PassWidget

PassWidget

Known Adware

by Revizer Technologies

What is PassWidget?

PassWidget is software application developed by Revizer Technologies. It is most commonly found on computers running Windows 7 with nearly 58.96% of installations running this operating system. PassWidget's installer is typically 1.00 MB in size and installs around 7 files.

PassWidget is most popular in the United States with 16.33% of installations residing in this country.

PassWidget adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About PassWidget?

This is a web browser extension that utilizes Virtue Interactive’s Advertising Modules to display popups and banner ads. It is commonly distributed through malvertising on sites such as takesoftbox.com from One Installer LLC and may also be packaged with a third-party download manager. According to the Terms of Use, the Extension offers free features to enhance internet usage, but it should be noted that installing the Extension implies consent to make minor changes to browser and operating system preferences in order to facilitate the installation.

Multiple virus scanners have detected malware in PassWidget.

150.dll (MD5: 43041359f68f78d909dc628acceca265) has been flagged by 2 scanners:
Scanner Software Result
Dr.Web Trojan.Revizer.1
Symantec WS.Reputation.1
136.dll (MD5: 038d0853eaf99958908c947a2808318d) has been flagged by 20 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.10079966
Bitdefender Trojan.Generic.10079966
Bkav FE W32.Clod9cd.Trojan.ed66
Dr.Web Trojan.Revizer.1
Emsisoft Anti-Malware Trojan.Generic.10079966 (B)
Fortinet FortiGate Riskware/AddLyrics
F-Secure Trojan.Generic.10079966
G Data Trojan.Generic.10079966
IKARUS anti.virus Trojan.SuspectCRC
K7 AntiVirus Adware ( 0040f6c91 )
K7GW Adware ( 0040f6c91 )
McAfee Artemis!038D0853EAF9
McAfee-GW-Edition Artemis!038D0853EAF9
MicroWorld-eScan Trojan.Generic.10079966
Norman Suspicious_Gen2.VTIFL
Panda Antivirus Suspicious file
TrendMicro-HouseCall TROJ_GEN.F47V1211
AegisLab AdWare.W32.Lyckriks
ESET-NOD32 a variant of Win32/AdWare.AddLyrics.AA
Symantec WS.Reputation.1
135.dll (MD5: 38c215d46bec4b7719ae7d9ca43104de) has been flagged by 7 scanners:
Scanner Software Result
AegisLab AdWare.W32.Lyckriks
Dr.Web Trojan.Revizer.1
ESET-NOD32 a variant of Win32/AdWare.AddLyrics.AA
K7 AntiVirus Adware ( 0040f6c91 )
K7GW Adware ( 0040f6c91 )
TrendMicro-HouseCall TROJ_GEN.F47V1204
Symantec WS.Reputation.1
PassWidget_.exe (MD5: bb5067b9c7d5a8977e64215ae404cdea) has been flagged by 26 scanners:
Scanner Software Result
Lavasoft Ad-Aware Gen:Variant.Adware.AddLyrics.5
Agnitum Outpost Trojan.Adware!HEpqwBQEKIo
AhnLab-V3 Adware/Win32.AddLyrics
AVG Skodna.Generic_r.HB
Baidu-International Adware.Win32.AddLyrics.X
Bitdefender Gen:Variant.Adware.AddLyrics.5
Comodo Security Application.Win32.AddLyrics.X
Dr.Web Trojan.Lyrics.14
Emsisoft Anti-Malware Gen:Variant.Adware.AddLyrics.5 (B)
ESET-NOD32 a variant of Win32/AdWare.AddLyrics.X
Fortinet FortiGate Riskware/AddLyrics
F-Secure Gen:Variant.Adware.AddLyrics.5
G Data Gen:Variant.Adware.AddLyrics.5
IKARUS anti.virus Win32.SuspectCrc
K7 AntiVirus Adware ( 004910ef1 )
K7GW Adware ( 004910ef1 )
McAfee Artemis!BB5067B9C7D5
McAfee-GW-Edition Artemis!BB5067B9C7D5
MicroWorld-eScan Gen:Variant.Adware.AddLyrics.5
Symantec WS.Reputation.1
TrendMicro-HouseCall TROJ_GEN.F47V1222
VIPRE Antivirus Trojan.Win32.Generic!BT
Bkav FE W32.Clod9cd.Trojan.ed66
Norman Suspicious_Gen2.VTIFL
Panda Antivirus Suspicious file
AegisLab AdWare.W32.Lyckriks
134.dll (MD5: eeac96a4d8db306c12618ccec0a6b079) has been flagged by 5 scanners:
Scanner Software Result
Dr.Web Trojan.Revizer.1
K7 AntiVirus Adware ( 0040f6c91 )
K7GW Adware ( 0040f6c91 )
TrendMicro-HouseCall TROJ_GEN.F47V1204
Symantec WS.Reputation.1

Software Behaviors

Scheduled tasks:
  • PassWidget_.exe is scheduled as a task named 'PassWidget Update' (runs daily at 11:08).
  • passwup.exe is scheduled as a task named 'PassWidget Update' (runs daily at 21:54).

Startup Entries

Startup tasks:
  • PassWidget_.exe is automatically launched at startup through a scheduled task named PassWidget Update.
  • passwup.exe is automatically launched at startup through a scheduled task named PassWidget Update.

Software Details

URL:
https://passwidget.co/terms-of-service
Support:
–
Installation path:
C:\Program Files\pass-widget
Uninstaller:
C:\Program Files\Pass-Widget\Uninstall.exe
Size:
1.00 MB
Language:
English

PassWidget Executable Details

Primary executable:
passwup.exe
Name:
PassWidget
Path:
C:\Program Files\pass-widget\passwup.exe
MD5:
13e3c94657f49230d6b9b622b00ae9b3
SHA-1:
–
SHA-256:
–
Files installed by PassWidget
File Type Filename MD5
EXE
d2cff81fc1732ddc95f4b7630fed49cd
DLL
150.dll
Malware
43041359f68f78d909dc628acceca265
DLL
136.dll
Malware
038d0853eaf99958908c947a2808318d
DLL
135.dll
Malware
38c215d46bec4b7719ae7d9ca43104de
EXE
bb5067b9c7d5a8977e64215ae404cdea
DLL
134.dll
Malware
eeac96a4d8db306c12618ccec0a6b079
EXE
13e3c94657f49230d6b9b622b00ae9b3