Trend Micro Security

PUA.Win32.OpenCandy.PCF

2023年10月11日
 解析者: John Rainier Navato   
 別名:

Adware/OpenCandy (FORTINET)

 プラットフォーム:

Windows

 危険度:
 ダメージ度:
 感染力:
 感染確認数:
 情報漏えい:


  • マルウェアタイプ: 潜在的に迷惑なアプリケーション
  • 破壊活動の有無: なし
  • 暗号化:  
  • 感染報告の有無: はい

  概要

感染経路 インターネットからのダウンロード, 他のマルウェアからの作成

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

プログラムは、ワーム活動の機能を備えていません。

プログラムは、バックドア活動の機能を備えていません。

  詳細

ファイルサイズ 2,934,400 bytes
タイプ EXE
メモリ常駐 なし
発見日 2023年9月25日
ペイロード ファイルの作成, システムのレジストリの変更

侵入方法

プログラムは、他のマルウェアに作成されるか、悪意あるWebサイトからユーザが誤ってダウンロードすることによりコンピュータに侵入します。

インストール

プログラムは、以下のファイルを作成します。

  • %User Temp%\is-{Random}.tmp\{Malware File Name}.tmp → deleted afterwards
  • %User Temp%\is-{Random}.tmp\_isetup\_RegDLL.tmp → deleted afterwards
  • %User Temp%\is-{Random}.tmp\_isetup\_shfoldr.dll → deleted afterwards
  • %User Temp%\is-{Random}.tmp\OCSetupHlp.dll → deleted afterwards
  • %Program Files%\WinSCP\unins000.dat
  • %Program Files%\WinSCP\is-{Random}.tmp
  • %Program Files%\WinSCP\WinSCP.exe
  • %Program Files%\WinSCP\WinSCP.com
  • %Program Files%\WinSCP\WinSCP.ico
  • %Program Files%\WinSCP\licence
  • %Program Files%\WinSCP\DragExt.dll
  • %Program Files%\WinSCP\PuTTY\is-{Random}.tmp
  • %Program Files%\WinSCP\PuTTY\LICENCE
  • %Program Files%\WinSCP\PuTTY\putty.hlp
  • %Program Files%\WinSCP\PuTTY\pageant.exe
  • %Program Files%\WinSCP\PuTTY\is-E92B2.tmp
  • %Program Files%\WinSCP\PuTTY\puttygen.exe
  • %Common Programs%\WinSCP\WinSCP.lnk
  • %Common Programs%\WinSCP\WinSCP Web Site.url
  • %Common Programs%\WinSCP\Support forum.url
  • %Common Programs%\WinSCP\Documentation.url
  • %Common Programs%\WinSCP\Key tools\PuTTYgen.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTYgen Manual.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant Manual.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTY Web Site.url
  • %Desktop%\WinSCP.lnk
  • %Cookies%\SendTo\WinSCP (for upload).lnk
  • %Application Data%\winscp.rnd

プログラムは、以下のプロセスを追加します。

  • %User Temp%\is-{Random}.tmp\{Malware File Name}.tmp /SL5="${Random},{Malware File Path}\{Malware File Name}.exe"
  • %System%\regsvr32.exe /s "%Program Files%\WinSCP\DragExt.dll"
  • %Program Files%\WinSCP\WinSCP.exe /RegisterAsUrlHandler

(註：%User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。)

プログラムは、以下のフォルダを作成します。

  • %User Temp%\is-{Random}.tmp → deleted afterwards
  • %User Temp%\is-{Random}.tmp\_isetup → deleted afterwards
  • %Program Files%\WinSCP
  • %Program Files%\WinSCP\PuTTY
  • %Common Programs%\WinSCP
  • %Common Programs%\WinSCP\Key tools\

(註：%User Temp%フォルダは、現在ログオンしているユーザの一時フォルダです。Windows 2000(32-bit)、XP、Server 2003(32-bit)の場合、通常 "C:\Documents and Settings\＜ユーザー名＞\Local Settings\Temp"です。また、Windows Vista、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Users\＜ユーザ名＞\AppData\Local\Temp" です。. %Program Files%フォルダは、デフォルトのプログラムファイルフォルダです。C:\Program Files in Windows 2000(32-bit)、Server 2003(32-bit)、XP、Vista(64-bit)、7、8、8.1、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files"です。また、Windows XP(64-bit)、Vista(64-bit)、7(64-bit)、8(64-bit)、8.1(64-bit)、2008(64-bit)、2012(64-bit)、10(64-bit)の場合、通常 "C:\Program Files（x86）" です。. %Common Programs%フォルダは、共通プログラムグループが含まれるフォルダです。Windows 2000、XP、Server 2003の場合、通常 "C:\Documents and Settings\All Users\Start Menu\Programs" です。また、Windows Vista、7、8の場合、通常 "C:\ProgramData\Microsoft\Windows\Start Menu\Programs" です。)

他のシステム変更

プログラムは、インストールの過程で、以下のレジストリ値を追加します。

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
Interface = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowAdvancedLoginOptions = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDExtEnabled = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
RandomSeedFile = %25APPDATA%25%5Cwinscp.rnd

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttyRegistryStorageKey = Software%5CSimonTatham%5CPuTTY

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmOverwriting = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmResume = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
AutoReadDirectoryAfterOp = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenAuto = 5000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenBackground = 2000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenTimeout = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TunnelLocalPortNumberLow = 50000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TunnelLocalPortNumberHigh = 50099

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CacheDirectoryChangesMaxSize = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowFtpWelcomeMessage = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ContinueOnError = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmCommandSession = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeParams = 66

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeOptions = 5

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeModeAuto = 4294967295

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeMode = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
MaxWatchDirectories = 500

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
QueueTransfersLimit = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
QueueAutoPopup = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
QueueRememberPassword = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttySession = WinSCP%20temporary%20session

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttyPath = %25PROGRAMFILES%25%5CPuTTY%5Cputty.exe

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttyPassword = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TelnetForFtpInPutty = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
IgnoreCancelBeforeFinish = DF BC 9A 78 56 34 02 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
BeepOnFinish = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
BeepOnFinishAfter = 17 6C C1 16 6C C1 36 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeBrowsing = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
KeepUpToDateChangeDelay = 500

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ChecksumAlg = md5

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenAutoIdle = 5000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmExitOnCompletion = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CopyOnDoubleClick = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CopyOnDoubleClickConfirmation = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDAllowMove = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDAllowMoveInit = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDTransferConfirmation = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDTemporaryDirectory =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDWarnLackOfTempSpace = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDWarnLackOfTempSpaceRatio = 9A 99 99 99 99 99 F1 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DeleteToRecycleBin = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DimmHiddenFiles = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
RenameWholeName = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SelectDirectories = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SelectMask = %2A.%2A

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowHiddenFiles = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowInaccesibleDirectories = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmTransferring = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmDeleting = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmRecycling = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmClosingSession = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
AutoStartSession =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
UseLocationProfiles = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
UseSharedBookmarks = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
LocaleSafe = 1033

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDExtEnabled = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDExtTimeout = 1000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DefaultDirIsHome = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TemporaryDirectoryAppendSession = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TemporaryDirectoryAppendPath = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TemporaryDirectoryCleanup = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PreservePanelState = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
Theme = OfficeXP

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PathInCaption = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
MinimizeToTray = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
BalloonNotifications = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
NotificationsTimeout = 10

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
NotificationsStickTime = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CopyParamAutoSelectNotice = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionToolbarAutoShown = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
LockToolbars = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
AutoOpenInPutty = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
LastMonitor = 4294967295

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
VersionHistory = 40205624,stable

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
CurrentPanel = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
LocalPanelWidth = 00 00 00 00 00 00 E0 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
SwappedPanels = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
WindowParams = -1;-1;850;650;0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
ExplorerStyleSelection = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
PreserveLocalDirectory = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
CompareByTime = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
CompareBySize = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
FullRowSelect = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
TreeOnLeft = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0|0;1;2;3;4;5

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DriveView = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DriveViewHeight = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DriveViewWidth = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DriveView = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DriveViewHeight = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DriveViewWidth = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
ConsoleWin
WindowSize = 570,430

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
AddXToDirectories = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
Masks = %2A.%2Ahtml;%20%2A.htm;%20%2A.txt;%20%2A.php;%20%2A.php3;%20%2A.cgi;%20%2A.c;%20%2A.cpp;%20%2A.h;%20%2A.pas;%20%2A.bas;%20%2A.tex;%20%2A.pl;%20.htaccess;%20%2A.xtml;%20%2A.css;%20%2A.cfg;%20%2A.ini;%20%2A.sh;%20%2A.xml

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
FileNameCase = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
PreserveReadOnly = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
PreserveTime = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
PreserveRights = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
IgnorePermErrors = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
Text = rw-r--r--

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
TransferMode = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ResumeSupport = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ResumeThreshold = 00 90 01 00 00 00 00 00

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ReplaceInvalidChars = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
LocalInvalidChars = /%5C:%2A%3F"<>|

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
CalculateSize = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ExcludeFileMask =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
NegativeExclude = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ClearArchive = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
CPSLimit = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
Queue = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
QueueNoConfirmation = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
QueueIndividually = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
NewerOnly = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
CopyParamList = 4294967295

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontName = Courier%20New

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontHeight = 4294967284

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontStyle = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontCharset = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
WordWrap = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindTextA =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
ReplaceTextA =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindMatchCaseo = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindWholeWord = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindDown = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
TabSize = 7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
MaxEditors = 500

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
EarlyClose = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
SDIShellEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
WindowParams =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
FileMask = %2A.%2A

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
Editor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
ExternalEditor =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
ExternalEditorText = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
SDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
DetectMDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
FileMask = %2A.%2A

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
Editor = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
ExternalEditor = notepad.exe

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
ExternalEditorText = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
SDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
DetectMDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,1;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
LastLocalTargetDirectory = %System Root%%5CUsers%{Username}%5CDocuments

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
WindowParams = -1;-1;600;400;0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
ViewStyle = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
ShowFullAddress = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
DriveView = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
DriveViewWidth = 180

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
FindFile
WindowParams = 646,481

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
FindFile
ListParams = 3;1|125,1;181,1;80,1;122,1|0;1;2;3

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
NewDirectory
Valid = 00

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
Height = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
Layout = 70,160,160,80,80,80

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
Show = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
LastHideShow = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
ToolBar = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
SynchronizeChecklist
WindowParams = 0;-1;-1;600;450;0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
SynchronizeChecklist
ListParams = 1;1|150,1;100,1;80,1;130,1;25,1;100,1;80,1;130,1|0;1;2;3;4;5;6;7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Period = 7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
LastCheck = 00 00 00 00 00 00 00 00

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
HaveResults = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ShownResults = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
BetaVersions = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ConnectionType = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ProxyHost =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ProxyPort = 8080

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ForVersion = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Version = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Message =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Critical = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Release =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Disabled = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Url =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
UrlButton =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
Logging = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogFileName =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogFileAppend = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogWindowLines = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogProtocol = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogActions = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogView = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogWindowOnStartup = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogWindowParams = -1;-1;500;400

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Security
UseMasterPassword = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Security
MasterPasswordVerifier =

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2
DefaultInterfaceInterface = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2
DefaultInterfaceShowAdvancedLoginOptions = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2
DefaultUpdatesPeriod = 7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Setup Version = 5.2.3

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: App Path = %Program Files%\WinSCP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
InstallLocation = %Program Files%\WinSCP\

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Icon Group = WinSCP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: User = {Username}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Setup Type = {Set Up Type}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Selected Components = main,shellext,pageant,puttygen,transl,transl\eng

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Deselected Components = transl\cs,transl\de,transl\es,transl\fi,transl\it,transl\jp,transl\ko,transl\pl,transl\sv,transl\uk

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Selected Tasks = enableupdates,desktopicon,desktopicon\user,sendtohook,urlhandler

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Deselected Tasks = desktopicon\common,quicklaunchicon,searchpath

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
DisplayName = WinSCP 4.2.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
DisplayIcon = %Program Files%\WinSCP\WinSCP.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
UninstallString = "%Program Files%\WinSCP\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
QuietUninstallString = "%Program Files%\WinSCP\unins000.exe" /SILENT

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
DisplayVersion = 4.2.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Publisher = Martin Prikryl

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
URLInfoAbout = http://{BLOCKED}p.net/

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
HelpLink = http://{BLOCKED}p.net/forum/

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
URLUpdateInfo = http://{BLOCKED}p.net/eng/download.php

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
NoModify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
NoRepair = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
InstallDate = {Installation Date}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup CodeFile: SetupType = {Installation Type}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy
VOCV = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy
OCN = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed
VOCV = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
VOCV = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
Session = 01 00 00 00 03 04

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
PK = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
CRC = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
Installed = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CLSID}\InProcServer32
ThreadingModel = Apartment

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\DragExt
Enable = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP
URL Protocol =

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP
EditFlags = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP
BrowserFlags = 8

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP
URL Protocol =

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP
EditFlags = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP
BrowserFlags = 8

プログラムは、インストールの過程で、以下のレジストリキーを追加します。

HKEY_CURRENT_USER\Software\Martin Prikryl

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
Local

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
Remote

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
ShortCuts

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
Options

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\History

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\HistoryParams

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
ConsoleWin

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
FindFile

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
NewDirectory

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
SynchronizeChecklist

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Security

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CLSID}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CLSID}\InProcServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Directory\shellex\CopyHookHandlers\
WinSCPCopyHook

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\DragExt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\shell

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\shell\open

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\shell\open\
command

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\shell

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\shell\open

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\shell\open\
command

感染活動

プログラムは、ワーム活動の機能を備えていません。

バックドア活動

プログラムは、バックドア活動の機能を備えていません。

ルートキット機能

プログラムは、ルートキット機能を備えていません。

その他

マルウェアは、脆弱性を利用した感染活動を行いません。

  対応方法

対応検索エンジン: 9.800
SSAPI パターンバージョン: 2.665.00
SSAPI パターンリリース日: 2023年10月12日

手順 1

Windows 7、Windows 8、Windows 8.1、および Windows 10 のユーザは、コンピュータからマルウェアもしくはアドウェア等を完全に削除するために、ウイルス検索の実行前には必ず「システムの復元」を無効にしてください。

手順 2

このマルウェアもしくはアドウェア等の実行により、手順中に記載されたすべてのファイル、フォルダおよびレジストリキーや値がコンピュータにインストールされるとは限りません。インストールが不完全である場合の他、オペレーティングシステム（OS）の条件によりインストールがされない場合が考えられます。手順中に記載されたファイル／フォルダ／レジストリ情報が確認されない場合、該当の手順の操作は不要ですので、次の手順に進んでください。

手順 3

このレジストリ値を削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0|0;1;2;3;4;5
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DriveView = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DriveViewHeight = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DriveViewWidth = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DriveView = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DriveViewHeight = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DriveViewWidth = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • CurrentPanel = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • LocalPanelWidth = 00 00 00 00 00 00 E0 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • SwappedPanels = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • WindowParams = -1;-1;850;650;0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • ExplorerStyleSelection = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • PreserveLocalDirectory = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • CompareByTime = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • CompareBySize = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • FullRowSelect = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • TreeOnLeft = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin
    • WindowSize = 570,430
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • AddXToDirectories = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • Masks = %2A.%2Ahtml;%20%2A.htm;%20%2A.txt;%20%2A.php;%20%2A.php3;%20%2A.cgi;%20%2A.c;%20%2A.cpp;%20%2A.h;%20%2A.pas;%20%2A.bas;%20%2A.tex;%20%2A.pl;%20.htaccess;%20%2A.xtml;%20%2A.css;%20%2A.cfg;%20%2A.ini;%20%2A.sh;%20%2A.xml
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • FileNameCase = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • PreserveReadOnly = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • PreserveTime = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • PreserveRights = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • IgnorePermErrors = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • Text = rw-r--r--
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • TransferMode = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ResumeSupport = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ResumeThreshold = 00 90 01 00 00 00 00 00
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ReplaceInvalidChars = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • LocalInvalidChars = /%5C:%2A%3F"<>|
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • CalculateSize = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ExcludeFileMask
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • NegativeExclude = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ClearArchive = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • CPSLimit = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • Queue = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • QueueNoConfirmation = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • QueueIndividually = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • NewerOnly = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • CopyParamList = 4294967295
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • FileMask = %2A.%2A
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • Editor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • ExternalEditor
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • ExternalEditorText = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • SDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • DetectMDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • FileMask = %2A.%2A
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • Editor = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • ExternalEditor = notepad.exe
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • ExternalEditorText = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • SDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • DetectMDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontName = Courier%20New
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontHeight = 4294967284
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontStyle = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontCharset = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • WordWrap = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindTextA
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • ReplaceTextA
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindMatchCase = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindWholeWord = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindDown = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • TabSize = 7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • MaxEditors = 500
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • EarlyClose = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • SDIShellEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • WindowParams
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,1;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • LastLocalTargetDirectory = %System Root%%5CUsers%{Username}%5CDocuments
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • WindowParams = -1;-1;600;400;0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • ViewStyle = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • ShowFullAddress = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • DriveView = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • DriveViewWidth = 180
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile
    • WindowParams = 646,481
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile
    • ListParams = 3;1|125,1;181,1;80,1;122,1|0;1;2;3
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory
    • Valid = 00
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • Height = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • Layout = 70,160,160,80,80,80
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • Show = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • LastHideShow = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • ToolBar = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist
    • WindowParams = 0;-1;-1;600;450;0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist
    • ListParams = 1;1|150,1;100,1;80,1;130,1;25,1;100,1;80,1;130,1|0;1;2;3;4;5;6;7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Period = 7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • LastCheck = 00 00 00 00 00 00 00 00
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • HaveResults = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ShownResults = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • BetaVersions = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ConnectionType = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ProxyHost
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ProxyPort = 8080
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ForVersion = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Version = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Message
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Critical = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Release
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Disabled = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Url
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • UrlButton
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Interface = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowAdvancedLoginOptions = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDExtEnabled = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • RandomSeedFile = %25APPDATA%25%5Cwinscp.rnd
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttyRegistryStorageKey = Software%5CSimonTatham%5CPuTTY
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmOverwriting = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmResume = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • AutoReadDirectoryAfterOp = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenAuto = 5000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenBackground = 2000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenTimeout = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TunnelLocalPortNumberLow = 50000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TunnelLocalPortNumberHigh = 50099
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CacheDirectoryChangesMaxSize = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowFtpWelcomeMessage = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ContinueOnError = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmCommandSession = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeParams = 66
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeOptions = 5
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeModeAuto = 4294967295
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeMode = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • MaxWatchDirectories = 500
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueTransfersLimit = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueAutoPopup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueRememberPassword = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttySession = WinSCP%20temporary%20session
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttyPath = %25PROGRAMFILES%25%5CPuTTY%5Cputty.exe
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttyPassword = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TelnetForFtpInPutty = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • IgnoreCancelBeforeFinish = DF BC 9A 78 56 34 02 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • BeepOnFinish = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • BeepOnFinishAfter = 17 6C C1 16 6C C1 36 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeBrowsing = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • KeepUpToDateChangeDelay = 500
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ChecksumAlg = md5
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenAutoIdle = 5000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmExitOnCompletion = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyOnDoubleClick = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyOnDoubleClickConfirmation = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDAllowMove = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDAllowMoveInit = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDTransferConfirmation = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDTemporaryDirectory
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDWarnLackOfTempSpace = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDWarnLackOfTempSpaceRatio = 9A 99 99 99 99 99 F1 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DeleteToRecycleBin = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DimmHiddenFiles = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • RenameWholeName = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SelectDirectories = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SelectMask = %2A.%2A
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowHiddenFiles = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowInaccesibleDirectories = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmTransferring = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmDeleting = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmRecycling = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmClosingSession = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • AutoStartSession
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • UseLocationProfiles = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • UseSharedBookmarks = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • LocaleSafe = 1033
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDExtEnabled = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDExtTimeout = 1000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DefaultDirIsHome = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TemporaryDirectoryAppendSession = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TemporaryDirectoryAppendPath = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TemporaryDirectoryCleanup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmTemporaryDirectoryCleanup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PreservePanelState = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Theme = OfficeXP
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PathInCaption = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • MinimizeToTray = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • BalloonNotifications = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • NotificationsTimeout = 10
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • NotificationsStickTime = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyParamAutoSelectNotice = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionToolbarAutoShown = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • LockToolbars = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • AutoOpenInPutty = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • LastMonitor = 4294967295
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • VersionHistory = 40205624,stable
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • Logging = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogFileName
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogFileAppend = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogWindowLines = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogProtocol = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogActions = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogView = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogWindowOnStartup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogWindowParams = -1;-1;500;400
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security
    • UseMasterPassword = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security
    • MasterPasswordVerifier
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CLSID}\InProcServer32
    • ThreadingModel = Apartment
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • URL Protocol
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • EditFlags = 2
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • BrowserFlags = 8
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • URL Protocol
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • EditFlags = 2
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • BrowserFlags = 8
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\DragExt
    • Enable = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
    • GlobalAssocChangedCounter = {Random Hex Value}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • VOCV = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • Session = 01 00 00 00 03 04
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • PK = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • CRC = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • Installed = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed
    • VOCV = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy
    • VOCV = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy
    • OCN = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DefaultInterfaceInterface = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DefaultInterfaceShowAdvancedLoginOptions = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DefaultUpdatesPeriod = 7
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Setup Version = 5.2.3
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: App Path = %Program Files%\WinSCP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • InstallLocation = %Program Files%\WinSCP\
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Icon Group = WinSCP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: User = {Username}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Setup Type = {Set Up Type}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Selected Components = main,shellext,pageant,puttygen,transl,transl\eng
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Deselected Components = transl\cs,transl\de,transl\es,transl\fi,transl\it,transl\jp,transl\ko,transl\pl,transl\sv,transl\uk
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Selected Tasks = enableupdates,desktopicon,desktopicon\user,sendtohook,urlhandler
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Deselected Tasks = desktopicon\common,quicklaunchicon,searchpath
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • DisplayName = WinSCP 4.2.5
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • DisplayIcon = %Program Files%\WinSCP\WinSCP.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • UninstallString = "%Program Files%\WinSCP\unins000.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • QuietUninstallString = "%Program Files%\WinSCP\unins000.exe" /SILENT
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • DisplayVersion = 4.2.5
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Publisher = Martin Prikryl
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • URLInfoAbout = http://{BLOCKED}p.net/
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • HelpLink = http://{BLOCKED}p.net/forum/
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • URLUpdateInfo = http://{BLOCKED}p.net/eng/download.php
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • NoModify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • NoRepair = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • InstallDate = {Installation Date}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup CodeFile: SetupType = {Installation Type}

手順 4

不明なレジストリキーを削除します。

[ 詳細 ]

警告：レジストリはWindowsの構成情報が格納されているデータベースであり、レジストリの編集内容に問題があると、システムが正常に動作しなくなる場合があります。
レジストリの編集はお客様の責任で行っていただくようお願いいたします。弊社ではレジストリの編集による如何なる問題に対しても補償いたしかねます。
レジストリの編集前にこちらをご参照ください。

  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • Local
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • Remote
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • ShortCuts
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • Options
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Bookmarks
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • History
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • HistoryParams
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • LocalPanel
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • RemotePanel
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Commander
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConsoleWin
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyParam
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Editor
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Explorer
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • FindFile
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • NewDirectory
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueView
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeChecklist
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Updates
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Interface
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Logging
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Security
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2
    • Configuration
  • In HKEY_CURRENT_USER\Software\Martin Prikryl
    • WinSCP 2
  • In HKEY_CURRENT_USER\Software
    • Martin Prikryl
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CLSID}
    • InProcServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {CLSID}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers
    • WinSCPCopyHook
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • DefaultIcon
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP\shell\open
    • command
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP\shell
    • open
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • shell
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
    • SCP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • DefaultIcon
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP\shell\open
    • command
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP\shell
    • open
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • shell
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
    • SFTP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DragExt
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed
    • {Random}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy
    • Completed
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • OpenCandy
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl
    • WinSCP 2
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • Martin Prikryl
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • winscp3_is1

手順 5

以下のファイルを検索し削除します。

[ 詳細 ]
コンポーネントファイルが隠しファイル属性の場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。  
  • %User Temp%\is-{Random}.tmp\{Malware File Name}.tmp
  • %User Temp%\is-{Random}.tmp\_isetup\_RegDLL.tmp
  • %User Temp%\is-{Random}.tmp\_isetup\_shfoldr.dll
  • %User Temp%\is-{Random}.tmp\OCSetupHlp.dll
  • %Program Files%\WinSCP\unins000.dat
  • %Program Files%\WinSCP\is-{Random}.tmp
  • %Program Files%\WinSCP\WinSCP.exe
  • %Program Files%\WinSCP\WinSCP.com
  • %Program Files%\WinSCP\WinSCP.ico
  • %Program Files%\WinSCP\licence
  • %Program Files%\WinSCP\DragExt.dll
  • %Program Files%\WinSCP\PuTTY\is-{Random}.tmp
  • %Program Files%\WinSCP\PuTTY\LICENCE
  • %Program Files%\WinSCP\PuTTY\putty.hlp
  • %Program Files%\WinSCP\PuTTY\pageant.exe
  • %Program Files%\WinSCP\PuTTY\is-E92B2.tmp
  • %Program Files%\WinSCP\PuTTY\puttygen.exe
  • %Common Programs%\WinSCP\WinSCP.lnk
  • %Common Programs%\WinSCP\WinSCP Web Site.url
  • %Common Programs%\WinSCP\Support forum.url
  • %Common Programs%\WinSCP\Documentation.url
  • %Common Programs%\WinSCP\Key tools\PuTTYgen.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTYgen Manual.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant Manual.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTY Web Site.url
  • %Desktop%\WinSCP.lnk
  • %Cookies%\SendTo\WinSCP (for upload).lnk
  • %Application Data%\winscp.rnd

手順 6

以下のフォルダを検索し削除します。

[ 詳細 ]
フォルダが隠しフォルダ属性に設定されている場合があります。[詳細設定オプション]をクリックし、[隠しファイルとフォルダの検索]のチェックボックスをオンにし、検索結果に隠しファイルとフォルダが含まれるようにしてください。
  • %User Temp%\is-{Random}.tmp\_isetup
  • %User Temp%\is-{Random}.tmp
  • %Program Files%\WinSCP\PuTTY
  • %Program Files%\WinSCP
  • %Common Programs%\WinSCP\Key tools
  • %Common Programs%\WinSCP

手順 7

最新のバージョン（エンジン、パターンファイル）を導入したウイルス対策製品を用い、ウイルス検索を実行してください。「PUA.Win32.OpenCandy.PCF」と検出したファイルはすべて削除してください。 検出されたファイルが、弊社ウイルス対策製品により既に駆除、隔離またはファイル削除の処理が実行された場合、ウイルスの処理は完了しており、他の削除手順は特にありません。


ご利用はいかがでしたか？　アンケートにご協力ください