'CustomCertEnterpriseBlock' malware - XCopy

Things you’d like to miss in the future...
Forum rules
:warnred20: :warnred20: :warnred20: :warnred20: :warnred20: READ THIS AND DO IT!!! :warnred20: :warnred20: :warnred20: :warnred20: :warnred20:

:info: Please include the following information:
1) Your XYplorer Version (e.g., v28.00.0801)
2) Your Windows Version (e.g., Win 11)
3) Your Screen Scaling Percentage (e.g., 125%).

:info: We strongly recommend adding your Windows Version and Screen Scaling Percentage to the Location field in your Profile or to your Signature. That way, you only have to type them once, and we won't have to search for that vital information.

:info: When attaching an Image, please use the Attachment tab at the bottom of your post and click "Add files".

:warnred20: :warnred20: :warnred20: :warnred20: :warnred20: READ THIS AND DO IT!!! :warnred20: :warnred20: :warnred20: :warnred20: :warnred20:
Post Reply
chierchio
Posts: 7
Joined: 29 Nov 2020 23:00

'CustomCertEnterpriseBlock' malware - XCopy

Post by chierchio »

Hi,

I have recently updated XYPlorer to v23.50.0200. I use the portable version.
There haven't been any issues until today when I received a malware notice for Xcopy.exe

File Info: XYcopy.exe
File Path: E:\Portable Apps\XYPlorer
Risk: 'CustomCertEnterpriseBlock' malware was prevented. Malware and unwanted software are undesirable applications that perform annoying, disruptive, or harmful actions on affected machines. Some of these undesirable applications can replicate and spread from one machine to another. Others are able to receive commands from remote attackers and perform activities associated with cyber attacks. This detection might indicate that the malware was stopped from delivering its payload. However, it is prudent to check the machine for signs of infection.

I don't use XCopy.exe. Is this normally installed with XYPlorer when updating?

Thanks

chierchio
Posts: 7
Joined: 29 Nov 2020 23:00

Re: 'CustomCertEnterpriseBlock' malware - XCopy

Post by chierchio »

Now it happened to XYPlorer.exe portable.
Had to delete - use it at client location

admin
Site Admin
Posts: 66619
Joined: 22 May 2004 16:48
Location: Win8.1, Win10, Win11, all @100%
Contact:

Re: 'CustomCertEnterpriseBlock' malware - XCopy

Post by admin »

It's a false positive, of course. I cannot do anything about it. They will correct it sooner or later.

chierchio
Posts: 7
Joined: 29 Nov 2020 23:00

Re: 'CustomCertEnterpriseBlock' malware - XCopy

Post by chierchio »

Understood

Post Reply