Process Hacker: malicious or false positive?

Comodo Internet Security - CIS Defense+ / Sandbox Help - CIS
#1

Why is Process Hacker 2.12

“reported to be a known malicious file” while it is only a useful application developed by a guy that posts also at Sysinternals (a Microsoft Forum)?

Off topic splits from COMODO Internet Security 5.8.202801.2064 BETA Bug Report
Question about League of Legends and Comodo
#2

Well it obviously isn’t malicious since Comodo’s KillSwitch is a slightly modified and rebranded version of it. :wink:

#3

Thanks for this application wj :wink: :-TU

#4
The downside (for me) is that you can't take advantage of the plug-ins (e.g. View Hidden Proc's) while using the portable version. You must install the driver.
http://www.wilderssecurity.com/showpost.php?p=1834533&postcount=3

Is it true what this guy tells at wilderssecurity? ???

#5

No, plugins don’t have anything to do with the driver.

#6

I have submitted PH 2.12 for white-listing. That should fix the false detection (heur.suspicious). :slight_smile:

#7

Seems that the triggering is now gone :slight_smile:

A small question to wj32:
I have had major problems with Process Explorer and CIS. CiIS is obviously not aware of the natural behavour of Process Explorer and other common programs.
You made the Process Hacker which until now haven’t been at war with my CIS.
Did you avoid accessing the CIS memory, or have you had the Hacker whitelisted somehow?
Best regards. Nuser

#8

The reason PE keeps reading memory is that it’s badly written.