PC Speed Test (malware)

Speed Test Malware description

I recently had a customer with some new malware. It showed itself in Internet Explorer as "PC Speed Test" in the bottom left corner. When I searched for a topic and then clicked on the link, the expected web page would come up and then the speed test a few moments later. It acted like it was scanning files and gave two options: "No thanx" and "Fix it now". I right clicked on the box and found it was simply an Adobe flash ad. It even had an small "x" located in the upper right corner. I never clicked anywhere on the ad.

The customer also complained that when she would click on some links to go to certain websites, she would be redirected to a different site than she had intended.

I looked through the startup items and could not find any malware listed. For the more technically oriented, I searched for DNS redirectors in the network settings and in Internet Explorer's LAN settings to no avail. I finally downloaded Combofix from Bleepingcomputer.com (Google "download combofix" to find it) and ran it. It removed the malware - no more fake speed test. I will warn that I had to turn off the antivirus temporarily while Combofix ran and turned it back on afterwards.

I wrote this hub because I had never seen it before and there was nothing in any search I made about it. It was very well crafted in that searching for PC Speed Test already has many other high ranking web pages that something like this hub may never even be seen. Still, I hope this may help someone.

While we do not know how it got in her system, we suspect that the old version of Java she had may have been the culprit for allowing in the malware. The customer was tired of being infected and asked me to remove Java. If Java is not needed, I highly recommend removing it to protect your system.

More by this Author

Comments 9 comments

Anonymous00 profile image

Anonymous00 4 years ago

Useful tips. I've seem this software before. It's good to see a foolproof method to remove the malware.

anonymous 4 years ago

I just ran into this on a client's computer... MalwareBytes.org's MBAM failed to detect/remove it, which seriously surprised me. Do we have a "name" for this malware for tracking/removal purposes?

Emperor Crusher profile image

Emperor Crusher 4 years ago from Wichita, KS, USA Author

Combofix did not reveal a name, but it did fix it. If anyone does get a name, please let us know!

Anonymous 4 years ago

You saved me! You're right, there really isn't anything out there about this problem, which seems odd. Thanks for taking the time!

Amber 4 years ago

I'm having the same issue.

profile image

aheath17 4 years ago

My malwarebytes antimalware program found it while running full scan not the short scan. it's called trojan.agent.FSA44. it had along filename attached which had java in it somewhere so i think i will just remove java as i removed the item but as i'm typing this the stupid PC Speed Test box just popped up again. Darn thing is hard to get rid of!

Emperor Crusher profile image

Emperor Crusher 4 years ago from Wichita, KS, USA Author

Perhaps you found some other malware that was removed by Malwarebytes Antimalware. I do like that program. For me, it does a great secondary job after using Combofix first. I think we are still looking for a name for it.

profile image

SilasJayne 4 years ago

this problem popped up with me two days ago. in fact the "pc speed test" is running right now, grating on my nerves!! and like you, i don't see anything fishy in start-up items. so i'm going to try downloading combofix.

the way i found your hub is by searcing "pc speed test" and you were the second one from the top!

i'll report back my results. but even if it doesn't work, i appreciate the info!

Rysmah 3 years ago

Thank you very much for your article. Before I read this article, I found this malware ads even running on my blog and picasa album. Even my google adsense change into it. It's so annoying. But I'm so grateful that I found your article. So helpful. I'll try your method to remove this ads.

    Sign in or sign up and post using a HubPages Network account.

    0 of 8192 characters used
    Post Comment

    No HTML is allowed in comments, but URLs will be hyperlinked. Comments are not for promoting your articles or other sites.

    Click to Rate This Article