HI please run https://www.adlice.com/download/roguekiller/ If you need help :

• https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/

Please let us know if this solved your issue or if need further assistance.

Hi rebeldawg365, ocsp.starfieldtech.com sounds like part of a URL for checking whether a certificate has been revoked, using the OCSP protocol.

You're saying on your system this string is present in the firefox.exe file on disk (which seems strange), or Firefox sends a request to that address while it is running?

Which software is detecting it?

Malwarebytes...got it fixed !