I'm new and have the Alcan worm

[StormieK]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/unsure.gif\' class=\'bbc_emoticon\' alt=\':unsure:\' />  You want me to delete all that Internet Explorer stuff???

[guestolo]

There not malicious, the IE ones are just redirects set by HP
Won't hurt to fix them

[StormieK]

http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'\' /> Ok, going to do it now.....

[StormieK]

Okie Dokie...I did everything you said http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'\' />

[guestolo]

This has been a long thread Stormie  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'\' />
 your log looked good however

Nothing in the log now but some optionals that don't need running
If you would like to pursue disabling these let me know
Otherwise I'll lock this topic as your problems appear resolved

NOTE: you can go back and hide hidden files and folders again
I would leave Hide Extensions for known file types unchecked however

[StormieK]

I'm sorry about the long thread.  I'm new so don't quite know what to do about that.  Maybe start another one next time?  Sorry http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/unsure.gif\' class=\'bbc_emoticon\' alt=\':unsure:\' />

As far as the problem, I'm grateful for your help.  I would have never found all the problems.  Thank you for your time!

I would like very much to stop what ever is running that doesn't need to be whenever you can is great with me.  Thanks for the offer.

Stormie http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'\' />

I'll go back through the threads to hide the files again.  Thanks for the tip!

[guestolo]

Don't be sorry about the long thread
I figured if it was this long now, why now keep it going  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />
Just kidding

I'll be back on later, have to leave right now
I'll post back later

[guestolo]

Hi again Stormie
Those optionals
I'll leave it up to you what you don't need running on startup

you can use msconfig to control some entries
I prefer to use this small tool
Don't disable something if it's needed>>Eg.. Your Anti-Virus
Codestuff's Starter
UNZIP it to a folder of it's own
Eg...Open MyDocuments>>Right click an empty spot and left click NEW>>Folder
Name it something like "Starter"
Uncheck an item to disable on startup
Or look within a program first to disable on startup

Go to this link, http://castlecops.com/modules.php?name=StartupList
Here's an example of ONLY the 04 entries of your hijackthis log I put into the Search field and the results I got
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
I entered into the Search field
realsched.exe

Here's the results

Application Scheduler installed along with RealOne_Player Once installed, it runs independently of RealOne Player. See here for more information, including how to disable it. Also see evntsvc and Realsched. Note that eventsvc.exe no longer appears to be in a newer version. To disable "tkbell.exe" in the new version (1) Start RealOne Player (2) Tools -> Preferences (3) Automatic services in the Categories pane (4) Uncheck all options and then OK

You will want to manually disable it from running on startup
Then have Starter fix that entry if still found

Concerning this entry
O4 - Global Startup: Compaq Connections.lnk = C:\Program Files\Compaq Connections\6750491\Program\Compaq Connections.exe
It is recommended to disable this on startup, unless you experience problems

Start, All Programs, PC Help & Tools, Compaq Connections
Please remember that if you deactivate the service, you will miss important support notices and usage information specifically for your PC model. You may reactivate the service any time by going to the same Start menu location.

I don't see a problem deactivating this, unless you deem it necessary

Do a little work and see what you require on startup
Look within the program first to see if it can be deactivated if it not necessary to be running on startup
or
Use Codestuff's starter to disable an entry, this way if you need it reenabled on startup you can use Starter
to recheck it again

Let me know how it goes  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/smile.gif\' class=\'bbc_emoticon\' alt=\'\' />

[StormieK]

Good Morning:)

I downloaded Codestuff Starter (great little program, thanks) and unchecked my Winzip since I don't use it.  I have another program to upzip things.

Also I brought up RealPlayer (which I never use either) and nothing was checked so I left it alone but did uncheck the box for this [TkBellExe] in Codestuff Starter.  Was that the correct thing to do?

I'm sorry to keep bothering you but I've found a file in my Programs file that looks like a bad thing but before I delete it I want to know what you think.  Like I said, it's in my Programs file (I found it there this morning) and it's a file called FunWebProducts and inside the file is another file called 2.bin which has an installer in it called F3EZSETP.DLL   Seems like I've deleted something like this before but maybe not.  When you have the time I'd like to know what you think of this.  I know you're very busy and I'm not the only one with problems so just when you can.  I'll keep checking back with you:)

I've passworded my computer so I'm the only one allowed on it now and I'm very carefully where I surf so maybe it was a leftover I just overlooked...I hope so!

Thanks for everything guestolo!

Stormie

[guestolo]

You actually looked like you had something associated with Popular screensavers
at one time installed, Ewido removed a registry entry related to it
Seem right?

Here's some info on it
Click HERE

I don't see it installed anymore, if that's correct go ahead and delete the FunWebProducts folder
It wouldn't be something I would want installed

[StormieK]

Yep, that's exactly where it's from.  I've deleted it.  Thanks for everything!  Awesome forum you guys have here and I sure appreciate it!

Stormie

[guestolo]

Good Work Stormie, I'll lock this topic as your problems are resolved
Take care  http://images.thetechguide.com/forum/public/style_emoticons/<#EMO_DIR#>/biggrin.gif\' class=\'bbc_emoticon\' alt=\'\' />