windows security is mislabing the .sys file

[heavyoak]

basically today windows security declared the .sys file as a trojan and tried to delete it.

I clicked allow and then added an exception for it cause I know its fine.

[rdar-lab]

Yes, I am seeing this one myself as well.
It is not a mislabel, the root cause of this detection is VulnerableDriver:WinNT/Winring0.G
See: https://support.microsoft.com/en-us/windows/microsoft-defender-antivirus-alert-vulnerabledriver-winnt-winring0-eb057830-d77b-41a2-9a34-015a5d203c42
The library used for HW monitoring needs to be upgraded

[rdar-lab]

I think it is related to this issue:
LibreHardwareMonitor/LibreHardwareMonitor#1873

[mathoudebine]

Thank you for reporting it! Unfortunately there has been no new release of LibreHardwareMonitor since almost a year. I hope the 0.9.5 will be released soon and that it fixes this issue

[paokkerkir]

LibreHardwareMonitor nightly build fixes the issue.

[abid112]

Getting the same issue!

[mathoudebine]

I have merged the latest LibreHardwareMonitor nightly build (0.9.5-pre464) and will generate a new release including it

[rdar-lab]

@mathoudebine wouldn't it be best to wait for a stable release of LibreHardwareMonitor?

[paokkerkir]

A stable release of LHM might be months away at this point. If/when they update the stable release, @mathoudebine can merge the stable one again.

[mathoudebine]

Yes I don't want to prevent people from using the software because a file is mislabeled as malware. Not everyone will find this issue, I think most of new users will just delete the software and move on. I will replace the LHM .dll with the one from the release when it is out