Indlela yokususa i-WinRing0 ku-Windows bese unquma ukuthi empeleni iyigciwane

Izindaba Zegajethi » Okuvamile » Izifundo » Indlela yokususa i-WinRing0 ku-Windows bese unquma ukuthi iyigciwane ngempela

Uma usebenzisa i-Windows 10 noma i-Windows 11 futhi ngokuzumayo uthole isexwayiso se-Microsoft Defender mayelana nento ebizwa ngokuthi i-HackTool:Win32/WinRing0 noma i-VulnerableDriver:WinNT/Winring0.G , kuyaqondakala ukuthi ungase ukhathazeke futhi ucabange ukuthi une-Trojan engathi sína kwi-PC yakho. Okwenza izinto zibe zimbi kakhulu, amathuluzi akho okuqapha, amafeni, noma ukukhanya kwe-RGB kungenzeka ukuthi kuyeke ukusebenza ngokuzumayo.

Into yokuqala okufanele uyazi ukuthi, ezimweni eziningi, awubhekene negciwane elivamile elithelela amafayela noma elibethela i-hard drive yakho , kodwa ubhekene nomshayeli onobungozi obaziwayo iWindows enqume ukuwuvimba ngamandla. Lokhu akusho ukuthi awunangozi nhlobo, kodwa kushintsha kakhulu indlela obhekana ngayo nalo futhi unqume ukuthi kufanele yini ukuthi uligcine lisebenza noma cha.

Iyini i-WinRing0 futhi kungani i-Windows Defender iyibona njengosongo?

I-WinRing0 iyisishayeli sokufinyelela ihadiwe esisezingeni eliphansi esisetshenziswe iminyaka eminingi ezinhlelweni eziningi zokuqapha nokulawula i-PC. Yilabhulali/isishayeli esivumela uhlelo ukuthi luxhumane cishe ngqo ne-Windows kernel kanye nezingxenye ezithile zebhodi lomama, sidlula izingqimba eziningi ezijwayelekile zokuvikela.

Ngenxa yalokhu kufinyelela okujulile, i-WinRing0 isithandwa kakhulu phakathi kwezinhlelo zokusebenza zezinkampani zangaphandle ezidinga ukufunda izinzwa, ukuphatha isivinini sabalandeli, ukulawula ukukhanya kwe-RGB, noma ukulungisa kahle amapharamitha esistimu. Ingenye yezinketho ezimbalwa zamahhala nezivulekile ezivumela lolu hlobo lokuxhumana okuseduze nehadiwe.

Inkinga iwukuthi, ngo-2020, umshayeli we-WinRing0 wafakwa ohlwini njengobuthakathaka bokuphepha, i-CVE-2020-14979 . Lokhu buthakathaka kuvumela noma yiluphi uhlelo lokusebenza (ngisho nangaphandle kwamalungelo omlawuli) ukuthi lucele imvume yokufunda noma yokubhala ezindaweni ezivikelwe zememori yesistimu uma umshayeli eselayishiwe ohlelweni, okuvula umnyango wokwandiswa kwamalungelo noma ukuphathwa kwezinqubo ezibalulekile.

Ngenxa yalesi sizathu, iMicrosoft inqume ukuthi abashayeli be-WinRing0 abangasayiniwe noma abangaphephile bazophawulwa ku-Defender njengesofthiwe engaba yingozi, ebonakala ngaphansi kokutholwa okufana ne-Hacktool:Win32/Winring0 noma i-VulnerableDriver:WinNT/Winring0.G. Ngokombono wobuchwepheshe, ukutholwa kusemthethweni: umshayeli usengozini yangempela futhi angasetshenziswa yi-malware.

Lokho akusho ukuthi ikhophi yakho ethize ye-WinRing0 iyigciwane, kodwa kunalokho inamandla angawasebenzisa i-malware . Yingakho kudideka: igama elifanayo lisetshenziswa yi-driver esemthethweni kanye nezinsongo ezithile ezizifihla ngemuva kwayo ukuze zigweme ukutholakala.

Izinhlelo zokusebenza namathuluzi ancike ku-WinRing0

Esinye sezizathu ezenza lolu daba ludale umsindo omkhulu ukuthi izinhlelo zokusebenza eziningi ezidumile zithembele ku-WinRing0 ukuze zisebenze kahle. Ngokuqiniswa kwezinqubomgomo ze-Microsoft Defender, zonke lezi zinhlelo zokusebenza zithinteke ukutholwa, ukuvinjelwa, kanye nokuziphatha okungavamile kuma-PC abasebenzisi.

Phakathi kwamathuluzi athinteke kakhulu kunezinhlelo eziningi zokuqapha ihadiwe, imidlalo, kanye nezinsiza zokuphatha abalandeli ze-RGB noma ze-fan. Imibiko ehlukahlukene kanye nobufakazi bukhuluma, isibonelo, i-CapFrameX, i-EVGA Precision X1 (izinguqulo ezindala), i-FanCtrl, i-HWiNFO, i-Libre Hardware Monitor, i-MSI Afterburner, i-Open Hardware Monitor, i-OpenRGB, i-OmenMon, i-Panorama9, i-SteelSeries Engine, kanye ne-ZenTimings , phakathi kwezinye eziningi.

Ngaphezu kwalokho, amanye amasudi abakhiqizi okuphatha izinto ezisetshenziswayo kanye nemishini yokudlala asebenzise i-WinRing0 esikhathini esidlule. Isibonelo sangempela esibonwe kumaforamu sihilela umsebenzisi owayefake umshayeli kuhlelo lokusebenza lwe-Razer Synapse olusebenza ngemuva, okuvimbela i-Windows Defender ukuthi ingayisusi ngqo ngoba ifayela lalihlala limakwe ngokuthi "liyasebenza."

Esimweni esihlukile, omunye umsebenzisi uchaze ukuthi i-WinRing0 yayibalulekile kuhlelo lokusebenza lokufinyeleleka okwakudingeka lukhubaze okwesikhashana i-dithering ngenxa yezizathu zempilo yokubona. Ngaphandle kwalowo mshayeli, babengeke bakwazi ukusebenzisa i-laptop yabo, futhi i-Defender yayizoyisusa noma iyivimbe ngaphandle kokubanika inketho yokuyibuyisela kalula.

Konke lokhu kusho ukuthi, ngokuzumayo, ngemva kokubuyekezwa kwezincazelo zeDefender, abasebenzisi abaningi bathole ukuthi amathuluzi abo abawathandayo ayayeka ukuqala , abalandeli babo baqala ukujikeleza ngesivinini esiphezulu ngokungalawuleki, noma ukukhanya kwe-RGB akulungiselelwanga kahle, ngoba umshayeli oyinhloko ohlela konke lokhu uvalelwe yedwa.

Izingozi zokuphepha zangempela: ubuthakathaka uma kuqhathaniswa negciwane

Kubalulekile ukuhlukanisa ngokucacile phakathi kwemiqondo: I-WinRing0 akuyona i-ransomware noma i-trojan yasebhange evamile , kodwa iyisilawuli esisengozini esingasetshenziswa yi-malware ukuze silawule uhlelo kalula kunalokho okufanele kuvunyelwe.

Uma ilayishwa ohlelweni, i-WinRing0 inikeza ukufinyelela okungenamkhawulo ezinsizeni ezivikelwe . Lokhu kuvumela noma iyiphi inqubo ukuthi ifundise umshayeli ukuthi afunde noma abhalele amakheli enkumbulo ebalulekile, okuhlanganisa nezindawo lapho kuhlala khona ezinye izinqubo, izimfihlo, amaphasiwedi esikhashana, noma ngisho nezakhiwo zangaphakathi ze-kernel ye-Windows.

Ngokombono wokuphepha, lokhu kuyakhathaza ikakhulukazi ngoba kwephula esinye sezithiyo eziyisisekelo ezivikela iWindows : ukuhlukaniswa kwesikhala somsebenzisi nesikhala se-kernel. Isenzo esisebenzisa kabi i-WinRing0 singadlula eziningi zezivikelo ezivamile ngaphandle kokudinga ukulimaza uhlelo lokusebenza ngokwalo.

Yingakho iMicrosoft ikhethe ukuphatha izinguqulo ezingasayiniwe noma ezisengozini ze-WinRing0 njenge- "hacktool" noma umshayeli oyingozi . Futhi ngesizathu esifanayo, ochwepheshe abaningi batusa ukuyigwema noma nini lapho kungenzeka, noma okungenani ukukhawulela ukusetshenziswa kwayo ezimweni ezithile nezilawulwayo, njengasemishinini yelebhu noma ezindaweni lapho ingozi yamukelekayo khona.

Kodwa-ke, iqiniso lokuthi i-Defender imaka i-WinRing0 akusho ngokuzenzakalelayo ukuthi amaphasiwedi akho abiwe, kufakwe i-keylogger, noma amafayela akho abethelwe . Ezimweni eziningi, ukutholwa kwenzeka ngoba uhlelo lokusebenza olusemthethweni oluvele lufakiwe lusebenzisa lowo mshayeli, futhi okushintshile yizimfuneko ze-Microsoft, hhayi ukuziphatha kwakho.

Kungani iWindows iyivimba manje, futhi iCrowdStrike ihlobene kanjani nayo?

Abantu abaningi baye bazibuza ukuthi kungani, uma i-WinRing0 ibilokhu isengozini iminyaka eminingi, i-Defender isiqalile ukuyivimba ngobudlova kangaka . Ayikho impendulo eyodwa esemthethweni eqinisekile, kodwa kunezinkomba eziningana ezisiza ukuqonda umongo.

Ngakolunye uhlangothi, iMicrosoft ibilokhu iqinisa izinqubomgomo zayo zokuphepha zabashayeli be-kernel isikhathi esithile . Ngemuva kwezigameko ezinomthelela omkhulu njengobuthakathaka be-CrowdStrike, obukhubaze izinhlelo emhlabeni wonke ngenxa yephutha ekubuyekezweni kokuphepha, ingcindezi inyukile yokunciphisa uhlobo lwesofthiwe olungasebenza ngamalungelo ajulile kangaka.

Ngaphezu kwalokho, iminyaka eminingana manje, iMicrosoft ibilokhu ifuna ukuthi abashayeli abafinyelela i-kernel basayinwe ngedijithali besebenzisa isitifiketi esithile sokusayina i-kernel. Ukuthola lesi sitifiketi kudinga ukuba yinkampani eyaziwayo nokukhokhela isiginesha, okubangela izindleko eziphindaphindayo—into ephathwayo ezinkampanini ezinkulu kodwa enzima kumaphrojekthi amaningi omthombo ovulekile.

I-WinRing0, njengoba iyilabhulali evulekile esetshenziswa kabanzi , ithole ama-patches kanye nokuthuthukiswa ngokuhamba kwesikhathi, kodwa inguqulo ngayinye entsha kumele ibuyekezwe futhi isayinwe ukuze i-Windows ibone ukuthi ithembekile. Ngokusho kwabathuthukisi abahlukahlukene, iye yalungiswa izikhathi eziningana eminyakeni yamuva, kodwa isimo asisakwazi ukwenzeka uma i-Microsoft inquma ukuyeka ukusayina izinguqulo ezintsha noma ibona ifilosofi eyisisekelo yomshayeli iyingozi kakhulu.

Eqinisweni, iMicrosoft ngokwayo ivumile ukuthi iyazazi imibiko mayelana nezinhlelo zokusebenza zemidlalo nokuqapha eziphawulwe njengezinsongo zokusebenzisa izinguqulo ezingasayiniwe ze-WinRing0. Ngenkathi bethi bayaqhubeka nophenyo lwabo, baphinde bacacisa ukuthi i-Defender izoqhubeka nokuphatha abashayeli abangasayiniwe njengezinsongo nokuthi ibuyekeza umqondo wokuthola ukuze igweme imiphumela engamanga, ngaphandle kokubeka engcupheni ukuvikelwa kwesikhathi eside.

Umthelela kubasebenzisi: abalandeli abahlanyayo, ukukhanya kwe-RGB okuphukile, kanye nezinhlelo zokusebenza ezingeke ziqalise

Umphumela obonakala kakhulu kumsebenzisi ojwayelekile ukuthi, ngobusuku obubodwa, amathuluzi amaningi okulawula ihadiwe ayayeka ukusebenza . I-Defender ithola i-WinRing0, iyivalele noma iyisuse, futhi ngokwenza kanjalo, isusa ingxenye ebalulekile yalezo zinhlelo.

Kwezinye izinhlelo, ngokushesha nje lapho i-WinRing0 inyamalala, abalandeli bajikeleza ngesivinini esigcwele ngaphandle komthetho ngoba uhlelo lokusebenza olubaphethe alusakwazi ukuxhumana nezinzwa noma isilawuli sebhodi lomama. Kwezinye, ukukhanya kwe-RGB kuyaqina noma kungalungiselelwa, noma izinhlelo zokusebenza ezithintekile zimane zivale ngokushesha nje lapho zivula.

Kukhona futhi amacala abasebenzisi, lapho bebona isexwayiso seDefender ngamagama ashaqisayo njengeVulnerableDriver:WinNT/Winring0.G noma iHacktool:Win32/WinRing0, bacabanga ukuthi i-PC yabo isengozini ngenxa ye-Trojan eyinkimbinkimbi kakhulu . Abanye baze bacabange nokufaka kabusha i-Windows kusukela ekuqaleni ngenxa yokwesaba ukufinyelela kude, ama-keylogger, namanye amaphupho amabi anjalo.

Esimweni esibikwe ezinkundleni zokuxhumana, umsebenzisi ubone ukutholwa kwefayela elixhunywe kwisofthiwe yeRazer, wazama ukulisusa, futhi iWindows yamvimbela ukwenza kanjalo ngoba "lalisetshenziswa" olunye uhlelo. I-Defender yazama ukulisusa ngokuphindaphindiwe kodwa yahluleka. Kuphela lapho ivala ngesandla inqubo ehlobene ne-Task Manager lapho i-antivirus yakwazi khona ukususa ifayela, futhi inkinga yanyamalala.

Kwesinye isimo, ngemva komzamo wokufinyelela kude obonakala sengathi uvinjelwe, umsebenzisi wahlangana nokutholwa kwe-WinRing0 futhi wasola iTrojan esezingeni eliphezulu. Baqalise ikhompyutha yabo kwimodi ephephile futhi baqala ukuskena okugcwele , baze bacabangela nokufometha uhlelo ngokungathi sína. Nakuba ukuqapha kuhlale kunconywa ezimweni ezinjalo, kwakungadingeki ngempela ukuya kulokho okweqile uma umthombo wangempela wawungumshayeli wethuluzi elaziwayo.

Izinketho zokuqhubeka nokusebenzisa izinhlelo zakho: okungafakwanga kanye nezinye izindlela

Uma udinga noma yiziphi izinhlelo zokusebenza ezithintekile (isibonelo, ithuluzi lokuqapha elithuthukisiwe, isilawuli sabalandeli, isofthiwe ye-RGB, noma ngisho nohlelo lokusebenza lokufinyeleleka olubalulekile), unezinketho eziningana, ngayinye inemiphumela yayo. Ayikho ikhambi eliphelele , kodwa kunezindlela ezahlukene zokulinganisela ubungozi kanye nokulula.

Inketho yokuqala ukubheka izibuyekezo kuhlelo lokusebenza ngokwalo . Abanye abathuthukisi sebeqalile ukukhipha izinguqulo ezintsha eziqeda i-WinRing0 noma ezishintsha ngomshayeli ozimele noma ohlukile, yize ezimweni eziningi lokhu kuhilela izinyanga zomsebenzi kanye nezindleko ezinkulu.

Isibonelo, i-SignalRGB ichaze ukuthi bayeka ukusebenzisa i-WinRing0 ngo-2023 futhi bathuthukisa idrayivu yabo ye-SMBus, ukuze bagweme ukuthembela kudrayivu yezinga lesistimu engaba sengozini noma ingqubuzane nezinye izinguqulo zesofthiwe. Bona ngokwabo bayavuma ukuthi inqubo yayinzima futhi yayidinga izinsizakusebenza ezibalulekile zobunjiniyela.

Okunye okungenzeka ukushintshela kumathuluzi ahlukile angasaxhomekile ku-WinRing0. Kunezinsiza zokuqapha nokuphatha ihadiwe ezivumelanise nezidingo ezintsha zokusayina i-kernel futhi zathuthela kwamanye abashayeli, yize ngezinye izikhathi zilahlekelwa ezinye izici ezithuthukile kule nqubo.

Okwesithathu, abanye abathuthukisi nabasebenzisi batusa ngokucophelela ukufaka okungafakwanga ku-Microsoft Defender ukuze kuvunyelwe i-WinRing0 ukuthi iqhubeke nokusebenza. Le nketho ihilela ukwamukela ingozi yokugcina umshayeli osengozini ohlelweni, ngakho-ke kufanele icatshangelwe ngokucophelela, ikakhulukazi kumakhompyutha anedatha ebucayi noma lawo anokufinyelela kwe-inthanethi okuqhubekayo.

Indlela yokwengeza ukukhishwa kwe-WinRing0 ku-Microsoft Defender (ngokuzithandela)

Ngaphambi kokuchaza kabanzi, kubalulekile ukugcizelela lokho okushiwo yiMicrosoft ngokusemthethweni: noma yiluphi ushintsho olunciphisa ukuphepha noma olukhubaza ukuvikelwa kufanele luhlolwe ngokucophelela . Lezi zinyathelo zingaba usizo njengesixazululo sesikhashana senkinga ethile, kodwa zihlala zihilela ukuthatha ingozi eyengeziwe.

Uma unquma ukuqhubeka ngoba udinga uhlelo lokusebenza olusebenzisa i-WinRing0 (isibonelo, ukulawula abalandeli kukhompyutha eshisa kakhulu noma ngesidingo sokufinyeleleka), ungangeza okungafakwanga ku-Microsoft Defender Antivirus ukuze uyivimbe ekuvimbeleni ifayela noma ifolda ehlobene.

Izinyathelo ezijwayelekile ku-Windows 10 kanye ne-Windows 11 yilezi ezilandelayo:

• Vula uhlelo lokusebenza Ukuphepha kweWindows kusuka ku-Qala > Izilungiselelo > Isibuyekezo Nokuphepha > Ukuphepha kwe-Windows, noma ngokukufuna kumenyu yoQala.
• Kuphaneli eyinhloko, faka isigaba Ukuvikelwa kumagciwane nosongo.
• Esigabeni sezilungiselelo zokuvikela amagciwane kanye nezinsongo, chofoza ku- Phatha izilungiselelo.
• Skrola phansi uze ufike ebhulokini Ukungabikho bese ukhetha okuthi "Engeza noma susa okungafakwanga".
• Qhafaza Faka okungafakwanga Bese ukhetha ukuthi ufuna ukukhipha ifayela elithile, ifolda yonke, noma inqubo. Okulandelayo, khetha into ehlobene ne-WinRing0 noma uhlelo lokusebenza oluthintekile.

Kusukela ngaleso sikhathi kuqhubeke, i-Defender izoyeka ukuskena nokuvimba noma yini oyifakile ohlwini lwezinto ezingafakwanga. Lokhu kungaxazulula ukungasebenzi kahle kwehadiwe, kodwa futhi kudala indawo engabonakali ekuvikeleni kwakho, ngakho-ke kufanele kwenziwe kuphela uma wazi kahle ukuthi yini oyikhiphayo nokuthi kungani.

Uma ungabaza ukuthi usongo olutholiwe luyi-driver esengozini noma ukuthi kungenzeka ukuthi kukhona okunye ohlelweni lwakho, kuwukuhlakanipha ukusebenzisa ama-scan engeziwe ngezinye izixazululo zokulwa ne-malware, ubuyekeze izinhlelo ezisanda kufakwa, futhi, uma kudingeka, ucele usizo ezinkundleni ezikhethekile ngaphambi kokuvula umnyango we-malware engaba khona.

Okufanele ukwenze uma i-Defender ingasusi i-WinRing0 noma iyithola njalo

Kwezinye izimo, i-Windows Defender ingazama kaningi ukususa i-WinRing0 kodwa ingaphumeleli ngoba ifayela lisetshenziswa uhlelo lwangemuva. Lokhu kubangela uchungechunge lwezixwayiso kanye nemizamo yokususa engafiki ndawo, kuyilapho umsebenzisi ebona ngokuphindaphindiwe isexwayiso sokusongela esisebenzayo.

Imbangela evame kakhulu ukuthi uhlelo lokusebenza olusebenzisa umshayeli luvuliwe okwamanje noma lunesevisi yokuhlala. Kulesi simo, kufanele uvale uhlelo ngesandla kanye nezinqubo zalo ezihlobene ngaphambi kokuba i-antivirus isebenze. Ungakwenza lokhu usebenzisa i-Task Manager:

• Vula Umphathi Womsebenzi (Ctrl+Shift+Esc noma chofoza kwesokudla kubha yomsebenzi > Umphathi Wemisebenzi).
• Thola inqubo eyinhloko yohlelo lokusebenza oluhlobene (isb., isofthiwe ye-Razer, amathuluzi e-RGB, njll.) bese uyiqeda.
• Hlola futhi ithebhu yezinqubo zangemuva uma kwenzeka ukuthi kunezinsizakalo ezixhunywe ohlelweni olufanayo.

Uma usuyimisile yonke into encike ku-WinRing0, sebenzisa iskena bese ususa futhi ngaphakathi kwe-Windows Defender . Ebufakazini obungaphezu kobunye, ukwenza lokhu kuvumele i-antivirus ukuthi isuse ukutholwa ngaphandle kokudinga ukufaka kabusha i-Windows noma ukuthatha ezinye izinyathelo ezinqala.

Uma ukutholwa kuqhubeka nokuvela, uhlelo lokusebenza lungase lufake kabusha noma luvuselele umshayeli njalo uma luqala. Kuleso simo, kuzodingeka unqume ukuthi uzolukhipha yini uhlelo ngokuphelele, uthole inguqulo ebuyekeziwe engasebenzisi i-WinRing0, noma usebenzise i-exclusion (ngengozi yakho) ukuze ugweme lokhu kungqubuzana okuqhubekayo.

Impendulo ku-Microsoft kanye nesikhundla sabathuthukisi

Ushintsho ekuphathweni kwe-WinRing0 ludale ukungakhululeki okukhulu phakathi kwabathuthukisi kanye nabasebenzisi abathuthukile, ngoba luthinta ngqo cishe yonke indawo yokuqapha nokulawula ihadiwe yangaphandle, ikakhulukazi amaphrojekthi omthombo ovulekile ancike kubashayeli balolu hlobo.

Abathuthukisi bamathuluzi afana ne-HWiNFO noma i-Fan Control bachaze ukuthi ukushintsha umshayeli akuyona into encane elula , kodwa kuhilela ukwenza kabusha ingxenye enkulu yohlelo, ngezindleko ezinkulu zesikhathi nemali, konke lokhu ngemuva kweminyaka yokusebenza kanye nedumela elakhelwe phezu kwala mathuluzi.

I-Microsoft iphawule kuphela ukuthi iyazi ngemibiko emihle engamanga futhi ihlola kabusha indlela yayo yokuthola ukuze iyilungise, kodwa ngesikhathi esifanayo iphikelela ngokuthi abashayeli abangasayiniwe noma abangase babe sengozini bazoqhubeka nokuphathwa njengosongo lokunciphisa ingozi yesikhathi eside.

Ukuphendula lesi simo, umdlali onelukuluku ungene kulesi sigameko: i-iBuyPower, inkampani eyaziwa ngama-PC ayo emidlalo akhiwe ngaphambilini. Ngokusho komphathi womkhiqizo wabo, bazama ukuthola inguqulo ebuyekeziwe ye-WinRing0 esayinwe ngedijithali yi-Microsoft . Uhlelo lwabo ukuthi, uma bephumelela, bazokwabelana ngaleli layibrari esayiniwe nomphakathi wabathuthukisi ukuze bakwazi ukusabalalisa izinguqulo zezinhlelo zabo zokusebenza nomshayeli oqinisekisiwe.

Ngisho noma leyo nguqulo esayiniwe ingafika, inkinga eyisisekelo izohlala ikhona: I-WinRing0 izogcina ukwakheka kwayo okuyisisekelo kokufinyelela okubanzi kakhulu kwe-kernel , ngakho-ke uma i-malware ingaphumelela ukuyikhohlisa noma ukuyixhaphaza, izoqhubeka nokuba yingozi. Ochwepheshe abaningi bakholelwa ukuthi ikhambi eliqinile kuphela ukuthuthela kubashayeli abasha abaklanywe kusukela ekuqaleni, abanemikhawulo eqinile kanye nemodeli yokuphepha yesimanje.

Indlela yokuthumela impendulo nokulawula izinga lempendulo ku-Windows

Uma uthintwa yilokhu kutholwa futhi ukholelwa ukuthi iMicrosoft kufanele ithuthukise indlela yayo yokusebenza, ungathumela impendulo ngqo kusuka ku-Windows . Le nkampani ngokwayo ikhuthaza ukusetshenziswa kwamathuluzi akhelwe ngaphakathi ukubika izinkinga nge-Defender nezinye izingxenye zesistimu.

Ngakolunye uhlangothi, iWindows ilungiselelwe ukucela impendulo yakho ngokuzenzakalelayo njalo. Uma ufuna ukuhlola noma ukulungisa lesi silungiselelo sempendulo ezenzakalelayo, ungenza kanje:

• Iya ku Ikhaya > Izilungiselelo > Ubumfihlo nokuphepha > Ukuxilongwa kanye nempendulo.
• Esigabeni se-Feedback Frequency, qiniseka ukuthi isethwe ku-"Ngokuzenzakalelayo (kunconywa)" uma ufuna iWindows icele impendulo yakho ngezikhathi ezithile.

Ngakolunye uhlangothi, ungathumela impendulo yakho ngesandla nge- Feedback Hub noma nini lapho ufuna, ngaphandle kokulinda uhlelo ukuthi lukucele ukuthi:

• Thayipha "Isikhungo Sempendulo" ebhokisini lokusesha kubha yomsebenzi bese uyivula.
• Ngaphakathi kwesicelo, iya esigabeni Comentarios bese ukhetha okuthi "Engeza amazwana amasha".
• Khetha isigaba esifanele, isibonelo "Ukuphepha, ubumfihlo nama-akhawunti > I-Microsoft Defender Antivirus ye-Windows".

Ngale ndlela, ulwazi lwakho nge-WinRing0, imiphumela engamanga, noma ubunzima bokuphatha abashayeli abasemthethweni luyaqoshwa futhi lungasiza i-Microsoft ukulungisa inqubomgomo yayo namathuluzi okuthola ezinguqulweni zesikhathi esizayo, okungenani ngokwethiyori.

Izilungiselelo zokuxilonga kanye nezimpendulo zikuvumela ukuthi ulawule ukuthi iyiphi idatha ethunyelwa ku-Microsoft nokuthi ingakanani imininingwane, okubalulekile uma ukhathazekile ngobumfihlo. Ngaphakathi kwalesi sigaba sezilungiselelo esifanayo, ungabuyekeza izinketho ezitholakalayo bese uzilungisa ngendlela oyithandayo.

Namuhla, isimo nge-WinRing0 siwumphumela weminyaka yokuyekethisa phakathi kokusebenza nokuphepha: umshayeli owusizo kakhulu wokufinyelela ihadiwe esezingeni eliphansi , ephinde imele ubuthakathaka obungase busetshenziswe futhi manje iqondiswe yi-Microsoft Defender. Uma uthole isaziso, kungenzeka kakhulu ukuthi kungenxa yethuluzi lokuqapha, isofthiwe yokulawula abalandeli, noma isofthiwe ye-RGB oyifakile, futhi hhayi i-Trojan esanda kufika enolaka. Ukusuka lapho, isinqumo sakho kuzoba ukubuyekeza noma ukushintsha isofthiwe uma kungenzeka, ukuhlola ukuthi kufanelekile yini ukugcina i-WinRing0 ngokudala okungafakwanga nokwamukela ingozi, noma ukuyisusa nje ukuze ubeke phambili ukuphepha okuqinile ohlelweni lwakho.