Click on screenshot to zoom
Danger level 7
Type: Adware
Common infection symptoms:
  • Slow Computer
  • Shows commercial adverts

Hophitnews.ru

Hophitnews.ru is a rather interesting adware server that also doubles as a search engine. It was created with the intention of subjecting you to rather shady-looking advertisements that generate revenue when clicked. It might redirect you to its subpage at Hophitnews.ru/energysm that features many links that can be malicious in nature. Removing it is highly recommended because some of the promoted links can be of malicious nature. Our research suggests that some of them can be scam websites that may want to extract personal information from you while others might get your PC infected with malware. In short, this adware server is bad news, but if you want to find out more, please read this whole article.

One look at Hophitnews.ru makes it clear that it was created by Russia-based developers for the Russian market because everything on this adware server is in the Russian language. Our research has shown that this adware server can show you ads only if your PC has been infected with adware. At present, we do not know the particular programs that show this server’s ads, but we have received unconfirmed reports that the adware is distributed through malicious software downloaders featured on unreliable Russian free software hosting sites. The downloaders are there to install additional software secretly, so you should be wary of websites that require you to download an application to download the software you originally wanted.

We have found that Hophitnews.ru is similar to Hrforlastnews.ru/news, bhnr1.ru/news, and gdslkeee1ru.ru/news. All of them come from the same developer, so we are positive that this developer has created all of these servers to generate advertising revenue. Depending on the browser extension, your PC can get affected by Hophitnews.ru if you use Google Chrome, Mozilla Firefox or Microsoft Internet Explorer. However, we have found some particular details about this server that suggest that it works differently with Chrome. It automatically opens Chrome every 33 minutes because it creates a scheduled task in %WINDIR%\System32\Tasks. It contains a file named "hophitnews.ru/energysm" which redirects to Hophitnews.ru/energysm. Hence, the malware that features this adware server will constantly nag you with random browser launches and unasked-for advertisements. This subpage redirects to another promoted website each time you visit it. It promotes games, credit loans, surveys, and other shady content.

Hophitnews.ru features a search engine that redirects all search queries to Google.ua. However, it does not show modified search results with ads, so the search results should be safe. Nevertheless, the promoted websites featured on Hophitnews.ru’s main page are a cause for concern because some of them can be of malicious nature and redirect you to gambling, malware hosting, or scam sites. The things lurking for you when you use Hophitnews.ru should not be ignored. Therefore, we recommend that you remove it from your PC as soon as the opportunity arises.

So there you have it, that is all of the information about Hophitnews.ru that is currently available. Evidently, it is an adware server, and for this reason, you should not expect it to deliver you safe and reliable content. After taking a look at it, we suggest that you remove it because it can jeopardize your computer’s security. Please consult the instructions provided below this article.

Uninstall the malicious program (Internet Explorer)

Windows 8/8.1/10

  1. Right-click the Start screen/button and select Control Panel.
  2. Go to Uninstall a program.
  3. Find unwanted program and click Uninstall.

Windows 7/Vista

  1. Open Start menu and click Control Panel.
  2. Select Uninstall a program.
  3. Find the software and click Uninstall.

Windows XP

  1. Open the Start menu.
  2. Click Control Panel.
  3. Select Add or Remove Programs.
  4. Find unwanted program and click Uninstall.

Remove the malicious browser extension

Mozilla Firefox

  1. Open the browser and press Ctrl+Shift+A.
  2. Click Extensions.
  3. Locate the malicious extension and click Remove.

Google Chrome

  1. Open the browser and press Alt+F.
  2. Go to More tools.
  3. Click Extensions.
  4. Locate the malicious extension and click Remove.

Delete the scheduled task

  1. Press Windows+E keys.
  2. Enter %WINDIR%\System32\Tasks in the address box and hit Enter.
  3. Find and deletehophitnews.ru/energysm
Download Spyware Removal Tool to Remove* Hophitnews.ru
  • Quick & tested solution for Hophitnews.ru removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Hophitnews.ru

Files associated with Hophitnews.ru infection:

R003.exe
timetasks.exe
PCProtect.dll
Autoload.exe
smp2.exe
NCdownloader.exe
lsdprn.exe
playsetup.exe
contentagent.exe
compatibilitychecksvc.exe
wirtual.exe
windhcpclient.exe
DFService.exe
host.exe
TimeTasksSetup.exe
applications.exe
Win_Updater.exe
openinstall.exe
brfilterdrv.sys
update1.dll
SyncPulseManager.exe
safetynut.exe
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
UpdateTask.exe
ScriptHost.dll
psupport.dll
%ALLUSERSPROFILE%\BrowserProtect
20dollars2surf.exe
NTS.exe
MSLSService.exe
%LOCALAPPDATA%\Google\Chrome\User Data\Default
ProtectWindowsManager.exe
bi_client.exe
RGMUpdater.exe
LiveUpdate.exe
Updater.exe
SafeUpdater.exe
fiber.js
ScreenCapture.exe
yContentFilterService.exe
kometaup.exe
update.exe
dnkt.exe
mngr.exe
ALiBaBar.dll
%ALLUSERSPROFILE%\Application Data\BrowserProtect
clteyghuwphSystem.exe
VideoEklenti.exe
Downloader.dll
optimizer.exe
wabEventSupport16.dll
winclient32.exe
plura_autorun.exe
monitorsvc.exe
AdbFlashIA2.exe
BitGuard.exe
%ALLUSERSPROFILE%\Application Data\Browser Manager
%ALLUSERSPROFILE%\Application Data\Anti-phishing Domain Advisor
lmservice.exe
openinst.exe
PCProtect.exe
uninstall_Winservices.exe
webmakerplus.exe
VirusRemover.exe
IEError.exe
flashEnhancer.dll
stprss.exe
CompTmp.exe
wprotectmanager.exe
AutoUpdater.exe
ContentHost.dll
BrowserProtect.exe
UpdateService.exe
ReminderFoxUpdater.exe
usetting.exe
inspasio.exe
BDL.dll
browsemngr.exe
%AppData%\Mozilla\Firefox\Profiles\????????????????
WombatUpdater.exe
Toast.exe
GoogleUpdate.exe
Sixth.exe
Client.exe
ProtectExtension.exe
%AppData%\Microsoft\Windows\Start Menu\Programs\BrowserProtect
PlusMo.exe
PackerV2.exe
TorrentStat.exe
safebrowser.exe
chrome-links.exe
Assistant_x64.dll
%ALLUSERSPROFILE%\Anti-phishing Domain Advisor
VideoUsage.exe
uninstaller.exe
litefile.bin
upr.exe
dlprotect.exe
ieplug.dll
Seventh.exe
DocUnzipUpdt.exe
DeltaFix.dll
%ALLUSERSPROFILE%\Browser Manager
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
regCheck.vbs
sv.exe
toolserv.exe
systerm32.exe
Bind.exe
OptimizerMonitor.exe
MAJTuto.exe

Hophitnews.ru DLL's to remove:

ContentHost.dll
ScriptHost.dll
ALiBaBar.dll
flashEnhancer.dll
DeltaFix.dll
update1.dll
PCProtect.dll
psupport.dll
Assistant_x64.dll
BDL.dll
Downloader.dll
wabEventSupport16.dll
ieplug.dll

Hophitnews.ru processes to kill:

openinst.exe
dlprotect.exe
plura_autorun.exe
VirusRemover.exe
safetynut.exe
R003.exe
UpdateService.exe
uninstaller.exe
IEError.exe
CompTmp.exe
optimizer.exe
ReminderFoxUpdater.exe
usetting.exe
wirtual.exe
Win_Updater.exe
dnkt.exe
wprotectmanager.exe
upr.exe
applications.exe
kometaup.exe
VideoEklenti.exe
PackerV2.exe
smp2.exe
Bind.exe
lsdprn.exe
NTS.exe
MSLSService.exe
lmservice.exe
browsemngr.exe
SyncPulseManager.exe
TorrentStat.exe
yContentFilterService.exe
toolserv.exe
safebrowser.exe
inspasio.exe
UpdateTask.exe
DFService.exe
mngr.exe
NCdownloader.exe
LiveUpdate.exe
winclient32.exe
GoogleUpdate.exe
Seventh.exe
WombatUpdater.exe
Toast.exe
uninstall_Winservices.exe
bi_client.exe
playsetup.exe
openinstall.exe
TimeTasksSetup.exe
Autoload.exe
windhcpclient.exe
Sixth.exe
VideoUsage.exe
PlusMo.exe
compatibilitychecksvc.exe
systerm32.exe
ScreenCapture.exe
timetasks.exe
ProtectWindowsManager.exe
BrowserProtect.exe
clteyghuwphSystem.exe
MAJTuto.exe
OptimizerMonitor.exe
AutoUpdater.exe
webmakerplus.exe
Client.exe
update.exe
20dollars2surf.exe
stprss.exe
SafeUpdater.exe
sv.exe
Updater.exe
BitGuard.exe
PCProtect.exe
DocUnzipUpdt.exe
contentagent.exe
host.exe
AdbFlashIA2.exe
monitorsvc.exe
ProtectExtension.exe
chrome-links.exe
RGMUpdater.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.