Remove Lucuma Adware and Third-Party Software. joeann.dll, chase64.dll Files - How to, Technology and PC Security Forum |

Remove Lucuma Adware and Third-Party Software. joeann.dll, chase64.dll Files

1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)

NameLucuma Adware
TypeAdware, PUP
Short DescriptionAdware is usually designed to assist users while shopping online.
SymptomsMany advertisements are generated.
Distribution MethodVia freeware packages (bundling), or from legitimate freeware download websites
Detection toolDownload SpyHunter, to See If Your System Has Been Affected By Lucuma Adware

Lucuma is an Israeli company, a well-known publisher of ad-supported software. The products developed by Lucuma tend to drop many .dll and .exe files onto the system, associated with browser add-ons and toolbars. Even though such software pieces, often regarded as potentially unwanted (PUPs or PUAs), are not classified as malicious, they may cause privacy-related and PC performance issues. p13_0000

One way to tell that your system has been affected by a PUP is the sudden display of advertisements, related to your browsing history and search queries. Annoying browser redirects and suspicious Java/ Adobe updates presented as pop-ups are other ‘side effects’ brought by the ever-expanding ad-supported software family.

Antivirus scans and anti-malware products detect files generated by Lucuma and mark them as PUP, riskware and/or adware. In some cases, however, the particular AV program may discover a Trojan component. Because many of those third party products collect information, they may also be defined as spyware. In that sense, it is not surprising that an AV tool will detect it as a Trojan. Spyware is mostly represented by adware, Trojans, and tracking technologies.

What is joeann.dll?

As you might have guessed, joeann.dll is a module developed by Lucuma and detected by multiple AV solutions as adware.

One of the detection names of joeann.dll is:

→PUP.Bitcocktail.Lucuma (M)

What is chase64.dll?

The publisher of chase64.dll is, once again, Lucuma. А detailed analysis by herdProtect clearly shows that the .dll file is connected to Shopperz adware.

  • Kaspersky detects it as not-a-virus:WebToolbar.Win32.Agent.
  • ESET NOD32 detects it as Win64/Toolbar.Perion.B potentially unwanted (variant).
  • F-Secure detects it as Adware.Shopperz.A.

Adware Publishers and the Bundling Method

Curiously enough, BitCocktail is another infamous adware publisher that describes adware products as ‘fun consumer applications’.

What one can easily assume is that BitCocktail and Lucuma cooperate, or at least share the same advertising platforms. What is also common between such adware publishers is the method they usually employ to spread their software. As we have written many, many times, the technique is called bundling. In terms of potentially unwanted applications, software bundling is quite the little, sneaky devil. When the user downloads a free program, let’s say a PDF converter, and skips the Custom download option, he may download an ‘extra’ application.

This is what is usually written in the EULA (End User License Agreement) of a PUP:

→The developer of the software (“Software”) you are installing has chosen to use “X” to provide recommendations for other third-party software.

As ridiculous it may sound, once the software is installed, and certain non-identifiable details are obtained (OS system, preferred browser, etc), the Publisher may choose what third-party products are appropriate for the individual user.

Results of Third-Party Software Infiltration and Bundling

As it turns out, third party products may sneak into in the system in a stealthy manner. Moreover, third party software may be pushed into the system after the primary Publisher has gathered and analyzed whatever information they needed in the first place.

Anyhow, once the installation is complete, the user may be exposed to:

  • Persistent advertising campaigns.
  • Browser redirects to predefined websites.
  • Data collection (personally identifiable and non-personally identifiable information).
  • Modifications of the System Registry. Certain files may be added or deleted.

Remove Adware by Lucuma and Similar Publishers

In conclusion, adware applications push many .dll and .exe files into the system. Their prolonged residence may bring about various security issues. According to many malware researchers, adware and PUPs increase the system’s vulnerability to harmful cyber threats. An ad-supported program that seems harmless at first may later turn out to be associated with a virus or a Trojan. Malware is often spread via ‘chain reactions’ – and it often relies on user interaction. Always be extra cautious and research your software.

If your system has been affected by Lucuma, and joeann.dll, chase64.dll, and similar files have been detected, you should remove it via AV software. If you currently don’t have an active AV program, you may want to proceed towards installing one and scanning your system. Even though you may succeed in manually removing the adware, more riskware programs may be still residing in the background.

Spy Hunter scanner will only detect the threat. If you want the threat to be automatically removed, you need to purchase the full version of the anti-malware tool.Find Out More About SpyHunter Anti-Malware Tool / How to Uninstall SpyHunter

1. Remove/Uninstall Lucuma Adware
2. Restore the settings in your browser
3. Remove Lucuma Adware automatically with Spy Hunter Malware - Removal Tool.

Milena Dimitrova

An inspired writer and content manager who has been with SensorsTechForum for 4 years. Enjoys ‘Mr. Robot’ and fears ‘1984’. Focused on user privacy and malware development, she strongly believes in a world where cybersecurity plays a central role. If common sense makes no sense, she will be there to take notes. Those notes may later turn into articles!

More Posts

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share