Hot Take Hibit Uninstaller fake website

Divine_Barakah

Divine_Barakah

Level 41
Thread author
Verified
Top Poster
Well-known
Forum Veteran
May 10, 2019
3,087
12,962
3,969
Gaza Strip
I was trying to dowlnload Hibit Installer and I searched for it using DDG. I found multiple search results. I thought they changed the domain ending to .com (it was .ir), so the website is leek and good-looking but when I clicked download, Eset detected it.

HiBit Uninstaller - Best Free Windows Uninstaller (the fake website)

The fake website is detected only by a couple of vendors (kaspersky is one of them), but the exexcutable itself is detected by many.

VirusTotal

VirusTotal
www.virustotal.com www.virustotal.com


Edit:

I also found many of theseuninstaller-3-2-20-pro-edition on Github

github.com

GitHub - Okolopeter/hibit-uninstaller-3-2-20-pro-edition: Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC

Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC - Okolopeter/hibit-uninstaller-3-2-20-pro-edition
github.com github.com
 
Last edited:
  • Like
  • Wow
  • +Reputation
Reactions: Jonny Quest, Sampei.Nihira, lokamoka820 and 8 others
As you can see, it is literally the 3rd search result

Screenshot (10).png
 
  • Like
  • +Reputation
Reactions: Jonny Quest, Sampei.Nihira, lokamoka820 and 7 others
Divine_Barakah said:
I was trying to dowlnload Hibit Installer and I searched for it using DDG. I found multiple search results. I thought they changed the domain ending to .com (it was .ir), so the website is leek and good-looking but when I clicked download, Eset detected it.

HiBit Uninstaller - Best Free Windows Uninstaller (the fake website)

The fake website is detected only by a couple of vendors (kaspersky is one of them), but the exexcutable itself is detected by many.

VirusTotal

VirusTotal
www.virustotal.com www.virustotal.com
Click to expand...
I've seen the website too but the download doesn't work on my end. Is it working for you?
 
  • Like
Reactions: Sampei.Nihira, lokamoka820, Halp2001 and 3 others
  • Like
  • +Reputation
Reactions: Sampei.Nihira, lokamoka820, Halp2001 and 5 others
Divine_Barakah said:
I was trying to dowlnload Hibit Installer and I searched for it using DDG. I found multiple search results. I thought they changed the domain ending to .com (it was .ir), so the website is leek and good-looking but when I clicked download, Eset detected it.

HiBit Uninstaller - Best Free Windows Uninstaller (the fake website)

The fake website is detected only by a couple of vendors (kaspersky is one of them), but the exexcutable itself is detected by many.

VirusTotal

VirusTotal
www.virustotal.com www.virustotal.com


Edit:

I also found many of theseuninstaller-3-2-20-pro-edition on Github

github.com

GitHub - Okolopeter/hibit-uninstaller-3-2-20-pro-edition: Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC

Download Hibit Uninstaller 3.2.20 Crack With License Key Latest Version for PC - Okolopeter/hibit-uninstaller-3-2-20-pro-edition
github.com github.com
Click to expand...
1783148898586.png
 
  • Like
  • +Reputation
Reactions: Sampei.Nihira, lokamoka820, Halp2001 and 5 others
roger_m said:
It's not one of first search results on Google. I guess hackers have decided to take advantage of the fact that due to the recent internet blockages in Iran, the real HiBit has not be accessible at times.
Click to expand...
You're right. I have just tried on G search engine and the result was in the first 10 results.
 
  • Like
Reactions: lokamoka820, Halp2001, Kongo and 2 others
And I hate to say but I warned people, you can not use or trust any software under such a regime. At least block at firewall level to be safe.

Looking back it wasn't safe before the war and it's not safe now. I having nothing against the Iranian people but you have to live in the world we live in.

Uninstaller with admin used by tech geeks and security folks? Uber target!
 
  • Like
  • Wow
Reactions: Sampei.Nihira, Brownie2019, Sorrento and 2 others
Zero Knowledge said:
And I hate to say but I warned people, you can not use or trust any software under such a regime. At least block at firewall level to be safe.

Looking back it wasn't safe before the war and it's not safe now. I having nothing against the Iranian people but you have to live in the world we live in.
Click to expand...
I apologise but what does what you're saying have to do with the incident I reported? Hibit is one of the best uninstallers out there and it is free. That made it a target possibly? And btw this is not the official website. Threat actors decided to replicate the website and distribute malware and info stealers.

My only reservation about it is the fact it is not digitally signed (I believe it had sth to do with the imposed sanctions).
 
  • Like
  • +Reputation
Reactions: Sampei.Nihira, lokamoka820, Halp2001 and 5 others
Zero Knowledge said:
And I hate to say but I warned people, you can not use or trust any software under such a regime. At least block at firewall level to be safe.
Click to expand...
This has got nothing to do with the regime. It's fake website with a malicious download, created by hackers. The genuine HiBit Uninstaller, which you can download from the official website, or many download sites has always been safe to use.
 
  • +Reputation
  • Like
  • Hundred Points
Reactions: Sampei.Nihira, lokamoka820, Halp2001 and 5 others
roger_m said:
This has got nothing to do with the regime. It's fake website with a malicious download, created by hackers. The genuine HiBit Uninstaller, which you can download from the official website, or many download sites has always been safe to use.
Click to expand...
I will contact Hibit support and ask them to share the hash of the installer next to download button. I believe this is the only way to make sure the installer was not tampered with.
 
  • Like
  • Applause
Reactions: Sampei.Nihira, lokamoka820, Halp2001 and 4 others
Sorrento said:
The install setup has been on my PC software files since I downloaded it back in 2nd February, it was safe then so its safe now version 4.0.10, if it don't get updated it pretty good software for the foreseeable future.
Click to expand...
I also keep setup files on my external HHD, but I was too lazy. But with all honesty, I hate when good software is not digitally signed.
 
  • Like
Reactions: Sampei.Nihira, lokamoka820, Halp2001 and 2 others
Divine_Barakah said:
I was trying to dowlnload Hibit Installer and I searched for it using DDG. I found multiple search results.
Click to expand...
I always download new software from Softpedia, it guarantees that it is 99.99% safe. If it is not listed there, I will become highly suspicious.
Usually Softpedia lists Homepage as well, so I can download it directly from the dev, not in this case though, Iran is obviously restricted.

 
  • Like
Reactions: Halp2001, harlan4096, lokamoka820 and 2 others
Sampei.Nihira said:
Blocked by NextDNS.
Click to expand...
Yep, the webpage is blocked, but the download is blocked even more. 🙃

capture_07042026_212326.jpg

But I must say that they did use some diligence, AI. They list the latest version as 2.7 in pictures, while the latest version shows as 2.3 in pictures, though it is actually 4.0.

capture_07042026_212935.jpg
 
  • Like
Reactions: Halp2001, lokamoka820, harlan4096 and 1 other person

You may also like...