Text on a web page is highlighted with a link to another web page, is this an add-on or some other Firefox issue?
Today certain words on a web page are being highlighted in yellow with a double underscore and hovering over them causes a link to an external site to appear. I haven't knowingly installed any add-ons so is this being caused by something within Firefox or is it external?
Thanks for your help
Tim
All Replies (9)
It would help to know the website, the words underlined and details of the link. It sounds like a spell or grammar check or a translation facility.
It could be add-ware, but it may be the way the web page is set up. We need the web address to look for ourselves.
Hi,
After posting the question I uploaded a screen grab which shows that the site I was on is that of the UK Information Commissioner. I guess it must be adware?
I did reproduce your highlighted page once and the yellow underlines did lead to adware/malware via a pop-up. The pop-up had an inappropriate
subject and lack of a close/cancel button - a sure sign.
Later I wasn't able to reproduce the problem - I guess the site has been repaired. It look's fine now.
For the record the site is http://ico.org.uk/. The correct name is Information Commissioner's Office. Note the "'s".
Thanks Alan
It wasn't just on this site, I put that screen grab as an example. So I don't believe that the ico site had been compromised or spoofed. Looks like I need to do a malware scan.
Usually this problem is caused by an unwanted extension, but your enabled extensions look okay. This could mean that a self-hiding extension is the problem. Those become visible in Firefox's Safe Mode.
Firefox's Safe Mode is a standard diagnostic tool to deactivate extensions and some advanced features of Firefox. More info: Diagnose Firefox issues using Troubleshoot Mode.
You can restart Firefox in Safe Mode using either:
- "3-bar" menu button > "?" button > Restart with Add-ons Disabled
- Help menu > Restart with Add-ons Disabled
Not all add-ons are disabled: Flash and other plugins still run
After Firefox shuts down, a small dialog should appear. Click "Start in Safe Mode" (not Reset).
Any difference?
You can check for any additional extensions on the Add-ons page. Either:
- Ctrl+Shift+a
- "3-bar" menu button (or Tools menu) > Add-ons
In the left column, click Extensions. Anything unrecognized or suspicious?
You also could check whether your connection is being proxied. To view and change Firefox's connection setting, open:
"3-bar" menu button (or Tools menu) > Options > Advanced > Network mini-tab > "Settings" button
The default setting is "Use system proxy settings" but you can try "No Proxy" to see whether that helps.
Hi jscher
Thanks for your suggestions.
After my posting of Saturday 7th June I ran a Malwarebytes (free) scan and then didn't use the PC for the rest of the weekend, its a work PC. That scan revealed unwanted programs so I used Malwarebytes to remove them and rebooted the PC in accordance with the Malwarebytes instructions. I know that the internet connection was working at that time because I ran the scan and did the reboot remotely using Logmein.
However on Monday morning I had no internet connection and I ended up using System Restore to reset my PC back to how it was on Friday evening, which is before I ran the Malwarebytes scan. I was fully expecting to have the same problems happen again but they have not yet reappeared.
The disappearing internet connection was not a hardware issue so my suspicion is that running the Malwarebytes scan got rid of some software which caused the internet connection to disappear. The big question is - did Malwarebytes remove a legitimate program which controlled the internet connection (I hope this would not happen) or did it remove an illegitimate program which disrupted the internet connection? That is a question which will remain unanswered...
So for now I am working fine, but if I get any issues like this in future I will follow your suggestions and start a new thread if they don't work.
Thanks all
Tim
Run the program again. But set it up so that YOU can select what is removed.