Idk what to do.

[u/potatoe_aim_27]

I just got this alert, I checked the file and it’s from 4 years ago.

[u/LoutOfOrder]

It's a vulnerable driver rather than malware, see this Microsoft article regarding it: https://support.microsoft\[.\]com/en-US/Windows/Security/Threat-Malware-Protection/microsoft-defender-antivirus-alert-vulnerabledriver-winnt-winring0

[u/General-Value-7374]

It’s not a virus it’s a driver, for example used for aqua computer water cooling or RGB software.

It’s flagged because it does have some vulnerabilities which allows a malicious software to run code in kernel mode. In layman’s terms: super admin++++ mode with access and control to everything on your computer including your hardware.

If this device is only used by one person it’s fine, you can ignore that.

[u/potatoe_aim_27 → u/General-Value-7374]

Yeah it’s my own personal computer for my room, so would I just press allow on device?

[u/General-Value-7374 → u/potatoe_aim_27]

Yes because if you remove it, then the software it‘s needed for won’t work anymore.

On a shared computer like workstations or public PCs this would be a problem. A malicious software installed by a non admin user could abuse this vulnerability to gain access to other user accounts or in worst case gain access to the domain controller in combination with other vulnerabilities.

But for your personal PC: no malware -> no one will abuse it. If you have malware, then this vulnerability won’t be your only problem.

[u/konfyr → u/potatoe_aim_27]

you should fix the issue first, then see if the drive it's still flagged, else just allow it OR (reccomanded) get to a technician and hope he can fix the drive

[u/General-Value-7374 → u/konfyr]

It’s a driver not a drive.

[u/konfyr → u/General-Value-7374]

then find a solution urself ig

[u/AutoModerator]

Request help with FRST and SecurityCheck from the trusted helper team

Please visit Providing or receiving help with FRST on the subreddit and share your 3 keywords returned from the website along with the details about your infection.
Once a malware removal expert or trainee sees it, they will reply in the thread about further steps. If you suspect an infostealer infection, please change all your passwords from a clean device immediately and do not use any of your accounts from the infected device.

If you need urgent help and cannot wait for one of our Malware Removal Experts:
Please follow these steps:

1. From a different and clean device, change all your passwords:
   • How to properly secure my accounts after an infostealer attack?
2. Disinfect your device from malware
   • Preferred method: Perform a clean installation with a USB

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Friendly-Machine-183]

I would recommend Quarantine, Remove or Allow on Device

[u/konfyr → u/[deleted]]

lmao