X
Tap here to go to the mobile version of the site.

Support Forum

What is trustedoffer.com, other than extremely annoying, and how do I get rid of it, since un and reinstalling firefox didn't help??

Posted

It might be a little gift left me after I uninstalled another toolbar which installed itself when I downloaded a media player. On most regular sites, unless they have good security, a new tab pops open whenever I click on a link or function. The tab has the name of the site I am on followed by trustedoffer.com. When I return to the page I was on, I can then click that link normally. I have been always closing these tabs before going back to the page. I have tried to find info about it, but have found nothing. I've tried blocking it, but it only works briefly. Avast doesn't seem to notice it either. I've tried uninstalling and reinstalling Firefox. My concern is that it might be putting me at risk since I have done some online shopping recently. That, and it takes longer to do everything. It is intrusive, and I can't imagine it doesn't serve more than to annoy.

Thank you for any assistance,

K. Higginbottom

It might be a little gift left me after I uninstalled another toolbar which installed itself when I downloaded a media player. On most regular sites, unless they have good security, a new tab pops open whenever I click on a link or function. The tab has the name of the site I am on followed by trustedoffer.com. When I return to the page I was on, I can then click that link normally. I have been always closing these tabs before going back to the page. I have tried to find info about it, but have found nothing. I've tried blocking it, but it only works briefly. Avast doesn't seem to notice it either. I've tried uninstalling and reinstalling Firefox. My concern is that it might be putting me at risk since I have done some online shopping recently. That, and it takes longer to do everything. It is intrusive, and I can't imagine it doesn't serve more than to annoy. Thank you for any assistance, K. Higginbottom

Additional System Details

Installed Plug-ins

  • Shockwave Flash 11.6 r602
  • The QuickTime Plugin allows you to view a wide variety of multimedia content in Web pages. For more information, visit the QuickTime Web site.
  • Adobe PDF Plug-In For Firefox and Netscape 11.0.02
  • 5.1.20125.0
  • VLC media player Web Plugin 2.0.0-rc

Application

  • Firefox 20.0.1
  • User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:20.0) Gecko/20100101 Firefox/20.0
  • Support URL: http://support.mozilla.org/1/firefox/20.0.1/WINNT/en-US/

Extensions

  • DownloadTerms 1.0 (daxip@kjvdvbop.org)
  • Flagfox 4.2.7 ({1018e4d6-728f-4b20-ad56-37578a4de76b})
  • InstantFox 2.8.0 (searchy@searchy)
  • PriceBlink 3.5.2 (info@priceblink.com)
  • Troubleshooter 1.1a (troubleshooter@mozilla.org)
  • avast! WebRep 8.0.1483 (wrc@avast.com) (Inactive)
  • RequestPolicy 0.5.27 (requestpolicy@requestpolicy.com) (Inactive)
  • Skype Click to Call 6.7.0.12055 ({82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}) (Inactive)

Javascript

  • incrementalGCEnabled: True

Graphics

  • adapterDescription: Mobile Intel(R) 45 Express Chipset Family (Microsoft Corporation - WDDM 1.1)
  • adapterDescription2:
  • adapterDeviceID: 0x2a42
  • adapterDeviceID2:
  • adapterDrivers: igdumd64 igd10umd64
  • adapterDrivers2:
  • adapterRAM: Unknown
  • adapterRAM2:
  • adapterVendorID: 0x8086
  • adapterVendorID2:
  • direct2DEnabled: False
  • direct2DEnabledMessage: [u'tryNewerDriver', u'8.1500.1000.2202']
  • directWriteEnabled: False
  • directWriteVersion: 6.2.9200.16492
  • driverDate: 5-6-2009
  • driverDate2:
  • driverVersion: 8.15.10.1749
  • driverVersion2:
  • info: {u'AzureCanvasBackend': u'cairo', u'AzureFallbackCanvasBackend': u'none', u'AzureContentBackend': u'none'}
  • isGPU2Active: False
  • numAcceleratedWindows: 0
  • numAcceleratedWindowsMessage: [u'tryNewerDriver', u'8.1500.1000.1855']
  • numTotalWindows: 1
  • webglRendererMessage: [u'tryNewerDriver', u'8.1500.1000.1855']
  • windowLayerManagerType: Basic

Modified Preferences

  • browser.cache.disk.capacity: 358400
  • browser.cache.disk.smart_size.first_run: False
  • browser.cache.disk.smart_size.use_old_max: False
  • browser.cache.disk.smart_size_cached_value: 358400
  • browser.places.smartBookmarksVersion: 4
  • browser.startup.homepage: https://www.juiceplusvirtualoffice.com/esuite/control/mainView
  • browser.startup.homepage_override.buildID: 20130409194949
  • browser.startup.homepage_override.mstone: 20.0.1
  • dom.mozApps.used: True
  • dom.w3c_touch_events.expose: False
  • extensions.lastAppVersion: 20.0.1
  • network.cookie.prefsMigrated: True
  • places.database.lastMaintenance: 1365466054
  • places.history.expiration.transient_current_max_pages: 79492
  • plugin.disable_full_page_plugin_for_types: application/pdf
  • privacy.sanitize.migrateFx3Prefs: True

Misc

  • User JS: No
  • Accessibility: No
philipp
  • Top 25 Contributor
  • Moderator
5324 solutions 23508 answers

Helpful Reply

hello, this seems to be caused by a rogue adware addon. please go to firefox > addons > extensions & remove the DownloadTerms 1.0 entry. in additionrun a full scan of your system with the security software that you have in place and different other tools like the free version of malwarebytes & adwcleaner.

Troubleshoot Firefox issues caused by malware

hello, this seems to be caused by a rogue adware addon. please go to firefox > addons > extensions & remove the ''DownloadTerms 1.0'' entry. in additionrun a full scan of your system with the security software that you have in place and different other tools like the [http://www.malwarebytes.org/products/malwarebytes_free free version of malwarebytes] & [http://www.bleepingcomputer.com/download/adwcleaner/ adwcleaner]. [[Troubleshoot Firefox issues caused by malware]]
Liz_in_Hawaii 0 solutions 4 answers

Anyone want to team up to address this issue. Re trusted-offer.com I have been seriously pursuing this problem of trusted-offer.com redirected links seriously for the past week. I get it on Google Chrome browser. I ran a boot scan with AVAST and cleaned my computer, but the link redirects continued. On AVAST's recommendation I pursued it with Malwarebytes malware protection. I had previously had the free version, but I upgraded to the Pro and ran a full scan. It said my system was clean. I consulted Malwarebytes support team and they directed me through some additional tests with no success. The link redirects continue..

Reading your post alerted me to something... Until then I had focused on the products being advertised in the redirect window. I had even contacted these companies and suggested that they had, perhaps unknowingly contracted with a website promotion entity that engaged in improper practices. Then i began to watch the URL line in the browser and saw the address momentarily change to Trusted-Offer.com and then to the web address of the advertised company. It is a rotating scheme, so it is a different ad. each time, but eventually they repeat. I navigated to the Trusted-Offer.com website to see if I could contact them for a solution , but I could not find any way to do so. I did find a search function that allowed me to verify that examples, Ilivid and Solar America were indeed listed on by Trusted-Offer. Then I tried to find out about Trusted-Offer.com. W3Snoop webpage IDed Trusted-Offer.com as a website hosted in the Virgin Islands. But Whois lists the domain administrator as contact@privacyprotect.org, a website hosted in Nobby Beach, Queensland, Australia. Privacyprotect.org offers a service where they are listed as domain admin to provide a protective screen to prevent web administrators receiving lots of spam emails. At first Privacyprotect emailed back that they had had other complaints about Trusted-Offer.com and were investigating. But later I received the following email: The domain name 'trusted-offer.com' is resolving to a parking page and we did not find any abusive activity on this domain through our investigation. However, you may report this issue to the Registrar of this domain. The details of the registrar can be found by doing a whois lookup at www.who.is.

My intention is to contact the registrar, the web host, as many as possible client companies as listed on Trusted-Offer.com's site, also contact online reporting/newsletter sites and forums, and shine as much light and noise as possible until Trusted-Offer.com comes clean and provides a solution. Any other suggestions???

Anyone want to team up to address this issue. Re trusted-offer.com I have been seriously pursuing this problem of trusted-offer.com redirected links seriously for the past week. I get it on Google Chrome browser. I ran a boot scan with AVAST and cleaned my computer, but the link redirects continued. On AVAST's recommendation I pursued it with Malwarebytes malware protection. I had previously had the free version, but I upgraded to the Pro and ran a full scan. It said my system was clean. I consulted Malwarebytes support team and they directed me through some additional tests with no success. The link redirects continue.. Reading your post alerted me to something... Until then I had focused on the products being advertised in the redirect window. I had even contacted these companies and suggested that they had, perhaps unknowingly contracted with a website promotion entity that engaged in improper practices. Then i began to watch the URL line in the browser and saw the address momentarily change to Trusted-Offer.com and then to the web address of the advertised company. It is a rotating scheme, so it is a different ad. each time, but eventually they repeat. I navigated to the Trusted-Offer.com website t'''o see if I could contact them for a solution , but I could not find any way to do so'''. I did find a search function that allowed me to verify that examples, Ilivid and Solar America were indeed listed on by Trusted-Offer. Then I tried to find out about Trusted-Offer.com. W3Snoop webpage IDed Trusted-Offer.com as a website hosted in the Virgin Islands. But Whois lists the domain administrator as contact@privacyprotect.org, a website hosted in Nobby Beach, Queensland, Australia. Privacyprotect.org offers a service where they are listed as domain admin to provide a protective screen to prevent web administrators receiving lots of spam emails. At first Privacyprotect emailed back that they had had other complaints about Trusted-Offer.com and were investigating. But later I received the following email: The domain name 'trusted-offer.com' is resolving to a parking page and we did not find any abusive activity on this domain through our investigation. However, you may report this issue to the Registrar of this domain. The details of the registrar can be found by doing a whois lookup at www.who.is. My intention is to contact the registrar, the web host, as many as possible client companies as listed on Trusted-Offer.com's site, also contact online reporting/newsletter sites and forums, and shine as much light and noise as possible until Trusted-Offer.com comes clean and provides a solution. Any other suggestions???
Liz_in_Hawaii 0 solutions 4 answers

Update.... Curious?? Now https://www.trusted-offer.com is not available. Is it possible that I drove them underground?

Update.... Curious?? Now https://www.trusted-offer.com is not available. Is it possible that I drove them underground?

Helpful Reply

Below is what I got from Mozilla support, and it worked. :)

I was testing various add-ons and might have eventually figured it out, but glad to be rid of it. __________________________________________________________________________________ philipp wrote: "hello, this seems to be caused by a rogue adware addon. please go to firefox > addons > extensions & remove the DownloadTerms 1.0 entry. in additionrun a full scan of your system with the security software that you have in place and different other tools like the free version of malwarebytes & adwcleaner.

Below is what I got from Mozilla support, and it worked. :) I was testing various add-ons and might have eventually figured it out, but glad to be rid of it. __________________________________________________________________________________ philipp wrote: "hello, this seems to be caused by a rogue adware addon. please go to firefox > addons > extensions & remove the ''DownloadTerms 1.0'' entry. in additionrun a full scan of your system with the security software that you have in place and different other tools like the [http://www.malwarebytes.org/products/malwarebytes_free free version of malwarebytes] & [http://www.bleepingcomputer.com/download/adwcleaner/ adwcleaner].
Liz_in_Hawaii 0 solutions 4 answers

Hey Higgihaven, Thanks a million. I am not using Firefox, but I found the DownloadTerms 1 extension in Google Chrome and disabled it and put it in the trash. I have been clicking links to see if the problem will reoccur, but so far, so good. Whew! I had already scanned with AVAST, and Malwarebytes Pro. Adwcleaner didn't find anything. Great!

Hey Higgihaven, Thanks a million. I am not using Firefox, but I found the DownloadTerms 1 extension in Google Chrome and disabled it and put it in the trash. I have been clicking links to see if the problem will reoccur, but so far, so good. Whew! I had already scanned with AVAST, and Malwarebytes Pro. Adwcleaner didn't find anything. Great!
Liz_in_Hawaii 0 solutions 4 answers

I guess I should say thanks to Phillipp also!

I guess I should say thanks to Phillipp also!

Question owner

LOL I just realized that Phillips response is up near the top of this page.  ;)

Glad you solved your problem too, Liz.

I've solved problems on my own before, but it pays to just ask often. Saves time and frustration. Certain problems don't arise often enough, thankfully, that I forget what was done to fix it. XD

LOL I just realized that Phillips response is up near the top of this page. ;) Glad you solved your problem too, Liz. I've solved problems on my own before, but it pays to just ask often. Saves time and frustration. Certain problems don't arise often enough, thankfully, that I forget what was done to fix it. XD
thekerstone 0 solutions 3 answers

Hope people are still reviewing this page...im going to start a new one too. So, i just encountered this Download terms shit. i dont know where it came from. All started with search here tab. removed that, then after restart this popped up. For me, there is no remove option in my extensions, and it is not in my add/remove. wtf. I want it off. numerous searches have revealed nothing. I have it disabled, but...norton and mbam show nothing.

Hope people are still reviewing this page...im going to start a new one too. So, i just encountered this Download terms shit. i dont know where it came from. All started with search here tab. removed that, then after restart this popped up. For me, there is no remove option in my extensions, and it is not in my add/remove. wtf. I want it off. numerous searches have revealed nothing. I have it disabled, but...norton and mbam show nothing.
cor-el
  • Top 10 Contributor
  • Moderator
17580 solutions 159053 answers

Extensions that do not have a "Remove" button are installed by other software and are not under control of the Firefox extension manager.

Such globally installed extensions are usually found via a registry scan or are installed in a location that Firefox scans for installed extensions.

Extensions that do not have a "Remove" button are installed by other software and are not under control of the Firefox extension manager. Such globally installed extensions are usually found via a registry scan or are installed in a location that Firefox scans for installed extensions. * https://developer.mozilla.org/en/Adding_Extensions_using_the_Windows_Registry