Home Malware Programs Adware JoniCoupon

JoniCoupon

Posted: January 13, 2014

Threat Metric

Ranking: 8,741
Threat Level: 2/10
Infected PCs: 9,415
First Seen: January 13, 2014
Last Seen: October 6, 2023
OS(es) Affected: Windows


JoniCoupon is an adware program that loads shopping-related advertisements, such as digital coupons, in your Web browser. These advertisements may have some marginal theoretical value to JoniCoupon's users, but malware researchers are quick to call them out as likely causes of a range of security and performance problems that shouldn't be dismissed. JoniCoupon's site and software haven't been categorized as a threat, but deleting JoniCoupon, nevertheless, is advised; at least, if you value your browser's stability and safety while you browse the Web.

The Coupons that Make No Bones About Wanting to Be in Your Browser

JoniCoupon is a browser add-on whose marketing at JoniCoupon.com claims JoniCoupon to be a useful source for online 'chopping coupons' [sic]. Unfortunately, as far as malware researchers are concerned, JoniCoupon's developers appear to have taken as little care in JoniCoupon's features as they did in the associated website. Although JoniCoupon does load coupons in your Web browser, the benefits of these advertisements are extremely questionable, and JoniCoupon, itself, claims to have no responsibility for any security issues or other problems that may arise from its advertisements. At the same time, JoniCoupon also denies its users any simple way of disabling or modifying how these advertisements are loaded.

JoniCoupon's coupon-based advertisements also are powered, in part, by JoniCoupon's tracking of your online behavior. The constant use of cookies and other tracking methods to monitor your Web activities may be considered invasive of individual privacy. Malware researchers also are in the habit of discouraging the use of any software that uses the nigh-constant tracking behavior of JoniCoupon, even if these functions aren't used for illegal activities like stealing passwords.

Putting JoniCoupon on the Chopping Block

Like most adware products, JoniCoupon advertisements have very few advantages for your browser and may harm your Web-browsing performance... or even expose you to Web-based PC threats. Eliminating JoniCoupon and its advertisements always should be treated as better for your Web browser than allowing JoniCoupon to stay on your PC, and this only is rendered even more important by JoniCoupon's suspicious tracking methodology. Although removing JoniCoupon from your computer is strongly advised by malware researchers, doing so with anything less than an updated anti-adware program (or similar security product) may not eliminate all of the attendant browser problems.

While JoniCoupon is in the wild and is an actively-distributed adware program, malware researchers haven't yet confirmed its proliferation methods of choice. For the moment, general safe browsing practices like scanning potential JoniCoupon-bundling installers, along with staying away from sites with adware-rich reputations, are the best defenses that can be recommended. The different brands of Web browsers being targeted by JoniCoupon's advertising changes also still are under analysis, although malware researchers expect to see Windows-based browsers like Internet Explorer and Firefox at the greatest overall risk.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%ALLUSERSPROFILE%\JoniCouPon\i4.x64.dll File name: i4.x64.dll
Size: 472.06 KB (472064 bytes)
MD5: 84f730d12fbdd3311c0f6d09a35304e3
Detection count: 112
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCouPon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JouniCoupon\E.x64.dll File name: E.x64.dll
Size: 473.6 KB (473600 bytes)
MD5: a7340b6813f4658b908905fc5bb7986d
Detection count: 85
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JouniCoupon
Group: Malware file
Last Updated: September 19, 2014
%ALLUSERSPROFILE%\JoniCoupon\M.dll File name: M.dll
Size: 424.44 KB (424448 bytes)
MD5: b900f73110fe814687addd63ac78a661
Detection count: 59
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCoUpoN\5Yobmn.x64.dll File name: 5Yobmn.x64.dll
Size: 476.16 KB (476160 bytes)
MD5: df85102c640466536123e2ff92d335dd
Detection count: 30
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoUpoN
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\Application Data\JOniCoupon\TPtNJfgJZ4.dll File name: TPtNJfgJZ4.dll
Size: 677.78 KB (677785 bytes)
MD5: fe7a03ae3f23da1cd029b9a048a6a7a9
Detection count: 21
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\JOniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCoupon\br5nMVB.dll File name: br5nMVB.dll
Size: 428.03 KB (428032 bytes)
MD5: 4ceb5816a22fafc10c900166f3188f67
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\Datos de programa\JoniCOupon\Rfc.dll File name: Rfc.dll
Size: 428.03 KB (428032 bytes)
MD5: 1ef4d66a8b3d8b98c0f9de5f24869fae
Detection count: 16
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Datos de programa\JoniCOupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCoupon\0.dll File name: 0.dll
Size: 423.42 KB (423424 bytes)
MD5: 2138d229cb43ba4ac1a922f3cc89db6e
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoNICouPoNN\R.dll File name: R.dll
Size: 428.03 KB (428032 bytes)
MD5: a902e47383f2c7a375f2959b0837da59
Detection count: 12
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoNICouPoNN
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCoupon\4YN0A.dll File name: 4YN0A.dll
Size: 537.56 KB (537568 bytes)
MD5: ba29f31f787878222e31a45a67c41faa
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCoupOn\_ScM.dll File name: _ScM.dll
Size: 424.96 KB (424960 bytes)
MD5: 6f63713e63158d13c470a47cab222c16
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoupOn
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JonICoupon\7BM.dll File name: 7BM.dll
Size: 426.49 KB (426496 bytes)
MD5: bcc680bc9440dd614a2eadc7a7d0cfb0
Detection count: 7
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JonICoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCouPon\RKxWIP.dll File name: RKxWIP.dll
Size: 428.54 KB (428544 bytes)
MD5: a5913fd4c8fd55e69b7cc6120171b829
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCouPon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCoUpon\6I6.dll File name: 6I6.dll
Size: 427.52 KB (427520 bytes)
MD5: 81c6794a98f0d068d679f46f7e89aec8
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoUpon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JouniCoupOni\CDY3Uo.x64.dll File name: CDY3Uo.x64.dll
Size: 472.57 KB (472576 bytes)
MD5: d19774b288c1daa5b4f08f7c689db393
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JouniCoupOni
Group: Malware file
Last Updated: September 19, 2014
%ALLUSERSPROFILE%\JoniCouPon\lYJEh.dll File name: lYJEh.dll
Size: 424.96 KB (424960 bytes)
MD5: b5db2a24cb15e50345e89b0807cc9cde
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCouPon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCouponn\XHpEZ.dll File name: XHpEZ.dll
Size: 424.96 KB (424960 bytes)
MD5: 55276bb41272799b24481c640a0b6556
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCouponn
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JOniCoupon\EaCDf.x64.dll File name: EaCDf.x64.dll
Size: 473.08 KB (473088 bytes)
MD5: 5619131fdcbf27c33458a2b299c1223a
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JOniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCouPon\gV.x64.dll File name: gV.x64.dll
Size: 472.06 KB (472064 bytes)
MD5: 984a394e77deaaf42ac085b282078b63
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCouPon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JOniCoupon\IeNu.dll File name: IeNu.dll
Size: 425.47 KB (425472 bytes)
MD5: 7e689566bbcc8e3639b558fc4be9e66f
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JOniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JoniCoupon\_nnH.dll File name: _nnH.dll
Size: 427.52 KB (427520 bytes)
MD5: 5ce162051d29dc6ea5259e5e3db20ffa
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JoniCoupon
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\Application Data\JoniCoupOn\3g_erIMKG.dll File name: 3g_erIMKG.dll
Size: 428.03 KB (428032 bytes)
MD5: 8aaa0b3a1ac9823691d4308ab77dfe14
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\Application Data\JoniCoupOn
Group: Malware file
Last Updated: July 31, 2014
%ALLUSERSPROFILE%\JonICoUpon\JXHIWZO.dll File name: JXHIWZO.dll
Size: 423.42 KB (423424 bytes)
MD5: a9b8dd63e815aca372f6d212eb26ecb3
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %ALLUSERSPROFILE%\JonICoUpon
Group: Malware file
Last Updated: July 31, 2014

More files

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\JOniCoupon%ALLUSERSPROFILE%\JOniCoupon%PROGRAMFILES%\JOniCoupon%PROGRAMFILES(x86)%\JOniCoupon
The following URL's were detected:
JoniCouPonJoniCoupoNJoniCoupon
Loading...