PassShow

PassShow

Known Adware

by Revizer Technologies

What is PassShow?

PassShow is software application developed by Revizer Technologies. It is most commonly found on computers running Windows 7 with nearly 58.42% of installations running this operating system. PassShow's installer is typically 1.00 MB in size and installs around 22 files.

PassShow is most popular in the United States with 67.67% of installations residing in this country.

PassShow adds 5 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About PassShow?

PassShow is a browser extension that enables users to view the characters entered in the password field when logging into websites or systems. It integrates with popular web browsers such as Internet Explorer, Chrome, and Firefox, and may modify the home, search, and new tab pages, as well as redirecting users to sponsored advertisements. The extension is free to download and use, supported by advertisements and commercial offers from vendors. In order to ensure the continuous functionality of the extension, it may operate in a proxy configuration, where a server acts as an intermediary for requests from clients seeking resources from other servers. Users have the option to manually revert their proxy configuration to its original state or completely uninstall the extension if desired. This extension aims to enhance the online experience by adding features, functionality, and content through the browser.

Multiple virus scanners have detected malware in PassShow.

PsUPeg.exe (MD5: f321efd237b2efd32c2d0841b7217730) has been flagged by 5 scanners:
Scanner Software Result
Baidu-International Adware.Win32.AddLyrics.AI
ESET-NOD32 a variant of Win32/AdWare.AddLyrics.AI
Malwarebytes PUP.Optional.AdLyrics.A
TrendMicro-HouseCall TROJ_GEN.F47V0327
Symantec Adware.Popuppers
PassShowwd.exe (MD5: d91e199c6de67404b4229e6e3532215a) has been flagged by 10 scanners:
Scanner Software Result
Baidu-International Adware.Win32.AD150.B
Comodo Security Application.Win32.Adware.WDUnlocker.A
ESET-NOD32 a variant of Win32/AdWare.AD150.B
Jiangmin Adware/Agent.jhs
Panda Antivirus Trj/Genetic.gen
Dr.Web Trojan.Lyrics.75
Malwarebytes PUP.Optional.AdLyrics.A
Sophos AddLyrics
TrendMicro-HouseCall TROJ_GEN.F47V0222
Symantec Adware.Popuppers
PassShow157.exe (MD5: 587362c43b7aa9ceeb0b55d9e32fef4d) has been flagged by 24 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win32.Dropper
avast! Win32:Dropper-gen [Drp]
AVG Generic_r.JH
Baidu-International Adware.Win32.AD150.B
ESET-NOD32 a variant of Win32/AdWare.AD150.B
McAfee Artemis!587362C43B7A
McAfee-GW-Edition Artemis!587362C43B7A
Qihoo-360 Win32/Trojan.Dropper.c9f
TrendMicro-HouseCall TROJ_GEN.F47V0328
VIPRE Antivirus Trojan.Win32.Generic!BT
IKARUS anti.virus AdWare.Win32.AddLyrics
K7 AntiVirus Riskware ( 0040f01a1 )
K7GW Riskware ( 0040f01a1 )
Microsoft Security Essentials Adware:Win32/AddLyrics
Trend Micro BREX_ADDLYRICS.A
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Agent
Kaspersky not-a-virus:AdWare.Win32.Agent.akhq
Comodo Security Application.Win32.Adware.WDUnlocker.A
Jiangmin Adware/Agent.jhs
Panda Antivirus Trj/Genetic.gen
Dr.Web Trojan.Lyrics.75
Malwarebytes PUP.Optional.AdLyrics.A
Sophos AddLyrics
Symantec Adware.Popuppers
PassShow155.exe (MD5: ece74a8b7bc72a632ff83041e41f49a3) has been flagged by 6 scanners:
Scanner Software Result
Baidu-International Adware.Win32.AD150.A
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/AdWare.AD150.A
TrendMicro-HouseCall TROJ_GEN.F47V0222
Malwarebytes PUP.Optional.AdLyrics.A
Symantec Adware.Popuppers
157.dll (MD5: 5737282402ef67b5830e6cbb00f19a85) has been flagged by 2 scanners:
Scanner Software Result
Symantec Adware.Popuppers
TrendMicro-HouseCall TROJ_GEN.R0C1H05D814

Software Behaviors

Services:
  • PassShow158.exe runs as a service named 'PassShow' (PassShow).
  • PassShow157.exe runs as a service named 'PassShow' (PassShow).
  • PassShow155.exe runs as a service named 'PassShow' (PassShow).
Scheduled tasks:
  • PsUP..exe is scheduled as a task named 'PassShow Update' (runs daily at 3:44 PM).
  • PassShow_wd.exe is scheduled as a task named 'PassShow_wd' (runs daily at 3:55 PM).
  • PsUPeg.exe is scheduled as a task named 'PassShow Update' (runs daily at 6:47 AM).
  • PsUP.exe is scheduled as a task named 'PassShow Update' (runs daily at 4:23 PM).
  • PassShowwd.exe is scheduled as a task named 'PassShow_wd' (runs daily at 4:34 PM).

Startup Entries

Startup tasks:
  • PsUP..exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PassShow_wd.exe is automatically launched at startup through a scheduled task named PassShow_wd.
  • PsUPeg.exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PsUP.exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PassShowwd.exe is automatically launched at startup through a scheduled task named PassShow_wd.

Software Details

URL:
https://passshow.com
Support:
Installation path:
C:\Program Files\passshow
Uninstaller:
C:\Program Files\PassShow\Uninstall.exe
Size:
1.00 MB
Language:
English

PassShow Executable Details

Primary executable:
PsUP..exe
Name:
PassShow
Path:
C:\Program Files\passshow\PsUP..exe
MD5:
dc800b9a3d7da0669e5f4894c281377d
SHA-1:
SHA-256:
Files installed by PassShow
File Type Filename MD5
EXE
587362c43b7aa9ceeb0b55d9e32fef4d
EXE
ece74a8b7bc72a632ff83041e41f49a3
DLL
157.dll
Malware
5737282402ef67b5830e6cbb00f19a85
XPI
09a214c7a50f02ad31d9870940a3bcc4
CRX
44f631006004cb3fd28f04c1a4e3447f
XPI
e16b1e94e13d74e19e658727027260cd
DLL
154.dll
Adware
e376f6f63b9535937f4dce83db62689a
CRX
37df48a5c80d29cc32a45e5f66d6ebfa
EXE
dc800b9a3d7da0669e5f4894c281377d
EXE
507cd9f774dc0d138f5c80e10d8b1630