Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

IObit installs hijacking Firefox homepage


  • Please log in to reply
5 replies to this topic

#1 floridaze

floridaze

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:04:30 PM

Posted 15 July 2011 - 03:46 PM

Hi, brilliant bleepsters.

Every time I install or update a program from IObit (ASC, 360, Smart Defrag), my Firefox homepage (my.myway.com) gets changed. I assure you that I'm VERY careful to uncheck, decline, skip, etc. all options to include any "generous extras" from IObit. I tried it again last night with Smart Defrag, and sure enough, it happened, as it does EVERY time, and has for the few years I've used their products. My homepage gets changed to search.iobit.com. Even more sinister is that the Firefox tab doesn't say IObit nor have an IObit logo, but it says Google Search and has a generic logo. AND Web of Trust warns that it's a dangerous site. Has anybody else had this happen with IObit? What could be causing my hijack? Am I infected? AFAIK, I have all my security programs that have an option to warn me if something tries to change my homepage to do so.

Thank you VERY much for any feedback.

Addendum 1: I have several layers of security. And I run all my scans (Comodo, MWB, SAS) immediately after installing, and they always come up clean. (And every other time I run them, for that matter.)

Addendum 2: Yes, I do know about IObit's likely thievery from MWB, and I don't like it either.

BC AdBot (Login to Remove)

 


#2 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,707 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:30 PM

Posted 15 July 2011 - 05:57 PM

iObit is a shady company and you'll do better without their programs.

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#3 floridaze

floridaze
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:04:30 PM

Posted 15 July 2011 - 07:56 PM

Yep, I've heard much about their piracy of MWB and so on. I won't use them again. The hijack is unacceptable, happening time after time. I wonder if it happens to many others? Nobody else I've asked who uses their programs has had the problem.

Do you think I could have a chronic infection of some sort, somehow, despite my clean scans? Plus I just did a clean reformat/reinstall of Win7 Home Premium a couple weeks ago. BUT I installed ASC and Smart Defrag soon afterward ...

Thanks a lot.

#4 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,707 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:30 PM

Posted 15 July 2011 - 09:30 PM

Since it's a fresh installation and the issue happens only after using iObit programs I would worry about any infection much.
I'd suggest, you uninstall those programs and you see how it goes.
If something is still not right....I'll be around.

Just to comment more...

As for SmartDefrag...Windows 7 has build in defragging program, which runs in real time, so there is no need for an extra defragger.

As for ASC, it involves registry cleaner and that...
Registry cleaners/optimizers are not recommended for several reasons:

  • Registry cleaners are extremely powerful applications that can damage the registry by using aggressive cleaning routines and cause your computer to become unbootable.

    The Windows registry is a central repository (database) for storing configuration data, user settings and machine-dependent settings, and options for the operating system. It contains information and settings for all hardware, software, users, and preferences. Whenever a user makes changes to settings, file associations, system policies, or installed software, the changes are reflected and stored in this repository. The registry is a crucial component because it is where Windows "remembers" all this information, how it works together, how Windows boots the system and what files it uses when it does. The registry is also a vulnerable subsystem, in that relatively small changes done incorrectly can render the system inoperable. For a more detailed explanation, read Understanding The Registry.
  • Not all registry cleaners are created equal. There are a number of them available but they do not all work entirely the same way. Each vendor uses different criteria as to what constitutes a "bad entry". One cleaner may find entries on your system that will not cause problems when removed, another may not find the same entries, and still another may want to remove entries required for a program to work.
  • Not all registry cleaners create a backup of the registry before making changes. If the changes prevent the system from booting up, then there is no backup available to restore it in order to regain functionality. A backup of the registry is essential BEFORE making any changes to the registry.
  • Improperly removing registry entries can hamper malware disinfection and make the removal process more difficult if your computer becomes infected. For example, removing malware related registry entries before the infection is properly identified can contribute to system instability and even make the malware undetectable to removal tools.
  • The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid, and erroneous entries does not affect system performance but it can result in "unpredictable results".
Unless you have a particular problem that requires a registry edit to correct it, I would suggest you leave the registry alone. Using registry cleaning tools unnecessarily or incorrectly could lead to disastrous effects on your operating system such as preventing it from ever starting again. For routine use, the benefits to your computer are negligible while the potential risks are great.


My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 


#5 floridaze

floridaze
  • Topic Starter

  • Members
  • 201 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:04:30 PM

Posted 15 July 2011 - 09:56 PM

Thanks much, Broni. I can always count on you, Cryptodan, Union_Thug, and many others to steer me right. I love this site. :thumbup2:

Not to get too off-topic, but I never use ASC's reg cleaner. I do use Ccleaner's reg cleaner on occasion, but only for the .dll files which don't exist after uninstalling programs. But I'm pretty paranoid already about reg tweaks, and after what you all on here have to say, as well as your links, well, I'll just not worry about what's in my reg. I mostly use these programs to securely erase my cache and so on.

I'll uninstall my two IObit programs, and since my Firefox homepage has been hijacked EVERY single time over the years after installing or updating an IObit program (but not my IE page, oddly), very likely never use their products again. Thanks for putting my mind at ease about probably not being infected. My scans continue to come up clean. I also checked for rootkits via TDSS. Nothing found.

Thank you kindly, as always. Greatly appreciated.

#6 Broni

Broni

    The Coolest BC Computer


  • BC Advisor
  • 42,707 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Daly City, CA
  • Local time:04:30 PM

Posted 15 July 2011 - 10:19 PM

You're very welcome Posted Image

My Website

p4433470.gif

My help doesn't cost a penny, but if you'd like to consider a donation, click p22001735.gif


 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users