Process Hacker Forums

[1] What functionality does the blocked driver provide? Read README.txt [2] I'm sorry to hear that you don't like Avast. I've been using it for a while now and like it a lot. When you say you don't care, it sounds like you're saying that you don't care about Process Hacker users who also use Avast....

I think it's probably more of a PR thing - they can claim that they're not susceptible to termination via xyz tool, etc. I would never recommend Avast to anyone anyway, so I don't really care.

We use the metric system in Australia.

I don't care who wrote the "standard" you're referring to. The fact is that barely anyone uses it.

If you find the notation used by PH to be confusing, feel free to change it yourself in the source code. As you indicated, it's not "that hard".

With the exception of the storage industry, I have never seen anyone in this field refer to 1000 bytes as 1KB. Especially anyone who has written more than a few lines of code.

Your example image isn't very convincing because it only has one user...

Because it's bad UI design and outside the scope of PH.

Are you using the latest version of PH?

PIDs are assigned in the almost same way that handle values are assigned. The only difference is that the handle table free list uses FIFO ordering, so it may take a long time for a particular PID to be recycled. If you're getting high PIDs, it means that at one point in time you had a lot of proces...

Use the Commit Charge icon instead of Physical Memory if you want private bytes.

Why are you comparing elevation and integrity? They're different things.

Fixed in 3b4d254.

How did you open process properties if it "fails silently to start"?

The newer KPH only allows PH itself to access any substantial functionality. If you've allowed unrestricted access, only PH is allowed to connect (or rather, a handle can be opened but no functionality is enabled). This is enforced via signature checking.

The new driver checks that PH is performing requests and prevents other programs from using the more advanced functionality. This requires the bcrypt library, which is only available from Vista onwards.

Terminator is useless not because it doesn't work, but because it isn't any more effective than the normal terminate functionality.

Downloads: Process Hacker 2.39 Setup Process Hacker 2.39 Portable Process Hacker 2.39 Source Process Hacker 2.39 SDK Highlights: * Improved compatibility with security and anti-cheat software * Added ability to edit process environment variables * Fixed .NET process detection Other changes: * Impro...

If you haven't used Process Hacker, then it's probably malware that's using the driver.

The next version of KPH will implement image verification, and will not be blocked by Avast.

This is expected. Why are you using verifier on KPH?