Author: John Rainier Navato   
 

Adware/OpenCandy (FORTINET)

 PLATFORM:

Windows

 OVER ALL RISK RATING:
 DAMAGE POTENTIAL::
 DISTRIBUTION POTENTIAL::
 REPORTED INFECTION:
 INFORMATION EXPOSURE:
Low
Medium
High
Critical

  • Threat Type:
    Potentially Unwanted Application

  • Destructiveness:
    No

  • Encrypted:
     

  • In the wild::
    Yes

  OVERVIEW

INFECTION CHANNEL: Descargado de Internet, Eliminado por otro tipo de malware

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Este malware no tiene ninguna rutina de propagación.

Este malware no tiene ninguna rutina de puerta trasera.

  TECHNICAL DETAILS

File size: 2,934,400 bytes
File type: EXE
Memory resident: No
INITIAL SAMPLES RECEIVED DATE: 25 сентября 2023
PAYLOAD: Drops files, Modifies system registry

Detalles de entrada

It arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.

Instalación

Infiltra los archivos siguientes:

  • %User Temp%\is-{Random}.tmp\{Malware File Name}.tmp → deleted afterwards
  • %User Temp%\is-{Random}.tmp\_isetup\_RegDLL.tmp → deleted afterwards
  • %User Temp%\is-{Random}.tmp\_isetup\_shfoldr.dll → deleted afterwards
  • %User Temp%\is-{Random}.tmp\OCSetupHlp.dll → deleted afterwards
  • %Program Files%\WinSCP\unins000.dat
  • %Program Files%\WinSCP\is-{Random}.tmp
  • %Program Files%\WinSCP\WinSCP.exe
  • %Program Files%\WinSCP\WinSCP.com
  • %Program Files%\WinSCP\WinSCP.ico
  • %Program Files%\WinSCP\licence
  • %Program Files%\WinSCP\DragExt.dll
  • %Program Files%\WinSCP\PuTTY\is-{Random}.tmp
  • %Program Files%\WinSCP\PuTTY\LICENCE
  • %Program Files%\WinSCP\PuTTY\putty.hlp
  • %Program Files%\WinSCP\PuTTY\pageant.exe
  • %Program Files%\WinSCP\PuTTY\is-E92B2.tmp
  • %Program Files%\WinSCP\PuTTY\puttygen.exe
  • %Common Programs%\WinSCP\WinSCP.lnk
  • %Common Programs%\WinSCP\WinSCP Web Site.url
  • %Common Programs%\WinSCP\Support forum.url
  • %Common Programs%\WinSCP\Documentation.url
  • %Common Programs%\WinSCP\Key tools\PuTTYgen.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTYgen Manual.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant Manual.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTY Web Site.url
  • %Desktop%\WinSCP.lnk
  • %Cookies%\SendTo\WinSCP (for upload).lnk
  • %Application Data%\winscp.rnd

Agrega los procesos siguientes:

  • %User Temp%\is-{Random}.tmp\{Malware File Name}.tmp /SL5="${Random},{Malware File Path}\{Malware File Name}.exe"
  • %System%\regsvr32.exe /s "%Program Files%\WinSCP\DragExt.dll"
  • %Program Files%\WinSCP\WinSCP.exe /RegisterAsUrlHandler

(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000(32-bit), XP y Server 2003(32-bit) suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp y en el case de Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) y 10(64-bit) en C:\Users\{nombre de usuario}\AppData\Local\Temp).

. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

)

Crea las carpetas siguientes:

  • %User Temp%\is-{Random}.tmp → deleted afterwards
  • %User Temp%\is-{Random}.tmp\_isetup → deleted afterwards
  • %Program Files%\WinSCP
  • %Program Files%\WinSCP\PuTTY
  • %Common Programs%\WinSCP
  • %Common Programs%\WinSCP\Key tools\

(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000(32-bit), XP y Server 2003(32-bit) suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp y en el case de Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) y 10(64-bit) en C:\Users\{nombre de usuario}\AppData\Local\Temp).

. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

)

Otras modificaciones del sistema

Agrega las siguientes entradas de registro como parte de la rutina de instalación:

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
Interface = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowAdvancedLoginOptions = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDExtEnabled = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
RandomSeedFile = %25APPDATA%25%5Cwinscp.rnd

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttyRegistryStorageKey = Software%5CSimonTatham%5CPuTTY

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmOverwriting = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmResume = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
AutoReadDirectoryAfterOp = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenAuto = 5000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenBackground = 2000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenTimeout = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TunnelLocalPortNumberLow = 50000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TunnelLocalPortNumberHigh = 50099

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CacheDirectoryChangesMaxSize = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowFtpWelcomeMessage = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ContinueOnError = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmCommandSession = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeParams = 66

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeOptions = 5

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeModeAuto = 4294967295

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeMode = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
MaxWatchDirectories = 500

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
QueueTransfersLimit = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
QueueAutoPopup = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
QueueRememberPassword = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttySession = WinSCP%20temporary%20session

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttyPath = %25PROGRAMFILES%25%5CPuTTY%5Cputty.exe

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PuttyPassword = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TelnetForFtpInPutty = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
IgnoreCancelBeforeFinish = DF BC 9A 78 56 34 02 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
BeepOnFinish = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
BeepOnFinishAfter = 17 6C C1 16 6C C1 36 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SynchronizeBrowsing = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
KeepUpToDateChangeDelay = 500

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ChecksumAlg = md5

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionReopenAutoIdle = 5000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmExitOnCompletion = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CopyOnDoubleClick = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CopyOnDoubleClickConfirmation = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDAllowMove = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDAllowMoveInit = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDTransferConfirmation = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDTemporaryDirectory =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDWarnLackOfTempSpace = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDWarnLackOfTempSpaceRatio = 9A 99 99 99 99 99 F1 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DeleteToRecycleBin = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DimmHiddenFiles = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
RenameWholeName = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SelectDirectories = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SelectMask = %2A.%2A

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowHiddenFiles = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ShowInaccesibleDirectories = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmTransferring = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmDeleting = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmRecycling = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
ConfirmClosingSession = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
AutoStartSession =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
UseLocationProfiles = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
UseSharedBookmarks = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
LocaleSafe = 1033

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDExtEnabled = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DDExtTimeout = 1000

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
DefaultDirIsHome = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TemporaryDirectoryAppendSession = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TemporaryDirectoryAppendPath = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
TemporaryDirectoryCleanup = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PreservePanelState = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
Theme = OfficeXP

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
PathInCaption = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
MinimizeToTray = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
BalloonNotifications = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
NotificationsTimeout = 10

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
NotificationsStickTime = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
CopyParamAutoSelectNotice = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
SessionToolbarAutoShown = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
LockToolbars = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
AutoOpenInPutty = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
LastMonitor = 4294967295

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface
VersionHistory = 40205624,stable

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
CurrentPanel = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
LocalPanelWidth = 00 00 00 00 00 00 E0 3F

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
SwappedPanels = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
WindowParams = -1;-1;850;650;0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
ExplorerStyleSelection = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
PreserveLocalDirectory = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
CompareByTime = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
CompareBySize = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
FullRowSelect = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander
TreeOnLeft = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0|0;1;2;3;4;5

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DriveView = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DriveViewHeight = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel
DriveViewWidth = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DriveView = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DriveViewHeight = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel
DriveViewWidth = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
ConsoleWin
WindowSize = 570,430

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
AddXToDirectories = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
Masks = %2A.%2Ahtml;%20%2A.htm;%20%2A.txt;%20%2A.php;%20%2A.php3;%20%2A.cgi;%20%2A.c;%20%2A.cpp;%20%2A.h;%20%2A.pas;%20%2A.bas;%20%2A.tex;%20%2A.pl;%20.htaccess;%20%2A.xtml;%20%2A.css;%20%2A.cfg;%20%2A.ini;%20%2A.sh;%20%2A.xml

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
FileNameCase = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
PreserveReadOnly = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
PreserveTime = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
PreserveRights = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
IgnorePermErrors = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
Text = rw-r--r--

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
TransferMode = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ResumeSupport = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ResumeThreshold = 00 90 01 00 00 00 00 00

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ReplaceInvalidChars = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
LocalInvalidChars = /%5C:%2A%3F"<>|

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
CalculateSize = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ExcludeFileMask =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
NegativeExclude = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
ClearArchive = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
CPSLimit = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
Queue = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
QueueNoConfirmation = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
QueueIndividually = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
NewerOnly = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam
CopyParamList = 4294967295

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontName = Courier%20New

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontHeight = 4294967284

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontStyle = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FontCharset = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
WordWrap = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindTextA =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
ReplaceTextA =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindMatchCaseo = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindWholeWord = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
FindDown = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
TabSize = 7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
MaxEditors = 500

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
EarlyClose = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
SDIShellEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor
WindowParams =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
FileMask = %2A.%2A

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
Editor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
ExternalEditor =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
ExternalEditorText = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
SDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0
DetectMDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
FileMask = %2A.%2A

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
Editor = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
ExternalEditor = notepad.exe

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
ExternalEditorText = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
SDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1
DetectMDIExternalEditor = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,1;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
LastLocalTargetDirectory = %System Root%%5CUsers%{Username}%5CDocuments

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
StatusBar = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
WindowParams = -1;-1;600;400;0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
ViewStyle = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
ShowFullAddress = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
DriveView = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer
DriveViewWidth = 180

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
FindFile
WindowParams = 646,481

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
FindFile
ListParams = 3;1|125,1;181,1;80,1;122,1|0;1;2;3

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
NewDirectory
Valid = 00

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
Height = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
Layout = 70,160,160,80,80,80

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
Show = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
LastHideShow = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView
ToolBar = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
SynchronizeChecklist
WindowParams = 0;-1;-1;600;450;0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
SynchronizeChecklist
ListParams = 1;1|150,1;100,1;80,1;130,1;25,1;100,1;80,1;130,1|0;1;2;3;4;5;6;7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Period = 7

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
LastCheck = 00 00 00 00 00 00 00 00

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
HaveResults = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ShownResults = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
BetaVersions = 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ConnectionType = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ProxyHost =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ProxyPort = 8080

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
ForVersion = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Version = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Message =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Critical = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Release =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Disabled = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
Url =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates
UrlButton =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
Logging = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogFileName =

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogFileAppend = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogWindowLines = 100

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogProtocol = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogActions = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogView = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogWindowOnStartup = 1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging
LogWindowParams = -1;-1;500;400

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Security
UseMasterPassword = 0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Security
MasterPasswordVerifier =

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2
DefaultInterfaceInterface = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2
DefaultInterfaceShowAdvancedLoginOptions = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2
DefaultUpdatesPeriod = 7

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Setup Version = 5.2.3

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: App Path = %Program Files%\WinSCP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
InstallLocation = %Program Files%\WinSCP\

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Icon Group = WinSCP

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: User = {Username}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Setup Type = {Set Up Type}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Selected Components = main,shellext,pageant,puttygen,transl,transl\eng

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Deselected Components = transl\cs,transl\de,transl\es,transl\fi,transl\it,transl\jp,transl\ko,transl\pl,transl\sv,transl\uk

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Selected Tasks = enableupdates,desktopicon,desktopicon\user,sendtohook,urlhandler

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup: Deselected Tasks = desktopicon\common,quicklaunchicon,searchpath

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
DisplayName = WinSCP 4.2.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
DisplayIcon = %Program Files%\WinSCP\WinSCP.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
UninstallString = "%Program Files%\WinSCP\unins000.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
QuietUninstallString = "%Program Files%\WinSCP\unins000.exe" /SILENT

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
DisplayVersion = 4.2.5

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Publisher = Martin Prikryl

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
URLInfoAbout = http://{BLOCKED}p.net/

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
HelpLink = http://{BLOCKED}p.net/forum/

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
URLUpdateInfo = http://{BLOCKED}p.net/eng/download.php

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
NoModify = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
NoRepair = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
InstallDate = {Installation Date}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1
Inno Setup CodeFile: SetupType = {Installation Type}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy
VOCV = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy
OCN = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed
VOCV = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
VOCV = 0

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
Session = 01 00 00 00 03 04

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
PK = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
CRC = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}
Installed = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CLSID}\InProcServer32
ThreadingModel = Apartment

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\DragExt
Enable = 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer
GlobalAssocChangedCounter = {Random Hex Values}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP
URL Protocol =

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP
EditFlags = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP
BrowserFlags = 8

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP
URL Protocol =

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP
EditFlags = 2

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP
BrowserFlags = 8

Agrega las siguientes claves de registro como parte de la rutina de instalación:

HKEY_CURRENT_USER\Software\Martin Prikryl

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
Local

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
Remote

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
ShortCuts

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Bookmarks\
Options

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\History

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\HistoryParams

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\LocalPanel

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Commander\RemotePanel

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
ConsoleWin

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
CopyParam

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\0

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Editor\1

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Explorer

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
FindFile

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
NewDirectory

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
QueueView

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
SynchronizeChecklist

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Interface\
Updates

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Logging

HKEY_CURRENT_USER\Software\Martin Prikryl\
WinSCP 2\Configuration\Security

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
winscp3_is1

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\OpenCandy\Completed\
{Random}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CLSID}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CLSID}\InProcServer32

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Directory\shellex\CopyHookHandlers\
WinSCPCopyHook

HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\
WinSCP 2\DragExt

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Explorer

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\shell

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\shell\open

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SCP\shell\open\
command

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\DefaultIcon

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\shell

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\shell\open

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
SFTP\shell\open\
command

Propagación

Este malware no tiene ninguna rutina de propagación.

Rutina de puerta trasera

Este malware no tiene ninguna rutina de puerta trasera.

  SOLUTION

Minimum scan engine: 9.800
SSAPI Pattern-Datei: 2.665.00
SSAPI Pattern veröffentlicht am: 12 de октября de 2023

Step 1

Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.

Step 2

Note that not all files, folders, and registry keys and entries are installed on your computer during this malware's/spyware's/grayware's execution. This may be due to incomplete installation or other operating system conditions. If you do not find the same files/folders/registry information, please proceed to the next step.

Step 3

Eliminar este valor del Registro

[ learnMore ]

Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.

  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0|0;1;2;3;4;5
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DriveView = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DriveViewHeight = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\LocalPanel
    • DriveViewWidth = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,0;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DriveView = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DriveViewHeight = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander\RemotePanel
    • DriveViewWidth = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • CurrentPanel = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • LocalPanelWidth = 00 00 00 00 00 00 E0 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • SwappedPanels = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • WindowParams = -1;-1;850;650;0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • ExplorerStyleSelection = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • PreserveLocalDirectory = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • CompareByTime = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • CompareBySize = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • FullRowSelect = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • TreeOnLeft = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\ConsoleWin
    • WindowSize = 570,430
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • AddXToDirectories = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • Masks = %2A.%2Ahtml;%20%2A.htm;%20%2A.txt;%20%2A.php;%20%2A.php3;%20%2A.cgi;%20%2A.c;%20%2A.cpp;%20%2A.h;%20%2A.pas;%20%2A.bas;%20%2A.tex;%20%2A.pl;%20.htaccess;%20%2A.xtml;%20%2A.css;%20%2A.cfg;%20%2A.ini;%20%2A.sh;%20%2A.xml
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • FileNameCase = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • PreserveReadOnly = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • PreserveTime = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • PreserveRights = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • IgnorePermErrors = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • Text = rw-r--r--
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • TransferMode = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ResumeSupport = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ResumeThreshold = 00 90 01 00 00 00 00 00
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ReplaceInvalidChars = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • LocalInvalidChars = /%5C:%2A%3F"<>|
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • CalculateSize = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ExcludeFileMask
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • NegativeExclude = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • ClearArchive = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • CPSLimit = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • Queue = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • QueueNoConfirmation = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • QueueIndividually = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • NewerOnly = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\CopyParam
    • CopyParamList = 4294967295
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • FileMask = %2A.%2A
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • Editor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • ExternalEditor
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • ExternalEditorText = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • SDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\0
    • DetectMDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • FileMask = %2A.%2A
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • Editor = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • ExternalEditor = notepad.exe
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • ExternalEditorText = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • SDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor\1
    • DetectMDIExternalEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontName = Courier%20New
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontHeight = 4294967284
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontStyle = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FontCharset = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • WordWrap = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindTextA
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • ReplaceTextA
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindMatchCase = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindWholeWord = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • FindDown = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • TabSize = 7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • MaxEditors = 500
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • EarlyClose = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • SDIShellEditor = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • WindowParams
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • DirViewParams = 0;1;0|150,1;70,1;101,1;79,1;62,1;55,1;20,0;150,0;125,0|0;1;8;2;3;4;5;6;7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • LastLocalTargetDirectory = %System Root%%5CUsers%{Username}%5CDocuments
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • StatusBar = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • WindowParams = -1;-1;600;400;0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • ViewStyle = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • ShowFullAddress = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • DriveView = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Explorer
    • DriveViewWidth = 180
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile
    • WindowParams = 646,481
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\FindFile
    • ListParams = 3;1|125,1;181,1;80,1;122,1|0;1;2;3
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\NewDirectory
    • Valid = 00
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • Height = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • Layout = 70,160,160,80,80,80
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • Show = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • LastHideShow = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\QueueView
    • ToolBar = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist
    • WindowParams = 0;-1;-1;600;450;0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\SynchronizeChecklist
    • ListParams = 1;1|150,1;100,1;80,1;130,1;25,1;100,1;80,1;130,1|0;1;2;3;4;5;6;7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Period = 7
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • LastCheck = 00 00 00 00 00 00 00 00
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • HaveResults = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ShownResults = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • BetaVersions = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ConnectionType = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ProxyHost
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ProxyPort = 8080
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • ForVersion = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Version = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Message
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Critical = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Release
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Disabled = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • Url
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Updates
    • UrlButton
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Interface = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowAdvancedLoginOptions = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDExtEnabled = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • RandomSeedFile = %25APPDATA%25%5Cwinscp.rnd
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttyRegistryStorageKey = Software%5CSimonTatham%5CPuTTY
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmOverwriting = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmResume = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • AutoReadDirectoryAfterOp = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenAuto = 5000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenBackground = 2000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenTimeout = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TunnelLocalPortNumberLow = 50000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TunnelLocalPortNumberHigh = 50099
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CacheDirectoryChangesMaxSize = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowFtpWelcomeMessage = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ContinueOnError = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmCommandSession = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeParams = 66
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeOptions = 5
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeModeAuto = 4294967295
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeMode = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • MaxWatchDirectories = 500
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueTransfersLimit = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueAutoPopup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueRememberPassword = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttySession = WinSCP%20temporary%20session
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttyPath = %25PROGRAMFILES%25%5CPuTTY%5Cputty.exe
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PuttyPassword = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TelnetForFtpInPutty = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • IgnoreCancelBeforeFinish = DF BC 9A 78 56 34 02 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • BeepOnFinish = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • BeepOnFinishAfter = 17 6C C1 16 6C C1 36 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeBrowsing = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • KeepUpToDateChangeDelay = 500
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ChecksumAlg = md5
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionReopenAutoIdle = 5000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmExitOnCompletion = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyOnDoubleClick = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyOnDoubleClickConfirmation = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDAllowMove = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDAllowMoveInit = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDTransferConfirmation = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDTemporaryDirectory
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDWarnLackOfTempSpace = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDWarnLackOfTempSpaceRatio = 9A 99 99 99 99 99 F1 3F
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DeleteToRecycleBin = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DimmHiddenFiles = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • RenameWholeName = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SelectDirectories = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SelectMask = %2A.%2A
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowHiddenFiles = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ShowInaccesibleDirectories = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmTransferring = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmDeleting = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmRecycling = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmClosingSession = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • AutoStartSession
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • UseLocationProfiles = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • UseSharedBookmarks = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • LocaleSafe = 1033
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDExtEnabled = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DDExtTimeout = 1000
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • DefaultDirIsHome = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TemporaryDirectoryAppendSession = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TemporaryDirectoryAppendPath = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • TemporaryDirectoryCleanup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConfirmTemporaryDirectoryCleanup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PreservePanelState = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Theme = OfficeXP
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • PathInCaption = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • MinimizeToTray = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • BalloonNotifications = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • NotificationsTimeout = 10
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • NotificationsStickTime = 2
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyParamAutoSelectNotice = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SessionToolbarAutoShown = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • LockToolbars = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • AutoOpenInPutty = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • LastMonitor = 4294967295
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • VersionHistory = 40205624,stable
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • Logging = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogFileName
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogFileAppend = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogWindowLines = 100
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogProtocol = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogActions = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogView = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogWindowOnStartup = 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Logging
    • LogWindowParams = -1;-1;500;400
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security
    • UseMasterPassword = 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Security
    • MasterPasswordVerifier
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CLSID}\InProcServer32
    • ThreadingModel = Apartment
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • URL Protocol
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • EditFlags = 2
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • BrowserFlags = 8
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • URL Protocol
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • EditFlags = 2
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • BrowserFlags = 8
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\DragExt
    • Enable = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
    • GlobalAssocChangedCounter = {Random Hex Value}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • VOCV = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • Session = 01 00 00 00 03 04
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • PK = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • CRC = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed\{Random}
    • Installed = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed
    • VOCV = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy
    • VOCV = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy
    • OCN = {Random Hex Values}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DefaultInterfaceInterface = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DefaultInterfaceShowAdvancedLoginOptions = 0
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DefaultUpdatesPeriod = 7
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Setup Version = 5.2.3
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: App Path = %Program Files%\WinSCP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • InstallLocation = %Program Files%\WinSCP\
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Icon Group = WinSCP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: User = {Username}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Setup Type = {Set Up Type}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Selected Components = main,shellext,pageant,puttygen,transl,transl\eng
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Deselected Components = transl\cs,transl\de,transl\es,transl\fi,transl\it,transl\jp,transl\ko,transl\pl,transl\sv,transl\uk
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Selected Tasks = enableupdates,desktopicon,desktopicon\user,sendtohook,urlhandler
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup: Deselected Tasks = desktopicon\common,quicklaunchicon,searchpath
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • DisplayName = WinSCP 4.2.5
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • DisplayIcon = %Program Files%\WinSCP\WinSCP.exe
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • UninstallString = "%Program Files%\WinSCP\unins000.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • QuietUninstallString = "%Program Files%\WinSCP\unins000.exe" /SILENT
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • DisplayVersion = 4.2.5
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Publisher = Martin Prikryl
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • URLInfoAbout = http://{BLOCKED}p.net/
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • HelpLink = http://{BLOCKED}p.net/forum/
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • URLUpdateInfo = http://{BLOCKED}p.net/eng/download.php
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • NoModify = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • NoRepair = 1
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • InstallDate = {Installation Date}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\winscp3_is1
    • Inno Setup CodeFile: SetupType = {Installation Type}

Step 4

Eliminar esta clave del Registro

[ learnMore ]

Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.

  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • Local
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • Remote
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • ShortCuts
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Bookmarks
    • Options
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Bookmarks
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • History
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • HistoryParams
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • LocalPanel
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Commander
    • RemotePanel
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Commander
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • ConsoleWin
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • CopyParam
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • 0
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface\Editor
    • 1
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Editor
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Explorer
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • FindFile
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • NewDirectory
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • QueueView
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • SynchronizeChecklist
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration\Interface
    • Updates
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Interface
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Logging
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2\Configuration
    • Security
  • In HKEY_CURRENT_USER\Software\Martin Prikryl\WinSCP 2
    • Configuration
  • In HKEY_CURRENT_USER\Software\Martin Prikryl
    • WinSCP 2
  • In HKEY_CURRENT_USER\Software
    • Martin Prikryl
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CLSID}
    • InProcServer32
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
    • {CLSID}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers
    • WinSCPCopyHook
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • DefaultIcon
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP\shell\open
    • command
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP\shell
    • open
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SCP
    • shell
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
    • SCP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • DefaultIcon
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP\shell\open
    • command
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP\shell
    • open
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\SFTP
    • shell
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes
    • SFTP
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • DragExt
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy\Completed
    • {Random}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2\OpenCandy
    • Completed
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl\WinSCP 2
    • OpenCandy
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Martin Prikryl
    • WinSCP 2
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • Martin Prikryl
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • winscp3_is1

Step 5

Buscar y eliminar estos archivos

[ learnMore ]
Puede que algunos de los archivos del componente estén ocultos. Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción "Más opciones avanzadas" para que el resultado de la búsqueda incluya todos los archivos y carpetas ocultos.  
  • %User Temp%\is-{Random}.tmp\{Malware File Name}.tmp
  • %User Temp%\is-{Random}.tmp\_isetup\_RegDLL.tmp
  • %User Temp%\is-{Random}.tmp\_isetup\_shfoldr.dll
  • %User Temp%\is-{Random}.tmp\OCSetupHlp.dll
  • %Program Files%\WinSCP\unins000.dat
  • %Program Files%\WinSCP\is-{Random}.tmp
  • %Program Files%\WinSCP\WinSCP.exe
  • %Program Files%\WinSCP\WinSCP.com
  • %Program Files%\WinSCP\WinSCP.ico
  • %Program Files%\WinSCP\licence
  • %Program Files%\WinSCP\DragExt.dll
  • %Program Files%\WinSCP\PuTTY\is-{Random}.tmp
  • %Program Files%\WinSCP\PuTTY\LICENCE
  • %Program Files%\WinSCP\PuTTY\putty.hlp
  • %Program Files%\WinSCP\PuTTY\pageant.exe
  • %Program Files%\WinSCP\PuTTY\is-E92B2.tmp
  • %Program Files%\WinSCP\PuTTY\puttygen.exe
  • %Common Programs%\WinSCP\WinSCP.lnk
  • %Common Programs%\WinSCP\WinSCP Web Site.url
  • %Common Programs%\WinSCP\Support forum.url
  • %Common Programs%\WinSCP\Documentation.url
  • %Common Programs%\WinSCP\Key tools\PuTTYgen.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTYgen Manual.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant.lnk
  • %Common Programs%\WinSCP\Key tools\Pageant Manual.lnk
  • %Common Programs%\WinSCP\Key tools\PuTTY Web Site.url
  • %Desktop%\WinSCP.lnk
  • %Cookies%\SendTo\WinSCP (for upload).lnk
  • %Application Data%\winscp.rnd
DATA_GENERIC_FILENAME_1
  • En la lista desplegable Buscar en, seleccione Mi PC y pulse Intro.
  • Una vez haya encontrado el archivo, selecciónelo y, a continuación, pulse MAYÚS+SUPR para eliminarlo definitivamente.
  • Repita los pasos 2 a 4 con el resto de archivos:
       
      • %User Temp%\is-{Random}.tmp\{Malware File Name}.tmp
      • %User Temp%\is-{Random}.tmp\_isetup\_RegDLL.tmp
      • %User Temp%\is-{Random}.tmp\_isetup\_shfoldr.dll
      • %User Temp%\is-{Random}.tmp\OCSetupHlp.dll
      • %Program Files%\WinSCP\unins000.dat
      • %Program Files%\WinSCP\is-{Random}.tmp
      • %Program Files%\WinSCP\WinSCP.exe
      • %Program Files%\WinSCP\WinSCP.com
      • %Program Files%\WinSCP\WinSCP.ico
      • %Program Files%\WinSCP\licence
      • %Program Files%\WinSCP\DragExt.dll
      • %Program Files%\WinSCP\PuTTY\is-{Random}.tmp
      • %Program Files%\WinSCP\PuTTY\LICENCE
      • %Program Files%\WinSCP\PuTTY\putty.hlp
      • %Program Files%\WinSCP\PuTTY\pageant.exe
      • %Program Files%\WinSCP\PuTTY\is-E92B2.tmp
      • %Program Files%\WinSCP\PuTTY\puttygen.exe
      • %Common Programs%\WinSCP\WinSCP.lnk
      • %Common Programs%\WinSCP\WinSCP Web Site.url
      • %Common Programs%\WinSCP\Support forum.url
      • %Common Programs%\WinSCP\Documentation.url
      • %Common Programs%\WinSCP\Key tools\PuTTYgen.lnk
      • %Common Programs%\WinSCP\Key tools\PuTTYgen Manual.lnk
      • %Common Programs%\WinSCP\Key tools\Pageant.lnk
      • %Common Programs%\WinSCP\Key tools\Pageant Manual.lnk
      • %Common Programs%\WinSCP\Key tools\PuTTY Web Site.url
      • %Desktop%\WinSCP.lnk
      • %Cookies%\SendTo\WinSCP (for upload).lnk
      • %Application Data%\winscp.rnd

    • Step 6

    Buscar y eliminar estas carpetas

    [ learnMore ]
    Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción Más opciones avanzadas para que el resultado de la búsqueda incluya todas las carpetas ocultas.
    • %User Temp%\is-{Random}.tmp\_isetup
    • %User Temp%\is-{Random}.tmp
    • %Program Files%\WinSCP\PuTTY
    • %Program Files%\WinSCP
    • %Common Programs%\WinSCP\Key tools
    • %Common Programs%\WinSCP

    Step 7

    Explorar el equipo con su producto de Trend Micro para eliminar los archivos detectados como PUA.Win32.OpenCandy.PCF En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.


    Did this description help? Tell us how we did.