84,488,480 programs installed

Should I remove Shop-Up?

What percent of users and experts removed it?
84% remove it16% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #26,116
United States Rank #31,858
Reach 0.0064%
Lifespan of installation (until removal)
< 15.48 days
456.63 days >
Average installed length: 239.93 days

Versions

VersionDistribution
1.34.4.10 0.79%
1.34.3.28 11.11%
1.34.3.6 11.11%
1.30.153.0 25.40%
1.29.153.2 14.29%
1.29.153.0 17.46%
1.28.153.3 19.84%

Shop-Up

What is Shop-Up?

Shop-Up is a potentially unwanted program that runs in the user's web browser as a toolbar and/or web extension depending on the browser.

Overview

Shop-Up is a software program developed by Winportal. The most common release is 1.30.153.0, with over 98% of all installations currently using this version. During setup, the program registers itself to launch on boot through a Windows Schedule Task in order to automatically start-up (this is typically done to avoid any UAC prompts). It adds a Browser Helper Object (BHO) to Internet Explorer. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The primary executable is named utils.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 24 files and is usually about 5.47 MB (5,736,512 bytes). The installed file Shop-Up-updater.exe is the auto-update component of the program which is designed to check for software updates and notify and apply them when new versions are discovered. Relative to the overall usage of users who have this installed on their PCs, most are running Windows 7 (SP1) and Windows 10. While about 33% of users of Shop-Up come from the United States, it is also popular in Canada and United Kingdom.

This browser extension utilizes Crossrider framework, a cross-browser toolbar/plugin platform used to develop, deploy and monetize web browser toolbars for Internet Explorer, Chrome and Firefox. Crossrider extension provide monetization options, mostly potentially unwanted apps, for toolbars including coupons, search assistant (home page and search hijacking) and in-text contextual advertising. Many adware programs (defined by a number of anti-virus vendors) are built using Crossrider as it provides a quick an easy way to deploy ad-supported features that will assist in browser search hijacking.
  • Malware detected in the program
  • Automatically starts with Windows
  • Integrates into the web browser
  • Uses the Crossrider toolbar framework
  • During install it may hijack/modify the browser's homepage and search provider
  • Runs disconnected from the browser as a background process
  • Known to reinstall itself
  • Typically distributed through a pay-per-install bundle
  • Most users and experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Shop-Up.
Shop-Up-bho.dll (66137d0fb467f5b76ba01c28340b242e) has been flagged by the following 25 scanners:
Anti-Virus softwareVersionDetection
AhnLab-V3 2013.11.19 Adware/Win32.Lyckriks
Antiy-AVL 2.0.3.7 AdWare/Win32.Lyckriks
AVG 2015.0.3598 Generic5
Baidu-International 4.0.3.14110 Trojan.Win32.Toolbar.aKc
Bitdefender 1.0.20.50 Adware.Generic.603140
Bkav FE 1.3.0.4562 W32.Clodd68.Trojan
Dr.Web 9.0.0.010 Trojan.Crossrider.7
Emsisoft Anti-Malware 8.14.01.10.03 Adware.Generic.603140
ESET-NOD32 8.9065 a variant of Win32/Toolbar.CrossRider.H
Fortinet FortiGate 1/10/2014 Adware/Lyckriks
F-Secure 11.2014-10-01_6 Adware.Generic.603140
G Data 14.1.22 Adware.Generic.603140
K7 AntiVirus 13.173.10234 Riskware
K7GW 13.173.10234 Riskware ( 0040eff71 )
Kaspersky 14.0.0.4487 not-a-virus:AdWare.Win32.Lyckriks
Kingsoft AntiVirus 331020.49267 Win32.Troj.Generic.a.(kcloud)
McAfee 5600.7254 Artemis!66137D0FB467
McAfee-GW-Edition 7.7254 Artemis!66137D0FB467
MicroWorld-eScan 15.0.0.30 Adware.Generic.603140
NANO AntiVirus 0.28.0.56316 Trojan.Win32.Crossrider.cikajc
Panda Antivirus 14.01.10.03 Suspicious file
Symantec 1/10/2014 rev. 6 Adware.Adpopup
TrendMicro-HouseCall 7.2.10 TROJ_GEN.R047H07JF13
Vba32 AntiVirus 3.12.24.3 AdWare.Lyckriks
VIPRE Antivirus 23508 Crossrider (fs)
Shop-Up-chromeinstaller.exe (0649c84a801cab88d5aa536695056e7f) has been flagged by the following 24 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.Generic.610485
Agnitum Outpost 5.5.1.3 Adware.Lyckriks!
Antiy-AVL 2.0.3.7 AdWare/Win32.Lyckriks
AVG 13.0.0.3169 Generic5.AIIQ
Baidu-International 3.5.1.41473 HackTool.Win32.CrossRider.J
Bitdefender 7.2.5028.0 Adware.Generic.610485
Bkav FE 1.3.0.4613 W32.Clod878.Trojan.920f
Emsisoft Anti-Malware 3.0.0.596 Adware.Generic.610485 (B)
ESET-NOD32 9190 a variant of Win32/Toolbar.CrossRider.K
Fortinet FortiGate 5.1.147.0 Adware/Lyckriks
F-Secure 11.0.19100.45 Adware.Generic.610485
G Data 22 Adware.Generic.610485
Jiangmin 16.0.100 AdWare/Lyckriks.dm
K7 AntiVirus 9.174.10656 Trojan ( 0048e2ed1 )
K7GW 9.174.10661 Trojan ( 0048e2ed1 )
Kaspersky 12.0.0.1221 not-a-virus:AdWare.Win32.Lyckriks.ly
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
McAfee 5.600.0.1067 Artemis!0649C84A801C
McAfee-GW-Edition 2013 Artemis!0649C84A801C
MicroWorld-eScan 12.0.250.0 Adware.Generic.610485
Sophos 4.96.0 Generic PUA JL
Symantec 20131.1.5.61 Adware.FindLyrics
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R047H05JH13
VIPRE Antivirus 24874 Crossrider (fs)
Shop-Up-enabler.exe (0ea8546fa3859c4628b794ee5815306a) has been flagged by the following 19 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Trojan.Generic.11189242
AVG 13.0.0.3169 Generic5.APKC
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.AC
Bitdefender 7.2 Trojan.Generic.11189242
Dr.Web 7.00.9.04080 Trojan.Crossrider.950
Emsisoft Anti-Malware 3.0.0.596 Trojan.Generic.11189242 (B)
ESET-NOD32 9702 a variant of Win32/Toolbar.CrossRider.AC
Fortinet FortiGate 4 Riskware/Toolbar_CrossRider
F-Secure 11.0.19100.45 Trojan.Generic.11189242
G Data 24 Trojan.Generic.11189242
IKARUS anti.virus T3.1.6.1.0 Trojan.SuspectCRC
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
McAfee 6.0.4.564 Artemis!0EA8546FA385
McAfee-GW-Edition 2013 Artemis!0EA8546FA385
MicroWorld-eScan 12.0.250.0 Trojan.Generic.11189242
nProtect 2014-04-20.01 Trojan.Generic.11189242
Symantec 20131.1.5.61 WS.Reputation.1
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0411
VIPRE Antivirus 28442 Crossrider (fs)
Shop-Up-updater.exe (81d55bdfc03d8cec4ab93a9e023fa824) has been flagged by the following 18 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Trojan.Generic.11166703
AVG 13.0.0.3169 MultiBundle.W
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.AC
Bitdefender 7.2 Trojan.Generic.11166703
Dr.Web 7.00.8.02260 Trojan.Crossrider.7209
Emsisoft Anti-Malware 3.0.0.596 Trojan.Generic.11166703 (B)
ESET-NOD32 9663 a variant of Win32/Toolbar.CrossRider.AC
Fortinet FortiGate 4 Riskware/Toolbar_CrossRider
F-Secure 11.0.19100.45 Trojan.Generic.11166703
G Data 24 Trojan.Generic.11166703
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
McAfee 6.0.4.564 Artemis!81D55BDFC03D
McAfee-GW-Edition 2013 Artemis!81D55BDFC03D
MicroWorld-eScan 12.0.250.0 Trojan.Generic.11166703
nProtect 2014-04-10.02 Trojan.Generic.11166703
SUPERAntiSpyware 5.6.0.1032 Trojan.Agent/Gen-Crossrider
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0403
VIPRE Antivirus 28194 Crossrider (fs)
Shop-Up-codedownloader.exe (5b947809ca34007d292db1a55d407fc8) has been flagged by the following 17 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Trojan.Generic.11166585
AVG 13.0.0.3169 Generic5.APHA
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.AA
Bitdefender 7.2 Trojan.Generic.11166585
Dr.Web 7.00.8.02260 Trojan.Crossrider.7193
Emsisoft Anti-Malware 3.0.0.596 Trojan.Generic.11166585 (B)
ESET-NOD32 9663 a variant of Win32/Toolbar.CrossRider.AA
Fortinet FortiGate 4 Riskware/Toolbar_CrossRider
F-Secure 11.0.19100.45 Trojan.Generic.11166585
G Data 24 Trojan.Generic.11166585
K7 AntiVirus 9.176.11721 Trojan ( 004965ab1 )
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
McAfee 6.0.4.564 Artemis!5B947809CA34
McAfee-GW-Edition 2013 Artemis!5B947809CA34
MicroWorld-eScan 12.0.250.0 Trojan.Generic.11166585
nProtect 2014-04-10.02 Trojan.Generic.11166585
VIPRE Antivirus 28194 Crossrider (fs)
Shop-Up-bho64.dll (9ebb53c43aa42181590ef2121d7314b5) has been flagged by the following 16 scanners:
Anti-Virus softwareSoftware versionDetection
Agnitum Outpost 5.5.1.3 PUA.Toolbar.Crossrider!
avast! 8.0.1489.320 Win32:Crossrider-AI [PUP]
Avira 3.6.1.96 ADWARE/CrossRider.Gen2
AVware 1.5.0.21 Crossrider (fs)
Baidu-International 3.5.1.41473 Adware.Win64.CrossAd.B
Comodo Security 21733 ApplicUnwnt
ESET-NOD32 11460 a variant of Win64/Toolbar.Crossrider.B potentially unwanted
G Data 25 Win64.Adware.Crossrider.Q
IKARUS anti.virus T3.1.8.9.0 not-a-virus:WebToolbar.CroRi
Malwarebytes 1.75.0.1 PUP.Optional.ShopUp.A
McAfee 6.0.5.614 Artemis!9EBB53C43AA4
Sophos 4.98.0 AppRider
SUPERAntiSpyware 5.6.0.1032 Adware.Artemis/Variant
Symantec 20141.2.0.56 Trojan.Gen.2
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0C1H05A115
VIPRE Antivirus 39258 Crossrider (fs)
Shop-Up-firefoxinstaller.exe (a2b76370366a55a336f46974eab3c9c6) has been flagged by the following 14 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Trojan.Generic.11167260
AVG 13.0.0.3169 MultiBundle.V
Bitdefender 7.2 Trojan.Generic.11167260
Dr.Web 7.00.8.02260 Trojan.Crossrider.7347
Emsisoft Anti-Malware 3.0.0.596 Trojan.Generic.11167260 (B)
F-Secure 11.0.19100.45 Trojan.Generic.11167260
G Data 24 Trojan.Generic.11167260
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
McAfee 6.0.4.564 Artemis!A2B76370366A
McAfee-GW-Edition 2013 Artemis!A2B76370366A
MicroWorld-eScan 12.0.250.0 Trojan.Generic.11167260
nProtect 2014-04-10.02 Trojan.Generic.11167260
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0403
VIPRE Antivirus 28194 Crossrider (fs)
Shop-Up-nova.exe (05f8169f82be7ff2fa43ac98e7dcbb29) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
Avira AntiVir 7.11.149.178 Adware/CrossRider.A.3571
AVG 14.0.0.3950 Generic_r.LS
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.bAE
ESET-NOD32 9801 a variant of Win32/Toolbar.CrossRider.AE
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
VIPRE Antivirus 29222 Crossrider (fs)
94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-5.exe (66866b47692bdd1ca1960f1c7f753d88) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
Antiy-AVL 0.1.0.1 Trojan/Win32.SGeneric
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.AC
ESET-NOD32 9703 a variant of Win32/Toolbar.CrossRider.AC
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
Symantec 20131.1.5.61 WS.Reputation.1
VIPRE Antivirus 28456 Crossrider (fs)
94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-3.exe (d0c2c3bd86ab33dbc22afce970751515) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.AD
Bkav FE 1.3.0.4959 W32.CrossRider.Trojan
ESET-NOD32 9691 a variant of Win32/Toolbar.CrossRider.AD
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
Symantec 20131.1.5.61 WS.Reputation.1
VIPRE Antivirus 28332 Crossrider (fs)
94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-2.exe (8a5babf273102aeee5689e0eac15e004) has been flagged by the following 5 scanners:
Anti-Virus softwareSoftware versionDetection
Antiy-AVL 0.1.0.1 Trojan/Win32.SGeneric
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.AC
ESET-NOD32 9703 a variant of Win32/Toolbar.CrossRider.AC
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
VIPRE Antivirus 28456 Crossrider (fs)
94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-4.exe (221881f6eba485719536c19cccbea8e8) has been flagged by the following 4 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.AD
ESET-NOD32 9691 a variant of Win32/Toolbar.CrossRider.AD
Malwarebytes 1.75.0001 PUP.Optional.ShopUp.A
VIPRE Antivirus 28332 Crossrider (fs)
       View all 160 all detections
Shop-Up has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Installation folder: C:\Program Files\shop-up
Uninstaller: C:\Program Files\Shop-Up\Uninstall.exe /fromcontrolpanel=1
Estimated size: 5.47 MB

Program filesFiles installed by Shop-Up

Program executable:utils.exe
Name:Shop-Up
Shop-Up Installer
Path:C:\Program Files\shop-up\utils.exe
MD5:b11e6979665882fe0ab45cfac3bab7e6
Additional files:
  • 90a9d234-f128-4e89-8881-2cc40127b1a5-3.exe - Shop-Up (Shop-Up exe)
  • 90a9d234-f128-4e89-8881-2cc40127b1a5-4.exe
  • 90a9d234-f128-4e89-8881-2cc40127b1a5-5.exe
  • (Malware detected) 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-2.exe
  • (Malware detected) 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-3.exe
  • (Malware detected) 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-4.exe
  • (Malware detected) 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-5.exe
  • Shop-Up-bg.exe
  • Shop-Up-bho.dll - Shop-Up BHO
  • (Malware detected) Shop-Up-bho64.dll
  • Shop-Up-buttonutil.exe
  • Shop-Up-buttonutil64.exe
  • Shop-Up-chromeinstaller.exe
  • Shop-Up-codedownloader.exe
  • Shop-Up-enabler.exe
  • (Malware detected) Shop-Up-firefoxinstaller.exe
  • (Malware detected) Shop-Up-nova.exe
  • Shop-Up-updater.exe
  • Shop-Up-buttonutil.dll
  • Shop-Up-buttonutil64.dll
  • Shop-Up-helper.exe
  • Uninstall.exe

Program behaviorsBehaviors exhibited

2 Internet Explorer BHOs
  • Shop-Up-bho64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Shop-Up' with the class of {11111111-1111-1111-1111-110411281122} (CrossriderApp0042822).
  • Shop-Up-bho.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Shop-Up' with the class of {11111111-1111-1111-1111-110411281122} (CrossriderApp0042822).
Scheduled Task
  • 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-2.exe is scheduled as a task named 'temp_94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-2'.
13 Scheduled Tasks (Boot/Login)
  • Shop-Up-nova.exe is automatically launched at startup through a scheduled task named 90a9d234-f128-4e89-8881-2cc40127b1a5-7.
  • 90a9d234-f128-4e89-8881-2cc40127b1a5-5.exe is automatically launched at startup through a scheduled task named 90a9d234-f128-4e89-8881-2cc40127b1a5-5.
  • 90a9d234-f128-4e89-8881-2cc40127b1a5-4.exe is automatically launched at startup through a scheduled task named 90a9d234-f128-4e89-8881-2cc40127b1a5-4.
  • 90a9d234-f128-4e89-8881-2cc40127b1a5-3.exe is automatically launched at startup through a scheduled task named 90a9d234-f128-4e89-8881-2cc40127b1a5-3.
  • Shop-Up-codedownloader.exe is automatically launched at startup through a scheduled task named 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-1.
  • 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-5.exe is automatically launched at startup through a scheduled task named 94fb8af2-2342-47dc-ad04-fc7e12f7a7ef-5.
  • Plus 7 more

How do I remove Shop-Up?

You can uninstall Shop-Up from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Shop-Up, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Shop-Up.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Shop-Up you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 52%
Win Vista (SP2) 1%
 
HOW IT STARTS
Scheduled task? Yes
(Runs on Windows boot)
 
USER ACTIONS
Uninstall it 84%
Keep it 16%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 57.14%
Windows 10 33.33%
Windows XP 8.73%
Windows Vista 0.79%
Which OS releases does it run on?
Windows 7 Home Premium 34.68%
Windows 8 12.90%
Windows 7 Ultimate 9.68%
Windows 8.1 8.87%
Windows 7 Professional 8.06%
Microsoft Windows XP 8.06%

Distribution by countryGeography

32.52% of installs come from the United States
Which countries install it?
  United States 32.52%
  Canada 16.26%
  United Kingdom 13.82%
  France 11.38%
  Colombia 4.88%
  Germany 4.07%
  Ecuador 3.25%
  Costa Rica 2.44%
  Peru 2.44%
  Venezuela 2.44%
  Belgium 1.63%
  Switzerland 0.81%
  PR 0.81%
  BO 0.81%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 33.33%
Acer 22.58%
Dell 21.51%
Toshiba 7.53%
ASUS 4.30%
Lenovo 3.23%
GIGABYTE 2.15%
Sony 2.15%
Samsung 1.08%
Sahara 1.08%
Gateway 1.08%
Common models
HP Pavilion g6 Notebook P... 4.76%
Dell Inspiron 560 2.86%
HP Pavilion dv6 Notebook ... 2.86%
HP Pavilion 17 Notebook P... 2.86%
Dell Studio 540 1.90%
TOSHIBA Satellite P75-A 0.95%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.