Eset advised to put Chrome on my puter to see if I still got the
HeegieJeebies pop up. Sure do not want to use it permanently.
The kid that wrote the main screen has no idea what to do.
Also can't import the K-meleon bookmarks.
Ran Combofix and that didn't solve any problems.
Ran Malwarebytes and it didn't find anything.

Quote
phenix
This one is interesting and very annoying.

My virus program, ESET SS, is set for a two way stop of incoming and
outgoing garbage. Here is the messgage it produced when I signed
on this morning:

application: windows media player network sharing service
publisher: unknown
remote computer: FreeStaffWorld.com (127.0.0.1)
remote port; tcp 2869(icslap)

So did my additions to the HOSTS file have any effect?

No idea about such annoying stuff, never have it myself, surfing with usually all shields up (no JS etc). But guess at least that secret function in MSPlayer can be disabled.
http://bucarotechelp.com/computers/wintips/92082801.asp

Hope you're not surfing on a fix IP adress yourself...
Perhaps check (delete) your cookies and manually check the flash cookies and check the DOMstorage thing...
Try with a new profile in KM...
Try with a new installation of KM too, installed into a new folder, without additional extensions installed (noscript is notorious etc.)...
Perhaps it's possible to close that remote port via firewall...
Just little things I'd check myself, but otherwise no idea, sorry.

But there must be more people in the web with that prob! Perhaps you'll have to google for all those 50 name variations, urgh...

Hi phenix -

Rest assured Windows is doing what you told it. :O The IP shown for FreeStaffWorld is "localhost", that is, your computer. The good news is all that happened was WMP wasted a bit of your computer time.

I only have W2K, didn't know WMP has a network sharing service -- it must be in WMP10+. Anyway, what siria said is good: at the very least set it to "Manual", but disabling it can't hurt. If disabling it does give problems, you can always reset to manual.

Cheers,

Gordon.

____________________
Understanding the scope of the problem is the first step on the path to true panic. [Florence Ambrose, "Freefall" 01372 January 22, 2007 http://freefall.purrsia.com/ff1400/fv01372.htm]

Thanks guys for your help.
I have already set the Media Player to disable.
Was kind of waiting for the next version of K-Meleon.
But I guess I could install it in K-Meleon2.
Not sure how to handle the bookmarks.

Eset advised me to install Google chrome to see if that made a difference.
I followed their instructions and I have to say Google Chrome is a mess.
Uninstalling it is also a mess. The installer can't be uninstalled.
BUT, I backed up before installing Chrome. I reinstalled windows 7
and got rid of Chrome forever.

I use Ccleaner to clean up my cookies and other goodies.
What is DOMstorage???



Edited 1 time(s). Last edit at 09/09/2011 04:55PM by phenix.

Quote
phenix
Thanks guys for your help.
I have already set the Media Player to disable.
Was kind of waiting for the next version of K-Meleon.
But I guess I could install it in K-Meleon2.
Not sure how to handle the bookmarks.

Eset advised me to install Google chrome to see if that made a difference.
I followed their instructions and I have to say Google Chrome is a mess.
Uninstalling it is also a mess. The installer can't be uninstalled.
BUT, I backed up before installing Chrome. I reinstalled windows 7
and got rid of Chrome forever.

I use Ccleaner to clean up my cookies and other goodies.
What is DOMstorage???

You may wish to look at this uninstall program in portable app format. IMO, it does a pretty good job of uninstalling and scrubbing the registry too.

http://portableapps.com/apps/utilities/revo_uninstaller_portable

A plus, is being in portable format, it doesn't impact your system.

N

Well I waited till the new ESET SS 5 came out to see if that had any
effect on the FreebieJeebies popup. It didn't. Also it doesn't show
up in the REVO uninstaller. Did find out that it is a product from
England. Seems like a good idea to avoid anything coming from England.
Adding it to the HOST file had no effect whatsoever in stopping it or
I entered it incorrectly.

Last resort seems to be a reinstall of Windows 7