PassShow

PassShow

Known Adware

by Revizer Technologies

What is PassShow?

PassShow is software application developed by Revizer Technologies. It is most commonly found on computers running Windows 7 with nearly 58.42% of installations running this operating system. PassShow's installer is typically 1.00 MB in size and installs around 22 files.

PassShow is most popular in the United States with 67.67% of installations residing in this country.

PassShow adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About PassShow?

PassShow is a browser extension that enables users to view the characters entered in the password field when logging into websites or systems. It integrates with popular web browsers such as Internet Explorer, Chrome, and Firefox, and may modify the home, search, and new tab pages, as well as redirecting users to sponsored advertisements. The extension is free to download and use, supported by advertisements and commercial offers from vendors. In order to ensure the continuous functionality of the extension, it may operate in a proxy configuration, where a server acts as an intermediary for requests from clients seeking resources from other servers. Users have the option to manually revert their proxy configuration to its original state or completely uninstall the extension if desired. This extension aims to enhance the online experience by adding features, functionality, and content through the browser.

Multiple virus scanners have detected malware in PassShow.

PsUPeg.exe (MD5: f321efd237b2efd32c2d0841b7217730) has been flagged by 5 scanners:
Scanner Software Result
Baidu-International Adware.Win32.AddLyrics.AI
ESET-NOD32 a variant of Win32/AdWare.AddLyrics.AI
Malwarebytes PUP.Optional.AdLyrics.A
TrendMicro-HouseCall TROJ_GEN.F47V0327
Symantec Adware.Popuppers
PassShowwd.exe (MD5: d91e199c6de67404b4229e6e3532215a) has been flagged by 10 scanners:
Scanner Software Result
Baidu-International Adware.Win32.AD150.B
Comodo Security Application.Win32.Adware.WDUnlocker.A
ESET-NOD32 a variant of Win32/AdWare.AD150.B
Jiangmin Adware/Agent.jhs
Panda Antivirus Trj/Genetic.gen
Dr.Web Trojan.Lyrics.75
Malwarebytes PUP.Optional.AdLyrics.A
Sophos AddLyrics
TrendMicro-HouseCall TROJ_GEN.F47V0222
Symantec Adware.Popuppers
PassShow157.exe (MD5: 587362c43b7aa9ceeb0b55d9e32fef4d) has been flagged by 24 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win32.Dropper
avast! Win32:Dropper-gen [Drp]
AVG Generic_r.JH
Baidu-International Adware.Win32.AD150.B
ESET-NOD32 a variant of Win32/AdWare.AD150.B
McAfee Artemis!587362C43B7A
McAfee-GW-Edition Artemis!587362C43B7A
Qihoo-360 Win32/Trojan.Dropper.c9f
TrendMicro-HouseCall TROJ_GEN.F47V0328
VIPRE Antivirus Trojan.Win32.Generic!BT
IKARUS anti.virus AdWare.Win32.AddLyrics
K7 AntiVirus Riskware ( 0040f01a1 )
K7GW Riskware ( 0040f01a1 )
Microsoft Security Essentials Adware:Win32/AddLyrics
Trend Micro BREX_ADDLYRICS.A
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Agent
Kaspersky not-a-virus:AdWare.Win32.Agent.akhq
Comodo Security Application.Win32.Adware.WDUnlocker.A
Jiangmin Adware/Agent.jhs
Panda Antivirus Trj/Genetic.gen
Dr.Web Trojan.Lyrics.75
Malwarebytes PUP.Optional.AdLyrics.A
Sophos AddLyrics
Symantec Adware.Popuppers
PassShow155.exe (MD5: ece74a8b7bc72a632ff83041e41f49a3) has been flagged by 6 scanners:
Scanner Software Result
Baidu-International Adware.Win32.AD150.A
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/AdWare.AD150.A
TrendMicro-HouseCall TROJ_GEN.F47V0222
Malwarebytes PUP.Optional.AdLyrics.A
Symantec Adware.Popuppers
157.dll (MD5: 5737282402ef67b5830e6cbb00f19a85) has been flagged by 2 scanners:
Scanner Software Result
Symantec Adware.Popuppers
TrendMicro-HouseCall TROJ_GEN.R0C1H05D814

Software Behaviors

Services:
  • PassShow158.exe runs as a service named 'PassShow' (PassShow).
  • PassShow157.exe runs as a service named 'PassShow' (PassShow).
  • PassShow155.exe runs as a service named 'PassShow' (PassShow).
Scheduled tasks:
  • PsUP..exe is scheduled as a task named 'PassShow Update' (runs daily at 3:44 PM).
  • PassShow_wd.exe is scheduled as a task named 'PassShow_wd' (runs daily at 3:55 PM).
  • PsUPeg.exe is scheduled as a task named 'PassShow Update' (runs daily at 6:47 AM).
  • PsUP.exe is scheduled as a task named 'PassShow Update' (runs daily at 4:23 PM).
  • PassShowwd.exe is scheduled as a task named 'PassShow_wd' (runs daily at 4:34 PM).

Startup Entries

Startup tasks:
  • PsUP..exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PassShow_wd.exe is automatically launched at startup through a scheduled task named PassShow_wd.
  • PsUPeg.exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PsUP.exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PassShowwd.exe is automatically launched at startup through a scheduled task named PassShow_wd.

Software Details

URL:
https://passshow.com
Support:
Installation path:
C:\Program Files\passshow
Uninstaller:
C:\Program Files\PassShow\Uninstall.exe
Size:
1.00 MB
Language:
English

PassShow Executable Details

Primary executable:
PsUP..exe
Name:
PassShow
Path:
C:\Program Files\passshow\PsUP..exe
MD5:
dc800b9a3d7da0669e5f4894c281377d
SHA-1:
SHA-256:
Files installed by PassShow
File Type Filename MD5
EXE
7b2bdd41c53719a245bedf9c1c29bb1f
DLL
5b2776a1be63c678b4d5b8a8eab9ddb5
DLL
e2aeb5a08e239c95b8d5f7553111dce4
XPI
7799df5755f4d53b5f934f1680ffb277
XPI
73c70123db555440993618b3ffc87681
CRX
63622d26088ddacd70d8a7afc164337c
XPI
6cda3bc9644d5aaf1b753c03d0dd1ed0
CRX
2c7d0a70fa05f031909c67ff0e96316f
EXE
f321efd237b2efd32c2d0841b7217730
EXE
d91e199c6de67404b4229e6e3532215a