Hello,
I want to report that FACEIT Anticheat and Riot Vanguard started blocking Precision X1, EVGA LEDSync and all other evga programs because they use WinRing0x64.sys
This driver have vulnerability and can be used in cheating and other stuff. I only use FACEIT but it seems that RIOT Vanguard also banned that. It seems that Battleye and Easyanticheat will ban them aswell. I was reading that on reddit and all type of forums. So if we want to use EVGA programs we will need to stop playing MP games that use FACEIT AC, RIOT Vanguard, Battleye and EAC. When you start FACEIT AC you get error forbidden driver WinRing0x64.sys and you cant play games on faceit (csgo, pubg etc....)
Posted: 25/03/2020
https://vuldb.com/?id.152265 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7240 Faceit Anticheat support message:
Different versions of the same driver, which are even more exploitable than the one Throttlestop uses, we will not unblock these as they are a real security risk. You should contact the publisher of these software and tell them to fix their security issues if it's not fixed with the latest version.
The WinRing0 driver that ThrottleStop uses has some other functions which are not safe, such as reading/writing to MSR without any kind of verification.It does not matter if ThrottleStop opens RwDrv for 1 millisecond or 10 seconds, this does not change anything to the fact this driver can be used for malicious purposes, and was actually used by the UEFI Rookit LoJax
https://www.welivesecurity.com/wp-content/uploads/2018/09/ESET-LoJax.pdfI dont use this program but they use same driver but different versions (evga driver is from 2013)
https://www.techpowerup.com/forums/threads/throttlestop-winring0x64-sys-vulnerability.266500/#post-4255357
They banned MSI Afterburner (msi fixed afterburner with last update), Throttlestop, Corsair programs, NZXT Cam etc.... (not programs but drivers they use). So your program wont work or it will but your system will be unstable.
It would be cool if EVGA fix these drivers so we can use programs again while playing MP games. Problem will start when Battleye and EAC ban those drivers because tons of popular games use those anticheats.
post edited by kacan22 - Monday, August 17, 2020 8:32 PM