Near_Far 4 Posted July 1, 2013 Share Posted July 1, 2013 I installed ESS 6.0.316 on June 14/13. There were entries in the HIPS log daily starting June 15 through to June 22, and then no entries thereafter. (The system was not powered up for one full day in that time frame, as we were away from home.) I haven't touched any settings related to HIPS (since I'm not even sure what that is). I'm running Windows 8 64 bit. I also have ESS 6.0.316 installed on a Windows XP SP3 system, and there were never any entries in the HIPS log. Is this behavior in my Windows 8 system normal? In the advanced settings, the checks are in the HIPS and the Self defense boxes. The setting is automatic mode with rules. Under advanced setup, checks are in the box to log all blocked operations and notify when changes occur in startup applications. We used to see popups in the bottom right corner of the screen with such notifications, which seemed to occur during print operations, for example. Now we are no longer seeing those. Link to comment Share on other sites More sharing options...
Near_Far 4 Posted July 3, 2013 Author Share Posted July 3, 2013 bump Was HIPS in some kind of learning mode? (I didn't set it that way. As I said, I didn't touch HIPS settings at all.) Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted July 3, 2013 Administrators Share Posted July 3, 2013 If you temporarily enable logging of blocked operations in the advanced HIPS setup, are certain block events logged? Link to comment Share on other sites More sharing options...
ESET Staff CB530 70 Posted July 3, 2013 ESET Staff Share Posted July 3, 2013 Hi Near_Far,For instructions to access the setting that Marcos mentions in his post, visit the following Knowledgebase article:HIPS - Advanced setup Note that the Advanced setup tree contains a "HIPS" branch that can be expanded. You're looking for the "Advanced setup" located within the HIPS branch of the Advanced setup tree. This is documented in the bottom half of the article linked to above. Link to comment Share on other sites More sharing options...
Near_Far 4 Posted July 5, 2013 Author Share Posted July 5, 2013 HIPS had been logging blocks and allowing and partial blocks, and then it stopped after about a week. The logging, that is, and since I hadn't disabled logging, I had wondered if HIPS wasn't working. On July 3, I installed Malwarebytes free version and updated some backup software. The HIPS logging started again. I don't know if those installations had anything to do with that, or if it was just a coincidence. Anyway, it is now logging what is allowed, what is blocked, and what is partially blocked. We are also seeing the popup windows again from HIPS. Link to comment Share on other sites More sharing options...
Bjourne 0 Posted July 13, 2013 Share Posted July 13, 2013 I have the same issue and have posted a topic also. Link to comment Share on other sites More sharing options...
Administrators Marcos 5,074 Posted July 15, 2013 Administrators Share Posted July 15, 2013 Couldn't it be that somebody logs to this computer remotely via RD and thus HIPS windows are shown in the account of another user? Link to comment Share on other sites More sharing options...
Recommended Posts