PUP.JCleaner

Published:
Last updated:

Threat Scorecard

Popularity Rank: 5,481
Threat Level: 10 % (Normal)
Infected Computers: 56
First Seen: February 25, 2022
Last Seen: October 4, 2026
OS(es) Affected: Windows

The detection of PUP.JCleaner on your system indicates the presence of a potentially unwanted program (PUP) that may be causing issues with your computer's performance and security. It is essential to understand the nature of this threat and take immediate action to remove it to prevent further problems.

What Is PUP.JCleaner?

PUP.JCleaner is a type of potentially unwanted program that may have been installed on your system without your knowledge or consent. PUPs are software applications that may appear to be useful or legitimate but can actually cause harm to your system or compromise your personal data. They can be bundled with other software, downloaded from untrusted sources, or installed through deceptive means.

How PUP.JCleaner Operates

PUP.JCleaner, like other PUPs, may operate by collecting user data, displaying unwanted advertisements, or modifying system settings without permission. It may also consume system resources, slowing down your computer's performance and causing frustration. In some cases, PUPs can also serve as a gateway for more severe malware infections, making it crucial to remove them as soon as possible.

Symptoms of Infection

If your system is infected with PUP.JCleaner, you may experience a range of symptoms, including slow system performance, unwanted pop-ups or advertisements, and unexpected changes to your browser settings or homepage. You may also notice that your system is running slowly or crashing frequently, or that your personal data is being collected or transmitted without your consent. If you suspect that your system is infected with PUP.JCleaner, it is essential to take immediate action to remove it.

How to Remove PUP.JCleaner

  1. Boot your system in Safe Mode with Networking to prevent PUP.JCleaner from loading and to allow for a more effective removal process.
  2. Run a full scan with a reputable anti-malware tool, such as SpyHunter, to detect and remove all instances of PUP.JCleaner and any related malware.
  3. Uninstall any suspicious programs or applications that may be related to PUP.JCleaner, taking care to read all prompts and warnings carefully.
  4. Reset your web browsers, including Chrome, Firefox, and Edge, to their default settings to remove any unwanted extensions or add-ons.
  5. Reboot your system and run another full scan with your anti-malware tool to ensure that all remnants of PUP.JCleaner have been removed.

Conclusion

Removing PUP.JCleaner from your system is crucial to preventing further problems and protecting your personal data. By following the steps outlined above and taking a proactive approach to system security, you can help to ensure that your system remains safe and secure. Remember to always be cautious when downloading software or clicking on links, and to keep your anti-malware tools up to date to prevent future infections. If you are unsure about any aspect of the removal process, consider seeking the advice of a qualified IT professional to ensure that your system is fully protected.

SpyHunter Detects & Remove PUP.JCleaner

File System Details

PUP.JCleaner may create the following file(s):
# File Name MD5 Detections
1. e1d734d527e1512c1eec0cf07d83de3e33e66d9bdba5f3bb6b3a6fd8805786b3.exe faa2eae534773484a5991cb2e2ecde17 4
2. JCleaner Setup.exe 533c167f5117f5a02905492c0926afdc 0
3. JCleaner.exe 1d6c062fe9d0da631eba51b63a10b576 0
More files

Analysis Report

General information

Family Name: PUP.JCleaner
Signature status: No Signature

Known Samples

MD5: a9b820efc8e9fc5df37e8e9a92a088e0
SHA1: 51b01e0d6973e4960f627e3a5bcd140bbf145c08
SHA256: 7C8A6B4B4650A4A549D7D0F445E57BCC4D7B10037B9D03E41BA632D4014A6188
File Size: 1.64 MB, 1642496 bytes
MD5: 3d1429fd51c9344289ca9e20c83c2112
SHA1: e7fd12a1bd9f6619f7d5899b7a45993ee93eba5d
SHA256: 884190F155E64ACF7C45EC7B61AFB6327F1E842F639F5A6FF81C429B5FF33FE7
File Size: 885.87 KB, 885871 bytes

Windows Portable Executable Attributes

  • File doesn't have "Rich" header
  • File doesn't have debug information
  • File doesn't have exports table
  • File doesn't have relocations information
  • File doesn't have security information
  • File is .NET application
  • File is 32-bit executable
  • File is either console or GUI application
  • File is GUI application (IMAGE_SUBSYSTEM_WINDOWS_GUI)
  • File is Native application (NOT .NET application)
Show More
  • File is not packed
  • IMAGE_FILE_DLL is not set inside PE header (Executable)
  • IMAGE_FILE_EXECUTABLE_IMAGE is set inside PE header (Executable Image)

File Icons

Windows PE Version Information

Name Value
Assembly Version 11.2.0.0
Comments Vit Junk Cleaner
Company Name
  • www.vitsoft.net
File Description
  • JCleaner
File Version
  • 11.2.0.0
  • 10.1.1.0
Internal Name JCleaner.exe
Legal Copyright
  • Copyright (C) 2004-2024 VITSOFT.NET
  • Copyright (C) 2024 VITSOFT.NET
Legal Trademarks
  • Vit Junk Cleaner is a trademark of VITSOFT.NET
  • VITSOFT.NET
Original Filename JCleaner.exe
Product Name
  • Vit Junk Cleaner
Product Version
  • 11.2.0.0
  • 10.1.1.0

File Traits

  • .NET
  • NewLateBinding
  • Run
  • x86

Files Modified

File Attributes
c:\users\user\appdata\local\temp\nsaf766.tmp Generic Read,Write Data,Write Attributes,Write extended,Append data,Delete
c:\users\user\appdata\local\temp\nsaf767.tmp\langdll.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsaf767.tmp\system.dll Generic Write,Read Attributes
c:\users\user\appdata\local\temp\nsaf767.tmp\userinfo.dll Generic Write,Read Attributes

Windows API Usage

Category API
Syscall Use
  • ntdll.dll!NtAccessCheck
  • ntdll.dll!NtAlertThreadByThreadId
  • ntdll.dll!NtAlpcConnectPort
  • ntdll.dll!NtAlpcConnectPortEx
  • ntdll.dll!NtAlpcQueryInformation
  • ntdll.dll!NtAlpcSendWaitReceivePort
  • ntdll.dll!NtApphelpCacheControl
  • ntdll.dll!NtClearEvent
  • ntdll.dll!NtClose
  • ntdll.dll!NtConnectPort
Show More
  • ntdll.dll!NtCreateEvent
  • ntdll.dll!NtCreateMutant
  • ntdll.dll!NtCreatePrivateNamespace
  • ntdll.dll!NtCreateSection
  • ntdll.dll!NtCreateSemaphore
  • ntdll.dll!NtCreateThreadEx
  • ntdll.dll!NtDeviceIoControlFile
  • ntdll.dll!NtDuplicateObject
  • ntdll.dll!NtDuplicateToken
  • ntdll.dll!NtEnumerateKey
  • ntdll.dll!NtEnumerateValueKey
  • ntdll.dll!NtFlushProcessWriteBuffers
  • ntdll.dll!NtFreeVirtualMemory
  • ntdll.dll!NtGetWriteWatch
  • ntdll.dll!NtMapViewOfSection
  • ntdll.dll!NtOpenDirectoryObject
  • ntdll.dll!NtOpenEvent
  • ntdll.dll!NtOpenFile
  • ntdll.dll!NtOpenKey
  • ntdll.dll!NtOpenKeyEx
  • ntdll.dll!NtOpenMutant
  • ntdll.dll!NtOpenProcess
  • ntdll.dll!NtOpenProcessToken
  • ntdll.dll!NtOpenProcessTokenEx
  • ntdll.dll!NtOpenSection
  • ntdll.dll!NtOpenSemaphore
  • ntdll.dll!NtOpenThreadToken
  • ntdll.dll!NtOpenThreadTokenEx
  • ntdll.dll!NtProtectVirtualMemory
  • ntdll.dll!NtQueryAttributesFile
  • ntdll.dll!NtQueryDefaultLocale
  • ntdll.dll!NtQueryDirectoryFileEx
  • ntdll.dll!NtQueryFullAttributesFile
  • ntdll.dll!NtQueryInformationFile
  • ntdll.dll!NtQueryInformationJobObject
  • ntdll.dll!NtQueryInformationProcess
  • ntdll.dll!NtQueryInformationThread
  • ntdll.dll!NtQueryInformationToken
  • ntdll.dll!NtQueryKey
  • ntdll.dll!NtQueryLicenseValue
  • ntdll.dll!NtQueryPerformanceCounter
  • ntdll.dll!NtQuerySecurityAttributesToken
  • ntdll.dll!NtQuerySecurityObject
  • ntdll.dll!NtQuerySystemInformation
  • ntdll.dll!NtQuerySystemInformationEx
  • ntdll.dll!NtQueryValueKey
  • ntdll.dll!NtQueryVirtualMemory
  • ntdll.dll!NtQueryVolumeInformationFile
  • ntdll.dll!NtQueryWnfStateData
  • ntdll.dll!NtReadFile
  • ntdll.dll!NtReadRequestData
  • ntdll.dll!NtReleaseMutant
  • ntdll.dll!NtReleaseSemaphore
  • ntdll.dll!NtReleaseWorkerFactoryWorker
  • ntdll.dll!NtRequestWaitReplyPort
  • ntdll.dll!NtResetWriteWatch
  • ntdll.dll!NtResumeThread
  • ntdll.dll!NtSetEvent
  • ntdll.dll!NtSetInformationKey
  • ntdll.dll!NtSetInformationProcess
  • ntdll.dll!NtSetInformationThread
  • ntdll.dll!NtSetInformationVirtualMemory
  • ntdll.dll!NtSetInformationWorkerFactory
  • ntdll.dll!NtSetTimer2
  • ntdll.dll!NtSubscribeWnfStateChange
  • ntdll.dll!NtTestAlert
  • ntdll.dll!NtTraceControl
  • ntdll.dll!NtUnmapViewOfSection
  • ntdll.dll!NtUnmapViewOfSectionEx
  • ntdll.dll!NtWaitForAlertByThreadId
  • ntdll.dll!NtWaitForSingleObject
  • ntdll.dll!NtWaitForWorkViaWorkerFactory
  • ntdll.dll!NtWaitLowEventPair
  • ntdll.dll!NtWorkerFactoryWorkerReady
  • ntdll.dll!NtWriteFile
  • ntdll.dll!NtYieldExecution
  • UNKNOWN
User Data Access
  • GetUserDefaultLocaleName
  • GetUserObjectInformation
Anti Debug
  • IsDebuggerPresent
Encryption Used
  • BCryptOpenAlgorithmProvider