72 Times in 62 Posts
    The registry key that refers to realsched.exe is named Tinkerbelle or Tbelle or something similar - I've deleted it so I can't remember. Try looking in msconfig for that. (I use WinXP, but Win7 should be similar.)

  4. #4
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,580
    Thanks
    5
    Thanked 1,058 Times in 927 Posts
    Unless you know for sure that you need RealPlayer, just uninstall it. I have not run across any website that requires RealPlayer in several years.

    Joe

  5. #5
    4 Star Lounger
    Join Date
    Jun 2011
    Location
    Hampshire (the old one)
    Posts
    525
    Thanks
    21
    Thanked 72 Times in 62 Posts
    Forgot to mention earlier - also check your Scheduled Tasks in Control Panel. (I'm assuming here, as before, that it's similar to WinXP.)

  6. #6
    Star Lounger survivor78's Avatar
    Join Date
    Jan 2010
    Location
    Connecticut
    Posts
    69
    Thanks
    3
    Thanked 2 Times in 2 Posts
    Thanks for the responses. tonyl, yes it is TKBell which I also have disabled using Win Patrol. I have no scheduled tasks, I do everything manually, just in case something goes wrong; I've been bitten before and this gives me the opportunity to do one thing at a time.

    Joe, yes I certainly could uninstall Real Player, however for me that's like swatting a fly with a sledgehammer. Also I really would like to figure out why this continues to happen, I'm stubborn like that. (Although I have given uninstallation serious thought as of late.)
    HP Pavillion Elite HPE-127 c-b Intel Core i5 750 2.67 Ghz 8 GB RAM one 2 TB Hdd, and one 3 TB Hdd with one 3TB external HDD Win 7 Home Premium 64, GeForce GT 220 1 Gig Vram; Sony Vaio laptop with Intel i3 330-M 2.13 Ghz 4 GB RAM 500 GB Hdd Win 7 Home Premium 64; not to mention an HTC One (the older model) and a Nexus 7(2013)

    --------------------------------

    Dogs Aren't Our Whole Life
    BUT
    They Make Our Life Whole.

    --------------------------------

  7. #7
    Administrator
    Join Date
    Mar 2001
    Location
    St Louis, Missouri, USA
    Posts
    23,580
    Thanks
    5
    Thanked 1,058 Times in 927 Posts
    Have you used a utility such as Autoruns? It is a comprehensive look at what gets started when you boot the system. You should be interested in the Logon tab at first.

    Joe

  8. #8
    Star Lounger survivor78's Avatar
    Join Date
    Jan 2010
    Location
    Connecticut
    Posts
    69
    Thanks
    3
    Thanked 2 Times in 2 Posts
    Quote Originally Posted by JoeP517 View Post
    Have you used a utility such as Autoruns? It is a comprehensive look at what gets started when you boot the system. You should be interested in the Logon tab at first.

    Joe

    Well, I have now. And, like Win Patrol it shows no Real anything in the startup, or 'Logon' in Autoruns. Of course, this only bothers me while Win Patrol is running, due to the constant warnings. If I am not running Win Patrol and I simply wait, nothing shows up in Task Manager relating to realsched. But NOT running Win Patrol kinda defeats the purpose.
    HP Pavillion Elite HPE-127 c-b Intel Core i5 750 2.67 Ghz 8 GB RAM one 2 TB Hdd, and one 3 TB Hdd with one 3TB external HDD Win 7 Home Premium 64, GeForce GT 220 1 Gig Vram; Sony Vaio laptop with Intel i3 330-M 2.13 Ghz 4 GB RAM 500 GB Hdd Win 7 Home Premium 64; not to mention an HTC One (the older model) and a Nexus 7(2013)

    --------------------------------

    Dogs Aren't Our Whole Life
    BUT
    They Make Our Life Whole.

    --------------------------------

  9. #9
    New Lounger
    Join Date
    Jan 2012
    Posts
    1
    Thanks
    0
    Thanked 0 Times in 0 Posts
    After manually deleting the registry keys (there may be more than one), you need to delete the exe in both the system 32, the program folder, and the hidden folder that windows keeps backups of DLL's and such (system32/dllcache/).

    Before restarting, use a registry cleaner. CCleaner seems on, but WtRegclean works pretty well for me.

    If necessary, do this in Safe Mode.

    If you STILL can't delete a file in use, you can get a run from CD version of PCLinux and manually delete anything you ever wanted, including the file(s) that may be in use that Windows won't turn off or delete. When you 'surf' to where the file(s) are, be sure you click on view>show hidden files. Be forewarned though. You can delete things accidentally that may make windows unbootable. Just shoot for the file(s) that you want to get rid of.

    While you are there, delete your pagefile.sys . Don't worry, Windows will just recreate it UNFRAGMENTED assuming you have enough contiguous space on your hard drive. Windows defragmenter and most others won't defrag the pagefile.

    There is a manual way of deleting registry keys that works too, assuming those keys that need to be eliminated just won't let you.

    I believe there is a program called process blocker that might stop it too.

    Please note: sites like this one may be permanently blocked if the US Federal Government passes SOPA or similar laws.

    P.S. I had to use that CD to remove a nasty polymorphic virus from my mother's computer.
    Last edited by zolar1; 2012-01-19 at 00:33. Reason: forgot the additional reason for using the CD

  10. #10
    3 Star Lounger
    Join Date
    Sep 2010
    Location
    Yarra Glen, Victoria, Australia
    Posts
    213
    Thanks
    0
    Thanked 39 Times in 25 Posts
    Have you checked in Services? I'm not familiar with Realplayer, but it could have a service, set to automatic, which gets started when the system starts. But if this is the case, autoruns should pick it up. Run autoruns, wait until it has finished scanning, then do File > Find and type real into the search box. Or go to the Services tab and see what is in there. If there is such a service, stop it and set it to disabled. However, if the service is needed to check for updates, you may need to temporarily start it before doing your manual check.

  11. #11
    Star Lounger survivor78's Avatar
    Join Date
    Jan 2010
    Location
    Connecticut
    Posts
    69
    Thanks
    3
    Thanked 2 Times in 2 Posts
    Follow up: I have uninstalled real Player from my Vaio, run JV16 Power Tools Reg Cleaner, and all is well. Until I ran the Registry Cleaner though, I still got one or two messages from Win Patrol that realsched.exe was trying to install itself upon reboot, which made me think that perhaps the installation was corrupted in one small way, considering real Player did seem to work ok. I may try reinstalling at a later date if I feel like it. Also, Real Player seems ok on my other two 'puters which also points towards a corrupt install on the Vaio.

    Bundaburra: Yes that was one of the first things I tried, checking services, and TKBell is the service associated with realsched, and had been disabled previously. It had to be a registry entry that was causing the Win Patrol warning.

    Thanks to all who have responded, it is why I like the Lounge the best when it comes to getting actual answers to real problems.
    HP Pavillion Elite HPE-127 c-b Intel Core i5 750 2.67 Ghz 8 GB RAM one 2 TB Hdd, and one 3 TB Hdd with one 3TB external HDD Win 7 Home Premium 64, GeForce GT 220 1 Gig Vram; Sony Vaio laptop with Intel i3 330-M 2.13 Ghz 4 GB RAM 500 GB Hdd Win 7 Home Premium 64; not to mention an HTC One (the older model) and a Nexus 7(2013)

    --------------------------------

    Dogs Aren't Our Whole Life
    BUT
    They Make Our Life Whole.

    --------------------------------

  12. #12
    New Lounger
    Join Date
    Jan 2013
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts

    realsched is re-enabled by realplayer

    In the ..\Real\Update folder, you'll find realsched.exe. It seems to run, as well as be re-enabled in the Startup section, every time realplayer is shut down.

    If you take a copy of winver.exe (for example) and rename it as realsched.exe & replace the original (or rename realsched & then move the winver version) app, then run realplayer... you'll see that (sometimes) when realplayer starts playing a video, or (always) when realplayer is shut down, winver will run.

    realsched.exe actually re-enables itself in Startup.

    Also, realupdate.exe runs when realplayer is started, but it shuts down quickly. Note that I disabled automatic updates under realplayer's Preferences menu.

    Note that if realsched.exe is renamed "hold realsched.exe" then realplayer will somehow find it and execute it. If the winver version is run, a "realsched" process stays in the Task Manager even when the winver window is closed. So...

    I chose to create a single space text document and renamed it realsched.exe. And renamed realsched.exe itself as .exe-hold, not that I need to keep it. When realplayer shuts down, a CMD window opens trying to run this fictitious program, and it quickly closes.

    Spoofing TkBell.JPG

    Nothing remains in Task Manager, nor does the Startup entry for realsched/TkBell become re-enabled.

    Not elegant but effective. Yep, it's a hack.

  13. #13
    New Lounger
    Join Date
    Jan 2013
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts
    so, actually, realsched is run by realplayer, but re-enabled in Startup by itself.

  14. #14
    Super Moderator jwitalka's Avatar
    Join Date
    Dec 2009
    Location
    Minnesota
    Posts
    6,794
    Thanks
    117
    Thanked 799 Times in 720 Posts
    You can disable realsched via Preferences > Automatic Services > Auto Update > uncheck Automatically download and install important updates.

    Did that and disabled realsched in Windows 8 taskmanager and it didn't come back after a restart.

    Jerry

  15. #15
    New Lounger
    Join Date
    Jan 2013
    Posts
    3
    Thanks
    0
    Thanked 0 Times in 0 Posts
    If you run a video in RealPlayer (realplay.exe) and then close the program, the realsched.exe (TkBell) will reappear in Startup as well as in Task Manager. Even after you disable it in Preferences/Automatic Services AND /Auto Update. Did you run RealPlayer again? RealSched runs when RealPlayer is (being) closed.

    I was reporting from a WinXP machine but now I'm on a Win7 PC and it's doing the exact same thing (that is, before I do a similar hack on this PC).

    R.
    Last edited by Rajah; 2013-01-06 at 22:28. Reason: clarification

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •