X
Tap here to go to the mobile version of the site.

Support Forum

Whenever Firefox opens, a background process called "www.creativestrength.us/free-trial/thank-you" runs and shares data over the Internet. How to stop this?

Posted

In Win10, Resource Monitor, Network:

      Image        PID                 Address
     firefox       (variable)        www.creativestrength.us/free-trial/thank-you

This process sends and receives information over the Internet. It runs whenever I open Firefox and, if I close the process with Task Manager, then Firefox closes too. I checked the web site - it is a mystical, spiritual type of website which I am very unlikely to have purposely ever visited. It offers a 15-day free trial of something. Apparently I had trouble with this before because, some time ago, I had already blocked the website in the Windows' Host file. I don't find any related software actually installed on my computer, so I can't simply remove or uninstall it.

I am very uncomfortable allowing a strange site like this to be transferring data from my computer every time I use Firefox. Does anyone know how to stop this process from running?

Note: I am writing from my desktop computer. The problem is on my laptop. So can't easily send 'images' or 'share data' as requested below here. The HP laptop is Win10 with all updates; Firefox Quantum 64.0.2 (64-bit).

In Win10, Resource Monitor, Network: Image PID Address firefox (variable) www.creativestrength.us/free-trial/thank-you This process sends and receives information over the Internet. It runs whenever I open Firefox and, if I close the process with Task Manager, then Firefox closes too. I checked the web site - it is a mystical, spiritual type of website which I am very unlikely to have purposely ever visited. It offers a 15-day free trial of something. Apparently I had trouble with this before because, some time ago, I had already blocked the website in the Windows' Host file. I don't find any related software actually installed on my computer, so I can't simply remove or uninstall it. I am very uncomfortable allowing a strange site like this to be transferring data from my computer every time I use Firefox. Does anyone know how to stop this process from running? Note: I am writing from my desktop computer. The problem is on my laptop. So can't easily send 'images' or 'share data' as requested below here. The HP laptop is Win10 with all updates; Firefox Quantum 64.0.2 (64-bit).
Quote

Additional System Details

Installed Plug-ins

Adblock Plus Bookmark search plus2 Browsing Protection by F-Secure Enhancer for You-Tube LastPass Mega (Cloud Storage) Open with Adobe PDF Print Edit WE Push to Kindle To Google Translate Zoom Page WE

Application

  • User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0

More Information

FredMcD
  • Top 10 Contributor
4116 solutions 57459 answers

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.

You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.

You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.

From now on, everyone needs to Use The Manual Option to put a stop to this.

Note that these programs can also change browser/computer settings.

It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but '''other programs as well. ''' You have heard of the '''fine print in shady''' '''contracts, ''' right? Well, some installers you need to look at the '''itsy bitsy teeny weeny fine print. ''' You are thinking you are giving the installer permission to install the program you want by using the '''recommended''' option. But if you use the '''Manual Option Instead, ''' you discover all kinds of stuff that '''you do not even know what it is or what it does. ''' From now on, everyone needs to '''Use The Manual Option''' to put a stop to this. '''Note''' that these programs can also change browser/computer settings.
Was this helpful to you? 0
Quote
FredMcD
  • Top 10 Contributor
4116 solutions 57459 answers

Type about:addons<enter> in the address bar to open your Add-ons Manager. Hot key; (<Control> [Mac=<Command>] <Shift> A)

In the Add-ons Manager, on the left, select Extensions. Remove “ creativestrength “ Anything.

Also remove SafeSearch, SearchAssist Incognito, FileConverter Addon, SearchLock, DiscreteSearch, WebSearch, Findwide Search Engine

Now do the same in the computer’s Programs Folder.

Windows: Start > Control Panel > Uninstall Programs. Mac: Open the Applications folder. Linux: Check your user manual.

Type '''about:addons'''<enter> in the address bar to open your Add-ons Manager. Hot key; '''(<Control> ''[Mac=<Command>]'' <Shift> A) ''' In the Add-ons Manager, on the left, select '''Extensions. ''' Remove “ creativestrength “ '''Anything. ''' Also remove SafeSearch, SearchAssist Incognito, FileConverter Addon, SearchLock, DiscreteSearch, WebSearch, Findwide Search Engine Now do the same in the computer’s '''Programs Folder. ''' '''Windows:''' Start > Control Panel > Uninstall Programs. '''Mac:''' Open the '''Applications''' folder. '''Linux:''' Check your user manual.
Was this helpful to you?
Quote

Question owner

Fred, thank you for your speedy and sensible reply. I had actually already checked the extensions and program files but did it again just to be sure. In fact, I also searched my bookmarks, the entire computer, and the Registry for any trace of "creativestrength" or 'free trial' or 'thank-you' - could not find a thing.

I have a friend who is into 'mysticism', sends endless emails, and does not have a properly protected computer. So, I suspect this may have entered my system via email.

But that suspicion doesn't help me in finding a solution. I am very curious to find out how this website managed to attach itself so snugly to the Firefox program--maybe the site really does have mystical powers !!

Fred, thank you for your speedy and sensible reply. I had actually already checked the extensions and program files but did it again just to be sure. In fact, I also searched my bookmarks, the entire computer, and the Registry for any trace of "creativestrength" or 'free trial' or 'thank-you' - could not find a thing. I have a friend who is into 'mysticism', sends endless emails, and does not have a properly protected computer. So, I suspect this may have entered my system via email. But that suspicion doesn't help me in finding a solution. I am very curious to find out how this website managed to attach itself so snugly to the Firefox program--maybe the site really does have mystical powers !!

Modified by ShanChi

Was this helpful to you?
Quote
FredMcD
  • Top 10 Contributor
4116 solutions 57459 answers

You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no

Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.

You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
Was this helpful to you? 1
Quote

Question owner

I regularly run Malwarebytes and SuperAnti-Spyware (wonderful program!). My main AV is F-Secure. But I will try the other three anti-malware programs listed in the referenced article and update you on the results, probably tomorrow.

I regularly run Malwarebytes and SuperAnti-Spyware (wonderful program!). My main AV is F-Secure. But I will try the other three anti-malware programs listed in the referenced article and update you on the results, probably tomorrow.
Was this helpful to you?
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.