Should I remove Shop-wit?
What percent of users and experts removed it?
79% remove it21% keep it
What do people think about it?
(click star to rate)
How common is it?
Global Rank #25,459
United States Rank #26,028
Reach 0.0067%
Lifespan of installation (until removal)
< 7.32 days
216.03 days >
Average installed length: 113.51 days
Rankings
- #25,454 Commandos Strike Force by Pyro Studios
- #25,455 Upgrade Kit by Gateway
- #25,456 DWA-547 by D-Link
- #25,457 Macrorit Disk Partition Expert Professional 2013
- #25,458 Scuolabook by Alfabook
- #25,459 Shop-wit by shopwit
- #25,460 NiGHTS into Dreams... by SEGA
- #25,461 CrazyTalk v6.21 PRO by Reallusion
- #25,462 PDF Architect 2 OCR Module by pdfforge
- #25,463 PreSonus Studio One
- #25,464 KeyPlayr by KeyDownload
Shop-wit
from shopwit
What is Shop-wit?
Shopwit is an adware browser extension that will display banner and text-context link ads aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products. It will cause random web page text is turned into hyperlinks and may also lead to the installation of other unwanted adware programs to be installed without the user's knowledge.
Overview
It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The primary executable is named shopwit.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 52 files and is usually about 811.04 KB (830,507 bytes).
- Malware detected in the program
- Starts automatically
- Most users and experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Shop-wit.
shopwit.exe (a1100ce92720ff0387d92afc5ff1b194) has been flagged by the following 11 scanners: |
Anti-Virus software | Version | Detection |
Antiy-AVL |
1.0.0.1 |
Trojan/Win32.TGeneric |
avast! |
2014.9-140620 |
Win32:Dropper-gen [Drp] |
Baidu-International |
4.0.3.14620 |
Adware.Win32.ShopWit.81 |
ByteHero BDV |
6.20.2014.10 |
Virus.Win32.Heur.n |
ESET-NOD32 |
8.9972 |
a variant of Win32/Toolbar.Montiera.K |
G Data |
14.6.24 |
Win32.Trojan.Agent.SZWJSL |
McAfee |
5600.7094 |
Artemis!A1100CE92720 |
McAfee-GW-Edition |
7.7094 |
Artemis!A1100CE92720 |
Qihoo-360 |
1.0.0.1015 |
Win32/Trojan.Dropper.c9f |
Trend Micro |
10.465.20 |
ADW_MONTIERA |
TrendMicro-HouseCall |
7.2.171 |
ADW_MONTIERA |
shopup.exe (8b227a63d115d18328a909522ef7e72a) has been flagged by the following 29 scanners: |
Anti-Virus software | Software version | Detection |
Lavasoft Ad-Aware |
12.0.163.0 |
Adware.PayByAds.A |
ALYac |
1.0.1.4 |
Adware.PayByAds.A |
Antiy-AVL |
1.0.0.1 |
RiskWare[Downloader:not-a-virus]/Win32.Montiera |
AVG |
15.0.0.4257 |
Paybyads.893 |
AVware |
1.5.0.21 |
Montiera (fs) |
Baidu-International |
3.5.1.41473 |
Hacktool.Win32.Montiera.aPCE |
Bitdefender |
7.2 |
Adware.PayByAds.A |
Bkav FE |
1.3.0.6267 |
W32.HfsAdware.BDBE |
Emsisoft Anti-Malware |
3.0.0.600 |
Adware.PayByAds.A (B) |
ESET-NOD32 |
10994 |
a variant of Win32/Toolbar.Montiera.R |
Fortinet FortiGate |
5.0.999.0 |
Riskware/Montiera |
F-Secure |
11.0.19100.45 |
Adware.PayByAds.A |
G Data |
24 |
Adware.PayByAds.A |
IKARUS anti.virus |
T3.1.8.6.0 |
not-a-virus:Downloader.Montiera |
K7 AntiVirus |
9.190.14602 |
Unwanted-Program ( 004b1ff21 ) |
K7GW |
9.190.14602 |
Unwanted-Program ( 004b1ff21 ) |
Kaspersky |
15.0.1.10 |
not-a-virus:Downloader.Win32.Montiera.b |
Malwarebytes |
1.75.0.1 |
PUP.Optional.ShopWit.A |
McAfee |
6.0.5.614 |
Artemis!8B227A63D115 |
McAfee-GW-Edition |
v2014.2 |
BehavesLike.Win32.BadFile.gh |
MicroWorld-eScan |
12.0.250.0 |
Adware.PayByAds.A |
nProtect |
2015-01-09.01 |
Adware.PayByAds.A |
Panda Antivirus |
4.6.4.2 |
Trj/CI.A |
Sophos |
4.98.0 |
PayByAds |
Symantec |
20141.1.0.330 |
Trojan.Zbot |
Trend Micro |
9.740.0.1012 |
TROJ_GEN.R0C1C0OLO14 |
TrendMicro-HouseCall |
9.700.0.1001 |
TROJ_GEN.R0C1C0OLO14 |
VIPRE Antivirus |
36544 |
Montiera (fs) |
Zillya |
2.0.0.2031 |
Downloader.Montiera.Win32.30 |
View all 40 all detections
Program details
Installation folder: C:\users\user\appdata\local\shopwit\shopwit\1.3.6.10
Uninstaller: "C:\users\user\appdata\Local\shopwit\shopwit\1.3.6.10\shopwit.exe" /uninstl
Estimated size: 811.04 KB
Files installed by Shop-wit
Program executable: | shopwit.exe (Malware detected) |
Path: | C:\users\user\appdata\local\shopwit\shopwit\1.3.6.10\shopwit.exe |
MD5: | a1100ce92720ff0387d92afc5ff1b194 |
Additional files:
-
chrmXtn.dll
-
ffxtn.dll
-
5mcfpoai.dll
-
9ecfpnae.dll
-
acplpGkw.dll
-
aeccpg5b.dll
-
alpEvRci.dll
-
bhogieow.dll
-
bmjejlmb.dll
-
cbalm4pk.dll
-
cidoeboe.dll
-
dafafioA.dll
-
dlaecafl.dll
-
e1leJcek.dll
-
enkpidgk.dll
-
ezedQbhp.dll
-
fgfbnZfo.dll
-
gkjmebam.dll
-
gpCfffjd.dll
-
hgligolw.dll
-
hldfphmn.dll
-
hlpr64.exe
-
jdnjfpbb.dll
-
jpmBeNdb.dll
-
kcedbllg.dll
-
kxmpi3mm.dll
-
Lcxdio5d.dll
-
leozkMhh.dll
-
loaopymj.dll
-
lpzdoBnp.dll
-
lQedkjoi.dll
-
mahejA3h.dll
-
mcorhhKk.dll
-
mfij3fpl.dll
-
miiaFi9m.dll
-
nfoklfca.dll
-
nlufqzck.dll
-
nminblnm.dll
-
NVeilnjp.dll
-
of7dmmca.dll
-
oocglejj.dll
-
pffMtbkr.dll
-
pgkmaeld.dll
-
pp7nbhib.dll
-
res.dll (by Pay By Ads LTD)
-
RinzoHmO.dll
-
selfdel.js
-
(Malware detected) shopup.exe (by Pay By Ads LTD)
-
VbnfaoJT.dll
-
wkmjlVeg.dll
-
Zdlpfkdn.dll
Behaviors exhibited
2 Scheduled Tasks
- shopwit.exe is scheduled as a task named '$crrUnisntlDsply$' (Next runs on 2015-04-17 at 16:45).
- shopup.exe is scheduled as a task named '$crrUnisntlDsply$ Udpater' (Next runs on 2015-04-17 at 16:45).
Startup File (User Run)
- shopwit.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Shop-wit' and executes as C:\Program Files\shopwit\shopwit\1.4.0.5\shopwit.exe.
How do I remove Shop-wit?
You can uninstall Shop-wit from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program Shop-wit, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove Shop-wit.
- If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.
OS VERSIONS
Win 7 (SP1) 54%
Win XP 1%
|
|
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
|
|
USER ACTIONS
|
Uninstall it 79%
Keep it 21%
|
|
Windows
Which Windows OS versions does it run on?
Windows 7 |
57.89% |
|
Windows 10 |
31.58% |
|
Windows Vista |
8.27% |
|
Windows XP |
2.26% |
|
Which OS releases does it run on? |
Windows 7 Home Premium |
35.34% |
|
Windows 7 Professional |
12.03% |
|
Windows 8.1 |
11.28% |
|
Windows 7 Ultimate |
9.77% |
|
Windows 8 |
5.26% |
|
Windows 10 Pro |
4.51% |
|
Geography
38.13% of installs come from the United States
Which countries install it?
United States |
38.13% |
United Kingdom |
11.88% |
Germany |
10.63% |
France |
2.50% |
India |
2.50% |
Netherlands |
2.50% |
Ireland |
2.50% |
Austria |
1.88% |
New Zealand |
1.88% |
Canada |
1.88% |
Hong Kong |
1.25% |
Slovenia |
1.25% |
Taiwan |
1.25% |
Belgium |
1.25% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
Hewlett-Packard |
32.98% |
|
Acer |
18.09% |
|
Dell |
13.83% |
|
Toshiba |
8.51% |
|
Samsung |
8.51% |
|
ASUS |
7.45% |
|
GIGABYTE |
4.26% |
|
Intel |
3.19% |
|
Alienware |
2.13% |
|
Apple |
1.06% |
|
Common models |
HP Pavilion dv7 Notebook ... |
2.88% |
|
Dell OptiPlex 7010 |
1.92% |
|
HP Pavilion 15 Notebook P... |
1.92% |
|
MSI MS-7850 |
1.92% |
|
HP Pavilion g6 Notebook P... |
1.92% |
|
Samsung 300E4A/300E5A/300... |
1.92% |
|