WD Drivers causing vulnerability on most of the computers: wdcsam64_prewin8.sys

I have a computer with Windows 11 Business v. 10.0.22000 Build 22000, I am using a 4Tb My Passport external HD to save my files.

Today I found out that a vulnerability in an driver is causing my computer to be susceptible to malicious code to be inserted into high-security processes. I have been seeking for an official solution from Western Digital and looks like there is no even a word.

I tried to Safe Mode to delete that drivers and toss away my My Passport external hard drive, but I could not even un install it. I tried the update, nothing. Tried drivers and nothing.

I wonder why Western Digital is not releasing an official solutions to a SVC level 10 vulnerability.

Does any body knows why?

I have the same problem, which was first noticed when the Windows Security app reported that Memory Integrity must be switched off because of this driver. The app does not tell with what device the driver is associated.

1 Like

I have the same problem

1 Like

I have the same problem and cannot find a solution.

1 Like

I just want to let you know guys that I wrote an email to WD and they already involved their security team. This is they TODAY response with their workaround:

************:

We have completed our investigation and have determined that this issue of an incompatible dll for Memory Integrity in Windows 10 was also reported to us recently. We have created a new driver that will fix the issue. This new driver is currently with our QA team and is scheduled for release, after it passes QA. That release could be as soon as next week. We will notify you when the driver is available for download.

Once the new driver is available you can receive it one of 2 ways, you can either accept the update when you are prompted by your system or download manually:

https://downloads.wdc.com/wdapp/Install_WD_Discovery_for_Windows.zip

In the meantime, there has been a workaround available since August 19, 2022. The detailed workaround steps are laid out at this URL:

Please let me know if you have any other questions or concerns. Thank you for reaching out to us regarding this issue.

Best Regards,

************ end of their message.

Hope this works!

Regards

1 Like

Ok, please help.
I have tried downloading the new driver, and I have tried the workaround.
According to trying to search on my computer, the driver doesn’t even exist. I tried searching through the Windows PowerShell as the Admin to delete the driver that way if I could find the error; again, the driver doesn’t even seem to exist on my computer to update OR delete, and yet… My Memory Integrity will not turn back on, because of this driver not being updated.

Does ANYONE have any idea what to do?!?!
I know I’m replying to your message Kat, specifically, but I’m hoping since you had the most detailed response/answer, you might have some more insight!

Thank you so much for the help!

1 Like

Frustrating indeed! Let me get back to them and see what else we can do.

Hi,

I had the same problem and I followed the below article to get mine fixed.

SOLVED: Core Isolation Memory Integrity Incompatible

Hope this helps.
Cheers

1 Like

Katey.

What worked so far for me, without YET connecting back the HD and or trying to install and WD software is by uninstalling the sinister driver! in my case I had: oem147.inf and oem19.inf

The recommendation I followed is to uninstall the driver using the command line pnputil /delete-driver oem.inf in my case I executed:

In my windows 11 Pro I opened the Powershell as adminstrator then:
pnputil /delete-driver oem147.inf [enter]
pnputil /delete-driver oem19.inf [enter]

Then reboot the computer and try again.

It just removed the drivers and listo! safe again.

There is a work around! at least you can remove the sinister WD driver. Check the marked solution on this threat.

Check the solution, temporally solved.

Works! thank you @rajeevlpk

Hi I also have the same issue with memory integrity and the sinister driver…I have 2 WD My Book duo’s I have tried the solution trying to delete the driver through powershell but with no luck and I don’t remember needing software originally, (it was a few years ago) its just plug n playI would really apprciate any help as it’s really starting to worry me that i’ll have to replace them… I can’t find a solution anywhere. Thanks in advance!

What’s the file driver name? Write it down here.

You need to open powershl with administrator privileges. The run the commands. Reboot thw computer and activate the protection. Try it one more time.

Regards

I use Windows 11 and having the same problem . Used the work around and entered “pnputil /delete-driver oem115.inf” only to receive the following, " “Failed to delete driver package: One or more devices are presently installed using the specified INF.”

as of 16 Sep22:

Finally was able to remove the golf-delta offending driver. In my instance, the odious driver was oem115. Used the following CMD line in Windows 11. Right click start>>Windows Terminal (Admin)>>select, yes>>type: pnputil /delete-driver oem115.inf /uninstall

Then tap “enter” or “return”

Instead of failure, Driver package uninstalled, Driver package deleted successfully. Then went back to Windows Defender>>memory integrity and was able to toggle to “on.” Prompted to restart to effect change .

Below are the steps I followed.

Windows 11 Home Build 10.0.22000

wdcsam64_prewin8.sys
driver date: 10/8/2015 1.1.0.0 oem78.inf
driver date: 11/29/2017 1.2.0.0 oem54.inf

Lenovo with AMD Ryzen CPU

The drive was running FAT32 but have converted to NTFS but no change. The drive is working fine but preventing memory isolation from working.


This is what I experienced and how I fixed it. Please be careful. If you’re unsure about these steps, then seek assistance.

Windows 11 Home Build 10.0.22000

wdcsam64_prewin8.sys
driver date: 10/8/2015 1.1.0.0 oem78.inf
driver date: 11/29/2017 1.2.0.0 oem54.inf

Lenovo with AMD Ryzen CPU

This is what I experienced and how I fixed it. Please be careful. If you’re unsure about these steps, then seek assistance.

Windows 11 Home Build 10.0.22000

wdcsam64_prewin8.sys
driver date: 10/8/2015 1.1.0.0 oem78.inf
driver date: 11/29/2017 1.2.0.0 oem54.inf

Lenovo with AMD Ryzen CPU

The drive was running FAT32 but have converted to NTFS but no change. The drive is working fine but preventing memory isolation from working.

==

I followed instructions in the article listed below and improvised some as well.

This was a rough draft of my steps.

Remove external drive
Place laptop in Safe Mode
Open Device Driver
Select View and by Connections
Locate Western Digital devices (wdc…inf) oemxx.inf
Document the names then right click and delete (wdc…inf) oemxx.inf
Go to Windows/inf and delete .inf files located above.
Exit Windows and restart
Once within windows, plug in external drive.
The drive will require the driver needed and will install it. Mine was from 2006.
Running Windows Update will find a device driver for WDC_SAM under Options. Initially I did not install the driver, I later went back in and installed it without issue!
Once completed, go back into CPU Settings and enable Memory …

Hi

The driver is wdcsam64_prewin8.sys I have a duo my book duo im not sure of model no as i need help to move hard drive but alone atm. when i run commands it says it “Failed to delete driver package: One or more devices are presently installed using the specified INF.” please could some tell me how to solve the issue…Thanks in advance

System storage → disks and drives > My Passport (E:). Bit Locker on. Device Manager, driver removal and re-setting. So, Windows update for the driver. Reconnection. The core is again protected.

System storage → disks and drives > My Passport (E:). Bit Locker on. Device Manager, driver removal and re-setting. So, Windows update for the driver. Reconnection. The core is again protected. Windows 11.

I use Windows 11 and having the same problem . Used the work around and entered “pnputil /delete-driver oem115.inf” only to receive the following, " “Failed to delete driver package: One or more devices are presently installed using the specified INF.”

Finally was able to remove the golf-delta offending driver. In my instance, the odious driver was oem115. Used the following CMD line in Windows 11. Right click start>>Windows Terminal (Admin)>>select, yes>>type: pnputil /delete-driver oem115.inf /uninstall

Then tap “enter” or “return”

Instead of failure, Driver package uninstalled, Driver package deleted successfully. Then went back to Windows Defender>>memory integrity and was able to toggle to “on.” Prompted to restart to effect change .