SignalRGB Driver pack detected as containing malicious file winring0x64.sys

Hi, I recently installed my Whirlwind FX keyboard and SignalRGB driver pack on my HP Win11 laptop and my companies malware team determined a file included in the pack was potentially malicious.

Please see attachment.
image (8)

I am neither able to determine the service using this file or delete it with elevated permissions.

Can you please advise the correct driver pack I should be using and if the above file is a concern.

That’s just a false positive, there’s nothing malicious about the version SignalRGB comes with.

The next upcoming version 2.2.30 of SignalRGB will not rely on WinRin0 anymore though to
counter false detections entirely.

1 Like