Page 1 of 1

'CustomCertEnterpriseBlock' malware - XCopy

Posted: 26 Aug 2022 01:30
by chierchio
Hi,

I have recently updated XYPlorer to v23.50.0200. I use the portable version.
There haven't been any issues until today when I received a malware notice for Xcopy.exe

File Info: XYcopy.exe
File Path: E:\Portable Apps\XYPlorer
Risk: 'CustomCertEnterpriseBlock' malware was prevented. Malware and unwanted software are undesirable applications that perform annoying, disruptive, or harmful actions on affected machines. Some of these undesirable applications can replicate and spread from one machine to another. Others are able to receive commands from remote attackers and perform activities associated with cyber attacks. This detection might indicate that the malware was stopped from delivering its payload. However, it is prudent to check the machine for signs of infection.

I don't use XCopy.exe. Is this normally installed with XYPlorer when updating?

Thanks

Re: 'CustomCertEnterpriseBlock' malware - XCopy

Posted: 26 Aug 2022 01:58
by chierchio
Now it happened to XYPlorer.exe portable.
Had to delete - use it at client location

Re: 'CustomCertEnterpriseBlock' malware - XCopy

Posted: 26 Aug 2022 08:40
by admin
It's a false positive, of course. I cannot do anything about it. They will correct it sooner or later.

Re: 'CustomCertEnterpriseBlock' malware - XCopy

Posted: 26 Aug 2022 16:07
by chierchio
Understood