Jump to content

windows start ESS HIPS Block some access


Recommended Posts

Hi, guys, I got some notices on HIPS when my windows 7 ultimate startup. It looks like ESS HIPS block some processes, the HIPS is set as smart mode.

logs:

2015/2/26 21:44:08    C:\Windows\System32\svchost.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application,Modify state of another application
2015/2/26 21:44:06    C:\Windows\System32\svchost.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application,Modify state of another application
2015/2/26 21:42:41    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:41    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:40    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:40    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:40    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:40    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:40    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:40    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:40    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:39    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:39    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:39    C:\Windows\System32\svchost.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Modify state of another application
2015/2/26 21:42:38    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\egui.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:36    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:35    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:35    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:35    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:35    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:34    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:32    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:31    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:31    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:31    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:30    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:30    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:30    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:30    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:30    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:30    C:\Windows\System32\csrss.exe    Get access to another application    D:\Program Files\ESET\ESET Smart Security\ekrn.exe    some access blocked    Self-Defense: Protect ekrn and egui processes    Terminate/suspend another application
2015/2/26 21:42:30    C:\Windows\System32\svchost.exe    Get access to another application    C:\Windows\System32\winlogon.exe    some access blocked    Self-Defense: Do not allow modification of system processes    Modify state of another application
2015/2/26 21:42:30    C:\Windows\System32\svchost.exe    Get access to another application    C:\Windows\System32\winlogon.exe    some access blocked    Self-Defense: Do not allow modification of system processes    Modify state of another application
2015/2/26 21:42:30    C:\Windows\System32\svchost.exe    Get access to another application    C:\Windows\System32\winlogon.exe    some access blocked    Self-Defense: Do not allow modification of system processes    Modify state of another application

so I scan the windows, it is clean. I switch HIPS to learning mode and restart computer , problem still here .

what I should do ? can any one help me ?

Link to comment
Share on other sites

  • Administrators

Hello,

what issue are you having with your operating system or applications as a result of HIPS blocking certain attempts to access protected objects? Also note that logging of blocked operations should only be enabled for troubleshooting purposes. As long as everything works alright, it should stay disabled.

Link to comment
Share on other sites

If your system is working like normal/properly those blocks are nothing to worry about, it's normal to see some blocks, and you should not enable logging unless you actually experience problems then you can find the cause by enabling logging like you have. 

 

So, unless you experience issues due to the blocks seen in your log, disable logging and use your computer as normal.

(FYI, everyone will see some blocks if one enable logging, and it's nothing to worry about unless one experience a problem due to the blocks, logging is for troubleshooting purposes only.)

Edited by SweX
Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...