PPQ 1 Posted February 14, 2017 Posted February 14, 2017 When I open Waterfox and Synchredible (a file sync program I use) a HIPS warning screen pops up asking what to do. The pop up says "An application (Waterfox) or (Synchredible) is trying to access the registry (AutoConfigURL) It asks to click on Allow or Deny with the following options: Ask every time Remember until application quits Create rule and remember permanently Why is this showing and what option should I choose?
ESET Insiders stackz 115 Posted February 14, 2017 ESET Insiders Posted February 14, 2017 The reason you get the HIPS alert must be that neither Waterfox or Synchredible are digitally signed and are making a call to delete the AutoConfigURL entry. The only thing you can do if you don't want the alert is to make a specific rule to allow 'Delete from registry' for AutoConfigURL.
Administrators Marcos 5,468 Posted February 14, 2017 Administrators Posted February 14, 2017 Most likely you are using Smart HIPS mode. This particular behavior will be changed soon in a HIPS module update so you should not be prompted for an action any more then unless the modification is suspicious enough.
Recommended Posts