Mystic Light Driver: ene.sys flagged as a "Vulnerable Driver"

tamanac153702d2

New member
Joined
Jul 2, 2021
Messages
14
The Mystic Light ene.sys driver is prevented from loading when Windows 11 Device Security -> Core Isolation -> Memory Integrity (Memory Access Protection) is "Enabled". It fails to load when Windows starts. This driver is also flagged when I install SteelSeries GG 16.1.0. - I don't if this driver is needed for some useful feature as everything appears to be working fine without it being loaded. I close the pop up when I restart my G76 Raider 11UG and go about my business. Does anyone know of a way of fixing this issue without disabling Memory Access Protection?
1648502139647.png
 

tamanac153702d2

New member
Joined
Jul 2, 2021
Messages
14
Today I updated SteelSeries GG from 16.1.0 to 17.0.0 and Mystic Light from 3.0.0.07 to 3.0.0.09, but the Memory Access Protection still blocked the ene.sys from these new releases from loading. The last line of the pop up on my previous post reads... "You'll need to adjust your settings to load this driver"... I have no found any settings I can "adjust" to add an "exception" for the ene.sys driver to the Memory Integrity check in Windows 11. The only way I can get this driver to load is completely disable (turn off) Memory Integrity. Is there a way to add such an exception for trusted drivers without loosing the protection that Memory Integrity provides?

1648580566150.png
 
D

Deleted member 960680

Guest
Isolation of the memory core is the biggest problem in the operating system, it blocks some drivers and processor undervolting.
With the problem you are facing, you need to contact the MSI support service, only they can fix this problem.
 
Joined
May 3, 2021
Messages
51
Part of the problem is that the Security Certificate has been Expired for awhile now. So the file needs to be replaced with a newer up-to-date file.

Certificate.jpg
 

tamanac153702d2

New member
Joined
Jul 2, 2021
Messages
14
sybrwzar14c602c7 - Have you found an updated replacement that works?... I recently updated SteelSeries GG to 20.1.0 and Mystic to 3.0.0.15, but apparently the ene.sys file has not been updated as the one installed in my GE76 shares the same characteristics as the one you detailed on your post.
 
Joined
Jan 13, 2021
Messages
543
Ene.sys is a Windows driver. A driver is a small software program that allows your computer to communicate with hardware or connected devices.
.
This file is related to windows. If having the problem with this file, try perform windows update to check.
 

tamanac153702d2

New member
Joined
Jul 2, 2021
Messages
14
stormbody091150502d6
Thanks for your reply, I know very well what a Windows driver is. Updating Windows does not fix the issue (updates this driver). As far as I know this driver is installed/updated by Mystic Light and/or SteelSeries GG. The issue "might be", as someone else mentioned, that the certificate for the driver is expired and the new Core Isolation function of Windows 11 flags it as vulnerable. Disabling the Memory Integrity function of Core Isolation, as mentioned above, allows the driver to load. Windows Update does not update this driver with the Memory Integrity turned on/off.
 
Joined
May 3, 2021
Messages
51
I looked into this as deep as I could. My guess is it's being installed by any software which uses RGB.

The software itself does not have a separate uninstaller and all aspects of the software has expired Certificates for each and every file.
The apparent company seems to be EneTechIo.
Companies such as MSI, GSkill, AMD and others appear to include this crap in there software and need to be told to stop using it.
I forgot to write down the installer file name before deleting the first 14 explorer entries listed below.

Hope this helps other.

Here is what I found which should help others with removing this garbage from their system.
++++++++++++++++++++++++++++++++++++++
Windows Explorer entries -

C:\ProgramData\Package Cache\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}v1.0.5.1
C:\ProgramData\Package Cache\{5A6AC577-F8F8-4B6A-B684-13FD7E306CA2}v1.0.1.0
C:\ProgramData\Package Cache\{5d801c90-9d81-4c67-be5b-07e5855dc22e}
C:\ProgramData\Package Cache\{9c94735f-73fd-4b0f-9ddb-8be7b3cc4681}
C:\ProgramData\Package Cache\{9E97178A-ADB8-4778-BE60-7E28E2A72721}v1.0.2.0
C:\ProgramData\Package Cache\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}v1.0.8.13
C:\ProgramData\Package Cache\{50ec3a07-291b-463e-be86-487eb8cbb71c}
C:\ProgramData\Package Cache\{54d3d2b5-db16-446d-b6dd-f4964b166b3b}
C:\ProgramData\Package Cache\{085E2365-0A70-4230-B664-02D5E4FE7E9C}v1.0.12.0
C:\ProgramData\Package Cache\{1745D314-9077-46C9-8562-1C62BAE189B7}v1.0.2.33
C:\ProgramData\Package Cache\{a1d1ba00-92b7-4a99-8ebd-65b25c0e9e44}
C:\ProgramData\Package Cache\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}v1.0.9.0
C:\ProgramData\Package Cache\{bf49eb2f-f2fb-4631-a95a-1f0cadd21eac}
C:\ProgramData\Package Cache\{c2c794a4-7986-4c45-884d-d4ca43b88df9}

C:\Program Files\ENE
C:\Program Files (x86)\ENE

C:\Windows\System32\drivers\ene.sys
+++++++++++++++++++++++++++++++++
Registry Entries

ene.sys search

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AE1B25DB339168C42A745FCE09BFF2B4

HKEY_LOCAL_MACHINE\SYSTEM\Setup\FirstBoot\Services\EneTechIo

ene.dll search

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\05D7E68FF395CF140A226A40AECD1157

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\DCACC46FE512EF24787541752100F6AF

Aac_ENE search

HKEY_CLASSES_ROOT\CLSID\{10B0F14F-B9CB-41FC-9DAA-FCDE6EBA0A50}

HKEY_CLASSES_ROOT\CLSID\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}

HKEY_CLASSES_ROOT\CLSID\{3E259E0F-64D8-4B96-A486-E964EAFA621A}

HKEY_CLASSES_ROOT\CLSID\{84D8717B-4E1F-4607-9C1A-14E1BDB7B675}

HKEY_CLASSES_ROOT\CLSID\{D37DAC4A-CEDC-453D-8659-6AD9451C9AA8}

HKEY_CLASSES_ROOT\CLSID\{D405CAFF-3989-47E6-88B5-10617CE754FF}

HKEY_CLASSES_ROOT\CLSID\{DF392B70-BBFC-4A99-A269-C0B56CDA7757}

HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{10B0F14F-B9CB-41FC-9DAA-FCDE6EBA0A50}

HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}

HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{3E259E0F-64D8-4B96-A486-E964EAFA621A}

HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{84D8717B-4E1F-4607-9C1A-14E1BDB7B675}

HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{D37DAC4A-CEDC-453D-8659-6AD9451C9AA8}

HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{D405CAFF-3989-47E6-88B5-10617CE754FF}

HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{DF392B70-BBFC-4A99-A269-C0B56CDA7757}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders
C:\Program Files\ENE\
C:\Program Files\ENE\Aac_ENE_AIC_Marvell_HAL\
C:\Program Files\ENE\Aac_ENE_DRAM_GSKILL_SE\
C:\Program Files\ENE\Aac_ENE_DRAM_GSKILL_SE\x64\
C:\Program Files\ENE\Aac_ENE_DRAM_GSKILL_SE\x86\
C:\Program Files\ENE\Aac_ENE_DRAM_RGB_AIO\
C:\Program Files\ENE\Aac_ENE_DRAM_RGB_AIO\x64\
C:\Program Files\ENE\Aac_ENE_DRAM_RGB_AIO\x86\
C:\Program Files\ENE\Aac_ENE_EHD_M2_HAL\
C:\Program Files\ENE\Aac_ENE_MousePad_HAL\
C:\Program Files\ENE\Aac_ENE_QSI_Loki_HAL\
C:\Program Files\ENE\Aac_ENE_X-JMI_HAL\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\Aac_ENE_AIC_Marvell_HAL\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\Aac_ENE_DRAM_GSKILL_SE\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\Aac_ENE_DRAM_RGB_AIO\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\Aac_ENE_EHD_M2_HAL\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\Aac_ENE_MousePad_HAL\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\Aac_ENE_QSI_Loki_HAL\
C:\Users\ADMINI~1\AppData\Local\Temp\ENE\Aac_ENE_X-JMI_HAL\

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0F81DFCF8F454BD578675E31A74BEB8D

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\1D27D01450F98B9518BEE1E3E25D47ED

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2784E8F0BEB77265CA997204DDF2DCE7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\279395F7C6E4B845BA66AEF5AF63B12D

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\29921202EE39A5858A0E60419602DD30

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2F8818CED1DB9184D9B0BF2D4356D180

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\338E184B347EEAE58B0BE5E5EBCD7A09

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\355D2697FEC32A941BD829510F8AD182

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3DAB01BFCADA43E51B903DA87F70B1CD

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\3FF64AF944683164F97E8BB40915AC0B

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\4B6477B9E58EDB857B1578F6F72D772C

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\501FC0793743E7D52BE93083F7FF321D

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\541A7099C0D271650B99D6EBDFDE8DB1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5C69C647D6BD7A354B624CDCA8A5C8D1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6012A4B3667AE9B53AEDA9F24C9B0DC4

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6337BE8C14C01A5589CB6C98FB23BCFE

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\67C2DA35ED948184895549A1838B0710

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6AE9B27C6C680835BBF579C812E1DAD7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\6D909E87ABCDE65538A03934547BDD64

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\74325EA4BA96C20519F1AAF1C8523676

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\7FDF75845CC9F9656817CFD6B982F60B

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\918C4CAAE69DCDD5791FCE9939693C57

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\9A55825E142EFF954B739B4B5B438A99

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A0E7211F420035A578A55DF24B4DDC1A

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A18A7DC0CA6794A558C48F4A3AA03B12

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\A5E03E10858F4AE52A2721E160404FA1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ABD45D5A7A3FCB85AA3364FD7677DE4F

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AC160C31E3D07A358A513F84F109B236

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ACE34210AA305DA5387B95B52422FCD0

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\AF61EFC84193FFC559ED39B6CF37B771

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\B4D27B73F03D45647823C3F17597C6F2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\BA5E186BE299F01509C6B926258E922B

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\C8AACB5F77A070E529F9655E1699073F

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\D4BF07B6786ECA75C8536564917F535F

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E0BC8A07E8950715A8FA0C6DA5492524

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\E18C482E158726D47B1E7703B5FDE37E

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\EC4E17D32FC0C295D88A8B679A8DFFD6

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\ECED739DD8D6B00558FF169B3A664373

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F25831A4A47568B5BA16F7C505660694

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F2D4C21DAEFEC214B8B42EF1589179AA

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F4969F15269D13B5EBEFF545A18E88FA

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FD2D5A0BAA3411554B77A63821AAF926
 

tamanac153702d2

New member
Joined
Jul 2, 2021
Messages
14
I just updated Mystic Light to version 3.0.0.19 via MSI Center on my Ge76 and this update "apparently" fixed the issue with the ene.sys driver being flagged as vulnerable by Core Isolation/Memory Integrity and not loading on startup.
 

merlooo

New member
PRIVATE E-2
Joined
Oct 17, 2017
Messages
4
Hi

i have to confirm that this problem is again present after Windows 11 update to 2H22.

MSI Center ver. 1.0.59.0

Mystic Light ver. 3.0.0.23

I suppose that i have to wait for update?

Thanks
 

zebulon3014f802cb

New member
Joined
Oct 1, 2020
Messages
2
Yes just updated to 2H22 this morning and I have the issue.
But I went to MSI Control and updated Mystic Light to ver 3.0.1.34, problem solved ;-)
 
Last edited:

wayner

New member
Joined
Nov 8, 2017
Messages
2
I'm getting the same ene.sys error following W11 2H22 update. I'm on an Alpha 15 A3DDK, running MSI Center 1.0.59.0 and have the latest version of Mystic Light - 3.0.0.23. Same expired certificate as mentioned above by sybrwzar14c602c7. I don't think the later version of Mystic Light is available for older machines. I'm thinking of just uninstalling it the hard way.

.
 

OnlyAlex

Member
Joined
Aug 18, 2022
Messages
32
I am getting the same error since upgrading to Windows 11 22H2 - I don't have mystic lights installed though. Can anyone advise?
 
Top