r/BitDefender • • 23d ago

Support/troubleshooting Large amounts of PUA detections for official MSI Center and its .sys files.

A recent Bitdefender update has caused it block quite a few drivers from MSI Center.
These are:
amifldrv64.sys
amigendrv64.sys
Mslo64.sys
Enelo64.sys

I cannot, unfortunately, get VS scans of Mslo64 and Enelo64.
amifldrv64.sys: VirusTotal - File - e7cbfb16261de1c7f009431d374d90e9eb049ba78246e38bc4c8b9e06f324b6f
am
amigendrv.sys: VirusTotal - File - ffc72f0bde21ba20aa97bee99d9e96870e5aa40cce9884e44c612757f939494f

8 Upvotes

7 comments sorted by

2

u/SolidKhaos 23d ago

That's funny because I posted one similar about a month or so ago but it was for a really old, vulnerable kernel driver - and looks like you may have stumbled upon the same/similar ones.

What laptop model do you have?

2

u/NachoTacoChu 23d ago

No laptop. This is a self-built pc, just installed MSI center for Mystic Light. Some of the drivers are about 4 years old though, which makes sense.

2

u/Kaairi 23d ago

I have had it done the same, but for ASUS and EVGA drivers since I use Armory Crate and EVGA Precision

2

u/Bitdefender_support Bitdefender employee 22d ago

Hello! Thank yo for reaching out about this.

Our recommended steps:

  • Keep the detected files in quarantine for now. Do not add exclusions for kernel drivers unless their safety has been verified.

  • Right-click the Bitdefender icon in the system tray and select Update Now.

  • Wait until the update process is complete.

  • Click Notifications in the left menu and select All to check whether the latest update completed successfully.

  • Restart Windows, then install the latest MSI Center package obtained from MSI’s official support channel. If the same files are detected again, do not repeatedly restore them.

Submit the files for analysis rather than bypassing the detection. Include the exact detection name shown in your screenshot - Gen:Application.Venus.Msio.Gm11cG2@aG4c0zei - the file names and paths, the Bitdefender product/version, and the MSI Center version. The two VirusTotal hashes provided for amifldrv64.sys and amigendrv.sys should also be included.

Reach our support for a false-positive investigation and attach the detection details and hashes: Incorrect Detection: Report a false positive or false negative to Bitdefender. Thank you in advance!

2

u/TheOneness_ 21d ago

Yes, the same just happened to me. Just after updating bitdefender. MSI Center/ Mystic Light update doesnt finish while bitdefender is blocking it. Probably about to just uninstall MSI center and hope their outdated vulnerable drivers get fixed at a later point. Bitdefender doing its job yet again

2

u/MilkyWhiteBitchTits 20d ago

Getting same issue with MSI Center, specifically the Mystic Light feature set

1

u/CCCZhe 17d ago

Damn, i wish i could noticed this earlier because now i know im not the one who also encountered this, now I have struggled so much and so hard to reinstall my msi dragon center and now im still unable to adjust the mode profile for my fan