What is jnsh9D1C.tmp?

jnsh9D1C.tmp is usually located in the 'C:\Program Files (x86)\31444335-1447063399-3031-4B32-EC9A744B74C7\' folder.

Some of the anti-virus scanners at VirusTotal detected jnsh9D1C.tmp.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

VirusTotal report

47 of the 67 anti-virus programs at VirusTotal detected the jnsh9D1C.tmp file. That's a 70% detection rate.

Scanner	Detection Name
Ad-Aware	Gen:Variant.Adware.ConvertAd.445
AegisLab	Adware.Win32.ConvertAd.2!c
AhnLab-V3	PUP/Win32.ConvertAd.C1231132
Alibaba	AdWare:Win32/ConvertAd.d1441b14
ALYac	Gen:Variant.Adware.ConvertAd.445
Antiy-AVL	GrayWare[AdWare]/Win32.ConvertAd
APEX	Malicious
Arcabit	Trojan.Adware.ConvertAd.445
AVG	Win32:Adware-gen [Adw]
Avira	ADWARE/ConvertAd.Gen7
BitDefender	Gen:Variant.Adware.ConvertAd.445
BitDefenderTheta	Gen:NN.ZexaF.34196.nqW@ae9rcC
Comodo	Application.Win32.ConvertAd.FG@617cli
Cybereason	malicious.66cd06
Cylance	Unsafe
Cynet	Malicious (score: 100)
Cyren	W32/S-21972114!Eldorado
DrWeb	Adware.ClickMeIn.4031
ESET-NOD32	a variant of Win32/Adware.ConvertAd.ABN
FireEye	Generic.mg.bc612da66cd06352
Fortinet	Riskware/ConvertAd
GData	Gen:Variant.Adware.ConvertAd.445
Invincea	heuristic
Jiangmin	Adware.Adware.cxf
Kaspersky	not-a-virus:AdWare.Win32.ConvertAd.biv
MAX	malware (ai score=99)
MaxSecure	Trojan.Malware.300983.susgen
McAfee	RDN/Generic PUP.acq
Microsoft	PUA:Win32/VOPackage
MicroWorld-eScan	Gen:Variant.Adware.ConvertAd.445
NANO-Antivirus	Riskware.Win32.ClickMeIn.dyofkq
Paloalto	generic.ml
Panda	Trj/Genetic.gen
Qihoo-360	Generic/HEUR/QVM10.2.06CD.Malware.Gen
Rising	Trojan.Win32.Generic.19738839 (C64:YzY0OjPUxLfnBT3b)
SentinelOne	DFI - Suspicious PE
Sophos	Generic PUA HN (PUA)
SUPERAntiSpyware	PUP.ConvertAd/Variant
Symantec	ML.Attribute.HighConfidence
Tencent	Malware.Win32.Gencirc.114c63b5
TrendMicro	Possible_HPGen-32a
TrendMicro-HouseCall	Possible_HPGen-32a
VBA32	AdWare.ConvertAd
VIPRE	Trojan.Win32.Generic!BT
Webroot	W32.Adware.Gen
Yandex	PUA.ConvertAd!
ZoneAlarm	not-a-virus:AdWare.Win32.ConvertAd.biv

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

Successfully executed process in sandbox.

Generic

[
    {
        "process_path": "C:\\Users\\cuck\\AppData\\Local\\Temp\\f3e9c8f48eca23356e1751a261b6d551906321fdd37c0b99f9f3f4441e0aab07.bin",
        "process_name": "f3e9c8f48eca23356e1751a261b6d551906321fdd37c0b99f9f3f4441e0aab07.bin",
        "pid": 2124,
        "summary": {},
        "first_seen": 1598399585.59375,
        "ppid": 2504
    },
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1598399585.34375,
        "ppid": 376
    }
]

Signatures

[]

Yara

The Yara rules did not detect anything in the file.

Network

{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 662,
            "time": 6.271162986755371,
            "dport": 137,
            "sport": 137
        },
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 5342,
            "time": 12.33152985572815,
            "dport": 138,
            "sport": 138
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7186,
            "time": 6.170989990234375,
            "dport": 5355,
            "sport": 51001
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7514,
            "time": 4.172989845275879,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 7842,
            "time": 6.22481894493103,
            "dport": 5355,
            "sport": 53848
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 8170,
            "time": 4.677150011062622,
            "dport": 5355,
            "sport": 54255
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 8498,
            "time": 3.07059383392334,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 8826,
            "time": 4.244232892990112,
            "dport": 1900,
            "sport": 1900
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 28236,
            "time": 4.204450845718384,
            "dport": 3702,
            "sport": 49152
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 36620,
            "time": 6.272229909896851,
            "dport": 1900,
            "sport": 53598
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "e72642fab17e24f9415641fb4a1275b7531607f7f554a5b203ff9f76e20edc19",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "345d4c18d0d3c8f6b5dcbe98ff05c3b955ad5494d4ea0bf5538d748efda1ebc6",
    "irc": [],
    "https_ex": []
}

Screenshots

jnsh9D1C.tmp removal instructions

The instructions below shows how to remove jnsh9D1C.tmp with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the jnsh9D1C.tmp file for removal, restart your computer and scan it again to verify that jnsh9D1C.tmp has been successfully removed. Here are the removal instructions in more detail:

1. Download and install FreeFixer: http://www.freefixer.com/download.html
2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.

   
3. When the scan is finished, locate jnsh9D1C.tmp in the scan result and tick the checkbox next to the jnsh9D1C.tmp file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate jnsh9D1C.tmp in the scan result.

   

   

   C:\Program Files (x86)\31444335-1447063399-3031-4B32-EC9A744B74C7\jnsh9D1C.tmp

   
4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the jnsh9D1C.tmp file.

   
5. Restart your computer.
6. Start FreeFixer and scan your computer again. If jnsh9D1C.tmp still remains in the scan result, proceed with the next step. If jnsh9D1C.tmp is gone from the scan result you're done.
7. If jnsh9D1C.tmp still remains in the scan result, check its checkbox again in the scan result and click Fix.
8. Restart your computer.
9. Start FreeFixer and scan your computer again. Verify that jnsh9D1C.tmp no longer appear in the scan result.

• Privacy Policy