Sign in to follow this  
Adam Kadmon

Mamutu and Process Explorer

Recommended Posts

When launching Sysinternals Process Explorer on Windows 7 64 Bit, Mamutu will alert the behaviour of procexp64.exe.

The file procexp64.exe only exists during Process Explorer runtime.

Mamutu automatically deletes rules for nonexistent files.

It's not possible to use Process Explorer without Mamutu alert on every program start. (Same goes for Process Monitor)

Share this post


Link to post
Share on other sites

Have you enabled "Paranoid Mode" in Mamutu? It shouldn't be prompting on a file that is digitally signed by Microsoft.

Share this post


Link to post
Share on other sites

Yes, indeed I have paranoid mode enabled.

It usually works fine for me. Only ProcessExplorer is a puzzler.

I tried to exclude procexp64. Sometimes the rule sticks until reboot, but sooner or later it vanishes.

Share this post


Link to post
Share on other sites

Paranoid Mode causes Mamutu to ignore the digital signature from Microsoft, and report all behavior regardless of whether or not the file is known to be safe.

In this case, since Process Explorer deleted the 64-bit executable while it is closing, you could try copying it to another folder, and then you would have a backup of the file that doesn't need to be extracted from the 32-bit EXE every time you run it.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.