Every time I start my computer this comes up>

Any help would be appreciated.

I just saw this same window.  I cannot find anything about it on any search engines, and I do not see it listed in add/remove programs.  It is probably some kind of malware.

GM

Check the terms of use to see what it is and if unknown run malwarebytes

Please download the free version of Malwarebytes. Update it immediately.
Do a full system scan
Let us know the results at the end.

http://www.malwarebytes.org/products

Zigzag,

I did check the terms, that`s where I got the name Bontio. Upon further investigation, I found that it is part of the program developed by "Pokki". On my computer it`s got a few entries, host app service, Lenovo web start, & start menu. reference website to what this is for> http://www.pokki.com/windows-8-start-menu

From this I believe it modifies the start menu to show apps, and was put on here by Lenovo. Only have had this computer a month. Thought I`d check sense this is all new to us using 8.1.

Some websites say you can uninstall it with out any problems.

Any help along with keeping it or uninstalling it would be appreciated. But right now I`m I know what it is now, and will click ok, but with out the browser modification it suggest.

Thanks to all

P.S. not malware

• Marked as answer by GambitMaster 13 hours 27 minutes ago
• Edited by GambitMaster 13 hours 14 minutes ago

I just saw this same window.  I cannot find anything about it on any search engines, and I do not see it listed in add/remove programs.  It is probably some kind of malware.

• Proposed as answer by IrishSkin 11 hours 53 minutes ago

I just saw this same window.  I cannot find anything about it on any search engines, and I do not see it listed in add/remove programs.  It is probably some kind of malware.

• Proposed as answer by IrishSkin Monday, March 30, 2015 7:27 PM

I just saw this same window.  I cannot find anything about it on any search engines, and I do not see it listed in add/remove programs.  It is probably some kind of malware.

• Proposed as answer by IrishSkin Monday, March 30, 2015 7:27 PM

I just saw this same window.  I cannot find anything about it on any search engines, and I do not see it listed in add/remove programs.  It is probably some kind of malware.

• Proposed as answer by IrishSkin Monday, March 30, 2015 7:27 PM

Zigzag,

I did check the terms, that`s where I got the name Bontio. Upon further investigation, I found that it is part of the program developed by "Pokki". On my computer it`s got a few entries, host app service, Lenovo web start, & start menu. reference website to what this is for> http://www.pokki.com/windows-8-start-menu

From this I believe it modifies the start menu to show apps, and was put on here by Lenovo. Only have had this computer a month. Thought I`d check sense this is all new to us using 8.1.

Some websites say you can uninstall it with out any problems.

Any help along with keeping it or uninstalling it would be appreciated. But right now I`m I know what it is now, and will click ok, but with out the browser modification it suggest.

Thanks to all

P.S. not malware

• Marked as answer by GambitMaster Friday, March 20, 2015 5:52 PM
• Edited by GambitMaster Friday, March 20, 2015 6:06 PM

Zigzag,

I did check the terms, that`s where I got the name Bontio. Upon further investigation, I found that it is part of the program developed by "Pokki". On my computer it`s got a few entries, host app service, Lenovo web start, & start menu. reference website to what this is for> http://www.pokki.com/windows-8-start-menu

From this I believe it modifies the start menu to show apps, and was put on here by Lenovo. Only have had this computer a month. Thought I`d check sense this is all new to us using 8.1.

Some websites say you can uninstall it with out any problems.

Any help along with keeping it or uninstalling it would be appreciated. But right now I`m I know what it is now, and will click ok, but with out the browser modification it suggest.

Thanks to all

P.S. not malware

• Marked as answer by GambitMaster Friday, March 20, 2015 5:52 PM
• Edited by GambitMaster Friday, March 20, 2015 6:06 PM

Zigzag,

I did check the terms, that`s where I got the name Bontio. Upon further investigation, I found that it is part of the program developed by "Pokki". On my computer it`s got a few entries, host app service, Lenovo web start, & start menu. reference website to what this is for> http://www.pokki.com/windows-8-start-menu

From this I believe it modifies the start menu to show apps, and was put on here by Lenovo. Only have had this computer a month. Thought I`d check sense this is all new to us using 8.1.

Some websites say you can uninstall it with out any problems.

Any help along with keeping it or uninstalling it would be appreciated. But right now I`m I know what it is now, and will click ok, but with out the browser modification it suggest.

Thanks to all

P.S. not malware

• Marked as answer by GambitMaster Friday, March 20, 2015 5:52 PM
• Edited by GambitMaster Friday, March 20, 2015 6:06 PM

Bontio, Pokki and Sweetlabs are all the same

I check on Control Panel / Add & Remove Programs.  I found three programs by Pokki . I called Lenovo.  They decided to remove all three programs.  I rebooted after removal and no longer get the message about Start Menu.  Computer runs fine.

Bontio, Pokki and Sweetlabs are all the same

I check on Control Panel / Add & Remove Programs.  I found three programs by Pokki . I called Lenovo.  They decided to remove all three programs.  I rebooted after removal and no longer get the message about Start Menu.  Computer runs fine.

I don't have a Lenovo, but an HP laptop running Windows 8.1, and I just got this window after a restart.

I'm amazed that there is NO information in the popup window about who it is from or why, and almost NO information in the Terms of Service (other than finding "Bontio" and "trovi" and "sweetlabs" as company names to then Google separately).  Certainly no title or heading.  Which makes it all very suspicious.

And the fact that "By clicking OK you agree to the terms and conditions" is very annoying, because in the window I got, unlike the one above, there is no red X in the corner - the ONLY option for action on the window is to click OK, so regardless of whether or not you agree...

As for removal, I found a couple of reasonably good articles:

http://www.howtogeek.com/198386/how-to-remove-trovi-conduit-search-protect-browser-hijack-malware/

http://malwaretips.com/blogs/trovi-removal/

I haven't downloaded / bundled anything I know of recently, so I'm not sure how I got it; I hope it wasn't from the free anti-virus I've been using for a while; maybe just temporal coincidence that it asked for a reboot and then this came up.

HTH

Gambitmaster,

I understand if you have done some research, but so have I.  This is a malicious site and a forced download.  I have the same issue on a brand new system and have never requested anything from the organization.  I have removed it because it is not from Lenovo, HP, Dell or any of the reputable sources.  This is akin to many of the other search engine phishing sites out there.  And if you read the entire terms and policy, they are from Three entities all that are generic named.  I would recommend removing any API installed on your systems and running a good scan.  The terms and privacy policy tell you in black and white that they are gathering information and giving it to outside entities (ie phishing).  If I am wrong, I will personally retract my statement, but I do not feel that I am due in large to the fact that not every system I have is affected.  Only one.

This popped up on mine today.  Looking under programs there is a new one "Host App Service" by Pokki with an install date of today. When removing it a new box popped up saying "the following apps are dependent on Host App Service and will also be uninstalled: Start Menu, Pc App Store, Lenovo Web Start"  Clicking OK it goes thru it's process but I still see Lenovo Web Start by Pokki in my program list with an install date from 6 months ago.  Clicking the uninstall for this one says it's already been uninstalled and it goes away.  Same thing with Start Menu.

I hate this cr*p.  This is probably why my comp has been lagging the past day or so.

THIS IS 100% MALWARE

I have had other computers running other versions of windows become infected with 'Conduit Web Search' WITHOUT HAVING POKKI INSTALLED. Once you have loaded conduit web search into your computers registry, the only thing that can seem to easily remove it is professional level registry editing, or reinstalling your version of windows.

DO NOT CHECK THE BOX THAT SAYS 'SET MY PAGE TO WEB SEARCH' 
DO NOT CLICK OK, DON'T CLICK THE X TO CLOSE IT, DON'T ENGAGE WITH IT AT ALL.

The correct protocol it would seem would be to not click anything when this popup comes up the first time, and to leave it open, use an advanced uninstaller program like Revo Uninstaller, uninstall Pokki, still don't click that stupid update thing, once pokki is uninstalled, reboot the computer without interacting with the update.

This crap comes loaded on new Lenovo's and I'm blown away because it's EXTREMELY SUSPECT!
http://bontiomedia.com.cutestat.com/
bontiomedia.com

Second link is their homepage site for Bontio, I found it by reading their privacy policy, and there is NOTHING ON THE PAGE BUT A SINGLE PICTURE. 

Also, Pokki Sweetlabs and Bontio all have the same exact identical privacy policy

This is so sketchy, I think it's class action lawsuit against Lenovo or Pokki sketchy.

• Proposed as answer by 1337Scott 14 hours 46 minutes ago
• Unproposed as answer by ZigZag3143xMVP, Moderator 13 hours 15 minutes ago

THIS IS 100% MALWARE

I have had other computers running other versions of windows become infected with 'Conduit Web Search' WITHOUT HAVING POKKI INSTALLED. Once you have loaded conduit web search into your computers registry, the only thing that can seem to easily remove it is professional level registry editing, or reinstalling your version of windows.

DO NOT CHECK THE BOX THAT SAYS 'SET MY PAGE TO WEB SEARCH' 
DO NOT CLICK OK, DON'T CLICK THE X TO CLOSE IT, DON'T ENGAGE WITH IT AT ALL.

The correct protocol it would seem would be to not click anything when this popup comes up the first time, and to leave it open, use an advanced uninstaller program like Revo Uninstaller, uninstall Pokki, still don't click that stupid update thing, once pokki is uninstalled, reboot the computer without interacting with the update.

This crap comes loaded on new Lenovo's and I'm blown away because it's EXTREMELY SUSPECT!
http://bontiomedia.com.cutestat.com/
bontiomedia.com

Second link is their homepage site for Bontio, I found it by reading their privacy policy, and there is NOTHING ON THE PAGE BUT A SINGLE PICTURE. 

Also, Pokki Sweetlabs and Bontio all have the same exact identical privacy policy

This is so sketchy, I think it's class action lawsuit against Lenovo or Pokki sketchy.

• Proposed as answer by 1337Scott Wednesday, April 29, 2015 4:36 PM
• Unproposed as answer by ZigZag3143xMVP, Moderator Wednesday, April 29, 2015 6:07 PM

THIS IS 100% MALWARE

I have had other computers running other versions of windows become infected with 'Conduit Web Search' WITHOUT HAVING POKKI INSTALLED. Once you have loaded conduit web search into your computers registry, the only thing that can seem to easily remove it is professional level registry editing, or reinstalling your version of windows.

DO NOT CHECK THE BOX THAT SAYS 'SET MY PAGE TO WEB SEARCH' 
DO NOT CLICK OK, DON'T CLICK THE X TO CLOSE IT, DON'T ENGAGE WITH IT AT ALL.

The correct protocol it would seem would be to not click anything when this popup comes up the first time, and to leave it open, use an advanced uninstaller program like Revo Uninstaller, uninstall Pokki, still don't click that stupid update thing, once pokki is uninstalled, reboot the computer without interacting with the update.

This crap comes loaded on new Lenovo's and I'm blown away because it's EXTREMELY SUSPECT!
http://bontiomedia.com.cutestat.com/
bontiomedia.com

Second link is their homepage site for Bontio, I found it by reading their privacy policy, and there is NOTHING ON THE PAGE BUT A SINGLE PICTURE. 

Also, Pokki Sweetlabs and Bontio all have the same exact identical privacy policy

This is so sketchy, I think it's class action lawsuit against Lenovo or Pokki sketchy.

• Proposed as answer by 1337Scott Wednesday, April 29, 2015 4:36 PM
• Unproposed as answer by ZigZag3143xMVP, Moderator Wednesday, April 29, 2015 6:07 PM

THIS IS 100% MALWARE

I have had other computers running other versions of windows become infected with 'Conduit Web Search' WITHOUT HAVING POKKI INSTALLED. Once you have loaded conduit web search into your computers registry, the only thing that can seem to easily remove it is professional level registry editing, or reinstalling your version of windows.

DO NOT CHECK THE BOX THAT SAYS 'SET MY PAGE TO WEB SEARCH' 
DO NOT CLICK OK, DON'T CLICK THE X TO CLOSE IT, DON'T ENGAGE WITH IT AT ALL.

The correct protocol it would seem would be to not click anything when this popup comes up the first time, and to leave it open, use an advanced uninstaller program like Revo Uninstaller, uninstall Pokki, still don't click that stupid update thing, once pokki is uninstalled, reboot the computer without interacting with the update.

This crap comes loaded on new Lenovo's and I'm blown away because it's EXTREMELY SUSPECT!
http://bontiomedia.com.cutestat.com/
bontiomedia.com

Second link is their homepage site for Bontio, I found it by reading their privacy policy, and there is NOTHING ON THE PAGE BUT A SINGLE PICTURE. 

Also, Pokki Sweetlabs and Bontio all have the same exact identical privacy policy

This is so sketchy, I think it's class action lawsuit against Lenovo or Pokki sketchy.

• Proposed as answer by 1337Scott Wednesday, April 29, 2015 4:36 PM
• Unproposed as answer by ZigZag3143xMVP, Moderator Wednesday, April 29, 2015 6:07 PM

Lenovo is really bad of respecting consumer privacy. this pop-up screen is extremely disrespectful. doesn't allow to remove it. if there is any action, please count me in

Happened to me too, 2 wks after I got a new computer, and Norton didn't catch it.

Definitely malware.

I gotrid ofit by searching my comouter for allfiles that includedpokki in the filenameand deleting them.

To delete some of these I hadto hit ALT+Ctrl+Del go to the task bar and stop a certain task (forget what it's called) so that I would be ableto delete this garbage.  Nomore problems now.

Just popped on my new Toshiba today (May 11, 2015).  Shot it down with task manager, and removing anything from Pokki, per the thread. arrgghhh

Hey folks.

Thanks for all those offering advice.  My Lenovo Z50, running on OS8.1 got nobbled by the Bontio malware pest today.

After a full scan, my McAfee software did not detect this Bontio software.

As I went through the 'Uninstall programs' option to remove two very recent Bontio/Pokki installations, a dialog box popped up 'warning' that removal of the program would also remove the Start Menu.  Thinking this was just a prohibitive, pre-programmed empty threat, I opted to continue with the removal/uninstalling.  After rebooting my laptop, the Start Menu no longer appears (on the Taskbar, or anywhere else).

I took a look at PC Settings / Update & Recovery and found the option 'Refresh your PC without affecting your files', but this will involve reinstalling 13 software applications.  I'm sure there must be a more simple way to recover my Start Menu & icon.

Can anyone advise me on how I return a fully functional Start Menu to my taskbar?

All useful advice appreciated.

Cheers,

Drink Tea.

I popped with this today. On a reboot, got the pop up box. I unchecked the box that said I agreed to changes, left the box open on my screen, then googled. I understand this is a search engine hijacker. Well, I ran a search thru PCH [Publishers Clearing House} you do some searches each day to accumulate points. I believe I see a duck walking and hear a duck quacking. Went to control panel [while box was still on screen and removed Pokki. Box was gone after uninstall. Has anyone else been to PCH, might this be a common link?

I was wondering the same thing, and after updating my laptop and running Malwarebytes, it is still there. I have a Toshiba computer which includes "Pokki" which is also includes "Bontio". I'm going to allow it and see what happens.

I allowed this update and so far have no problems. My apps do seem to be opening faster though.

• Edited by sueallen 10 hours 40 minutes ago

I was wondering the same thing, and after updating my laptop and running Malwarebytes, it is still there. I have a Toshiba computer which includes "Pokki" which is also includes "Bontio". I'm going to allow it and see what happens.

I allowed this update and so far have no problems. My apps do seem to be opening faster though.

• Edited by sueallen Saturday, May 23, 2015 8:42 PM

HI I recently got same screen.

Purchased new acer desktop pc about 2-3 weeks ago.

saw others who said start button disappeared when they deleted pokki programs.

Went to uninstall the program called something like " host application... " and got message saying start button etc would also be deleted.

Went ahead and uninstalled  this "host......  "program.

two other pokki programs were also uninstalled.

Start button still there.

restarted window, start button still there, all seems ok.

I had the same issue with a new Acer laptop purchased yesterday. This morning on start up it had the "Start menu updated" dialogue box with the links to the Bontio terms and conditions.

I have just been on the phone to three different support people at Acer to get a solution. First they said to contact Microsoft (I explained it was third party software pre-loaded by Acer and had nothing to do with Microsoft... support hung up on me when they assured it had nothing to do with them and I politely would not take that as an answer), then they wanted to reset my computer to factory default (again I explained the Pokki link and that it was pre-loaded factory default software) and I did not want to reload the mornings worth of programs I had installed (office etc.),.

In the end they assured me I could uninstall Pokki (host controller and start menu) with no issue and it seems to be fine now. I noted that unistalling the Pokki host controller program also made the "Bontio" dialogue box disappear. So they must be linked.

I agree this is very shady and a class action is probably the only think that will make large companies shy away from this sort of behavior. 

I just went through this myself today, but it appears it came on board by installing some apps from the Microsoft app store. The apps for Hulu, Khan Academy (among others) showed Pokki as the publisher. And, indeed, the Start Menu (not the same as the Start panel-- the one with the tiles) was among the apps to be uninstalled. All of the apps, even though they are supposed to be "Apps" were listed in Add/Remove Programs and not on the Apps list, as I would have expected.

The Start Menu, in this case, is a home-shaped icon that appears on the taskbar and pops up a menu vaguely similar to a pre-Windows 8 start menu. Apparently, this is their doing as well and this may have come pre-installed.

I'm not sure which of this stuff came aboard pre-loaded and which of this stuff was just a result of my app-adding spree, but I'm somewhat surprised to see this kind of thing available directly from the app store.

Anyway, killed all the tasks that include a command line in the pokki directory and then I used the installer I found at c:\users\[my account]\AppData\local\pokki (uninstalling from Add/Remove programs just hung up) and it appears to have removed itself and all of the suspect apps.

Conduit Search is a very involved process to clean out, but the good news it can be done. Simply uninstalling the program will not work. The process includes using JRT tool made to remove hijack browser malware.

I have had success following these instructions - http://bit.ly/conduitremoval

I just received the same notification.

Your post was helpful.

Thank you.

I read the "Terms of Use" and the "Privacy Policy" and there is no reference to LENOVO, nor Windows, nor any other legitimate software on my computer. If this really is legitimate then they've done an exceptional job of looking very suspicious and possibly malware.

I unchecked the "Set my browser homepage ..." and did NOT click OK, but hit the red X instead.

I will get on the Lenovo site and do some research ... unless someone on this thread already has.

Lucky

I agree with you about how annoying it is that there is no reject option. In fact I am very ANGRY about it. You can, of course, use CTRL-F4 to get the same results as the red X. But this only closes the program for now. 

I already rolled back my desktop to Windows 7, I am just about to do the same with my laptop (to Windows 8).  Will someone at Microsoft get a clue that I will stop using their products if they try to force this crap on me?  I don't need the app store, this thread proves it is garbage and I can't uninstall Pokki and this built in web browser hijacker.

Thanks! Indeed. This annoying notification was related to Pokki. I deleted Pokki and Host application (that has been using a lot of my processor), while leaving and the notification "Start menu updated" open and with deleting Pokki, the notification disappeared. 

I wouldn't consider it as a virus, but I would certainly consider this notification as malware, because it forces you to click on OK and it wants to lure the user in using "web search" with a lot of cookies and other stuff infringing privacy. 

It is a shame that companies like Acer, HP, Lenovo ... etc are installing this stuff. Hopfully Pokki wouldn't be installed anymore with Windows 10.