ArtsAutosBooksBusinessEducationEntertainmentFamilyFashionFoodGamesGenderHealthHolidaysHomeHubPagesPersonal FinancePetsPoliticsReligionSportsTechnologyTravel

PC Speed Test (malware)

Updated on June 18, 2013

Speed Test Malware description

I recently had a customer with some new malware. It showed itself in Internet Explorer as "PC Speed Test" in the bottom left corner. When I searched for a topic and then clicked on the link, the expected web page would come up and then the speed test a few moments later. It acted like it was scanning files and gave two options: "No thanx" and "Fix it now". I right clicked on the box and found it was simply an Adobe flash ad. It even had an small "x" located in the upper right corner. I never clicked anywhere on the ad.

The customer also complained that when she would click on some links to go to certain websites, she would be redirected to a different site than she had intended.

I looked through the startup items and could not find any malware listed. For the more technically oriented, I searched for DNS redirectors in the network settings and in Internet Explorer's LAN settings to no avail. I finally downloaded Combofix from Bleepingcomputer.com (Google "download combofix" to find it) and ran it. It removed the malware - no more fake speed test. I will warn that I had to turn off the antivirus temporarily while Combofix ran and turned it back on afterwards.

I wrote this hub because I had never seen it before and there was nothing in any search I made about it. It was very well crafted in that searching for PC Speed Test already has many other high ranking web pages that something like this hub may never even be seen. Still, I hope this may help someone.

While we do not know how it got in her system, we suspect that the old version of Java she had may have been the culprit for allowing in the malware. The customer was tired of being infected and asked me to remove Java. If Java is not needed, I highly recommend removing it to protect your system.

Comments

    0 of 8192 characters used
    Post Comment

    • profile image

      Rysmah 

      5 years ago

      Thank you very much for your article. Before I read this article, I found this malware ads even running on my blog and picasa album. Even my google adsense change into it. It's so annoying. But I'm so grateful that I found your article. So helpful. I'll try your method to remove this ads.

    • profile image

      SilasJayne 

      5 years ago

      this problem popped up with me two days ago. in fact the "pc speed test" is running right now, grating on my nerves!! and like you, i don't see anything fishy in start-up items. so i'm going to try downloading combofix.

      the way i found your hub is by searcing "pc speed test" and you were the second one from the top!

      i'll report back my results. but even if it doesn't work, i appreciate the info!

    • Emperor Crusher profile imageAUTHOR

      Corey Ames 

      5 years ago from Wichita, KS, USA

      Perhaps you found some other malware that was removed by Malwarebytes Antimalware. I do like that program. For me, it does a great secondary job after using Combofix first. I think we are still looking for a name for it.

    • profile image

      aheath17 

      5 years ago

      My malwarebytes antimalware program found it while running full scan not the short scan. it's called trojan.agent.FSA44. it had along filename attached which had java in it somewhere so i think i will just remove java as i removed the item but as i'm typing this the stupid PC Speed Test box just popped up again. Darn thing is hard to get rid of!

    • profile image

      Amber 

      5 years ago

      I'm having the same issue.

    • profile image

      Anonymous 

      5 years ago

      You saved me! You're right, there really isn't anything out there about this problem, which seems odd. Thanks for taking the time!

    • Emperor Crusher profile imageAUTHOR

      Corey Ames 

      5 years ago from Wichita, KS, USA

      Combofix did not reveal a name, but it did fix it. If anyone does get a name, please let us know!

    • profile image

      anonymous 

      5 years ago

      I just ran into this on a client's computer... MalwareBytes.org's MBAM failed to detect/remove it, which seriously surprised me. Do we have a "name" for this malware for tracking/removal purposes?

    • Anonymous00 profile image

      Anonymous00 

      5 years ago

      Useful tips. I've seem this software before. It's good to see a foolproof method to remove the malware.

    working

    This website uses cookies

    As a user in the EEA, your approval is needed on a few things. To provide a better website experience, hubpages.com uses cookies (and other similar technologies) and may collect, process, and share personal data. Please choose which areas of our service you consent to our doing so.

    For more information on managing or withdrawing consents and how we handle data, visit our Privacy Policy at: https://hubpages.com/privacy-policy#gdpr

    Show Details
    Necessary
    HubPages Device IDThis is used to identify particular browsers or devices when the access the service, and is used for security reasons.
    LoginThis is necessary to sign in to the HubPages Service.
    Google RecaptchaThis is used to prevent bots and spam. (Privacy Policy)
    AkismetThis is used to detect comment spam. (Privacy Policy)
    HubPages Google AnalyticsThis is used to provide data on traffic to our website, all personally identifyable data is anonymized. (Privacy Policy)
    HubPages Traffic PixelThis is used to collect data on traffic to articles and other pages on our site. Unless you are signed in to a HubPages account, all personally identifiable information is anonymized.
    Amazon Web ServicesThis is a cloud services platform that we used to host our service. (Privacy Policy)
    CloudflareThis is a cloud CDN service that we use to efficiently deliver files required for our service to operate such as javascript, cascading style sheets, images, and videos. (Privacy Policy)
    Google Hosted LibrariesJavascript software libraries such as jQuery are loaded at endpoints on the googleapis.com or gstatic.com domains, for performance and efficiency reasons. (Privacy Policy)
    Features
    Google Custom SearchThis is feature allows you to search the site. (Privacy Policy)
    Google MapsSome articles have Google Maps embedded in them. (Privacy Policy)
    Google ChartsThis is used to display charts and graphs on articles and the author center. (Privacy Policy)
    Google AdSense Host APIThis service allows you to sign up for or associate a Google AdSense account with HubPages, so that you can earn money from ads on your articles. No data is shared unless you engage with this feature. (Privacy Policy)
    Google YouTubeSome articles have YouTube videos embedded in them. (Privacy Policy)
    VimeoSome articles have Vimeo videos embedded in them. (Privacy Policy)
    PaypalThis is used for a registered author who enrolls in the HubPages Earnings program and requests to be paid via PayPal. No data is shared with Paypal unless you engage with this feature. (Privacy Policy)
    Facebook LoginYou can use this to streamline signing up for, or signing in to your Hubpages account. No data is shared with Facebook unless you engage with this feature. (Privacy Policy)
    MavenThis supports the Maven widget and search functionality. (Privacy Policy)
    Marketing
    Google AdSenseThis is an ad network. (Privacy Policy)
    Google DoubleClickGoogle provides ad serving technology and runs an ad network. (Privacy Policy)
    Index ExchangeThis is an ad network. (Privacy Policy)
    SovrnThis is an ad network. (Privacy Policy)
    Facebook AdsThis is an ad network. (Privacy Policy)
    Amazon Unified Ad MarketplaceThis is an ad network. (Privacy Policy)
    AppNexusThis is an ad network. (Privacy Policy)
    OpenxThis is an ad network. (Privacy Policy)
    Rubicon ProjectThis is an ad network. (Privacy Policy)
    TripleLiftThis is an ad network. (Privacy Policy)
    Say MediaWe partner with Say Media to deliver ad campaigns on our sites. (Privacy Policy)
    Remarketing PixelsWe may use remarketing pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to advertise the HubPages Service to people that have visited our sites.
    Conversion Tracking PixelsWe may use conversion tracking pixels from advertising networks such as Google AdWords, Bing Ads, and Facebook in order to identify when an advertisement has successfully resulted in the desired action, such as signing up for the HubPages Service or publishing an article on the HubPages Service.
    Statistics
    Author Google AnalyticsThis is used to provide traffic data and reports to the authors of articles on the HubPages Service. (Privacy Policy)
    ComscoreComScore is a media measurement and analytics company providing marketing data and analytics to enterprises, media and advertising agencies, and publishers. Non-consent will result in ComScore only processing obfuscated personal data. (Privacy Policy)
    Amazon Tracking PixelSome articles display amazon products as part of the Amazon Affiliate program, this pixel provides traffic statistics for those products (Privacy Policy)