PPQ 1 Posted February 14, 2017 Share Posted February 14, 2017 When I open Waterfox and Synchredible (a file sync program I use) a HIPS warning screen pops up asking what to do. The pop up says "An application (Waterfox) or (Synchredible) is trying to access the registry (AutoConfigURL) It asks to click on Allow or Deny with the following options: Ask every time Remember until application quits Create rule and remember permanently Why is this showing and what option should I choose? Link to comment Share on other sites More sharing options...
ESET Insiders stackz 102 Posted February 14, 2017 ESET Insiders Share Posted February 14, 2017 The reason you get the HIPS alert must be that neither Waterfox or Synchredible are digitally signed and are making a call to delete the AutoConfigURL entry. The only thing you can do if you don't want the alert is to make a specific rule to allow 'Delete from registry' for AutoConfigURL. Link to comment Share on other sites More sharing options...
Administrators Marcos 4,841 Posted February 14, 2017 Administrators Share Posted February 14, 2017 Most likely you are using Smart HIPS mode. This particular behavior will be changed soon in a HIPS module update so you should not be prompted for an action any more then unless the modification is suspicious enough. Link to comment Share on other sites More sharing options...
Recommended Posts