Click on screenshot to zoom
Danger level 7
Type: Adware
Common infection symptoms:
  • Slow Computer
  • Shows commercial adverts

Hophitnews.ru

Hophitnews.ru is a rather interesting adware server that also doubles as a search engine. It was created with the intention of subjecting you to rather shady-looking advertisements that generate revenue when clicked. It might redirect you to its subpage at Hophitnews.ru/energysm that features many links that can be malicious in nature. Removing it is highly recommended because some of the promoted links can be of malicious nature. Our research suggests that some of them can be scam websites that may want to extract personal information from you while others might get your PC infected with malware. In short, this adware server is bad news, but if you want to find out more, please read this whole article.

One look at Hophitnews.ru makes it clear that it was created by Russia-based developers for the Russian market because everything on this adware server is in the Russian language. Our research has shown that this adware server can show you ads only if your PC has been infected with adware. At present, we do not know the particular programs that show this server’s ads, but we have received unconfirmed reports that the adware is distributed through malicious software downloaders featured on unreliable Russian free software hosting sites. The downloaders are there to install additional software secretly, so you should be wary of websites that require you to download an application to download the software you originally wanted.

We have found that Hophitnews.ru is similar to Hrforlastnews.ru/news, bhnr1.ru/news, and gdslkeee1ru.ru/news. All of them come from the same developer, so we are positive that this developer has created all of these servers to generate advertising revenue. Depending on the browser extension, your PC can get affected by Hophitnews.ru if you use Google Chrome, Mozilla Firefox or Microsoft Internet Explorer. However, we have found some particular details about this server that suggest that it works differently with Chrome. It automatically opens Chrome every 33 minutes because it creates a scheduled task in %WINDIR%\System32\Tasks. It contains a file named "hophitnews.ru/energysm" which redirects to Hophitnews.ru/energysm. Hence, the malware that features this adware server will constantly nag you with random browser launches and unasked-for advertisements. This subpage redirects to another promoted website each time you visit it. It promotes games, credit loans, surveys, and other shady content.

Hophitnews.ru features a search engine that redirects all search queries to Google.ua. However, it does not show modified search results with ads, so the search results should be safe. Nevertheless, the promoted websites featured on Hophitnews.ru’s main page are a cause for concern because some of them can be of malicious nature and redirect you to gambling, malware hosting, or scam sites. The things lurking for you when you use Hophitnews.ru should not be ignored. Therefore, we recommend that you remove it from your PC as soon as the opportunity arises.

So there you have it, that is all of the information about Hophitnews.ru that is currently available. Evidently, it is an adware server, and for this reason, you should not expect it to deliver you safe and reliable content. After taking a look at it, we suggest that you remove it because it can jeopardize your computer’s security. Please consult the instructions provided below this article.

Uninstall the malicious program (Internet Explorer)

Windows 8/8.1/10

  1. Right-click the Start screen/button and select Control Panel.
  2. Go to Uninstall a program.
  3. Find unwanted program and click Uninstall.

Windows 7/Vista

  1. Open Start menu and click Control Panel.
  2. Select Uninstall a program.
  3. Find the software and click Uninstall.

Windows XP

  1. Open the Start menu.
  2. Click Control Panel.
  3. Select Add or Remove Programs.
  4. Find unwanted program and click Uninstall.

Remove the malicious browser extension

Mozilla Firefox

  1. Open the browser and press Ctrl+Shift+A.
  2. Click Extensions.
  3. Locate the malicious extension and click Remove.

Google Chrome

  1. Open the browser and press Alt+F.
  2. Go to More tools.
  3. Click Extensions.
  4. Locate the malicious extension and click Remove.

Delete the scheduled task

  1. Press Windows+E keys.
  2. Enter %WINDIR%\System32\Tasks in the address box and hit Enter.
  3. Find and deletehophitnews.ru/energysm
Download Spyware Removal Tool to Remove* Hophitnews.ru
  • Quick & tested solution for Hophitnews.ru removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Hophitnews.ru

Files associated with Hophitnews.ru infection:

SafeUpdater.exe
20dollars2surf.exe
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
clteyghuwphSystem.exe
VirusRemover.exe
LiveUpdate.exe
MSLSService.exe
Bind.exe
MAJTuto.exe
flashEnhancer.dll
%ALLUSERSPROFILE%\Application Data\BrowserProtect
bi_client.exe
stprss.exe
optimizer.exe
wabEventSupport16.dll
regCheck.vbs
Sixth.exe
ScreenCapture.exe
update.exe
CompTmp.exe
wirtual.exe
ProtectExtension.exe
Updater.exe
fiber.js
wprotectmanager.exe
PCProtect.exe
brfilterdrv.sys
browsemngr.exe
plura_autorun.exe
ALiBaBar.dll
SyncPulseManager.exe
AutoUpdater.exe
Client.exe
compatibilitychecksvc.exe
chrome-links.exe
Downloader.dll
BrowserProtect.exe
PlusMo.exe
dlprotect.exe
kometaup.exe
UpdateService.exe
litefile.bin
openinst.exe
ContentHost.dll
BDL.dll
ProtectWindowsManager.exe
uninstall_Winservices.exe
%AppData%\Microsoft\Windows\Start Menu\Programs\BrowserProtect
%ALLUSERSPROFILE%\Anti-phishing Domain Advisor
VideoEklenti.exe
Assistant_x64.dll
smp2.exe
ScriptHost.dll
timetasks.exe
ieplug.dll
NCdownloader.exe
windhcpclient.exe
psupport.dll
PCProtect.dll
winclient32.exe
Win_Updater.exe
DeltaFix.dll
toolserv.exe
Autoload.exe
RGMUpdater.exe
VideoUsage.exe
usetting.exe
TimeTasksSetup.exe
safebrowser.exe
systerm32.exe
uninstaller.exe
lmservice.exe
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
R003.exe
WombatUpdater.exe
%AppData%\Mozilla\Firefox\Profiles\????????????????
safetynut.exe
%LOCALAPPDATA%\Google\Chrome\User Data\Default
ReminderFoxUpdater.exe
DFService.exe
NTS.exe
host.exe
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
BitGuard.exe
%ALLUSERSPROFILE%\Application Data\Browser Manager
applications.exe
contentagent.exe
Toast.exe
%ALLUSERSPROFILE%\Browser Manager
%ALLUSERSPROFILE%\BrowserProtect
%ALLUSERSPROFILE%\Application Data\Anti-phishing Domain Advisor
dnkt.exe
openinstall.exe
UpdateTask.exe
IEError.exe
update1.dll
inspasio.exe
GoogleUpdate.exe
upr.exe
yContentFilterService.exe
DocUnzipUpdt.exe
webmakerplus.exe
lsdprn.exe
TorrentStat.exe
AdbFlashIA2.exe
sv.exe
playsetup.exe
Seventh.exe
mngr.exe
PackerV2.exe
OptimizerMonitor.exe
monitorsvc.exe

Hophitnews.ru DLL's to remove:

Downloader.dll
psupport.dll
BDL.dll
flashEnhancer.dll
Assistant_x64.dll
DeltaFix.dll
ALiBaBar.dll
ieplug.dll
update1.dll
ContentHost.dll
ScriptHost.dll
PCProtect.dll
wabEventSupport16.dll

Hophitnews.ru processes to kill:

host.exe
chrome-links.exe
MAJTuto.exe
timetasks.exe
GoogleUpdate.exe
TorrentStat.exe
Client.exe
clteyghuwphSystem.exe
NTS.exe
dnkt.exe
smp2.exe
kometaup.exe
openinstall.exe
sv.exe
wirtual.exe
SafeUpdater.exe
contentagent.exe
lmservice.exe
NCdownloader.exe
wprotectmanager.exe
VideoEklenti.exe
AdbFlashIA2.exe
ProtectExtension.exe
TimeTasksSetup.exe
RGMUpdater.exe
UpdateService.exe
ProtectWindowsManager.exe
yContentFilterService.exe
VirusRemover.exe
BitGuard.exe
systerm32.exe
DocUnzipUpdt.exe
toolserv.exe
PackerV2.exe
R003.exe
AutoUpdater.exe
BrowserProtect.exe
openinst.exe
webmakerplus.exe
IEError.exe
ScreenCapture.exe
inspasio.exe
windhcpclient.exe
Toast.exe
usetting.exe
OptimizerMonitor.exe
dlprotect.exe
Autoload.exe
applications.exe
Updater.exe
Win_Updater.exe
20dollars2surf.exe
winclient32.exe
SyncPulseManager.exe
optimizer.exe
UpdateTask.exe
stprss.exe
PlusMo.exe
uninstall_Winservices.exe
VideoUsage.exe
mngr.exe
uninstaller.exe
upr.exe
safetynut.exe
lsdprn.exe
safebrowser.exe
MSLSService.exe
Sixth.exe
CompTmp.exe
PCProtect.exe
ReminderFoxUpdater.exe
plura_autorun.exe
WombatUpdater.exe
monitorsvc.exe
compatibilitychecksvc.exe
bi_client.exe
Bind.exe
LiveUpdate.exe
browsemngr.exe
DFService.exe
update.exe
playsetup.exe
Seventh.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.