|
There are isolated problems with current patches, but they are well-known and documented on this site. |
This appears to be a helper device driver. I did not see a reference to it in my registry. Apparently, the driver was loaded when running Process Explorer in administrative mode.
Some software flags the driver as a vulnerability:
https://learn.microsoft.com/en-us/answers/questions/989267/process-explorer-procexp152-sys-driver-flagged-as
On the other hand, my AV gives the driver a trusted rating, saying thousands run it, and it was released over 3 years ago.
In your case, I would make sure your system is backed up, then remove it from your system, then reboot. In theory, you should be fine without it.
Windows 10 22H2 desktops & laptops on Dell, HP, ASUS; No servers, no domain.
I deleted the old PROCEXP152.SYS driver and rebooted, no problem.
I ran the latest version of ProcessExplorer v17.02 in admin mode, and an updated PROCEXP152.SYS driver was placed in the C:\Windows\System32\drivers directory.
This time AV said the new driver was trusted and only 4 months old.
Not clear if only old versions of PROCEXP152.SYS are marked vulnerable by XDR (extended detection and response) security software.
Windows 10 22H2 desktops & laptops on Dell, HP, ASUS; No servers, no domain.
Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.
AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments.
