» internet speed checker-bho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

internet speed checker-bho.dll

Internet Speed Checker

Krance Development

This web browser extension uses the Crossrider toolbar creation and distribution platform. The module internet speed checker-bho.dll, “Internet Speed Checker BHO” by Krance Development has been detected as adware by 33 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘166090e0f32601317e4e5118752c52d60061752’. This file is typically installed with the program Internet Speed Checker by Sailor Project which is a potentially unwanted software program. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.

File name:

Publisher:

Speedchecker (signed by Krance Development)

Product:

Internet Speed Checker

Description:

Internet Speed Checker BHO

Version:

1000.1000.1000.1000

MD5:

e338d559e09e885491ff056c91578a79

SHA-1:

f047b136e8f0245584a27587b08827ed1d434f56

SHA-256:

eef22ef98e2862a13600ff91b97aebf975084afd4ab8d5905e0ba6af117dbd7c

Scanner detections:

33 / 68

Status:

Adware

Explanation:

May modify the web browser's settings including changing the homepage and search provider in addition to delivering ads (by injecting banner and text-links directly in the webpage).

Analysis date:

5/20/2024 9:34:38 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.Graftor.151676

822

Agnitum Outpost

PUA.Adwapper

7.1.1

AhnLab V3 Security

PUP/Win32.BHO

2014.08.23

Avira AntiVirus

Adware/CrossRider.pq

7.11.173.122

avast!

Win32:Malware-gen

141025-0

AVG

Generic

2015.0.3300

Baidu Antivirus

PUA.Win32.CrossRider

4.0.3.14115

Bitdefender

Gen:Variant.Adware.Graftor.151676

1.0.20.1545

Comodo Security

ApplicUnwnt

19623

Dr.Web

DLOADER.Trojan

9.0.1.0309

Emsisoft Anti-Malware

Gen:Variant.Adware.Graftor.151676

8.14.11.05.05

ESET NOD32

Win32/Toolbar.CrossRider.AF potentially unwanted application

8.7.0.302.0

Fortinet FortiGate

Adware/Adwapper

11/5/2014

F-Prot

W32/A-60e5da54

v6.4.7.1.166

F-Secure

Gen:Variant.Adware.Graftor.151676

11.2014-05-11_4

G Data

Gen:Variant.Adware.Graftor.151676

14.11.24

IKARUS anti.virus

not-a-virus:WebToolbar.CroRi

t3scan.1.7.8.0

K7 AntiVirus

Unwanted-Program

13.183.13432

Kaspersky

Trojan.Win32.GoogUpdate

15.0.0.543

Malwarebytes

PUP.Optional.InternetSpeedChecker.A

v2014.11.05.05

McAfee

Artemis!918875E769EE

5600.6956

MicroWorld eScan

Gen:Variant.Adware.Graftor.151676

15.0.0.927

NANO AntiVirus

Riskware.Win32.AdLoad.dcmlho

0.28.2.61721

Panda Antivirus

Trj/Genetic.gen

14.11.05.05

Qihoo 360 Security

Win32/Trojan.bf0

1.0.0.1015

Quick Heal

AdWare.NSIS.r6 (Not a Virus)

11.14.14.00

Reason Heuristics

PUP.CrossRider.BHO.AA

14.11.5.5

Rising Antivirus

PE:Malware.Obscure!1.9C59

23.00.65.141103

Sophos

AppRider

4.98

Trend Micro House Call

TROJ_GEN.F0C2H00IG14

7.2.309

Vba32 AntiVirus

AdWare.Adwapper

3.12.26.3

VIPRE Antivirus

Threat.4789396

33120

Zillya! Antivirus

Adware.CrossRider.Win32.126

2.0.0.1927

File size:

609.4 KB (624,032 bytes)

Product version:

1000.1000.1000.1000

Original file name:

Internet Speed Checker.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\internet speed checker\internet speed checker-bho.dll

Digital Signature

Signed by:

Krance Development

Authority:

COMODO CA Limited

Valid from:

8/27/2014 9:00:00 PM

Valid to:

8/28/2015 8:59:59 PM

Subject:

CN=Krance Development, O=Krance Development, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

2F8A4746EB05936853BC17805C72D300

File PE Metadata

Compilation timestamp:

9/26/2014 4:34:12 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

12288:0owTXfkPfnThENt/Z0WoSKTDTOEwNsfTJJ+AhNr/GQCTI3UwgpVtHmU:0ow+hENt/Z0WoSKTDTOpg8Avr/GjTjwS

Entry address:

0x46B36

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, DB, B4, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, D0, 3A, 08, 10, E8, BB, 30, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 28, AF, 08, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 64, 3A, 07, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

419.5 KB (429,568 bytes)

Internet Explorer BHO

Display name:

166090e0f32601317e4e5118752c52d60061752

CLSID:

{11111111-1111-1111-1111-110611171152}

CLSID name:

Internet Speed Checker

The file internet speed checker-bho.dll has been discovered within the following program.

Internet Speed Checker by Sailor Project

Internet Speed Checker is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.

62% remove it

Remove internet speed checker-bho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.