Click on screenshot to zoom
Danger level 7
Type: Adware
Common infection symptoms:
  • Slow Computer
  • Shows commercial adverts

Hophitnews.ru

Hophitnews.ru is a rather interesting adware server that also doubles as a search engine. It was created with the intention of subjecting you to rather shady-looking advertisements that generate revenue when clicked. It might redirect you to its subpage at Hophitnews.ru/energysm that features many links that can be malicious in nature. Removing it is highly recommended because some of the promoted links can be of malicious nature. Our research suggests that some of them can be scam websites that may want to extract personal information from you while others might get your PC infected with malware. In short, this adware server is bad news, but if you want to find out more, please read this whole article.

One look at Hophitnews.ru makes it clear that it was created by Russia-based developers for the Russian market because everything on this adware server is in the Russian language. Our research has shown that this adware server can show you ads only if your PC has been infected with adware. At present, we do not know the particular programs that show this server’s ads, but we have received unconfirmed reports that the adware is distributed through malicious software downloaders featured on unreliable Russian free software hosting sites. The downloaders are there to install additional software secretly, so you should be wary of websites that require you to download an application to download the software you originally wanted.

We have found that Hophitnews.ru is similar to Hrforlastnews.ru/news, bhnr1.ru/news, and gdslkeee1ru.ru/news. All of them come from the same developer, so we are positive that this developer has created all of these servers to generate advertising revenue. Depending on the browser extension, your PC can get affected by Hophitnews.ru if you use Google Chrome, Mozilla Firefox or Microsoft Internet Explorer. However, we have found some particular details about this server that suggest that it works differently with Chrome. It automatically opens Chrome every 33 minutes because it creates a scheduled task in %WINDIR%\System32\Tasks. It contains a file named "hophitnews.ru/energysm" which redirects to Hophitnews.ru/energysm. Hence, the malware that features this adware server will constantly nag you with random browser launches and unasked-for advertisements. This subpage redirects to another promoted website each time you visit it. It promotes games, credit loans, surveys, and other shady content.

Hophitnews.ru features a search engine that redirects all search queries to Google.ua. However, it does not show modified search results with ads, so the search results should be safe. Nevertheless, the promoted websites featured on Hophitnews.ru’s main page are a cause for concern because some of them can be of malicious nature and redirect you to gambling, malware hosting, or scam sites. The things lurking for you when you use Hophitnews.ru should not be ignored. Therefore, we recommend that you remove it from your PC as soon as the opportunity arises.

So there you have it, that is all of the information about Hophitnews.ru that is currently available. Evidently, it is an adware server, and for this reason, you should not expect it to deliver you safe and reliable content. After taking a look at it, we suggest that you remove it because it can jeopardize your computer’s security. Please consult the instructions provided below this article.

Uninstall the malicious program (Internet Explorer)

Windows 8/8.1/10

  1. Right-click the Start screen/button and select Control Panel.
  2. Go to Uninstall a program.
  3. Find unwanted program and click Uninstall.

Windows 7/Vista

  1. Open Start menu and click Control Panel.
  2. Select Uninstall a program.
  3. Find the software and click Uninstall.

Windows XP

  1. Open the Start menu.
  2. Click Control Panel.
  3. Select Add or Remove Programs.
  4. Find unwanted program and click Uninstall.

Remove the malicious browser extension

Mozilla Firefox

  1. Open the browser and press Ctrl+Shift+A.
  2. Click Extensions.
  3. Locate the malicious extension and click Remove.

Google Chrome

  1. Open the browser and press Alt+F.
  2. Go to More tools.
  3. Click Extensions.
  4. Locate the malicious extension and click Remove.

Delete the scheduled task

  1. Press Windows+E keys.
  2. Enter %WINDIR%\System32\Tasks in the address box and hit Enter.
  3. Find and deletehophitnews.ru/energysm
Download Spyware Removal Tool to Remove* Hophitnews.ru
  • Quick & tested solution for Hophitnews.ru removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Hophitnews.ru

Files associated with Hophitnews.ru infection:

20dollars2surf.exe
update1.dll
DocUnzipUpdt.exe
DFService.exe
RGMUpdater.exe
BrowserProtect.exe
%ALLUSERSPROFILE%\Browser Manager
timetasks.exe
ieplug.dll
CompTmp.exe
VideoUsage.exe
TimeTasksSetup.exe
BitGuard.exe
upr.exe
Client.exe
PCProtect.dll
host.exe
%AppData%\Mozilla\Firefox\Profiles\????????????????
Win_Updater.exe
Assistant_x64.dll
Sixth.exe
litefile.bin
optimizer.exe
ALiBaBar.dll
%AppData%\Microsoft\Windows\Start Menu\Programs\BrowserProtect
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
bi_client.exe
UpdateTask.exe
ProtectExtension.exe
mngr.exe
dlprotect.exe
compatibilitychecksvc.exe
IEError.exe
GoogleUpdate.exe
wabEventSupport16.dll
WombatUpdater.exe
SafeUpdater.exe
Downloader.dll
%ALLUSERSPROFILE%\Application Data\Anti-phishing Domain Advisor
uninstaller.exe
lmservice.exe
wprotectmanager.exe
browsemngr.exe
%ALLUSERSPROFILE%\BrowserProtect
VideoEklenti.exe
UpdateService.exe
flashEnhancer.dll
AutoUpdater.exe
PackerV2.exe
lsdprn.exe
Autoload.exe
winclient32.exe
openinst.exe
OptimizerMonitor.exe
webmakerplus.exe
MAJTuto.exe
ScriptHost.dll
chrome-links.exe
smp2.exe
%ALLUSERSPROFILE%\Application Data\Browser Manager
applications.exe
VirusRemover.exe
monitorsvc.exe
Updater.exe
Toast.exe
brfilterdrv.sys
ReminderFoxUpdater.exe
dnkt.exe
openinstall.exe
regCheck.vbs
MSLSService.exe
update.exe
inspasio.exe
fiber.js
playsetup.exe
Seventh.exe
ProtectWindowsManager.exe
PCProtect.exe
ContentHost.dll
%LOCALAPPDATA%\Google\Chrome\User Data\Default
yContentFilterService.exe
Bind.exe
BDL.dll
sv.exe
kometaup.exe
PlusMo.exe
AdbFlashIA2.exe
plura_autorun.exe
clteyghuwphSystem.exe
safetynut.exe
uninstall_Winservices.exe
systerm32.exe
safebrowser.exe
toolserv.exe
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
LiveUpdate.exe
wirtual.exe
windhcpclient.exe
%ALLUSERSPROFILE%\Application Data\BrowserProtect
DeltaFix.dll
psupport.dll
NTS.exe
R003.exe
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
%ALLUSERSPROFILE%\Anti-phishing Domain Advisor
contentagent.exe
usetting.exe
NCdownloader.exe
stprss.exe
TorrentStat.exe
SyncPulseManager.exe
ScreenCapture.exe

Hophitnews.ru DLL's to remove:

Downloader.dll
PCProtect.dll
ContentHost.dll
Assistant_x64.dll
update1.dll
flashEnhancer.dll
wabEventSupport16.dll
DeltaFix.dll
psupport.dll
BDL.dll
ieplug.dll
ALiBaBar.dll
ScriptHost.dll

Hophitnews.ru processes to kill:

AutoUpdater.exe
CompTmp.exe
update.exe
kometaup.exe
NCdownloader.exe
openinst.exe
VideoEklenti.exe
ScreenCapture.exe
playsetup.exe
usetting.exe
safetynut.exe
Client.exe
webmakerplus.exe
browsemngr.exe
upr.exe
TimeTasksSetup.exe
toolserv.exe
SyncPulseManager.exe
plura_autorun.exe
Autoload.exe
bi_client.exe
NTS.exe
SafeUpdater.exe
ProtectExtension.exe
R003.exe
UpdateTask.exe
safebrowser.exe
DocUnzipUpdt.exe
Toast.exe
Bind.exe
compatibilitychecksvc.exe
PlusMo.exe
DFService.exe
sv.exe
20dollars2surf.exe
GoogleUpdate.exe
IEError.exe
ReminderFoxUpdater.exe
ProtectWindowsManager.exe
lsdprn.exe
smp2.exe
WombatUpdater.exe
OptimizerMonitor.exe
BitGuard.exe
UpdateService.exe
dlprotect.exe
VirusRemover.exe
applications.exe
clteyghuwphSystem.exe
dnkt.exe
host.exe
PCProtect.exe
systerm32.exe
optimizer.exe
RGMUpdater.exe
uninstall_Winservices.exe
PackerV2.exe
wirtual.exe
Sixth.exe
TorrentStat.exe
mngr.exe
monitorsvc.exe
VideoUsage.exe
BrowserProtect.exe
yContentFilterService.exe
inspasio.exe
timetasks.exe
Win_Updater.exe
wprotectmanager.exe
MSLSService.exe
winclient32.exe
lmservice.exe
MAJTuto.exe
LiveUpdate.exe
windhcpclient.exe
Updater.exe
Seventh.exe
uninstaller.exe
AdbFlashIA2.exe
stprss.exe
contentagent.exe
openinstall.exe
chrome-links.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.