Home Malware Programs Adware TopShape.me

TopShape.me

Posted: September 7, 2015

Threat Metric

Ranking: 16,554
Threat Level: 2/10
Infected PCs: 43,664
First Seen: September 7, 2015
Last Seen: March 7, 2025
OS(es) Affected: Windows


Computer users that need to surf the Web for work and like to keep their drivers updated for maximum gaming experience may be interested in installing the TopShape program. The TopShape software is developed by Keen Internet Technologies Ltd. or can be found on the TopShape.me site where users are promised to 'forget about outdated apps.' The TopShape software is advertised as a system tool that can detect your hardware and software configuration to be used for reference when TopShape checks for available patches, fixes, and updates on the Web. You may be lead to believe that the TopShape program can help you achieve 'a smooth, fast and secure experience.' However, the application linked to TopShape.me is recognized as adware because it may use parameters like your IP and MAC address, Internet history, downloads log and software configuration to display personalized marketing materials. The TopShape adware may pretend to mimic the Quick PC Booster and the Koox System Optimizer, and you should not allow it to install software from unknown sources. The ads by TopShape.me may be shown on a virtual layer over the pages you browse in Google Chrome, Internet Explorer, Opera and Mozilla Firefox. The marketing materials by TopShape.me may not be blocked by extensions like AdGuard, Ghostery and AdBlock Plus. Web developers may not like that the TopShape application can prevent them from turning off scripts and CSS-styles. The TopShape software may invite users to participate in lotteries and provide access to their social media accounts. Needless to say, you shouln’t allow the TopShape adware to post on your news feed uninterrupted. Keen Internet Technologies Ltd. are not a certified partner to Microsoft Corp., and you may have trouble in solving disputes with them. The TopShape is more than likely to decrease our computer performance, and you should consider removing it. You have the option to install a reputable anti-spyware solution that is designed to eliminate programs like the TopShape adware safely.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\Users\<username>\appdata\roaming\topshape-b4\softwareupdate.exe File name: softwareupdate.exe
Size: 917.5 KB (917504 bytes)
MD5: 5efa3a66b87d70a06dd95e03879702c7
Detection count: 19,517
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\Users\<username>\appdata\roaming\topshape-b4\softwareupdate.exe
Group: Malware file
Last Updated: January 9, 2024
C:\Users\<username>\Downloads\topshape_setup_wJ6GDN92IGLUL1LT0AFD08L6.exe File name: topshape_setup_wJ6GDN92IGLUL1LT0AFD08L6.exe
Size: 1.42 MB (1420264 bytes)
MD5: c4b67a8aae4912db0be788916b01e6f6
Detection count: 124
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Downloads\topshape_setup_wJ6GDN92IGLUL1LT0AFD08L6.exe
Group: Malware file
Last Updated: July 9, 2024
C:\Users\<username>\AppData\Roaming\TopShape-P1\ShapeSrv.exe File name: ShapeSrv.exe
Size: 1.4 MB (1405440 bytes)
MD5: cf302a6787813cfff0b1a1c531e5fb4d
Detection count: 30
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\TopShape-P1\ShapeSrv.exe
Group: Malware file
Last Updated: February 12, 2022
C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\topshape-1005[1].exe File name: topshape-1005[1].exe
Size: 1.42 MB (1426987 bytes)
MD5: a8023d3a900afdb7f913cdf5133669b2
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\topshape-1005[1].exe
Group: Malware file
Last Updated: August 19, 2024
C:\Users\<username>\Downloads\topshape_ie.exe File name: topshape_ie.exe
Size: 1.43 MB (1435792 bytes)
MD5: d17dd6843a76c0a5833079915f5a5f83
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\Downloads\topshape_ie.exe
Group: Malware file
Last Updated: May 28, 2022

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathwww.topshape[1].xmlHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\topshape.meSoftware\Microsoft\Internet Explorer\DOMStorage\www.topshape.meSOFTWARE\TopShapeSOFTWARE\TopShape-B3SOFTWARE\TopShape-B3_moSOFTWARE\TopShape.me_moSOFTWARE\TopShape_moSOFTWARE\Wow6432Node\TopShapeSOFTWARE\Wow6432Node\TopShape-B3SOFTWARE\Wow6432Node\TopShape-B3_moSOFTWARE\Wow6432Node\TopShape.meSOFTWARE\Wow6432Node\TopShape.me_moSOFTWARE\Wow6432Node\TopShape_moSYSTEM\ControlSet001\services\TopShape ServiceSYSTEM\ControlSet001\Services\TopShape-B3 ServiceSYSTEM\ControlSet002\services\TopShape ServiceSYSTEM\ControlSet002\Services\TopShape-B3 ServiceSYSTEM\CurrentControlSet\services\TopShape ServiceSYSTEM\CurrentControlSet\Services\TopShape-B3 ServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}TopShapeTopShape-B3

Additional Information

The following directories were created:
%APPDATA%\TopShape-B4%APPDATA%\TopShape-B7%Appdata%\TopShape%Appdata%\TopShape-B3%Appdata%\TopShape.me%PROGRAMFILES%\TopShape-B3%PROGRAMFILES(x86)%\TopShape-B3
Loading...