Each week, Windows sends a new update for all teams managed by Windows 10 and Windows 11, an update that patch vulnerabilities, solves operating problems, applies performance improvements among others. With the launch of the latest update, Microsoft has made a significant change that affects users who use applications to monitor the operation of the PC.
After installing the latest update, many are the users who saw how Windows Defender considers the Winging0 controller .SYS and Winring0x64.Sys as threats to the system, considering it as a hacking tool by automatically put it at forty.
For a long time, it is known that these are vulnerable, however, it seems that Microsoft does not give it the importance necessary to correct it so far. After updating, the most free and open source applications that use it as Fans control,, MSI afterburnerRazer Synapse 3 (version 4 does not use it), the Steelseries engine, Free equipment instructorFectrl among others has stopped working.
What is the problem?
All these programs use a tool called Winrin0, a tool that works at the level of system core And like all the tools that have access to the Windows kernel, they are likely to remove the PC, as we have already seen on previous occasions.
Winrring0 is used by these tools to monitor the information offered by PC components and modify the operation of the Fans and RGB lightingConsequently, all of these types of applications have been affected by this modification made by Microsoft.
The main reason why Winrring0 is used for this type of activity is because it is one of the only ways to do so free. Although it is true that it can also be used Inout32This generates conflicts with anti-prone applications, in particular the application of the avant-garde of the riot.
According to Adam Hanse, developer of the OpenRGB application, the step that Microsoft has taken is logical because it can abuse Winring0 to have access to nucleus controllers for very different purposes that use this type of monitoring apps.
If you use one of the applications we have mentioned above and Windows Defender detects it as a threat, to continue using it, you must click on the system notification, access this, then click on Device To add it to the white list. In this way, you can continue to use this type of applications in your equipment.
All developers of this type of applications knew that it was a matter of time that Microsoft will change the consideration of Winring0. This is one of the reasons why Openrgb He stopped using it in 2023 and decided to create his own controller, just like the Steelseries with the launch of the application Synapse 4 (Version 3 continues to use Winrring0).
The development of a zero controller is a simple task and requires many resources and which is not available for many open source projects and this will undoubtedly affect all applications to monitor the operation of the PC components available for free.
