We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
Program:Win32/VulnInsydeDriver.A
Aliases: No associated aliases
Summary
Microsoft Defender Antivirus detects and blocks a vulnerable system driver (segwindrv.sys on 32-bit systems, segwindrvx64.sys on 64-bit systems) used by BIOS tools developed by Insyde Software.
If you need to perform a BIOS update, download the latest BIOS tool from your PC manufacturer's support website. For more details, refer to Insyde's security announcement.
Microsoft Defender Antivirus automatically blocks threats as they are detected. Update your antimalware definitions and run a full scan.
You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.
Secure configuration
To get the best and fastest protection from Microsoft Defender Antivirus, ensure it can connect to the cloud protection service. Use the Windows search box to find and open your Virus & threat protection settings and turn on the following:
- Cloud-delivered protection
- Automatic sample submission
Keep software up to date
If you need to perform a BIOS update, download the latest BIOS tool from your PC manufacturer's support website. For more details, refer to Insyde's security announcement.
