Today I found out that a vulnerability in an driver is causing my computer to be susceptible to malicious code to be inserted into high-security processes. I have been seeking for an official solution from Western Digital and looks like there is no even a word.
I tried to Safe Mode to delete that drivers and toss away my My Passport external hard drive, but I could not even un install it. I tried the update, nothing. Tried drivers and nothing.
I have the same problem, which was first noticed when the Windows Security app reported that Memory Integrity must be switched off because of this driver. The app does not tell with what device the driver is associated.
I just want to let you know guys that I wrote an email to WD and they already involved their security team. This is they TODAY response with their workaround:
************:
We have completed our investigation and have determined that this issue of an incompatible dll for Memory Integrity in Windows 10 was also reported to us recently. We have created a new driver that will fix the issue. This new driver is currently with our QA team and is scheduled for release, after it passes QA. That release could be as soon as next week. We will notify you when the driver is available for download.
Once the new driver is available you can receive it one of 2 ways, you can either accept the update when you are prompted by your system or download manually:
Ok, please help.
I have tried downloading the new driver, and I have tried the workaround.
According to trying to search on my computer, the driver doesn’t even exist. I tried searching through the Windows PowerShell as the Admin to delete the driver that way if I could find the error; again, the driver doesn’t even seem to exist on my computer to update OR delete, and yet… My Memory Integrity will not turn back on, because of this driver not being updated.
Does ANYONE have any idea what to do?!?!
I know I’m replying to your message Kat, specifically, but I’m hoping since you had the most detailed response/answer, you might have some more insight!
What worked so far for me, without YET connecting back the HD and or trying to install and WD software is by uninstalling the sinister driver! in my case I had: oem147.inf and oem19.inf
The recommendation I followed is to uninstall the driver using the command line pnputil /delete-driver oem.inf in my case I executed:
In my windows 11 Pro I opened the Powershell as adminstrator then:
pnputil /delete-driver oem147.inf [enter]
pnputil /delete-driver oem19.inf [enter]
Then reboot the computer and try again.
It just removed the drivers and listo! safe again.
Hi I also have the same issue with memory integrity and the sinister driver…I have 2 WD My Book duo’s I have tried the solution trying to delete the driver through powershell but with no luck and I don’t remember needing software originally, (it was a few years ago) its just plug n playI would really apprciate any help as it’s really starting to worry me that i’ll have to replace them… I can’t find a solution anywhere. Thanks in advance!
I use Windows 11 and having the same problem . Used the work around and entered “pnputil /delete-driver oem115.inf” only to receive the following, " “Failed to delete driver package: One or more devices are presently installed using the specified INF.”
as of 16 Sep22:
Finally was able to remove the golf-delta offending driver. In my instance, the odious driver was oem115. Used the following CMD line in Windows 11. Right click start>>Windows Terminal (Admin)>>select, yes>>type: pnputil /delete-driver oem115.inf /uninstall
Then tap “enter” or “return”
Instead of failure, Driver package uninstalled, Driver package deleted successfully. Then went back to Windows Defender>>memory integrity and was able to toggle to “on.” Prompted to restart to effect change .
The drive was running FAT32 but have converted to NTFS but no change. The drive is working fine but preventing memory isolation from working.
==
I followed instructions in the article listed below and improvised some as well.
This was a rough draft of my steps.
Remove external drive
Place laptop in Safe Mode
Open Device Driver
Select View and by Connections
Locate Western Digital devices (wdc…inf) oemxx.inf
Document the names then right click and delete (wdc…inf) oemxx.inf
Go to Windows/inf and delete .inf files located above.
Exit Windows and restart
Once within windows, plug in external drive.
The drive will require the driver needed and will install it. Mine was from 2006.
Running Windows Update will find a device driver for WDC_SAM under Options. Initially I did not install the driver, I later went back in and installed it without issue!
Once completed, go back into CPU Settings and enable Memory …
The driver is wdcsam64_prewin8.sys I have a duo my book duo im not sure of model no as i need help to move hard drive but alone atm. when i run commands it says it “Failed to delete driver package: One or more devices are presently installed using the specified INF.” please could some tell me how to solve the issue…Thanks in advance
System storage → disks and drives > My Passport (E:). Bit Locker on. Device Manager, driver removal and re-setting. So, Windows update for the driver. Reconnection. The core is again protected.
System storage → disks and drives > My Passport (E:). Bit Locker on. Device Manager, driver removal and re-setting. So, Windows update for the driver. Reconnection. The core is again protected. Windows 11.
I use Windows 11 and having the same problem . Used the work around and entered “pnputil /delete-driver oem115.inf” only to receive the following, " “Failed to delete driver package: One or more devices are presently installed using the specified INF.”
Finally was able to remove the golf-delta offending driver. In my instance, the odious driver was oem115. Used the following CMD line in Windows 11. Right click start>>Windows Terminal (Admin)>>select, yes>>type: pnputil /delete-driver oem115.inf /uninstall
Then tap “enter” or “return”
Instead of failure, Driver package uninstalled, Driver package deleted successfully. Then went back to Windows Defender>>memory integrity and was able to toggle to “on.” Prompted to restart to effect change .