Browser-hijacking software usually appears legitimate and harmless. Users are enticed into download/installation with promises of "useful" functionalities, which are seldom operational. And even if they are - that is not proof of the software's legitimacy or safety.