Process Hacker Forums

I added Process Hacker to the anti-virus exclusion list and the CPU usage remained 1% every refresh. It goes back to 0 when I close Process Hacker, so it doesn't seem that another program is accessing services.exe. But any way, I'm fine with 1-2% considering all the cool features that Process Hacker offers

Why do you recommend not to use an anti-virus (in my case I have to use it because of a company policy)? Why especially on x64?

Anti-viruses in general are just worthless piece of crap. New malware can slip through it so there's no point in using them considering that they use more resources than operating system itself. Also, it is worth mentioning that Anti-viruses can contain numerous bugs and exploits (and when you can exploit Windows driver, you're basically toasted), which was proved in the past.

There are other better alternatives & solutions.

Like Using:-

Deep Freeze.


Deep Freeze is a permanent solution for software related things/exploits.


I don't know any solution for hardware exploits which have been widely used by everyone to omit/skip marketing gimmicks done by......... ( you know who i am talking about ).

Hardware exploits are & have been intentionally placed in almost all (you can say all, i won't argue) processors to make the task of exploitation very easy for everyone.

dmex, there's still an issue with the visible count. Sometimes the visible count is one more than the actual count.
In the attached screenshot you can see that I have 179 processes running but visible is set to 180 (I wasn't using any filter). The issues is not with the process count because the task manger shows exactly the same number.

Any thoughts?

Eran wrote:

I have 179 processes running but visible is set to 180

What makes you think it's incorrect?

Eran wrote:

dmex, there's still an issue with the visible count. Sometimes the visible count is one more than the actual count.
In the attached screenshot you can see that I have 179 processes running but visible is set to 180 (I wasn't using any filter).
The issues is not with the process count because the task manger shows exactly the same number.

Any thoughts?

179 processes + Interrupts = 180 visible items...

CheckEd wrote:

179 processes + Interrupts = 180 visible items...

So if you have 1 process you want a visible count of 0?

Process 1: 0
Process 2: 1
Process 3: 2
Process 4: 3

How is that the correct number of visible items?

dmex wrote:

So if you have 1 process you want a visible count of 0?

Process 1: 0
Process 2: 1
Process 3: 2
Process 4: 3

How is that the correct number of visible items?

No, that's right!
My reply was for Eran

Interrupts isn't a process, but it's visible in the list

I didn't know that interrupts are listed as an item in the process tab so I assumed the number of items is equal to the number of processes.
Thanks for the clarifications.

Why are interrupts displayed in the process list?
It seems that the only attribute we display for interrupts is the CPU usage, so why not just add it to the status bar (e.g. "Interrupts CPU: 0.89%")?

Mainly because Process Explorer does it

applejack wrote:

looking forward to the "Visible" field.
a "Selected" field would be nice as well (list number of selected items, e.g. if pressed CTRL+A, Selected value equals visible value).

also, it would be helpful if you listed relevant tab's items count instead of just processes count, or otherwise list all 4 (processes/services/network/disk).

keep up the great work, thanks!

The Selected field sounds like a good suggestion, what do you think?

Eran wrote:

The Selected field sounds like a good suggestion, what do you think?

Added in r6134:

Awesome! Thanks dmex

Do you have some ETA for an official release that includes both Visible and Selected?

simply install the Visual Studio 2013 Community Edition which is completely free, checkout the PH code with TortoiseSVN and compile the code with the VS

Try this version (Note: You will need to install the Process Hacker Development Version)


EDIT: Removed old version.

Thanks dmex, it works fine for me.

I did notice that "Visible" and "Selected" always remain "N/A" on the Disk tab. It doesn't really bother me, since I rarely use the Disk tab, but I was wondering is there something special about that tab that makes it behave differently?

@dmex: To fix this you can add a callback to TOOLSTATUS_TAB_INFO in plugins/include/toolstatusintf.h called GetTreeNewHandle, and then get ExtendedTools to return the handle to the disk list (and get the statusbar to request the handle).

Can anyone confirm if the latest release (2.36 r6153) contains "Visible" and "Selected" (it wasn't mentioned in the change log)?