ArtsAutosBooksBusinessEducationEntertainmentFamilyFashionFoodGamesGenderHealthHolidaysHomeHubPagesPersonal FinancePetsPoliticsReligionSportsTechnologyTravel

PC Speed Test (malware)

Updated on June 18, 2013

Speed Test Malware description

I recently had a customer with some new malware. It showed itself in Internet Explorer as "PC Speed Test" in the bottom left corner. When I searched for a topic and then clicked on the link, the expected web page would come up and then the speed test a few moments later. It acted like it was scanning files and gave two options: "No thanx" and "Fix it now". I right clicked on the box and found it was simply an Adobe flash ad. It even had an small "x" located in the upper right corner. I never clicked anywhere on the ad.

The customer also complained that when she would click on some links to go to certain websites, she would be redirected to a different site than she had intended.

I looked through the startup items and could not find any malware listed. For the more technically oriented, I searched for DNS redirectors in the network settings and in Internet Explorer's LAN settings to no avail. I finally downloaded Combofix from Bleepingcomputer.com (Google "download combofix" to find it) and ran it. It removed the malware - no more fake speed test. I will warn that I had to turn off the antivirus temporarily while Combofix ran and turned it back on afterwards.

I wrote this hub because I had never seen it before and there was nothing in any search I made about it. It was very well crafted in that searching for PC Speed Test already has many other high ranking web pages that something like this hub may never even be seen. Still, I hope this may help someone.

While we do not know how it got in her system, we suspect that the old version of Java she had may have been the culprit for allowing in the malware. The customer was tired of being infected and asked me to remove Java. If Java is not needed, I highly recommend removing it to protect your system.

Comments

    0 of 8192 characters used
    Post Comment

    • Anonymous00 profile image

      Anonymous00 4 years ago

      Useful tips. I've seem this software before. It's good to see a foolproof method to remove the malware.

    • profile image

      anonymous 4 years ago

      I just ran into this on a client's computer... MalwareBytes.org's MBAM failed to detect/remove it, which seriously surprised me. Do we have a "name" for this malware for tracking/removal purposes?

    • Emperor Crusher profile image
      Author

      Corey Ames 4 years ago from Wichita, KS, USA

      Combofix did not reveal a name, but it did fix it. If anyone does get a name, please let us know!

    • profile image

      Anonymous 4 years ago

      You saved me! You're right, there really isn't anything out there about this problem, which seems odd. Thanks for taking the time!

    • profile image

      Amber 4 years ago

      I'm having the same issue.

    • profile image

      aheath17 4 years ago

      My malwarebytes antimalware program found it while running full scan not the short scan. it's called trojan.agent.FSA44. it had along filename attached which had java in it somewhere so i think i will just remove java as i removed the item but as i'm typing this the stupid PC Speed Test box just popped up again. Darn thing is hard to get rid of!

    • Emperor Crusher profile image
      Author

      Corey Ames 4 years ago from Wichita, KS, USA

      Perhaps you found some other malware that was removed by Malwarebytes Antimalware. I do like that program. For me, it does a great secondary job after using Combofix first. I think we are still looking for a name for it.

    • profile image

      SilasJayne 4 years ago

      this problem popped up with me two days ago. in fact the "pc speed test" is running right now, grating on my nerves!! and like you, i don't see anything fishy in start-up items. so i'm going to try downloading combofix.

      the way i found your hub is by searcing "pc speed test" and you were the second one from the top!

      i'll report back my results. but even if it doesn't work, i appreciate the info!

    • profile image

      Rysmah 4 years ago

      Thank you very much for your article. Before I read this article, I found this malware ads even running on my blog and picasa album. Even my google adsense change into it. It's so annoying. But I'm so grateful that I found your article. So helpful. I'll try your method to remove this ads.

    Click to Rate This Article