+34 900 840 407
support@cytomic.ai

Creation of temporary files and folders by the Decoy Files protection after backup sessions

Related Products_
  • Advanced EPDR
  • Advanced EDR
Issue Status_

Resolved in Hotfix / v.8.00.23.X

Symptoms_

Creation of temporary files and folders like C:\Users\TEMP.DOMAIN_NAME.XXX by the Decoy Files protection after backup sessions.

Solution_

Apply the available hotfix on the affected endpoint.

  1. Download and save the hotfix file to the endpoint:
    hf-wgua3430-wpdecoy-tempfiles.exe
  2. Double-click the downloaded file.
  3. The hotfix installation does not require restarting the computer. However, under certain circumstances, you may be prompted to restart for the hotfix to be fully applied. If you cannot restart the computer right away, select No when prompted. This postpones the application of the hotfix until the next system restart.Note: To download an unattended or silent version of the hotfix, click here. The hotfix is applied after the next system restart.
Release Notes_

Next, find all the changes the hotfix includes.

Affected Versions

Protection versions between v8.00.22.0010 to v8.00.22.0025.

To see your Advanced EPDR/EDR product version, see this article.

File Details

The hotfix updates the following file

File name Location File Version Modified Date Hotfix to be included in future versions?
WPDecoy.dll C:\Program Files (x86)\Panda Security\WAC\WPDecoy.dll 2.1.0.12 June 9th, 2024 Yes
v8.00.23.X

 

Verify Hotfix Application
To confirm the correct application of the hotfix, check the file version (in File Details section) or else, verify the values of these Registry keys:

32 bits Architecture 64 bits Architecture
Registry Key Value Registry Key Value
HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_WPDecoy Revision [REG_DWORD]

7

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_WPDecoy Revision [REG_DWORD]

7

HKEY_LOCAL_MACHINE\SOFTWARE\Panda Software\Setup\Hotfix history\HF_WPDecoy Result [REG_DWORD]

0 = Success
1 = Not Applied
2 = Error

9 = On Reboot Operation

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Panda Software\Setup\Hotfix history\HF_WPDecoy Result [REG_DWORD]

0 = Success
1 = Not Applied
2 = Error

9 = On Reboot Operation