Reply to thread

Message

<blockquote data-quote="simmerskool" data-source="post: 1075931" data-attributes="member: 61091">This morning, I see a new block by DeepInstinct in reference to Firefox.exe&quot;...was identified as a remote code injection and is now blockedSecurity Engine= Behavioral analysisSecurity Module Remote code injection&quot;probably safe to assume this is a false positive, only my 2d in about 9 months, &amp; IIRC I think the first one was also remote code injection(??). So think this is NOT exactly a false+ as I think the detection is real, but it&#039;s &quot;false&quot; in that I need to create an exception for firefox. But also wondering if something changed in how firefox goes online &amp; interacts with the system. I was not running firefox when this popup block appeared, so I assume it was firefox checking for updates...? <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" /> Any other Di users see this...<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" /><img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />PS sorry no screen shot snip it as popup was on my hardware win10, and I&#039;m online in VM.Edit: perhaps of interest, Firefox 122.0.1 and as I said above it was not running, so I clicked its icon to open it, and it open normally and I checked &quot;About&quot; and it opened normally too... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />So that raises some questions in my mind about the Di &quot;detection&quot; / block... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" /></blockquote>

[QUOTE="simmerskool, post: 1075931, member: 61091"] This morning, I see a new block by DeepInstinct in reference to Firefox.exe "...was identified as a remote code injection and is now blocked Security Engine= Behavioral analysis Security Module Remote code injection" probably safe to assume this is a false positive, only my 2d in about 9 months, & IIRC I think the first one was also remote code injection(??). So think this is NOT exactly a false+ as I think the detection is real, but it's "false" in that I need to create an exception for firefox. But also wondering if something changed in how firefox goes online & interacts with the system. I was not running firefox when this popup block appeared, so I assume it was firefox checking for updates...? :unsure: Any other Di users see this...:unsure::unsure: PS sorry no screen shot snip it as popup was on my hardware win10, and I'm online in VM. Edit: perhaps of interest, Firefox 122.0.1 and as I said above it was not running, so I clicked its icon to open it, and it open normally and I checked "About" and it opened normally too... :unsure:So that raises some questions in my mind about the Di "detection" / block... :unsure: [/QUOTE]

Verification