Click on screenshot to zoom
Danger level 7
Type: Adware
Common infection symptoms:
  • Slow Computer
  • Shows commercial adverts

Hophitnews.ru

Hophitnews.ru is a rather interesting adware server that also doubles as a search engine. It was created with the intention of subjecting you to rather shady-looking advertisements that generate revenue when clicked. It might redirect you to its subpage at Hophitnews.ru/energysm that features many links that can be malicious in nature. Removing it is highly recommended because some of the promoted links can be of malicious nature. Our research suggests that some of them can be scam websites that may want to extract personal information from you while others might get your PC infected with malware. In short, this adware server is bad news, but if you want to find out more, please read this whole article.

One look at Hophitnews.ru makes it clear that it was created by Russia-based developers for the Russian market because everything on this adware server is in the Russian language. Our research has shown that this adware server can show you ads only if your PC has been infected with adware. At present, we do not know the particular programs that show this server’s ads, but we have received unconfirmed reports that the adware is distributed through malicious software downloaders featured on unreliable Russian free software hosting sites. The downloaders are there to install additional software secretly, so you should be wary of websites that require you to download an application to download the software you originally wanted.

We have found that Hophitnews.ru is similar to Hrforlastnews.ru/news, bhnr1.ru/news, and gdslkeee1ru.ru/news. All of them come from the same developer, so we are positive that this developer has created all of these servers to generate advertising revenue. Depending on the browser extension, your PC can get affected by Hophitnews.ru if you use Google Chrome, Mozilla Firefox or Microsoft Internet Explorer. However, we have found some particular details about this server that suggest that it works differently with Chrome. It automatically opens Chrome every 33 minutes because it creates a scheduled task in %WINDIR%\System32\Tasks. It contains a file named "hophitnews.ru/energysm" which redirects to Hophitnews.ru/energysm. Hence, the malware that features this adware server will constantly nag you with random browser launches and unasked-for advertisements. This subpage redirects to another promoted website each time you visit it. It promotes games, credit loans, surveys, and other shady content.

Hophitnews.ru features a search engine that redirects all search queries to Google.ua. However, it does not show modified search results with ads, so the search results should be safe. Nevertheless, the promoted websites featured on Hophitnews.ru’s main page are a cause for concern because some of them can be of malicious nature and redirect you to gambling, malware hosting, or scam sites. The things lurking for you when you use Hophitnews.ru should not be ignored. Therefore, we recommend that you remove it from your PC as soon as the opportunity arises.

So there you have it, that is all of the information about Hophitnews.ru that is currently available. Evidently, it is an adware server, and for this reason, you should not expect it to deliver you safe and reliable content. After taking a look at it, we suggest that you remove it because it can jeopardize your computer’s security. Please consult the instructions provided below this article.

Uninstall the malicious program (Internet Explorer)

Windows 8/8.1/10

  1. Right-click the Start screen/button and select Control Panel.
  2. Go to Uninstall a program.
  3. Find unwanted program and click Uninstall.

Windows 7/Vista

  1. Open Start menu and click Control Panel.
  2. Select Uninstall a program.
  3. Find the software and click Uninstall.

Windows XP

  1. Open the Start menu.
  2. Click Control Panel.
  3. Select Add or Remove Programs.
  4. Find unwanted program and click Uninstall.

Remove the malicious browser extension

Mozilla Firefox

  1. Open the browser and press Ctrl+Shift+A.
  2. Click Extensions.
  3. Locate the malicious extension and click Remove.

Google Chrome

  1. Open the browser and press Alt+F.
  2. Go to More tools.
  3. Click Extensions.
  4. Locate the malicious extension and click Remove.

Delete the scheduled task

  1. Press Windows+E keys.
  2. Enter %WINDIR%\System32\Tasks in the address box and hit Enter.
  3. Find and deletehophitnews.ru/energysm
Download Spyware Removal Tool to Remove* Hophitnews.ru
  • Quick & tested solution for Hophitnews.ru removal.
  • 100% Free Scan for Windows
disclaimer

How to manually remove Hophitnews.ru

Files associated with Hophitnews.ru infection:

usetting.exe
ReminderFoxUpdater.exe
brfilterdrv.sys
AutoUpdater.exe
%ALLUSERSPROFILE%\Anti-phishing Domain Advisor
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
%AppData%\Microsoft\Windows\Start Menu\Programs\BrowserProtect
SyncPulseManager.exe
SafeUpdater.exe
Downloader.dll
mngr.exe
ScreenCapture.exe
openinstall.exe
BitGuard.exe
timetasks.exe
sv.exe
toolserv.exe
20dollars2surf.exe
yContentFilterService.exe
smp2.exe
uninstall_Winservices.exe
Assistant_x64.dll
optimizer.exe
PCProtect.dll
UpdateService.exe
ieplug.dll
ContentHost.dll
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
UpdateTask.exe
ALiBaBar.dll
bi_client.exe
%ALLUSERSPROFILE%\Application Data\Anti-phishing Domain Advisor
GoogleUpdate.exe
Client.exe
DocUnzipUpdt.exe
clteyghuwphSystem.exe
chrome-links.exe
%ALLUSERSPROFILE%\BrowserProtect
NTS.exe
ScriptHost.dll
VideoUsage.exe
playsetup.exe
MAJTuto.exe
windhcpclient.exe
Updater.exe
plura_autorun.exe
WombatUpdater.exe
dlprotect.exe
wirtual.exe
safebrowser.exe
NCdownloader.exe
CompTmp.exe
webmakerplus.exe
litefile.bin
DeltaFix.dll
openinst.exe
Bind.exe
contentagent.exe
safetynut.exe
%USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default
%LOCALAPPDATA%\Google\Chrome\User Data\Default
VirusRemover.exe
AdbFlashIA2.exe
ProtectWindowsManager.exe
VideoEklenti.exe
MSLSService.exe
fiber.js
host.exe
OptimizerMonitor.exe
stprss.exe
lsdprn.exe
TorrentStat.exe
systerm32.exe
Seventh.exe
IEError.exe
compatibilitychecksvc.exe
wabEventSupport16.dll
monitorsvc.exe
wprotectmanager.exe
ProtectExtension.exe
inspasio.exe
winclient32.exe
PCProtect.exe
kometaup.exe
BrowserProtect.exe
dnkt.exe
update1.dll
update.exe
%ALLUSERSPROFILE%\Application Data\Browser Manager
lmservice.exe
Toast.exe
flashEnhancer.dll
BDL.dll
TimeTasksSetup.exe
uninstaller.exe
applications.exe
regCheck.vbs
%ALLUSERSPROFILE%\Browser Manager
DFService.exe
Win_Updater.exe
PlusMo.exe
Sixth.exe
Autoload.exe
%ALLUSERSPROFILE%\Application Data\BrowserProtect
R003.exe
browsemngr.exe
PackerV2.exe
upr.exe
LiveUpdate.exe
%AppData%\Mozilla\Firefox\Profiles\????????????????
RGMUpdater.exe
psupport.dll

Hophitnews.ru DLL's to remove:

ContentHost.dll
ALiBaBar.dll
BDL.dll
DeltaFix.dll
update1.dll
Downloader.dll
PCProtect.dll
ScriptHost.dll
flashEnhancer.dll
Assistant_x64.dll
psupport.dll
ieplug.dll
wabEventSupport16.dll

Hophitnews.ru processes to kill:

PCProtect.exe
kometaup.exe
Toast.exe
applications.exe
contentagent.exe
toolserv.exe
mngr.exe
compatibilitychecksvc.exe
VirusRemover.exe
LiveUpdate.exe
WombatUpdater.exe
safebrowser.exe
plura_autorun.exe
monitorsvc.exe
PackerV2.exe
wprotectmanager.exe
webmakerplus.exe
optimizer.exe
stprss.exe
openinst.exe
DFService.exe
Seventh.exe
BitGuard.exe
VideoEklenti.exe
SafeUpdater.exe
lsdprn.exe
ProtectExtension.exe
RGMUpdater.exe
ScreenCapture.exe
ReminderFoxUpdater.exe
R003.exe
uninstall_Winservices.exe
DocUnzipUpdt.exe
yContentFilterService.exe
TorrentStat.exe
dnkt.exe
update.exe
browsemngr.exe
NCdownloader.exe
PlusMo.exe
AdbFlashIA2.exe
chrome-links.exe
MSLSService.exe
BrowserProtect.exe
inspasio.exe
lmservice.exe
MAJTuto.exe
UpdateService.exe
UpdateTask.exe
timetasks.exe
sv.exe
Bind.exe
SyncPulseManager.exe
usetting.exe
openinstall.exe
AutoUpdater.exe
systerm32.exe
dlprotect.exe
smp2.exe
OptimizerMonitor.exe
TimeTasksSetup.exe
VideoUsage.exe
uninstaller.exe
IEError.exe
Client.exe
CompTmp.exe
Sixth.exe
upr.exe
clteyghuwphSystem.exe
Updater.exe
NTS.exe
host.exe
winclient32.exe
GoogleUpdate.exe
windhcpclient.exe
Autoload.exe
ProtectWindowsManager.exe
wirtual.exe
20dollars2surf.exe
playsetup.exe
safetynut.exe
Win_Updater.exe
bi_client.exe
Disclaimer

Post comment — WE NEED YOUR OPINION!

Comment:
Name:
Please enter security code:
This is a captcha-picture. It is used to prevent mass-access by robots.