Home Malware Programs Adware Rewinup Cinema Ads

Rewinup Cinema Ads

Posted: October 22, 2015

Threat Metric

Threat Level: 2/10
Infected PCs: 52
First Seen: October 23, 2015
Last Seen: October 18, 2021
OS(es) Affected: Windows

Rewinup Cinema is adware made by a company called REWINUP LLC. It isn't a stand-alone video player as some users may assume wrongly. This tool may come in the form of a web add-on that can work just as well on all popular browsers. Rewinup Cinema cannot help you watch movies; all it offers is a slight modification to the browser-based videos. Just like most of the ad-oriented plugins, the functionality of this software may be troublesome. The promoted features often serve only one goal, which is to encourage users to load the tiny application. For example, it is very questionable that Rewinup Cinema will let you play all video formats or include subtitles of your choice. Instead, when this add-on reaches Google Chrome, Mozilla Firefox and Internet Explorer, it may cause you many issues. The adware may include various pop-ups, banners and interstitial ads all over the pages you open. Some of these commercial materials, especially the in-text ads, may be placed in such a way that you may click on them inadvertently. Rewinup Cinema promises to let you find the hottest videos that are worth watching. Instead, the adware may try to redirect you to the pages of its partners in exchange for referral commissions. The dubious plugin may achieve this task by changing your default search engine. You may notice an unknown and unreliable search platform as your homepage. In case you use it, which is not recommended, you may see many sponsored links concealed as the most accurate results.The presence of the unwanted ads may be a setback to your smooth surfing sessions because they may lead to sporadic freezes or an increased loading time. The worst case scenario is that some of the partners of Rewinup Cinema may host unsafe software, so you should consider removing it from your PC.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\ReWinUp\protect\ReWinUpProtect.exe File name: ReWinUpProtect.exe
Size: 72.7 KB (72704 bytes)
MD5: 39ed52fd6cc4142382eae67b31f5988d
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\ReWinUp\protect
Group: Malware file
Last Updated: October 23, 2015

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\..\..{RegistryKeys}SOFTWARE\ReWinUpProtectSOFTWARE\Wow6432Node\Microsoft\Tracing\ReWinUpProtect_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\ReWinUpProtect_RASMANCSSOFTWARE\Wow6432Node\ReWinUpProtect

Additional Information

The following directories were created:
%appdata%\ReWinUp
Loading...