Hi Tai_Bui,

Let me see if I understand these correctly, the redirect happens without you clicking on the letters, you just hover over your cursor? I would try running some malware/virus scanners as this doesn't sound right.

The redirect happens when I click on the letters.

Hi Madasan, The redirect happens when I click on the letters. It just happen today.

HI Tai_Bui. If the redirect happens when you click on the letters then it seems the underline is a link. Similar to my username, for example. When you hover your mouse over my username it will become underlined and then you can click on it and the page will redirect to my profile. It might be the the website admin just wanted to put some links there to other website. So, nothing to worry about just don't click on the links ! :)

Hope that helps!

Do a malware check with some malware scanning programs on the Windows computer.
Please scan with all programs because each program detects different malware.

Make sure that you update each program to get the latest version of their databases before doing a scan.

• Malwarebytes' Anti-Malware:
  http://www.malwarebytes.org/mbam.php
• SuperAntispyware:
  http://www.superantispyware.com/
• Microsoft Safety Scanner:
  http://www.microsoft.com/security/scanner/en-us/default.aspx
• Windows Defender: Home Page:
  http://www.microsoft.com/windows/products/winfamily/defender/default.mspx
• Spybot Search & Destroy:
  http://www.safer-networking.org/en/index.html
• AdwCleaner:
  http://www.bleepingcomputer.com/download/adwcleaner/
  http://www.softpedia.com/get/Antivirus/Removal-Tools/AdwCleaner.shtml
• Kasperky Free Security Scan:
  http://www.kaspersky.com/security-scan

You can also do a check for a rootkit infection with TDSSKiller.

• Anti-rootkit utility TDSSKiller:
  http://support.kaspersky.com/5350?el=88446

See also:

• "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked

You can look at Adblock Plus to block such pop-ups.

• Adblock Plus: https://addons.mozilla.org/firefox/addon/adblock-plus/

You need to subscribe to a Filter list (e.g. the EasyList).

• http://adblockplus.org/en/subscriptions
• http://adblockplus.org/en/getting_started

I finally got tired of those really quick. I tried most of the suggestions with no luck. So I went to the Ad-on manager and disabled all of the ones that I didn't think were important. The double green underlines disappeared. So I went back and enabled them one at a time. The one that turned them back on was called LyricXeeker 1.128 I turned it off and on a few times to verify it. I don't know where that ad-on came from. I don't know if it is standard or something I added. But it killed the problem when I disabled it.

Firefox has a problem that makes it vulnerable to installed software that does not show up as an ADDON nor in the Window's PROCESS LIST as running. The cause of my double underline popup and random launch of AD webpages is a product called Linksicle by Linkside.

I had disable all EXTENSIONS and uninstalled the toolbar that came with this software -- but that did no stop it.

I had to got to CONTROL PANEL / PROGRAMS and sort in chronological order to see what I had installed ( along with what I thot was legitimate software) --- Uninstalling it fixed the problem. But Firefox needs to fix this vulnerability that shows no addon nor windows RUNNING PROCESS causing the problem.

You might find installed along with this: --- IB Updater Service http://botcrawl.com/how-to-remove-ib-updater/ --- Linksicle Linkside.com --- TidyNetwork.com --- RISE Editor RiseToBloom.com equally abhorent malware.

I have Norton running and it let me install these without the usual warning!

None of them show up as "running" on the windows process list.

I installed this malware -- a download from TUCOWS.com -- one of the oldest shareware software download sites. ( 20+ years old ) They used to be reliable and check everything they recommended for viruses -- but sadly that is no longer the case.

I went into the control panel, Programs and Features, and deleted Sendori and the double lines went away.