RiskWare.WinRing0.VulnDriver

RiskWare.WinRing0.VulnDriver is Malwarebytes detection name for a set of legitimate signed drivers by WinRing0 that put your system at risk because they are vulnerable to attacks.

RiskWare.VulnDriver is Malwarebytes’ generic detection name for legitimate but vulnerable Windows drivers that may expose systems to elevated security risk.
Detections in this family may appear as RiskWare.<DriverName>.VulnDriver, where <DriverName> identifies the vulnerable driver, vendor, or software component associated with the detection.
These drivers are not necessarily malicious by themselves, however, because they operate at kernel level, threat actors may abuse them to gain privileged access, interfere with security tools, or support further compromise.

Malwarebytes products protect users by flagging the presence of RiskWare.WinRing0.VulnDriver and make them aware of the risks.

How to remove RiskWare.WinRing0.VulnDriver with the Malwarebytes Nebula console

You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.

Nebula endpoint tasks menu

Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.

On the Quarantine page you can see which threats were quarantined and restore them if necessary.

Malwarebytes can detect and remove RiskWare.WinRing0.VulnDriver without further user interaction.

• Please download Malwarebytes to your desktop.
• Double-click MBSetup.exe and follow the prompts to install the program.
• When your Malwarebytes for Windows installation completes, the program opens to the Welcome to Malwarebytes screen.
• Click on the Get startedbutton.
• Click Scan to start a Threat Scan.
• Click Quarantine to remove the found threats.
• Reboot the system if prompted to complete the removal process.