I keep getting a warning from Microsoft Defender about a vulnerable driver named WinNT/Winning0, and I'm not sure how to resolve it. I initially thought it was related to my motherboard drivers, but after updating those, the warning still pops up. Upon further investigation, I noticed that MSI Dragon Center is linked to the flagged files. Even after uninstalling it through Windows apps, the warning remains. I've also tried to quarantine and delete these files, but Defender failed to act on them. For safety, I've disconnected my PC from the internet while trying to figure this out. Should I keep troubleshooting, or would it be smarter to take my PC to a repair shop?
1 Answer
It sounds like the driver in question, Winring0, is often found in RGB, fan, or monitoring software, which might be why it's being flagged. It's known to be vulnerable, but many programs have issued updates to swap to a more secure driver called PawnIO. Check if you have any RGB or monitoring software installed. If you do, look for updates that reference PawnIO, or consider uninstalling those programs if you don't need them and want to stick with default settings.
I actually have ICUE installed. Could that be contributing to the issue? How can I find out if it uses PawnIO?