Repeated memory heap spray attacks, likely false positives
Posted: 15-Jul-2022 | 8:08AM · 1 Reply · Permalink
Currently with Norton 360 Deluxe and similar Norton products over the past several years, I have repeatedly experienced memory heap spray attacks blocked by Norton when loading winword.exe and a large file, the manuscript of a book initially 2000 pages long, now over 4100 (file size 70 MB).
I can sometimes go months without experiencing that alleged attack, but sometimes it occurs a few days in a row. If I immediately reload the file that triggered the alleged attack, it always goes smoothly — or at least as smoothly as clunky Microsoft Word ever does when opening large files that take a few minutes to load, even with a solid-state drive (no significant change in that over many years, even when opening from a mechanical hard drive).
This alleged attack has repeatedly occurred on my current computer and past ones, but countless scans of them have never detected the source of this alleged attack.
I strongly suspect this is a false positive or false alarm because if there were a virus, Norton would presumably remove it. The fact that I experience the same alleged attack again and again yet rarely (perhaps once every year or two, if that) encounter other viruses (assorted ones, never the same repeatedly) suggests that this isn’t a genuine attack.
In the past decade, five U.S. patents were issued for technology disclosing methods of memory heap spray detection. Perhaps these methods, or whatever Norton uses, are not 100% accurate.
I am hesitant to disable this protection because memory heap spray attacks sometimes occur. What is the best way to handle this problem? Disable protection? Put up with this chronic waste of time? Switch to a different anti-virus software?
OS: Windows 8 and 10 (initially), now Windows 11
This thread is closed from further comment. Please visit the forum to start a new thread.