Typically, this is caused by advanced antivirus software that scans certain types of traffic, such as HTTP, POP3, SMTP, etc. The antivirus installs a driver that intercepts the traffic before it leaves or enters your computer and analyses it for suspicious content. As a result, the process identification functionality might be distorted; the process might not be identified, or, alternatively, all traffic might appear to be linked to the antivirus process rather than the real originator. Disabling the antivirus or disabling specific components responsible for traffic scanning will usually allow the process identification in CommView to work correctly.
