Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:November 20, 22:46

Testimonials

Thank you for your excellent program and your even more excellent support in helping me rid my computer of some nasty malware.

Even though problem took a while to uncover, It was a pleasure to work with you. I felt as though you were right there with me with timely and personal support. I was really impressed.

Great job! I will certainly recommend Exterminate It to others.

Thanks again,

Howard B.

File: shopping.url

Location of shopping.url and Associated Malware

Check whether shopping.url is present in the following locations:

shopping.url file locations that are Windows version independent:

  • [%DESKTOP%]\shopping.url

Windows 2000, Windows XP, Windows Server 2003 specific shopping.url file locations:

  • C:\Documents And Settings\USER_NAME\Favorites\links\shopping.url
  • C:\Documents And Settings\USER_NAME\Favorites\shopping\shopping.url

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific shopping.url file locations:

  • C:\Users\USER_NAME\Favorites\links\shopping.url
  • C:\Users\USER_NAME\Favorites\shopping\shopping.url

If you find shopping.url file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The shopping.url file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of shopping.url File^

File SizeFile Md5Last Seen
2477A2D84AC8F98BD47842AB3E1DE3A0B14May 17, 2010
465E5957B3269F12828D86A93C1C7EB0D8May 20, 2010
18639C6FFEADE5147A90E6C4FD6E4C21617May 23, 2010
579F219708246F6DA9D50FFB045DE7897BJun 1, 2010
1180DEEEE9D01A744DDCDFF6030A68E70A7Jun 12, 2010
140FA953B3A09F3F4B69758E3215B550778Jun 13, 2010
177AA569564CB32813C8DC493EE02A2B34BJun 14, 2010
2451E7A789C65ED3725206225F1F4D59B52Jun 19, 2010
1316205EDF5C30BA108F5D57762A6323B8DJun 19, 2010
83C3D230299112D7140CE955B8EF0E74E6Jul 27, 2010
111CF14718BB3FB3917DA12A74C93A282D4Aug 1, 2010
1178B3B69CCEDFD0B1BF4568B66733F7190Aug 3, 2010
248D53E6C6F30A509B29FAC6E697D8513B6Aug 10, 2010
528F350F8908DF9C456A633FCE6A85956EAug 21, 2010
209663D6CC796C90DEE49F67766C92C77B2Aug 25, 2010
118D7E798E962EF9A3CB94B6FBF5268FEFASep 16, 2010
147FF155A4A34EF42DA130A4298D7F604ECOct 5, 2010
18431D64684066E2B8AC78A5B99EB536307Oct 23, 2010
129BDDAB377361F583E10AA29F1D3220300Oct 28, 2010
832092462D20B28D0AC1A98CF6B43C166COct 29, 2010
8627C05B5FEAAE1A45787A00ABCBD4DE67Nov 11, 2010
229228AEE86C57BBB650F836D4492E508F1Nov 18, 2010
20975234239CE11CCB0ACACC3D848F21F2FDec 3, 2010
128676D070279F7759D60A8F00DFDBECAF8Dec 7, 2010
275D40DDEF8DA9CD619397AF49692B860D4Dec 15, 2010
2035BF3E6B7F25434D3085185C6A2157FD8Dec 18, 2010
14932B58809DE4EE723CB5BEDBCD41BF383Dec 20, 2010
832797AE63D0E537E889B7D97100F91477Dec 29, 2010
64C5547EA1AE6D3D68054B3B3AA6E47533Dec 30, 2010
1422A13375F69FCB2F72EB976C5FFC69E65Jan 1, 2011
24811D2B7465449C2A18D0FF0874D8257C2Jan 23, 2011
117D3F4B6721DE07519A7C0C0FB8F0E3316Jan 24, 2011
11677C180105DB2C3136FF62054A554BD71Feb 16, 2011
213FD83A24F72D5D0FCA63BD223C7B2022CMar 2, 2011
209553DA44F3FFC8B9AFABE0E4C80B8AC2AMar 5, 2011
20386DACB441DB2896C2C1845824D97A04FMar 16, 2011
174AF5DE075FC6ADD956B16C0490863B361May 10, 2010
182763E3CFFB02B18BB8397B7A5A65E7FB6May 17, 2010
18268F3A50E7AB0C79B11340B66295A1E79May 26, 2010
198CCD03AAAE9E382853778CDC515B21965Jun 4, 2010
1827FE265A2E2D9DEEB4A320AEC84510587Jun 5, 2010
1823CB476947F5292FD1A2A7F2487D3B95DJun 5, 2010
1821296EDCEAA4F470D96A07EDDBEF75A09Jun 6, 2010
182151BE8584AF0896EB416BD38C65D41CAJun 7, 2010
9929BA50E1C7DE32CF3D7B89C3F3DD8393Jun 9, 2010
182A349AE398B052DD9EC80B90B74542FCAJun 16, 2010
11239F856C912608BCD74957CA150A6DBA1Jun 20, 2010
182FBF12EAD63606DE0FFEABD123595D651Jun 23, 2010
182B42B53EAF0E5371D0678B5742798E8A1Jun 25, 2010
182E45630BE61C66C1B7DFEB604AFFC95CDJun 28, 2010
227B194ABFA687FEFAB64707D559D5C62D8Jul 3, 2010
182842F72A256D89CD289C036D871B9381BJul 4, 2010
18220877D1D2CB9359B0186EDF43A0419BEJul 5, 2010
182E7EAF99E3D2DF01419662942C8BF2763Jul 7, 2010
84E097E66371F2693F0873BF15E38DAE88Jul 11, 2010
182507E00B0710EDBB4C555F7F2CE912398Jul 11, 2010
18235D317FECA07D354C8847C471ED73B7CJul 17, 2010
182A230AC9F7C812592EDE5BD860541B3E7Jul 18, 2010
182933459E93D94FD0E1C05F53EDD38C1D9Jul 19, 2010
182F89F360814E2E5126503041DF9AD93A3Jul 23, 2010
18220BF5420A799274EF4FC45331CF5469CJul 25, 2010
1804AC3A87927674A280AE8033F3520FCE1Jul 28, 2010
18219F0ABDD072AC240E6FEDEB886BF228DJul 29, 2010
182505EC9D4B9A898CD33DB5B1CE5158D15Aug 9, 2010
139BE127EB96FF7930A588A0EEF31E40ED3Aug 11, 2010
2218A0FD75710F43BB93B45973A7826F2F2Aug 15, 2010
182FDD3F3C292FAA261226D17E7F1942DF6Aug 16, 2010
81938E8061CA8C1184BE0B1E208B5CD8A8Aug 21, 2010
182E1995E8A556A8E8980BF9D139FE03142Aug 21, 2010
18252F760945547933E13996C941F5B2F31Aug 21, 2010
1803EF43CECC51268DF926C8A021F4405F1Aug 22, 2010
22747991531757ECD464F328D8DAFACED2DAug 25, 2010
2160FB6C0BAB9B93D7F7AF8EF8E354DAD7EAug 30, 2010
182C30D01085378C5FBE70C15964FDE0714Sep 3, 2010
18255DE74387B767FB61BB2C9F8D9AAA5FBSep 5, 2010
769B10E80ECC9093DC86B7BD7FF8F0D023Sep 9, 2010
182A9142A6C3BA95381E4D977B183D425E3Sep 10, 2010
18221F47C5950F6AD0187EC15D96C79EF61Sep 16, 2010
806980D8720436A6E70BDF4C7CF4734B27Sep 17, 2010
1805F790384987FF29A5919450C9C316DDDSep 24, 2010
18292153A0B27680A9608E4E9069F535605Sep 27, 2010
182BFA3DA188D7B0E70638D025E9FAB355FOct 3, 2010
216B79F7B733C8537CC5E3C8E162072D0E3Oct 9, 2010
182FF38092A6FEFDDE9450964262FB98D2DOct 11, 2010
1827A8915C11429912E8CF5F40491643FA9Oct 13, 2010
1755A6A9A1076C8513D366E034E878E95D6Oct 18, 2010
80E80D35C247CF27E31AB369EBA65BD7A0Oct 21, 2010
1824845482A462BBA9BBC97EF7FB2F003D5Oct 23, 2010
22760DC35556F0DA2FE0BDCE7189E3B3301Oct 27, 2010
182843B173C9D34987C064D92760D9AC78COct 27, 2010
364FDAA3828C34478033CCA7D7232A79B84Nov 4, 2010
138EDE1F8196B9230809128B230FF9EA40ENov 10, 2010
11961E855F77072012526360504AAB3BCEBNov 16, 2010
74EA90DE78F0EF98EBAAB7C4709E24214ENov 22, 2010
182ADC56D27B7BDE8EB05E711441174620DNov 26, 2010
182290027A183AD72502BAF9D164410B487Dec 2, 2010
180762E17FEDD6C575E2D0C30EE5BDE9531Dec 12, 2010
18284E441E20CBAC6C4016CD375D9763666Dec 15, 2010
182C02931FAEB61233F8F47ADB48D044D06Dec 19, 2010
216CB7F40FA585537A00EB54C664D043F04Dec 30, 2010
18287258FFE76B91511F34585AA7949CD7EJan 1, 2011
3040A791C62B7D7D2EDDB274555534CF109Jan 6, 2011
20336B46608C291E2F46B8D624CE4478C7AJan 9, 2011
18280FAAD48A50AA85823155B4BD6546B14Jan 11, 2011
180E6D1B321873EBBE28F10E1D1C45478BFJan 13, 2011
139557D1C21B8283EFB745337974ED0EDF7Jan 27, 2011
1828B220DB90B5DAA01EB88C26378902E23Feb 5, 2011
182EFD20AF017B054EC6D17B0FE0D89F3CBFeb 9, 2011
18212983FD57E6E9227CDB11D1E4978FBE3Feb 10, 2011
182A6588ECA7F55AA0062D5B944F5AE1AFEFeb 12, 2011
1822A9D8E8F9CBF8BF014A6664E656FA23BFeb 12, 2011
182D300163E87BA951DB26C81E28930AE19Feb 26, 2011
1820EE9B11AAA56C01A4A19B7FD0470B288Mar 3, 2011
182B58E52DA0B034D88173B9E3001BE4A51Mar 6, 2011
2143F2C88E34586BB710AA12E719105C912Mar 6, 2011
182E51B3D40C329F76ECA0550FC2CAACCB2Mar 7, 2011
18262F199327C38D2D8A146419748DDF813Mar 8, 2011
1823CA8B6A966DC6727E969316B9954DBBFMar 12, 2011
182A1734129E0C9DBB87F51262996BE6FACMar 17, 2011
182BF60E37E052A0540F441F1068DBEFB0FMar 21, 2011
67B5DBECBC37EEF19AC4AC56C6CFD2B79BOct 22, 2010
2763220BCB033B37CFD3BF7B715E8EA3B82Jan 31, 2011
18288FC9B7D33302834D65FA18D4C046423Dec 18, 2009
1822C2247BD73A6229EC97D775F8623CF23Dec 22, 2009
182A10E925C40B0E2E103AEE135CADAB216Dec 28, 2009
182F99881F8BAE9D0DD6361346C16337727Dec 29, 2009
18220A346BBAE2F5EAECBB70EBF40EB6B2ADec 31, 2009
1802BB04CB24B6C9A487F3A3555FCF461F3Jan 5, 2010
2337910CE6670D994F07113348A0F816997Jan 22, 2010
182F3E378C70F6A4E24D81856C5B2B4AEDCJan 28, 2010
18206DF4629555C0FD4005E6C76EFA2881CFeb 1, 2010
182D02017D4FE274F6D9A44B8C656DE5D23Feb 7, 2010
182D25987CF7E41E9EFBC640C3FADEA49B2Feb 7, 2010
1460EBCD460C47C3941DF1BDBD00B5514B0Feb 12, 2010
1823BE8BE54FB93856A3E67745F82AC96CBFeb 23, 2010
1182D254C5A1853B04498181642C827DB6EMar 14, 2010
182DB3DC693FB8A31282D95B10545112019Mar 19, 2010
17283269AB79402D1A07A1FEF6A95F91CECMar 25, 2010
1825C2F9224EEDBB9E17DFE588D972585F1Apr 14, 2010
182D3E65984C167242F2DC43BF7A28F73FFApr 19, 2010
4324A7A2AB7E214608D437FB410FE073765Apr 20, 2010
182806E5F2C5833FD342D804C9709190A5DApr 20, 2010
2276D1C31FEDF78BE231EE589D574B70FDCApr 30, 2010
203BBCC2DB6852D093E747BC4D734F1EB1EDec 20, 2009
18535726BB128003BC645463279F79E9CEEDec 31, 2009
122D774C5001E8FDF780F38CF3FA68217E4Jan 18, 2010
188E3F1D5E5AE418FA3D7C934E62B71542EJan 20, 2010
18477E487F6FFA2F5E3A015E72A535F0F7AJan 31, 2010
258238130ADAAD4C0EE012C93F38758300BFeb 4, 2010
142DE8A7868E40B82757C542F5221653CAAFeb 12, 2010
1841738388832B40A70196F6CF81B1B1AB2Feb 20, 2010
921203DF60BCD49AF965731D2226A97D31Mar 8, 2010
200B264512837B2CA22F59B84A6AABB8853Mar 10, 2010
2255AE93B8C2557009FDE991B37EF2A6387Apr 4, 2010
2598AEAC587237E4F114599816253B9EB6FApr 17, 2010

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove shopping.url^

  1. To enable deleting the shopping.url file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select shopping.url and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of shopping.url and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of shopping.url and Associated Malware.
  6. Notes:

    • The deletion of shopping.url will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of shopping.url will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a shopping.url malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type shopping.url. The name of the first found registry value referencing shopping.url is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to shopping.url, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of shopping.url and Associated Malware.