home

internet speed checker-buttonutil.dll

Naruto Source

This adware is a web browser extension that will inject advertising in the browser in the form of unwanted banners and text-links which may link to malware sites and install unwanted software. The module internet speed checker-buttonutil.dll by Naruto Source has been detected as adware by 10 anti-malware scanners. This file is typically installed with the program Internet Speed Checker by Sailor Project which is a potentially unwanted software program. The ButtonUtil module (32-bit version) uses the Crossrider web extension monetization toolkit and will perform a number of helper integration activities on the user's web browser's as well as the Window's Shell in order to install the addon. It is distributed as part of the Brightcircle group of browser-extensions.
Publisher:
Naruto Source  (signed and verified)

MD5:
6cc079d017a7e57bcfe35f0039237f25

SHA-1:
76cbef67cdbe13e4cf9b7c13f4d3d138ce82e067

SHA-256:
9a90239aa3c7d2f10197160078d34fa5f429c50dcf108cc75220316530cf64ed

Scanner detections:
10 / 68

Status:
Adware

Explanation:
Part of the Crossrider toolbar platform. Distributed through the Brightcircle investments brand.

Note:
Crossrider is the owner of a platform that enables the creation of cross-browser extensions by developers but is not the owner of this detected application. The owner/publisher of this file is Naruto Source.

Analysis date:
5/8/2024 10:55:36 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/CrossRider.pq
7.11.170.102

AVG
Generic
2015.0.3364

Dr.Web
DLOADER.Trojan
9.0.1.0244

ESET NOD32
probably Win32/Toolbar.CrossRider.AA potentially unwanted application
7.0.302.0

IKARUS anti.virus
not-a-virus:WebToolbar.CroRi
t3scan.1.7.5.0

Kaspersky
not-a-virus:AdWare.NSIS.Adwapper
15.0.0.494

Panda Antivirus
Trj/Genetic.gen
14.09.01.10

Reason Heuristics
PUP.Crossrider.NarutoSource.b
14.9.1.22

Rising Antivirus
PE:Malware.Obscure!1.9C59
23.00.65.14830

Sophos
AppRider
4.98

File size:
433.9 KB (444,264 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\internet speed checker\internet speed checker-buttonutil.dll

Digital Signature
Signed by:
Naruto Source

Authority:
COMODO CA Limited

Valid from:
7/27/2014 8:00:00 PM

Valid to:
7/28/2015 7:59:59 PM

Subject:
CN=Naruto Source, O=Naruto Source, STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Cyprus, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
1CE82906A7F364268F66771839675655

File PE Metadata
Compilation timestamp:
8/31/2014 6:04:15 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:whNhmwX7Tcsm5ifOtU6Ognj8g0M4TlWTB41NdciwJMjapR:wJnXFmkUOgnjBaWTC1nF3jaD

Entry address:
0x2BE93

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 41, 9C, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 90, 81, 05, 10, E8, 0E, 36, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 28, 01, 06, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, E0, 15, 05, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Entropy:
6.3781

Developed / compiled with:
Microsoft Visual C++

Code size:
298.5 KB (305,664 bytes)

The file internet speed checker-buttonutil.dll has been discovered within the following program.

Internet Speed Checker  by Sailor Project
Internet Speed Checker is an adware web browser application that displays banner ads as well as contextual link ads that are injected in the web page.
62% remove it
 
Powered by Should I Remove It?

Remove internet speed checker-buttonutil.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.