Whenever Firefox opens, a background process called "www.creativestrength.us/free-trial/thank-you" runs and shares data over the Internet. How to stop this?
In Win10, Resource Monitor, Network:
Image PID Address firefox (variable) www.creativestrength.us/free-trial/thank-you
This process sends and receives information over the Internet. It runs whenever I open Firefox and, if I close the process with Task Manager, then Firefox closes too. I checked the web site - it is a mystical, spiritual type of website which I am very unlikely to have purposely ever visited. It offers a 15-day free trial of something. Apparently I had trouble with this before because, some time ago, I had already blocked the website in the Windows' Host file. I don't find any related software actually installed on my computer, so I can't simply remove or uninstall it.
I am very uncomfortable allowing a strange site like this to be transferring data from my computer every time I use Firefox. Does anyone know how to stop this process from running?
Note: I am writing from my desktop computer. The problem is on my laptop. So can't easily send 'images' or 'share data' as requested below here. The HP laptop is Win10 with all updates; Firefox Quantum 64.0.2 (64-bit).
Additional System Details
Adblock Plus Bookmark search plus2 Browsing Protection by F-Secure Enhancer for You-Tube LastPass Mega (Cloud Storage) Open with Adobe PDF Print Edit WE Push to Kindle To Google Translate Zoom Page WE
- User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0
It’s very sad, but many software downloaders/ installers will trick you into installing not only their program, but other programs as well.
You have heard of the fine print in shady contracts, right? Well, some installers you need to look at the itsy bitsy teeny weeny fine print.
You are thinking you are giving the installer permission to install the program you want by using the recommended option. But if you use the Manual Option Instead, you discover all kinds of stuff that you do not even know what it is or what it does.
From now on, everyone needs to Use The Manual Option to put a stop to this.
Note that these programs can also change browser/computer settings.
Type about:addons<enter> in the address bar to open your Add-ons Manager. Hot key; (<Control> [Mac=<Command>] <Shift> A)
In the Add-ons Manager, on the left, select Extensions. Remove “ creativestrength “ Anything.
Also remove SafeSearch, SearchAssist Incognito, FileConverter Addon, SearchLock, DiscreteSearch, WebSearch, Findwide Search Engine
Now do the same in the computer’s Programs Folder.
Windows: Start > Control Panel > Uninstall Programs. Mac: Open the Applications folder. Linux: Check your user manual.
Fred, thank you for your speedy and sensible reply. I had actually already checked the extensions and program files but did it again just to be sure. In fact, I also searched my bookmarks, the entire computer, and the Registry for any trace of "creativestrength" or 'free trial' or 'thank-you' - could not find a thing.
I have a friend who is into 'mysticism', sends endless emails, and does not have a properly protected computer. So, I suspect this may have entered my system via email.
But that suspicion doesn't help me in finding a solution. I am very curious to find out how this website managed to attach itself so snugly to the Firefox program--maybe the site really does have mystical powers !!
Modified by ShanChi
You may have ad/mal-ware. Further information can be found in this article; https://support.mozilla.org/en-US/kb/troubleshoot-firefox-issues-caused-malware?cache=no
Run most or all of the listed malware scanners. Each works differently. If one program misses something, another may pick it up.
I regularly run Malwarebytes and SuperAnti-Spyware (wonderful program!). My main AV is F-Secure. But I will try the other three anti-malware programs listed in the referenced article and update you on the results, probably tomorrow.