Hot Take Hibit Uninstaller fake website

Divine_Barakah

Divine_Barakah

Level 41
Thread author
Verified
Top Poster
Well-known
Forum Veteran
May 10, 2019
3,087
12,941
3,969
Gaza Strip
I was trying to dowlnload Hibit Installer and I searched for it using DDG. I found multiple search results. I thought they changed the domain ending to .com (it was .ir), so the website is leek and good-looking but when I clicked download, Eset detected it.

HiBit Uninstaller - Best Free Windows Uninstaller (the fake website)

The fake website is detected only by a couple of vendors (kaspersky is one of them), but the exexcutable itself is detected by many.

VirusTotal

VirusTotal
www.virustotal.com www.virustotal.com


Edit:

I also found many of theseuninstaller-3-2-20-pro-edition on Github

github.com

GitHub - Okolopeter/hibit-uninstaller-3-2-20-pro-edition: Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC

Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC - Okolopeter/hibit-uninstaller-3-2-20-pro-edition
github.com github.com
 
Last edited:
  • Like
  • Wow
Reactions: Halp2001, Brownie2019, Sorrento and 5 others
As you can see, it is literally the 3rd search result

Screenshot (10).png
 
  • Like
Reactions: Halp2001, Brownie2019, Sorrento and 4 others
Divine_Barakah said:
I was trying to dowlnload Hibit Installer and I searched for it using DDG. I found multiple search results. I thought they changed the domain ending to .com (it was .ir), so the website is leek and good-looking but when I clicked download, Eset detected it.

HiBit Uninstaller - Best Free Windows Uninstaller (the fake website)

The fake website is detected only by a couple of vendors (kaspersky is one of them), but the exexcutable itself is detected by many.

VirusTotal

VirusTotal
www.virustotal.com www.virustotal.com
Click to expand...
I've seen the website too but the download doesn't work on my end. Is it working for you?
 
  • Like
Reactions: Halp2001, Sorrento, Khushal and 1 other person
  • Like
  • +Reputation
Reactions: Halp2001, Brownie2019, Kongo and 3 others
Divine_Barakah said:
I was trying to dowlnload Hibit Installer and I searched for it using DDG. I found multiple search results. I thought they changed the domain ending to .com (it was .ir), so the website is leek and good-looking but when I clicked download, Eset detected it.

HiBit Uninstaller - Best Free Windows Uninstaller (the fake website)

The fake website is detected only by a couple of vendors (kaspersky is one of them), but the exexcutable itself is detected by many.

VirusTotal

VirusTotal
www.virustotal.com www.virustotal.com


Edit:

I also found many of theseuninstaller-3-2-20-pro-edition on Github

github.com

GitHub - Okolopeter/hibit-uninstaller-3-2-20-pro-edition: Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC

Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC - Okolopeter/hibit-uninstaller-3-2-20-pro-edition
github.com github.com
Click to expand...
1783148898586.png
 
  • Like
  • +Reputation
Reactions: Halp2001, Brownie2019, Kongo and 3 others
roger_m said:
It's not one of first search results on Google. I guess hackers have decided to take advantage of the fact that due to the recent internet blockages in Iran, the real HiBit has not be accessible at times.
Click to expand...
You're right. I have just tried on G search engine and the result was in the first 10 results.
 
  • Like
Reactions: Halp2001, Kongo, Sorrento and 1 other person
And I hate to say but I warned people, you can not use or trust any software under such a regime. At least block at firewall level to be safe.

Looking back it wasn't safe before the war and it's not safe now. I having nothing against the Iranian people but you have to live in the world we live in.

Uninstaller with admin used by tech geeks and security folks? Uber target!
 
  • Like
  • Wow
Reactions: Brownie2019, Sorrento, Khushal and 1 other person
Zero Knowledge said:
And I hate to say but I warned people, you can not use or trust any software under such a regime. At least block at firewall level to be safe.

Looking back it wasn't safe before the war and it's not safe now. I having nothing against the Iranian people but you have to live in the world we live in.
Click to expand...
I apologise but what does what you're saying have to do with the incident I reported? Hibit is one of the best uninstallers out there and it is free. That made it a target possibly? And btw this is not the official website. Threat actors decided to replicate the website and distribute malware and info stealers.

My only reservation about it is the fact it is not digitally signed (I believe it had sth to do with the imposed sanctions).
 
  • Like
  • +Reputation
Reactions: Halp2001, Morro, Kongo and 3 others
Zero Knowledge said:
And I hate to say but I warned people, you can not use or trust any software under such a regime. At least block at firewall level to be safe.
Click to expand...
This has got nothing to do with the regime. It's fake website with a malicious download, created by hackers. The genuine HiBit Uninstaller, which you can download from the official website, or many download sites has always been safe to use.
 
  • +Reputation
  • Like
  • Hundred Points
Reactions: Halp2001, Brownie2019, Kongo and 3 others
roger_m said:
This has got nothing to do with the regime. It's fake website with a malicious download, created by hackers. The genuine HiBit Uninstaller, which you can download from the official website, or many download sites has always been safe to use.
Click to expand...
I will contact Hibit support and ask them to share the hash of the installer next to download button. I believe this is the only way to make sure the installer was not tampered with.
 
  • Like
Reactions: Halp2001, Kongo, Sorrento and 2 others
Sorrento said:
The install setup has been on my PC software files since I downloaded it back in 2nd February, it was safe then so its safe now version 4.0.10, if it don't get updated it pretty good software for the foreseeable future.
Click to expand...
I also keep setup files on my external HHD, but I was too lazy. But with all honesty, I hate when good software is not digitally signed.
 
  • Like
Reactions: Halp2001, Brownie2019 and Khushal

You may also like...