Post a reply

Before posting, please read how to report bug or request support effectively.

Bug reports without an attached log file are usually useless.

Options
Add an Attachment

If you do not want to add an Attachment to your Post, please leave the Fields blank.

(maximum 10 MB; please compress large files; only common media, archive, text and programming file formats are allowed)

Options

Topic review

martin

Re: Subject: Unauthorized access to local protected system folder in %userprofile%\Favorites

Thanks for your report.
Though, I do not think that WinSCP ever accesses the Favorites folder.
Also there's no change between 6.5.5 and 6.5.4 that affects access to any folders whatsoever.
It rather looks like some kind of false positive.
Can you share details of the detection?
If you want us to investigate further, can you send me an email, so I can send you back a debug version of WinSCP to track the problem? Please include a link back to this topic in your email. Also note in this topic that you have sent the email. Thanks.

You will find my address (if you log in) in my forum profile.
master

Subject: Unauthorized access to local protected system folder in %userprofile%\Favorites

I am working with Windows 10 Pro (22H2) and with the newest Version always.
I updated from a direct previous version to 6.5.5 today Nov.24, 2025.
After updating to WinSCP [6.5.5] and restarting it, the program attempts to make changes in the folder %userprofile%\Favorites. My system protection blocks this, since the folder is protected. The Favorites/Location Profiles feature is not configurable, and even after switching to INI file storage, WinSCP still accesses the Windows Favorites folder. This behavior appears to be a bug. Please investigate and correct it.