[TippeX]

yup, they seemed responsive to my email, its just unfortunate they used a crappy 'signature'.. put simply my code does a GetProcAddress sort of loop to find x64 specific api addresses relative to file shadowing and registry reflection (which is only on x64).. and this i think is perfectly normal, however they flag it as virus like.. they'll get the files from me friday or so, with a full breakdown then hopefully they'll fix it before pid gets release, because (for me) any virus warning, even a false positive isn't really good for release as it can cause a lot of panic