PUA

PUP.Optional.TelamonCleaner removal

Malware Removal

The PUP.Optional.TelamonCleaner is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What PUP.Optional.TelamonCleaner virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (3 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • A process attempted to delay the analysis task.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Uses Windows utilities for basic functionality
  • Attempts to modify proxy settings
  • Anomalous binary characteristics

Related domains:

z.whorecord.xyz
a.tomx.xyz
api.amplitude.com
dwnld.telamoncleaner.pro
ocsp.comodoca.com
crl.usertrust.com
ocsp.usertrust.com
ocsp.sectigo.com

How to determine PUP.Optional.TelamonCleaner?


File Info:

crc32: A479AB28
md5: fe7d4310a3d25e1f0ad03959641459dc
name: FE7D4310A3D25E1F0AD03959641459DC.mlw
sha1: c9e4b011dbaada1ed33e612b7480bda581f741e6
sha256: f345165ec9aa587dd7a6d52b1b1bbf23c11dd6cc2a14389cc4cbc5d78b65916c
sha512: 5e0bcafcf953157e921b9ca1a9fa171b87934e2b62c411a3b74c8d307b25b4a414bccf78f009049e788fd81251df5ddf238622ec5932631438ffa6fa2e6076bc
ssdeep: 12288:JI/qRFriJqu8NTtfZoyBw7D4V5HUg3XDPNKT1zH3rC3a/DqYLvqEh32:K/qR9iUuMNOQw7DOpzXDu173O3aLjzhY
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

FileVersion: 1.0.134.0
ProductVersion: 1.0.134
Translation: 0x0409 0x04b0

PUP.Optional.TelamonCleaner also known as:

CylanceUnsafe
SymantecTrojan.Gen.9
ComodoApplicUnwnt@#2pbdj03jw479j
DrWebProgram.Unwanted.5010
SophosGeneric PUA MJ (PUA)
MalwarebytesPUP.Optional.TelamonCleaner
ESET-NOD32a variant of Win32/Chistilka.H potentially unwanted
WebrootW32.Adware.Gen

How to remove PUP.Optional.TelamonCleaner?

PUP.Optional.TelamonCleaner removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment