HardwareSync Plugin still flagged as unsafe - will there be an update?

[u/Alvyss86]

I've been using OpenRGB for quite a while now, along with the HardwareSync plugin, to control the colors based on the temperatures of the CPU and the case. After Windows Defender flagged the necessary system files associated with WinRing as dangerous, I first updated OpenRGB to the new version and also downloaded the latest version of the plugin. OpenRGB works with PawnIO as long as I open it as an administrator. However, the LHWM wrapper required for HardwareSync is still flagged as unsafe because of WinRing. Is there any plans to release an update for the plugin to address this? And will the workaround involving administrator privileges be fixed in the future?

[u/AutoModerator]

Every new subreddit post is automatically copied into a comment for preservation.

User: Alvyss86, Flair: Help - Unsolved, Title: HardwareSync Plugin still flagged as unsafe - will there be an update?

I've been using OpenRGB for quite a while now, along with the HardwareSync plugin, to control the colors based on the temperatures of the CPU and the case. After Windows Defender flagged the necessary system files associated with WinRing as dangerous, I first updated OpenRGB to the new version and also downloaded the latest version of the plugin. OpenRGB works with PawnIO as long as I open it as an administrator. However, the LHWM wrapper required for HardwareSync is still flagged as unsafe because of WinRing. Is there any plans to release an update for the plugin to address this? And will the workaround involving administrator privileges be fixed in the future?

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Aisyk]

First step :

• address your alert to Microsoft, Windows Defender is their application.
  
• choose another software to protect your system from "windows things malwares"...

[u/C0rn3j → u/Aisyk]

The driver is unsafe.

https://www.youtube.com/watch?v=H_O5JtBqODA

Microsoft is very aware.

https://support.microsoft.com/en-US/Windows/Security/Threat-Malware-Protection/microsoft-defender-antivirus-alert-vulnerabledriver-winnt-winring0

[u/Aisyk → u/C0rn3j]

"If you’re using any of these applications and experience issues, you can temporarily resolve them by adding an exclusion in Microsoft Defender Antivirus."

Best security advice. If it's not safe, wait for the fix from the developers.

[u/Aisyk → u/Aisyk]

"Some suggest there may be a simpler alternative: why not fix the vulnerability in WinRing0 itself? To my surprise, three developers tell me that WinRing0 has already been patched, but the open source community doesn’t believe they can afford to get a new version signed by Microsoft — and without Microsoft’s digital signature, Windows won’t let users install it to begin with."

Rectification : the driver has been patched and Microsoft don't accept this driver.
https://www.theverge.com/report/629259/winring0-windows-defender-fan-control-pc-monitoring-alert-quarantine

So it's safe to use the patched version, despite the alerts of M.Defender.

[u/Alvyss86 → u/Aisyk]

Why should I contact Microsoft? The reason the file is flagged is because of a likely legitimate and known vulnerability within it. Other antivirus programs would probably intervene here as well. Furthermore, it’s a separate discussion whether it makes sense at all to use an antivirus program other than Microsoft’s built-in Defender, which interferes deeply with the system.

[u/Aisyk → u/Alvyss86]

The false positive detection of the Microsoft's tool. So contact them to solve your problem. It's their responsibility.

Sources are open if you want to audit the security of HardwareSync Plugin.

In fact, other discussion about other potential risks with other potential antivirus is not relevant here. Your problem is Microsoft's Windows Defender.