stackz

Does anyone have any ideas? I submitted a support request to ESET customer service but so far this has been met with deafening silence.

I have no rule for the hosts file, furthermore I've just tested with a complete fresh uninstall/reinstall of EIS and Smart mode still doesn't trigger for writes to the hosts file. If I create a rule for write access to the hosts file then this is being successfully triggered. How can I troubleshoot the issues I'm having with HIPS? Win 7x64, EIS 11.0.159.0

HDHacker Marcos, what product and HIPS module were you using when you tested writing to the hosts file?

HIPS support module: 1309 Smart mode Direct access to disk rules are not triggered. All access attempts are allowed.

Win 7x64 HIPS support module: 1309 (20171229) Smart mode isn't triggering any alert for hosts file tampering. I made a temporary rule for the hosts file and this was successfully triggered. How can I go about troubleshooting why smart mode isn't triggering any alert?

Modifying the hosts file used to trigger an alert, but I just tested this again and the HIPS didn't alert.

I am able to reproduce this behaviour in interactive mode. Win7x64 EIS 11.0.159.0 Firewall module 1372 (20171027)

Having read restriction capability in the files section is a feature I suggested long ago. Hopefully ESET will finally see the merits of this.

Go into Advanced setup -> Update -> Profiles -> Update Mode. See if you have "Ask before downloading update" enabled. Set to disable if you don't want prompts.

The live grid outages are just a ploy to get more traffic at this forum.

No you won't be charged. As long as your license is current you can upgrade to a newer release.

Win7x64 v10.1.219 : no reg run key v10.1.230, v11 : reg run key, HKLM - C:\Program Files\ESET\ESET Security\ecmd.exe /launch /hide

Marcos, refer to your reply regarding version 10.1.230.0 and egui starting via ecmd:

No, keep using ESET BPP. There's no problem running Malwarebytes free version and ESET.

Win7x64 using v 10.1.230.0 When I boot the computer and log into my account, a command window flashes on the monitor seemingly as EGUI loads. Rolled back to 10.1.219.0 and no more cmd window at logon.

What's with the command window that flashes on the screen when logging on?

See if this is just a cosmetic bug. Next time it happens, hold down the Shift key and then click on the 'x' in the GUI upper right hand corner. Close down Egui and then relaunch it. If the issue is cosmetic then you should no longer see any activity in the update pane.

AFAIK it is fixed in the internal build 10.2.xxx

The reason you get the HIPS alert must be that neither Waterfox or Synchredible are digitally signed and are making a call to delete the AutoConfigURL entry. The only thing you can do if you don't want the alert is to make a specific rule to allow 'Delete from registry' for AutoConfigURL.

Changelog 10.0.390.0 Fixes internal bugs Most informative

I did it via private message as I thought this to be the most ethical way.

Just go to Setup - Import/Export settings.

Did you try running the command: ecmd /registeravsoft and then rebooting?

I'm sorry, can you give me more details on how to do that, please? Right click Command Prompt and Run as administrator. At the prompt enter: cd "%ProgramFiles%\ESET\ESET Internet Security" Adjust the above command if EIS is installed to a different directory. Once the prompt is at the installation directory, enter the commands given: "ecmd /registerav" or "ecmd /registeravsoft"

Have you tried following the instructions here?