» internet speed checker-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

internet speed checker-bho.dll

Internet Speed Checker

Selecao Technologies (Bright Circle Investments Ltd)

This web browser extension uses the Crossrider toolbar creation and distribution platform. The module internet speed checker-bho.dll, “Internet Speed Checker BHO” by Selecao Technologies (Bright Circle Investments) has been detected as adware by 23 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘166090e0f32601317e4e5118752c52d60061752’. This file is typically installed with the program Internet Speed Checker by Sailor Project which is a potentially unwanted software program. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.

File name:

Publisher:

Speedchecker (signed by Selecao Technologies (Bright Circle Investments Ltd))

Product:

Internet Speed Checker

Description:

Internet Speed Checker BHO

Version:

1000.1000.1000.1000

MD5:

82a27f1baf7774bfc4c720aa656cd445

SHA-1:

5796e1a00d1829020521b9d6a8444087a1774da9

SHA-256:

6d1c3d222a629dff23908425774445eb990c3ef1551590349fe51cdfdac4f63e

Scanner detections:

23 / 68

Status:

Adware

Explanation:

May modify the web browser's settings including changing the homepage and search provider in addition to delivering ads (by injecting banner and text-links directly in the webpage).

Analysis date:

4/19/2024 9:29:29 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Application.Heur.Wy9@mWYr7Wji

6385503

AhnLab V3 Security

PUP/Win32.CrossRider

2015.01.24

Avira AntiVirus

ADWARE/CrossRider.Gen

7.11.203.156

AVG

Generic

2016.0.3223

Baidu Antivirus

PUA.Win32.CrossRider

4.0.3.15120

Bitdefender

Gen:Application.Heur.Wy9@mWYr7Wji

1.0.20.100

Dr.Web

DLOADER.Trojan

9.0.1.020

Emsisoft Anti-Malware

Gen:Application.Heur.Wy9@mWYr7Wji

9.0.0.4799

ESET NOD32

Win32/Toolbar.CrossRider.BA potentially unwanted application

7.0.302.0

F-Secure

Riskware.Gen:Application.Heur.Wy9@mWYr7Wji

5.13.68

G Data

Gen:Application.Heur.Wy9@mWYr7Wji

15.1.24

Kaspersky

not-a-virus:HEUR:AdWare.Win32.CrossRider

14.0.0.2611

Malwarebytes

PUP.Optional.InternetSpeedChecker.A

v2015.01.20.06

McAfee

Artemis!C9F31889E427

5600.6869

MicroWorld eScan

Gen:Application.Heur.Wy9@mWYr7Wji

16.0.0.60

NANO AntiVirus

Trojan.Win32.CrossRider.dmsuxp

0.30.0.64812

Norman

Gen:Application.Heur.Wy9@kWYr7Wji

03.12.2014 13:20:04

Panda Antivirus

Trj/Genetic.gen

15.01.20.06

Qihoo 360 Security

HEUR/QVM30.1.Malware.Gen

1.0.0.1015

Reason Heuristics

PUP.CrossRider.BHO.Brightcircle

15.1.26.11

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.15118

Sophos

Generic PUA CE

4.98

VIPRE Antivirus

Threat.4789396

36666

File size:

782 KB (800,744 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Internet Speed Checker.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\internet speed checker\internet speed checker-bho.dll

Digital Signature

Signed by:

Selecao Technologies (Bright Circle Investments Ltd)

Authority:

COMODO CA Limited

Valid from:

12/16/2014 1:00:00 AM

Valid to:

12/17/2015 12:59:59 AM

Subject:

CN=Selecao Technologies (Bright Circle Investments Ltd), O=Selecao Technologies (Bright Circle Investments Ltd), STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Nicosia, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

3F2791037D410A199539AA4A99F7DEB3

File PE Metadata

Compilation timestamp:

1/19/2015 6:44:20 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:NHQSABMjKyW8VddLPofUR9cELturxLx8f/wutc3ICTq9TOSQZE4:NwTBMmyW8z1wURVLturxLxwtM7T/SM

Entry address:

0x687B4

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 5D, C9, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, F8, E7, 0A, 10, E8, ED, 49, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 28, 54, 0B, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 84, 03, 0A, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.5636

Developed / compiled with:

Microsoft Visual C++

Code size:

594.5 KB (608,768 bytes)

Internet Explorer BHO

Display name:

166090e0f32601317e4e5118752c52d60061752

CLSID:

{11111111-1111-1111-1111-110611171152}

CLSID name:

Internet Speed Checker

The file internet speed checker-bho.dll has been discovered within the following program.

Internet Speed Checker by Sailor Project

Internet Speed Checker is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.

62% remove it

Remove internet speed checker-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.