84,488,480 programs installed

Should I remove Shop-wit?

What percent of users and experts removed it?
79% remove it21% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #25,459
United States Rank #26,028
Reach 0.0067%
Lifespan of installation (until removal)
< 7.32 days
216.03 days >
Average installed length: 113.51 days

Shop-wit

What is Shop-wit?

Shopwit is an adware browser extension that will display banner and text-context link ads aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products. It will cause random web page text is turned into hyperlinks and may also lead to the installation of other unwanted adware programs to be installed without the user's knowledge.

Overview

It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The primary executable is named shopwit.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 52 files and is usually about 811.04 KB (830,507 bytes).
  • Malware detected in the program
  • Starts automatically
  • Most users and experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Shop-wit.
shopwit.exe (a1100ce92720ff0387d92afc5ff1b194) has been flagged by the following 11 scanners:
Anti-Virus softwareVersionDetection
Antiy-AVL 1.0.0.1 Trojan/Win32.TGeneric
avast! 2014.9-140620 Win32:Dropper-gen [Drp]
Baidu-International 4.0.3.14620 Adware.Win32.ShopWit.81
ByteHero BDV 6.20.2014.10 Virus.Win32.Heur.n
ESET-NOD32 8.9972 a variant of Win32/Toolbar.Montiera.K
G Data 14.6.24 Win32.Trojan.Agent.SZWJSL
McAfee 5600.7094 Artemis!A1100CE92720
McAfee-GW-Edition 7.7094 Artemis!A1100CE92720
Qihoo-360 1.0.0.1015 Win32/Trojan.Dropper.c9f
Trend Micro 10.465.20 ADW_MONTIERA
TrendMicro-HouseCall 7.2.171 ADW_MONTIERA
shopup.exe (8b227a63d115d18328a909522ef7e72a) has been flagged by the following 29 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.PayByAds.A
ALYac 1.0.1.4 Adware.PayByAds.A
Antiy-AVL 1.0.0.1 RiskWare[Downloader:not-a-virus]/Win32.Montiera
AVG 15.0.0.4257 Paybyads.893
AVware 1.5.0.21 Montiera (fs)
Baidu-International 3.5.1.41473 Hacktool.Win32.Montiera.aPCE
Bitdefender 7.2 Adware.PayByAds.A
Bkav FE 1.3.0.6267 W32.HfsAdware.BDBE
Emsisoft Anti-Malware 3.0.0.600 Adware.PayByAds.A (B)
ESET-NOD32 10994 a variant of Win32/Toolbar.Montiera.R
Fortinet FortiGate 5.0.999.0 Riskware/Montiera
F-Secure 11.0.19100.45 Adware.PayByAds.A
G Data 24 Adware.PayByAds.A
IKARUS anti.virus T3.1.8.6.0 not-a-virus:Downloader.Montiera
K7 AntiVirus 9.190.14602 Unwanted-Program ( 004b1ff21 )
K7GW 9.190.14602 Unwanted-Program ( 004b1ff21 )
Kaspersky 15.0.1.10 not-a-virus:Downloader.Win32.Montiera.b
Malwarebytes 1.75.0.1 PUP.Optional.ShopWit.A
McAfee 6.0.5.614 Artemis!8B227A63D115
McAfee-GW-Edition v2014.2 BehavesLike.Win32.BadFile.gh
MicroWorld-eScan 12.0.250.0 Adware.PayByAds.A
nProtect 2015-01-09.01 Adware.PayByAds.A
Panda Antivirus 4.6.4.2 Trj/CI.A
Sophos 4.98.0 PayByAds
Symantec 20141.1.0.330 Trojan.Zbot
Trend Micro 9.740.0.1012 TROJ_GEN.R0C1C0OLO14
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0C1C0OLO14
VIPRE Antivirus 36544 Montiera (fs)
Zillya 2.0.0.2031 Downloader.Montiera.Win32.30
       View all 40 all detections

Program detailsProgram details

Installation folder: C:\users\user\appdata\local\shopwit\shopwit\1.3.6.10
Uninstaller: "C:\users\user\appdata\Local\shopwit\shopwit\1.3.6.10\shopwit.exe" /uninstl
Estimated size: 811.04 KB

Program filesFiles installed by Shop-wit

Program executable:shopwit.exe (Malware detected)
Path:C:\users\user\appdata\local\shopwit\shopwit\1.3.6.10\shopwit.exe
MD5:a1100ce92720ff0387d92afc5ff1b194
Additional files:
  • chrmXtn.dll
  • ffxtn.dll
  • 5mcfpoai.dll
  • 9ecfpnae.dll
  • acplpGkw.dll
  • aeccpg5b.dll
  • alpEvRci.dll
  • bhogieow.dll
  • bmjejlmb.dll
  • cbalm4pk.dll
  • cidoeboe.dll
  • dafafioA.dll
  • dlaecafl.dll
  • e1leJcek.dll
  • enkpidgk.dll
  • ezedQbhp.dll
  • fgfbnZfo.dll
  • gkjmebam.dll
  • gpCfffjd.dll
  • hgligolw.dll
  • hldfphmn.dll
  • hlpr64.exe
  • jdnjfpbb.dll
  • jpmBeNdb.dll
  • kcedbllg.dll
  • kxmpi3mm.dll
  • Lcxdio5d.dll
  • leozkMhh.dll
  • loaopymj.dll
  • lpzdoBnp.dll
  • lQedkjoi.dll
  • mahejA3h.dll
  • mcorhhKk.dll
  • mfij3fpl.dll
  • miiaFi9m.dll
  • nfoklfca.dll
  • nlufqzck.dll
  • nminblnm.dll
  • NVeilnjp.dll
  • of7dmmca.dll
  • oocglejj.dll
  • pffMtbkr.dll
  • pgkmaeld.dll
  • pp7nbhib.dll
  • res.dll (by Pay By Ads LTD)
  • RinzoHmO.dll
  • selfdel.js
  • (Malware detected) shopup.exe (by Pay By Ads LTD)
  • VbnfaoJT.dll
  • wkmjlVeg.dll
  • Zdlpfkdn.dll

Program behaviorsBehaviors exhibited

2 Scheduled Tasks
  • shopwit.exe is scheduled as a task named '$crrUnisntlDsply$' (Next runs on 2015-04-17 at 16:45).
  • shopup.exe is scheduled as a task named '$crrUnisntlDsply$ Udpater' (Next runs on 2015-04-17 at 16:45).
Startup File (User Run)
  • shopwit.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Shop-wit' and executes as C:\Program Files\shopwit\shopwit\1.4.0.5\shopwit.exe.

How do I remove Shop-wit?

You can uninstall Shop-wit from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Shop-wit, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Shop-wit.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

OS VERSIONS
Win 7 (SP1) 54%
Win XP 1%
 
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
 
USER ACTIONS
Uninstall it 79%
Keep it 21%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 57.89%
Windows 10 31.58%
Windows Vista 8.27%
Windows XP 2.26%
Which OS releases does it run on?
Windows 7 Home Premium 35.34%
Windows 7 Professional 12.03%
Windows 8.1 11.28%
Windows 7 Ultimate 9.77%
Windows 8 5.26%
Windows 10 Pro 4.51%

Distribution by countryGeography

38.13% of installs come from the United States
Which countries install it?
  United States 38.13%
  United Kingdom 11.88%
  Germany 10.63%
  France 2.50%
  India 2.50%
  Netherlands 2.50%
  Ireland 2.50%
  Austria 1.88%
  New Zealand 1.88%
  Canada 1.88%
  Hong Kong 1.25%
  Slovenia 1.25%
  Taiwan 1.25%
  Belgium 1.25%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 32.98%
Acer 18.09%
Dell 13.83%
Toshiba 8.51%
Samsung 8.51%
ASUS 7.45%
GIGABYTE 4.26%
Intel 3.19%
Alienware 2.13%
Apple 1.06%
Common models
HP Pavilion dv7 Notebook ... 2.88%
Dell OptiPlex 7010 1.92%
HP Pavilion 15 Notebook P... 1.92%
MSI MS-7850 1.92%
HP Pavilion g6 Notebook P... 1.92%
Samsung 300E4A/300E5A/300... 1.92%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.