I just ran a Windows Defender scan, and it flagged a file: C:WINDOWSsystem32DriversWinRing0x64.sys as a trojan. I heard it might be a standard Windows driver, but I'm not so sure now. Does anyone know if I should be concerned?
1 Answer
If Windows Defender flagged it, then it’s probably not a legit driver despite whatever claims are out there. Malware often disguises itself with names that sound like actual system files to trick users. You should right-click on that file, check its properties, and look for a digital signature. If it doesn’t have one from Microsoft, it’s likely malware.
I checked, and it seems to be empty. Some forums say it’s not actual malware but rather a risk since it’s used by fan control software. I think it might still be running for Armoury Crate to work.