Hack tool Win32/Winring0 razer synapse | Razer Insider
Skip to main content
Question

Hack tool Win32/Winring0 razer synapse

  • Mar 11, 2025 10:30 AM UTC
  • 9 replies
  • 4472 views

everArsenicJADE818

Windows virus and threat protection has flagged “Hacktool:Win32/Winring0” as an active high threat. This is my first encounter with a piece of malware. affected razor synapse everyone else?
 

9 Replies

FiszPL
Vanguard
Forum|alt.badge.img+1
  • VANGUARD
  • Mar 11, 2025 11:50 AM UTC

More details? Which file was flagged exactly?

Most probably it’s just a false positive.


Yeah, I got the same warning after rebooting my machine this morning.  

Any idea if I should do this or not?


My system just picked it up - microsoft offered to remove it and I said yes and rebooted - then got another notification - M$ failed :(

 

 

 

 


Two reports with different file locations - leads me to believe it is NOT a false positive. 


Also got this. Different file location. No idea what this means just saw it and thought I’d contribute. 
 

 


FiszPL
Vanguard
Forum|alt.badge.img+1
  • VANGUARD
  • Mar 12, 2025 6:29 AM UTC

I’ve made small investigation, and the file is may be flagged due to some unfixed vulnerability in WinRing0 driver since 2020! https://www.cvedetails.com/cve/CVE-2020-14979/

Probably most manufacturers are still using the old version of this DLL.

 

A bit sarcastic, but xkcd always on on point :)

Btw. Using Synapse 4 - and I don’t have this driver installed. I’ll check my main PC later, where I have more peripherals connected.


dekades
  • Community Cowboy
  • Mar 12, 2025 8:02 PM UTC

Hey Folks, 

Synapse 3 rolled out a security patch on February 20, 2025, to move away from these drivers.

Synapse 4 did not use these drivers.

We encourage anyone facing this issue to check that they are using the latest version of Synapse 3, or upgrade to Synapse 4 for the most advanced protection and features.

This is in line with what’s being handled throughout the industry. We went ahead and made sure everything is secure ahead of time, but it’s very important that users are up to date with their Windows security patches and any others where required.


FiszPL
Vanguard
Forum|alt.badge.img+1
  • VANGUARD
  • Mar 13, 2025 6:30 AM UTC

So another advantage of using Synapse 4.


AlphaTay
  • Insider
  • Mar 13, 2025 6:53 AM UTC

how about synapse 2 for older hardware?