Hello, current MBAM version (Application Version 3.8.3.2965, Component Package 1.0.613, Detection Package 1.0.11680) is going to detect legitimate Sysinternals "ProcessExplorer" as RiskWare.IFEOHijack if ProcessExplorer is registered as replacement for standard Windows Task Manager. Actually ProcessExplorer Version 16.21 is not yet whitelisted.