Attention: We will be transitioning to a new AAD or Microsoft Entra ID from the week of May 20, 2024. In case your tenant requires admin consent, please refer to this document located at Overview of user and admin consent - Microsoft Entra ID | Microsoft Learn and grant access to App ID: 6ba09155-cb24-475b-b24f-b4e28fc74365 with graph permissions for Directory.Read.All and User.Read for continued access.

We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names

Published Feb 06, 2017 | Updated Feb 02, 2023

Learn about other threats

EUS:Win32/CustomEnterpriseBlock!cl

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

Microsoft Defender Vulnerability Management enables support for your IT security administrators to block vulnerable application versions.

If you receive this detection, it means that you are running a vulnerable version of the application that has been blocked. Your security administrator requires you to install an updated version.

Update the blocked application to the latest version and re-install it. If you have any further questions, contact with your IT adminstrator.

Get more help

Refer to Microsoft Defender Vulnerability Management's documentation on documentation on block vulnerable applications capability for details.

EUS:Win32/CustomEnterpriseBlock!cl

Summary

What to do now

Get more help

Technical information

Threat behavior

Prevention

Symptoms