Question about HIPS Advanced setup

Discussion in 'ESET Smart Security' started by XenonS, Jul 15, 2012.

Thread Status:
Not open for further replies.
  1. XenonS

    XenonS Registered Member

    Joined:
    Jul 15, 2012
    Posts:
    14
    Hello,

    I'm using ESS 5.2.9.1
    I would like your opinions on modifying the setup with the following:

    I chose "Interactive mode" in the Personal Firewall;

    I wonder if it's better to deactivate some options in the HIPS > Advanced setup, in order to have more control over computer activity:

    Unticking "Allow changes to the application part of the registry...";
    Unticking "Allow changes to datafiles...";

    this should give me total control over registry changes and program file changes. Is it right that ESS will then pop-up a window where I have to accept/deny such changes?

    Currently I have the 1st and the 4th box ticked, but what's strange: still some startup changes in the registry are done automatically, e.g. a blue window is displayed telling me "services.exe has changed the startup registry entry...(not exact text)". In this case, services.exe is not a malware but a system program, however: no accept/deny dialog. Why?

    Thanks for your feedbacks,
    XenonS
     
  2. XenonS

    XenonS Registered Member

    Joined:
    Jul 15, 2012
    Posts:
    14
    The menu is WRONG

    Ohla, now I get it right: The localization is totally wrong here:

    In the menu of ESET it should read:

    "DENY changes to the application part..."
    "DENY changes to datafiles"

    I found the description in the ESET KB, but it's also wrong there...
    I hope this will be fixed with the next release, as many users may take security risks.

    XenonS
     
Thread Status:
Not open for further replies.