This is beyond annoying as its used by Notebook Fan Control to control the fan on my ASUS laptop.
https://i.imgur.com/qiO8G88.jpeg
This is the only fan program that works on it…
Have tried doing whats suggested and disabling “Block Vulnerable Kernel Drivers”, but seems its reverted on every reboot?
This is the pits Avast…why?
This has been working fine FOR YEARS
When will update day not also mean “break something thats worked for years day”
Have you tried to add an exception for the .sys file?
Also see if there is a newer version of the Asus software for your laptop. Maybe that fixes the vulnerability (unlikely but worth a shot).
Hello jamesmilton,
this driver is indeed vulnerable: https://nvd.nist.gov/vuln/detail/CVE-2020-14979
Any malware running under any user account (even non admin) can connect to this driver (if loaded) and control whole system from kernel. There is no option to exclude single driver, but you can disable vulnerable driver blocking completely.
The revert of the “Block vulnerable kernel drivers” setting on reboot is not reproducible, can you please provide a support package?
https://support.avast.com/en-us/article/submit-support-file/#pc
I also had the same issue with this driver but with a different app “Real Temp” I have been running this app for many years
I spent so many hours and multiple attempts to system restore in order to try and fix or figure out what was causing the error
message that was appearing on startup “Driver not loaded try run as administrator”. It would have been nice if Avast had of displayed a popup to notify me of an issue! It was only when I tried to run the program once windows was loaded did I get an Avast popup and discover what was causing the error.
If your going to add a new driver block like this to your anti virus then please make sure that your app gives the user an Avast warning about it on startup, so that they like myself don’t have to spend hours trying to discover what is causing the error. Thanks.
Not good enough Avast!
I have this problem aswell.
It worked for over a year. Then you update Avast and my system is a messy piece of shit now. Thanks that’s what I pay premium security for.
Just block access to random files and don’t allow us to whitelist programs that use these files. A great idea.
Also I want to note that the popup is completely buggy.
Same. Fan control software blocked. Any attempt to add the .sys file to exceptions doesn’t work. Sometimes the PC is literally unusuable because I can’t even click anywhere outside the Avast warning window. If this is not solved in AT MOST two days, I’m uninstalling Avast for good. This is unacceptable.
Has anyone run the support package as requested ?
Any fix yet for “real temp” ? … this pop-up (without ANY real info is so annoying 
I got a similar problem with an MSI Gaming driver:
https://i.ibb.co/v1Nn50v/Avast-vs-MSI-gaming-vulnerable-driver-modapi-sys.png
literally had this start popping up again for winring, which WAS a signal rgb driver. couldn’t get it to run back in february because this driver was blocked. left it, now the alert is back, on EVERY SINGLE reboot…literally.
SAME SHIT HAPPENING HERE< EVERY SINGE REBOOT! Fix this AVAST!
I guess people don’t bother reading what has been posted or requested.
We don’t even know if this is the same driver, as this would have been detected earlier.
Given the topic was started in February about “Avast Blocked A Vulnerable Driver: WinRing0x64.sys”
Newly installed Avast last night, but on repeated boot ups of my pc produce this same error with no description of what program is involved so Im attempting a search for the file. winring. Every google search says its crypto currency trojan. Ive got Trojan killer working as well as Malwarebytes but soo far nothing is produced. Only Avast is picking it up but no description or log describes what program or where this sys file is.
Have you read some of the replies above your post as it refers to a vulnerable driver that can be exploited. Not that it is being exploited and why you aren’t getting anything from Trojan killer and Malwarebytes. Not it isn’t advisable to run multiple AVs as they can also conflict.
Trojan Killer is a portable AV, to run on demand, and Malwarebytes free version also is on demand
That’s fine, we do see some that have multiple active AVs, where more isn’t necessarily better.
Figure I’d post here as I can’t get any help on my own post. Maybe someone will see this and have some ideas.
This has been happening for some time on every reboot. I can’t seem to find out what it is or how to get rid of it as the file it points to is never there. The name is always tmp???.tmp the numbers and letters in it are different every time but the tmp part stays the same. I’m on Windows 11 with latest version of Avast One Essential. Any help is very much appreciated.
These pics are old from my old post that’s why the dates are so old. Everything is up to date including OS and all drivers.
https://i.ibb.co/4WjgTLz/Screenshot-2023-09-24-023802.jpg
https://i.ibb.co/0Zgwyyt/Screenshot-2023-09-24-023826.jpg
Is Your win11 updated / or try to update ?