Questions:wj32 wrote:I think it's probably more of a PR thing - they can claim that they're not susceptible to termination via xyz tool, etc. I would never recommend Avast to anyone anyway, so I don't really care.
2) You did not put the question - the answer on the applicability of antivirus which 93-year gave Evgeny Kaspersky:KProcessHacker
Process Hacker uses a kernel-mode driver, KProcessHacker, to
assist with certain functionality. This includes:
* Capturing kernel-mode stack traces
* More efficiently enumerating process handles
* Retrieving names for file handles
* Retrieving names for EtwRegistration objects
* Setting handle attributes
.Any anti-virus is based on the statistics of the spread of viruses in different regions, and generally more effective where work its developers. There- uniquely versatile antivirus called I do not presume, I can only recommend to see the statistics of detecting the most frequently encountered viruses have different packages
Read README.txtjrivett wrote: What functionality does the blocked driver provide?
I'm a busy person and I don't have time to argue with whoever is in charge of such things at Avast. Whether I care about someone's program blocking KPH is beside the point, because there's nothing I can do about it. If the blocking is a problem for you, send a complaint to Avast. I'm sorry to hear that you don't like Avast. I've been using it for a while now and like it a lot. When you say you don't care, it sounds like you're saying that you don't care about Process Hacker users who also use Avast. I'm sure that's not what you really meant, is it?
I recommend using no anti-virus program. If you like the (false) sense of security that it gives you, try a lightweight program like Webroot. Since you aren't a fan of Avast, what anti-virus software do you in fact recommend?
You can turn off avast from the avast GUI too, why doesn't avast block it self then? You can hack your PC (literally, with axe), then avast surely won't run, why they haven't blocked from using axes yet?vidux wrote:guys? i know why kprocesshacker.sys get blocked. after kprocesshacker loaded process hacker is become super power tool. that means it can terminate avast too. if some bad program using with command line avast can be useless. without kprocesshacker process hacker unable to stop any process of avast. thats why self-defense(self defense from being terminated) system block kprocesshacker.sys..( i think it s the main reason.)
Thanks to Ghostwalker for the tip ! It realy works !Ghostwalker wrote:Could not agree more with wj32 yet some of my clients insist upon avast. If the KProcessHacker driver is needed then go into avast 'Troubleshooting' and uncheck 'Enable Avast self-defense module' and it will work. Re-enable when done, rinse and repeat when necessary. You can beef up avast to the max of course without the 'self-defense module' and enable 'CyberCapture' and 'Hardened mode' and always scan for PUPS yet without the 'self-defense module' "something" of course might get through (maybe you). Hope this helps.