This situation is not altogether easy. The only sign that marks IObit products (or at least IObit Security 360) as rogue, would be the fact that they steal databases.
The argument against being rogue, would be the fact that they do not explicitly enforce the need to upgrade to higher version just to remove threats. They offer the chance to in the program, but do not explicitly enforce the need to. Then, they do not unusually attempt to penetrate or intrude the system it is running on. They also do not seem to have any illegitimate advertising going on.
I see IObit Security 360 as rogue, and should not be used. I am not forcing users to remove IObit products, but giving the user the opportunity to choose. Here is how I state it to the user I am helping (to remove malware): "IObit was recently recorded to be a rogue software distributor. Removing it is optional at the moment, but I recommend to remove IObit software because IObit steals databases of good products."
I am not saying it is legal, but if there was a way you can reverse-engineer their software and check it out yourself - you should.
I think it is also dumb that they are using 5 years worth of samples of malware. That will not work because:
- Malware is a continuous and growing danger, and multiplies daily.
- Botnets are becoming one of the biggest dangers.
- Detection of malware should be based on behavior not just signatures.
- Using old removal methods and old databases can cause the file size of the program to be huge.
- Some of the more difficult malware cannot be removed easily. Having an up-to-date database is the best and biggest priority all security companies should have.
- If they are going to detect traces, then detect all of them, not just a few.
- They need to make sure every signature they have in their database is not a carbon copy of another security companies' work.
I do not think it is questionable, I think it is arguable - about whether or not IObit is rogue. I think IObit is rogue, but I can find a lot of people who would like to argue, especially IObit users.