Home Malware Programs Adware Shop-wit

Shop-wit

Posted: July 11, 2014

Threat Metric

Ranking: 12,385
Threat Level: 2/10
Infected PCs: 3,101
First Seen: June 26, 2014
Last Seen: September 15, 2023
OS(es) Affected: Windows


Shop-wit is known as an adware program. The Shop-wit software and any associated plugins or add-on extensions may load on your computer in a clever manor through a previously downloaded and installed freeware program or bundled software application. When installed and loaded, Shop-wit may be apt to display random ads in several different forms, such as banners and pop-ups. The Shop-wit ads may attempt to offer various online savings or coupon deals through shopping over the internet. Use of the Shop-wit ads may redirect you to other unwanted sites or ones that try to aggressively offer additional online shopping deals. It is not until all components related to Shop-wit are removed when the Shop-wit ads will stop appearing or other unwanted actions stop taking place on your system and web browser application.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\Users\<username>\AppData\Local\shopwit\shopwit\1.3.6.10\shopwit.exe File name: shopwit.exe
Size: 510.97 KB (510976 bytes)
MD5: a1100ce92720ff0387d92afc5ff1b194
Detection count: 1,588
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\AppData\Local\shopwit\shopwit\1.3.6.10\shopwit.exe
Group: Malware file
Last Updated: April 2, 2023
Shop-Wit_setup.exe File name: Shop-Wit_setup.exe
Size: 298.38 KB (298388 bytes)
MD5: 93f8c2235d41aa7f4d96b778b86f2505
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: June 26, 2014
%LOCALAPPDATA%\shopwit\shopwit\1.3.2.11\chrmXtn.dll File name: chrmXtn.dll
Size: 118.78 KB (118784 bytes)
MD5: 02202b1c95b27e5fddc9c2f3a744210f
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\shopwit\shopwit\1.3.2.11
Group: Malware file
Last Updated: January 15, 2023
%LOCALAPPDATA%\shopwit\shopwit\1.3.2.11\ffxtn.dll File name: ffxtn.dll
Size: 124.92 KB (124928 bytes)
MD5: b09d1f5107801bcca6d4bb4cc2d3c26a
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %LOCALAPPDATA%\shopwit\shopwit\1.3.2.11
Group: Malware file
Last Updated: January 15, 2023

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\System32\Tasks\Shop-wit[RANDOM CHARACTERS]HKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION\shopwit.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Shop-witSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Shop-wit UpdaterSOFTWARE\Microsoft\Windows\CurrentVersion\Run\Shop-witSoftware\Microsoft\Windows\CurrentVersion\Run\shopwitHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}shopwit

Additional Information

The following directories were created:
%LOCALAPPDATA%\shopwit%PROGRAMFILES%\shopwit%PROGRAMFILES(x86)%\shopwit
Loading...