ITop screen recorder and VPN self-installed itself after I tried upgrading IOBit Driver Booster (yes, I know, but my tech-savvy friend installed it on my laptop so I thought it was okay). I immediately uninstalled them via Control Panel. I then ran a full scan using Kaspersky Free Security Cloud and it came up clean. I then uninstalled Driver Booster.
As far as I can tell, the thing’s a PUP and nothing else. Am I safe?
Yea, sounds like you’re fine now. You can run AdwCleaner and Malwarebytes to find any remnants.
As of now, they are cooperated with iTop VPN to assist with advancing its item iTop VPN, which can furnish private admittance to the Internet with military-grade assurance. Practically all IObit items are suggesting this application. On the off chance that you don’t need it, please uncheck the checkbox during your installation. Incidentally, it is ensured all IObit programs is 100% safe.I have sent your anxiety to our item group and market group. They will think about this sort of advertising exercises and make a superior equilibrium in future.
I invest a ton of energy and exertion attempting to keep my PCs secure. A Windows program doesn’t simply add an executable or dll document or two. It covers itself in organizers out of control, makes vault sections, can change framework defaults, regularly snatches record relationship for itself, and so on I want an instrument like Uninstaller to eliminate programs more successfully than Windows’ Add/Remove program. IOBit’s choice to naturally introduce programming without the client’s authorization will support me (and others, I suspect) to go to different designers who don’t treat their clients thusly.
For a better experience, you may kindly find top screen recorder here. This was very helpful for me.
i will keep it ahahahahahaah
I noticed it tries to contact these IP addresses in Russia every 4 mins.
45.91.67.94
45.144.3.211
45.87.104.42
194.116.190.84
45.144.3.168
I used Revo Uninstaller to clean up the remaining folders. Don’t know if I got them all, but I don’t see any folders named after them anymore. I ran AdwCleaner and it found 6 PUPs. However, they don’t seem connected to IOBit or anything so not sure where they came from or what they’ve been doing. I quarantined them but not sure if I can delete them (not sure if they’re somehow false positives). Malwarebytes (non-Premium) turned up clean as well.
military-grade assurance.
This is just a ploy vpns use to sound more secure, there is no such thing as military-grade encryption, they use the same as regular wifi.
What did AdwCleaner find?
1 Legacy item and 5 WebCompanion items. I’ll place the details here later.
Here are the things I quarantined:
PUP.Optional.Legacy (Type: Registry value):
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
PUP.Optional.WebCompanion (Type: Registry key):
HKU.DEFAULT\Software\Mozilla\NativeMessagingHosts\com.webcompanion.native
HKLM\Software\Wow6432Node\LavaSoft\Web Companion
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
HKCU\Software\Lavasoft\Web Companion
I have no idea what these guys are. I only have Brave and Chrome (which I don’t use). Both of them are free of suspicious extensions and I don’t have any weird ads on my machine at all.
Jut some leftover registry entries for some left over crap, nothing to worry about.
Thanks so much for all your help here.