DownSpeedTest is a Browser Toolbar Extension for Google Chrome that allows users to test their internet speed and convert files, however this speed test does not show proper values, nor even close.
Upon installation DownSpeedTest will replace your default New Tab page with its own Search Engine “MyWay.com” or “Search.MyWay.com”. This Search Engine camouflages itself as a “Enhanced Google Search Engine”, but all it does is allow more room for easier ad injection. In the background, this extension monitors user browsing behavior and records visited links, viewed products, clicked links and time spend on websites. This information is later used for Ad targeting.
While browsing the internet with this extension enabled you will experience additional ads, sponsored content, and even pop-up ads on some occasions. Due to its information mining behavior and aggressive ad placement, DownSpeedTest had been marked as a Browser Hijacker and it is recommended for removal.
About Browser Hijackers
Browser hijacking is a type of unwanted program, commonly a web browser add-on or extension, which causes modifications in the browser’s settings. There are lots of reasons why you may experience a browser hijack; but commercial, advertising and marketing are the major reasons for their creation. These are typically used to force hits to a specific site, manipulating web-traffic to generate ad-revenue. Even though it might appear naive, these tools are made by malicious people who always try to take full advantage of you, so that hackers could earn money from your naive and distraction. In a worst-case scenario, your browser could be hi-jacked to download malicious software that can do a lot of damage to your laptop or computer.
How one can know whether the browser is hijacked?
When your web browser is hijacked, the following might happen: your browser’s homepage has been reset to some unknown webpage; new bookmarks pointing to porn websites have been added to your bookmarks; the default browser configurations are modified and/or your default web engine is altered; you see unwanted new toolbars added; unstoppable flurries of pop-up ads show up on your computer screen; your browser gets slow, buggy, crashes regularly; you can’t navigate to specific internet pages, such as security software related websites.
How does a browser hijacker infect a computer?
Browser hijackers infect computers via malicious e-mail attachments, downloaded infected documents or by visiting infected internet sites. They can be included with toolbars, add-ons, BHO, plugins or browser extensions. Also, some freeware and shareware can put the hijacker in your PC through “bundling”.
Browser hijackers could record user keystrokes to collect potentially important information leading to privacy concerns, cause instability on computers, significantly disrupt user’s browsing experience, and ultimately slow down the system to a point where it becomes unusable.
How you can fix a browser hijack
One thing you could try to eradicate a browser hijacker is to find the malware in the “Add or Remove Programs” list of the Microsoft Windows Control Panel. It might or might not be there. When it is, uninstall it. However, most browser hijackers are difficult to eliminate manually. Regardless of how much you attempt to get rid of it, it might come back over and over. Amateur PC users should never try for the manual form of removal methods, since it demands in-depth system knowledge to perform fixes on the system registry and HOSTS file.
Anti-malware software is really effective when it comes to picking up and eliminating browser hijackers that regular anti-virus application has overlooked. If you’d like to get rid of persistent hijackers effectively, install the top-rated Anti-Malware software Safebytes Anti-Malware. Use a system optimizer (like Total System Care) along with your anti-malware software to fix various registry issues, remove system vulnerabilities, and improve your computer performance.
What To Do If You Cannot Install Any Anti-Malware?
Practically all malware is bad and the consequences of the damage could differ according to the specific kind of malicious software. Some malware is created to interfere with or block things that you’d like to do on your PC. It may not permit you to download anything from the web or prevent you from accessing a few or all of the internet sites, especially the anti-malware websites. So what you should do if malware prevents you from downloading or installing Anti-Malware? There are a few actions you can take to circumvent this problem.
Install the anti-virus in Safe Mode
Safe Mode is a unique, simplified version of Microsoft Windows in which only essential services are loaded to counteract viruses and also other problematic applications from loading. If the malware is set to load immediately when computer starts, switching into this mode may prevent it from doing so. To start the computer into Safe Mode, press the “F8” key on the keyboard just before the Windows logo screen shows up; Or after normal Windows boot up, run MSConfig, look over “Safe Boot” under the Boot tab, and then click Apply. Once you are in Safe Mode, you can try to install your antivirus application without the hindrance of the malicious software. Following installation, run the malware scanner to get rid of most standard infections.
Download the anti-malware program using a different browser
Web-based malware could be environment-specific, aiming for a particular web browser or attacking particular versions of the browser. If you’re not able to download the security program using Internet Explorer, it means virus is targeting IE’s vulnerabilities. Here, you should switch over to an alternative web browser such as Chrome or Firefox to download Safebytes Anti-malware software.
Install anti-malware on a thumb drive
Another solution is to save and operate antivirus software tool completely from a Pen drive. Follow these steps to use a USB flash drive to clean your infected PC.
1) Make use of another virus-free computer to download Safebytes Anti-Malware.
2) Insert the USB drive on the same system.
3) Double click on the downloaded file to run the installation wizard.
4) Choose the USB flash drive as the location for saving the software file. Follow the instructions to complete the installation process.
5) Now, plug the USB drive into the corrupted computer.
6) Double-click the Safebytes Anti-malware icon on the pen drive to run the application.
7) Run Full System Scan to identify and clean-up of all types of malware.
Protect Your Computer & Privacy With SafeBytes Anti-Malware
If you’re planning to purchase anti-malware for your computer, there are lots of brands and utilities for you to consider. A few of them do a good job in getting rid of threats while many will harm your PC by themselves. You need to select one that is trustworthy, practical and has a good reputation for its malware source protection. While thinking about the dependable programs, Safebytes Anti-Malware is certainly the strongly recommended one.
SafeBytes anti-malware is a reliable software that not only secures your system permanently but is also very user friendly for people of all skill levels. Through its cutting-edge technology, this software will help you protect your PC against infections brought on by different kinds of malware and other threats, including spyware, adware, viruses, worms, trojans, keyloggers, potentially unwanted program (PUPs), and ransomware.
SafeBytes has great features when compared with other anti-malware programs. The following are some of the features you might like in SafeBytes Anti-Malware.
Live Protection: SafeBytes provides complete and real-time security for your computer system. This tool will continuously monitor your PC for any suspicious activity and updates itself regularly to keep abreast of the latest threats.
World-class AntiMalware Protection: With a critically acclaimed anti-malware engine, SafeBytes offers multilayered protection which is made to find and remove threats which are hidden deep in your computer’s operating system.
Safe Browsing: Safebytes assigns all sites a unique safety ranking that helps you to have an idea of whether the webpage you’re just about to visit is safe to view or known to be a phishing site.
Lightweight: This program is light-weight and will work quietly in the background, and will not affect your computer efficiency.
24/7 Online Technical Support: Support service is available for 24 x 7 x 365 days via email and chats to answer your queries.
SafeBytes can keep your PC safe from latest malware threats automatically with very little input needed from you again. Once you have installed this software, you no longer have to worry about malware or any other security worries. You will get the very best all-around protection for the money you pay on SafeBytes anti-malware subscription, there’s no question about it.
Technical Details and Manual Removal (Advanced Users)
To get rid of DownSpeedTest manually, go to the Add or Remove programs list in the Control Panel and select the offending program you want to get rid of. For internet browser extensions, go to your browser’s Addon/Extension manager and choose the plug-in you intend to disable or remove. You’ll likely also want to reset your web browser.
To ensure the complete removal, manually check your hard disk and computer registry for all the following and remove or reset the values as needed. Please be aware that this is for skilled users only and might be challenging, with incorrect file removal causing additional system errors. In addition, some malware is capable of replicating itself or preventing deletion. You’re suggested to do this procedure in Safe Mode.
Files:
%USERPROFILE%\Microsoft\Windows\Start Menu\Programs\DownSpeedTest
%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\DownSpeedTest
%ALLUSERSPROFILE%\Application Data\Microsoft\Windows\Start Menu\Programs\DownSpeedTest
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Sync Extension Settings\maoffpmgdffbgbncadalkhfhmlfihkgk
%UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\maoffpmgdffbgbncadalkhfhmlfihkgk
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\maoffpmgdffbgbncadalkhfhmlfihkgk
%UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\maoffpmgdffbgbncadalkhfhmlfihkgk
Registry:
HKEY_CURREN_USER\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\5818CEA7-889D-459A-9A75-889E1298A892
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\5818CEA7-889D-459A-9A75-889E1298A892
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\481F6B47-2AD8-4C6A-8554-A2897E6CF900
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\1AAB982B-77D7-44F1-B305-8909DAC045F2
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\5818CEA7-889D-459A-9A75-889E1298A892
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\481F6B47-2AD8-4C6A-8554-A2897E6CF900
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\1AAB982B-77D7-44F1-B305-8909DAC045F2
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Approved Extensions, value: 1AAB982B-77D7-44F1-B305-8909DAC045F2
HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\CA6A7AB9-F4B5-4D50-B5D2-33E996549AE3
HKEY_CURREN_USER\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar, value: 1AAB982B-77D7-44F1-B305-8909DAC045F2
HKEY_CURREN_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar, value: 1AAB982B-77D7-44F1-B305-8909DAC045F2
HKEY_CURREN_USER\SOFTWARE\Wow6432Node\Microsoft\Tracing\DownSpeedTest_RASMANCS
HKEY_CURREN_USER\SOFTWARE\Microsoft\Tracing\DownSpeedTest_RASMANCS
HKEY_CURREN_USER\SOFTWARE\Wow6432Node\Microsoft\Tracing\DownSpeedTest_RASAPI32
HKEY_CURREN_USER\SOFTWARE\Microsoft\Tracing\DownSpeedTest_RASAPI32
HKEY_CURREN_USER\SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\downspeedtest.dl.myway.com
⊞ WINDOWS + N - notification panel
Each time when the company is breached data is stolen and that places the company in a bad light usually because its user database has been compromised and people are concerned about their data being misused. This is very rational fear and concern but this time things are a little bit different than usual, why is that, you might ask?
Well, as before mentioned GoDaddy is a hosting company and the vector of attack was aimed at the part where it is hosting WordPress. Attackers were able to get their hands on the sFTP credentials of customers on that server meaning that all of the websites are also been relieved of their user base as well.
This potentially means that there is a high chance that all of the hosted web site's content is also compromised, meaning that your data could also be compromised even if you were not a GoDaddy customer, all you needed to do is to be a member of any site hosted on their platform.
GoDaddy has reset WordPress passwords and private keys, so it’s already taken the steps required to stock the attacker from exploiting anything with the passwords obtained. The company is in the process of generating new SSL certificates for customers.
Bad thing is that the attack used a compromised password to get into systems all the way back around September 6th, 2021, the breach was discovered on November 17th, 2021, which is more than a 2-month active time where the attacker could harvest tons of data. The outcome of this attack will be seen in the upcoming time, until then be safe, and Just in case change your passwords. 
So let's dive into this cool handheld in more detail and find out why we like it so much.
