WinRing0: Fan and RGB control flagged as a threat

[Ice Tea]

https://www.theverge.com/report/629...er-fan-control-pc-monitoring-alert-quarantine

On Tuesday morning, some PC gamers woke up to discover their computers were seemingly under threat. A “HackTool” called WinRing0 had suddenly started triggering a Windows Defender alert, as if their PCs were under attack. Some of those computers even began behaving oddly — like blasting their fans at high speed — once the HackTool had been quarantined.

 

[Mcnumpty2323]

Yeah that explains some of
The pop up warnings have been getting
With things like signal rgb
Various monitoring software and fan software lately

 

[yashiro]

It's not a hack tool. It's a very old driver that allows low level access to hardware. This driver is mostly why fan/rgb/temp monitoring software needs admin permissions.

Fans going 'crazy' is not the result of any type of hack; It's because the fan control has been disabled and fans have defaulted back to 100%.

Software relying on this old driver should be re-written.

 

[Mcnumpty2323]

Yeah they know it's not a hack tool
That's why it's in " "
Hack tool is what windows defender has been
Labelling it
Which is what they meant with " "

Problem is it has such access to the kernel
And that so many companies have been using it
Rather than develop their own driver
And get it certified

It's not a hack tool
But it's a major vulnerability that can be exploited
By hack tools,viruses etc
If Microsoft clamped down on it immediately
A lot of softwares are going to stop working
Including some pretty large companies software
Who really shouldn't have been using this

Windows defender still allows adding it
To exclusions
Though Microsoft could change that if they want to

 

[tamzzy]

this is why i hate the myriad of rgb "programs"
should all be in the bios settings imo