What is the address?

FredMcD said

What is the address?

Addresses: ngxtest@earthsciences.com noreply@earthsciences.com

Thank you for your interest and help.

Where is this taking place? Web site? Does that site use autofill? Do you have any autofill add-ons, or just the Firefox internal one?

Open you password manager. look carefully at all of the entries. Is the address listed in there?

Is earthsciences.com something you know or communicate with?

Never heard of earthsciences.com.

There are no saved passwords in password manager. It is empty.

Websites where it appeared in forms: https://pop-in-nordstrom.venturaassociates.net/ https://popeyes.promo.eprize.com/bahamasbowl2014/ http://www.esquire.com/sweepstakes/28852

Note that form data is not site specific like with the passwords. The name of the field is used, so if the name of the input field is a commonly used name then Firefox will show those suggestions on both multiple web pages.

Use these steps to remove saved (form) data from a drop-down list:

1. click the (empty) input field on the web page to open the drop-down list
2. highlight an entry in the drop-down list with the mouse or cursor Down key
   do not click the mouse or press the Enter key
3. press the Delete key (on Mac: Shift+Delete) to delete the highlighted entry

Try this out; The next time it shows up . . . . . STOP ! ! ! ! Click the input field. Now <Control> A to highlight the whole entry. Now press the n once. n as in noreply@earth Does a list show up? Is earthsciences anything on the list. Using your arrow key, highlight the entry and press Delete. Now repeat.

Thank you for your replies. I downloaded Malwarebites. Seven hits were quarantined & deleted. Hopefully the problem is resolved.