I asked this question over on the ESET Forum and I'd thought I'd ask it here as well:
I went to install the latest version of CCleaner Slim 5.26 (from the CCleaner builds page) and got his HIPS notification. First time I ever got it (I do the same routine every time for CCleaner version updates). I am using Win 7, ESS (ESET Smart Security) 10.0.386.0 HIPS is in Smart mode. All other HIPS settings are in default. Should I be seeing this?
since you're using the Slim, we can rule out the embedded Chrome offerings plus you are using a legit download source and this has only happened using v5.26
so on those assumptions, unless ESET has changed its 'goodies and badies' list, you can put it down as a false positive.
ESET should confirm that eventually and flag it as such on their end.
but it would be good to know from the Dev Team, what CC is trying to do in that hive key. I will forward this onto the Admins and see if any further info can be gleamed.
I have CC Pro and just checked my HKEY_USERS entries and I don't have an AutoConfigURL entry.