Question about HIPS Advanced setup

Hello,

I'm using ESS 5.2.9.1
I would like your opinions on modifying the setup with the following:

I chose "Interactive mode" in the Personal Firewall;

I wonder if it's better to deactivate some options in the HIPS > Advanced setup, in order to have more control over computer activity:

Unticking "Allow changes to the application part of the registry...";
Unticking "Allow changes to datafiles...";

this should give me total control over registry changes and program file changes. Is it right that ESS will then pop-up a window where I have to accept/deny such changes?

Currently I have the 1st and the 4th box ticked, but what's strange: still some startup changes in the registry are done automatically, e.g. a blue window is displayed telling me "services.exe has changed the startup registry entry...(not exact text)". In this case, services.exe is not a malware but a system program, however: no accept/deny dialog. Why?

Thanks for your feedbacks,
XenonS

 

The menu is WRONG

Ohla, now I get it right: The localization is totally wrong here:

In the menu of ESET it should read:

"DENY changes to the application part..."
"DENY changes to datafiles"

I found the description in the ESET KB, but it's also wrong there...
I hope this will be fixed with the next release, as many users may take security risks.

XenonS