This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Many ROP errors in Firefox

Hi there.

 

Our company starts to use Sophos Central this year. We get many ROP errors with Firefox. Sometimes a site will load normaly, sometimes Sophos shows an ROP error and a Sophos services will push the systemload to nearly 100%.

Best example is the login page from Sophos Central. At the same time in works on Chrome.

 

It seams like a lot of false positives. What can we do to stop this.

 

(OS is always Win 10 and i dont realy understand what a ROP error is)



This thread was automatically locked due to age.
Parents Reply Children
  • Sadly not, as the plugins are running inside the browser process(es). No way to distinguish for the AV to create a specific exception. I take those ROP's in browsers personally as informational only, at least if they occur only intermittently. As they got blocked, nothing bad happened, and a ROP event also doesn't lead to a termination of the browser process, it usually - besides of the ROP notification popup - doesn't interfere with your workflow as websurfing continues to work normally.

    You can expect that detected  ROP  events are a legit detection, but in browsers often gets triggered by non conform or strange coded plugins and not necessarily due a real attack.

    ROP is a finally Method, not a Malware. It's only a potential threat/malicious behaviour depending on the according context why a ROP event occurs.