I'm rather sure that WinSCP does not come with any viruses. We are monitoring our binaries/downloads constantly.
See VirusTotal report for the installer of the latest version:
https://www.virustotal.com/gui/file/81244062a2de4adc52ae10393b7a3a33985a7e5bea376b839ab0477d6c7fd5e1

---

If you see a trojan/virus in your WinSCP installation, please double check that you have downloaded it from our website.
Recently, fake copies of WinSCP with malware included are advertised:
https://www.webpronews.com/bad-actors-using-google-bing-advertising-networks-to-spread-malware/

Why does this program comes with Trojan virus types? Every now and then my system has been detecting viruses in its folders either python or setup. My passwords leak has also been notified to me. I will appreciate if the viruses were not here.