Carbon Black Cloud Sensor is reporting XIDE toolbox contains Malware

Neil · Post by **Neil** » Thu Apr 16, 2020 9:15 pm

sadly I still haven't had the time I want to play with X#, but now my IT is concerned with this.

C:xidexitoolbox.exe is being reported and blocked as containing malware by Carbon Black.

not sure what to tell them as I want to switch off VO to X# and this might cause difficulty.

-Neil

FFF · Post by **FFF** » Fri Apr 17, 2020 7:37 am

Took the exe to virustotal.com - 69 scanners had no complaint, one suspected it, because it's download rate is "low", and one claimed malicious, probably because the file is not signed...

Chris · Post by **Chris** » Fri Apr 17, 2020 8:27 am

Hi Neil,

I suspect the antivirus blocks it, because the code uses reflection, to read data from 3rd party controls. Of course this antivurus craze is pure madness, this exe is very small and its full code easily readable with a tool like ILSpy to see and make sure there's absolutely nothing "mal" about it.

But in any case, you can also safely simply delete this file. It is being used only when wanting to add 3rd party controls to the toolbox, a functionality you can live without.

Neil · Post by **Neil** » Mon Apr 20, 2020 1:27 am

Thanks both for the reply. I appreciate it. Definitely prefer to head this off before IT comes to me.