Adam Kadmon 0 Report post Posted August 15, 2012 When launching Sysinternals Process Explorer on Windows 7 64 Bit, Mamutu will alert the behaviour of procexp64.exe. The file procexp64.exe only exists during Process Explorer runtime. Mamutu automatically deletes rules for nonexistent files. It's not possible to use Process Explorer without Mamutu alert on every program start. (Same goes for Process Monitor) Quote Share this post Link to post Share on other sites
GT500 823 Report post Posted August 16, 2012 Have you enabled "Paranoid Mode" in Mamutu? It shouldn't be prompting on a file that is digitally signed by Microsoft. Quote Share this post Link to post Share on other sites
Adam Kadmon 0 Report post Posted August 18, 2012 Yes, indeed I have paranoid mode enabled. It usually works fine for me. Only ProcessExplorer is a puzzler. I tried to exclude procexp64. Sometimes the rule sticks until reboot, but sooner or later it vanishes. Quote Share this post Link to post Share on other sites
GT500 823 Report post Posted August 20, 2012 Paranoid Mode causes Mamutu to ignore the digital signature from Microsoft, and report all behavior regardless of whether or not the file is known to be safe. In this case, since Process Explorer deleted the 64-bit executable while it is closing, you could try copying it to another folder, and then you would have a backup of the file that doesn't need to be extracted from the 32-bit EXE every time you run it. Quote Share this post Link to post Share on other sites
Adam Kadmon 0 Report post Posted September 19, 2012 Sorry it took a while... yes, that works. The 64 executable extracted at runtime can actually be run by itself when copied to another place. Thanks for that... Quote Share this post Link to post Share on other sites
GT500 823 Report post Posted September 20, 2012 You're quite welcome. Quote Share this post Link to post Share on other sites
