» internet speed checker-novainstaller.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

internet speed checker-novainstaller.exe

Internet Speed Checker

Speedchecker

This is the Performersoft setup installer. The application internet speed checker-novainstaller.exe, “Internet Speed Checker exe” has been detected as adware by 13 anti-malware scanners. The program is a setup application that uses the InstallBrain installer, however the file is not signed with an authenticode signature from a trusted source. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program Internet Speed Checker by Sailor Project which is a potentially unwanted software program.

File name:

Publisher:

Speedchecker

Product:

Internet Speed Checker

Description:

Internet Speed Checker exe

Version:

1000.1000.1000.1000

MD5:

1714d000835e741b681bf5f2c49d5e06

SHA-1:

6cbce2926c7746e2821b7101f9bb0443b2450aac

SHA-256:

c92d2de19eea1add4f78f2a45ec30ddb43d5d5d64a08055cb702fcbe15dee8ce

Scanner detections:

13 / 68

Status:

Adware

Explanation:

May modify the web browser's settings including changing the homepage and search provider in addition to delivering ads (by injecting banner and text-links directly in the webpage).

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

12/26/2024 12:21:48 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.Kazy.402573

932

Avira AntiVirus

ADWARE/CrossRider.Gen2

7.11.162.94

Baidu Antivirus

Adware.Win32.CrossRider

4.0.3.14717

Bitdefender

Gen:Variant.Adware.Kazy.402573

1.0.20.990

Emsisoft Anti-Malware

Gen:Variant.Adware.Kazy.402573

8.14.07.17.07

ESET NOD32

Win32/Toolbar.CrossRider.AJ potentially unwanted application

7.0.302.0

F-Secure

Gen:Variant.Adware.Kazy.402573

11.2014-17-07_5

G Data

Gen:Variant.Adware.Kazy.402573

14.7.24

IKARUS anti.virus

AdWare.Adload

t3scan.1.6.1.0

Malwarebytes

PUP.Optional.InternetSpeedChecker.A

v2014.07.17.07

MicroWorld eScan

Gen:Variant.Adware.Kazy.402573

15.0.0.594

Reason Heuristics

PUP.Speedchecker.e

14.7.17.18

VIPRE Antivirus

Threat.4789396

31208

File size:

558.5 KB (571,904 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Internet Speed Checker.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

InstallBrain

Language:

English (United States)

Common path:

C:\Program Files\internet speed checker\internet speed checker-novainstaller.exe

File PE Metadata

Compilation timestamp:

7/16/2014 11:14:09 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:nHzxweCIKjPIIFxPaCutra7iamlgpTq9:EVwhhOT

Entry address:

0x49EE3

Entry point:

E8, B8, DD, 00, 00, E9, 7F, FE, FF, FF, CC, CC, CC, 57, 56, 53, 33, FF, 8B, 44, 24, 14, 0B, C0, 7D, 14, 47, 8B, 54, 24, 10, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 14, 89, 54, 24, 10, 8B, 44, 24, 1C, 0B, C0, 7D, 14, 47, 8B, 54, 24, 18, F7, D8, F7, DA, 83, D8, 00, 89, 44, 24, 1C, 89, 54, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 18, 8B, 44, 24, 14, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 10, F7, F1, 8B, D3, EB, 41, 8B, D8, 8B, 4C, 24, 18, 8B, 54, 24, 14, 8B, 44, 24, 10, D1, EB, D1, D9, D1, EA, D1, D8, 0B, DB, 75, F4... 
[+]

Code size:

445 KB (455,680 bytes)

Scheduled Task

Task name:

446033dc-9ded-4b88-8a7e-3aaddf2d231a-6

Trigger:

Logon (Runs on logon)

Action:

internet speed checker-novainstaller.exe \ovmbv \cvajrsxgu='internet speed checker' \rehsvm

The file internet speed checker-novainstaller.exe has been discovered within the following program.

Internet Speed Checker by Sailor Project

Internet Speed Checker is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.

62% remove it

Remove internet speed checker-novainstaller.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.