Home Malware Programs Potentially Unwanted Programs (PUPs) PassShow

PassShow

Posted: December 31, 2013

Threat Metric

Ranking: 12,355
Threat Level: 2/10
Infected PCs: 48,074
First Seen: December 31, 2013
Last Seen: October 16, 2023
OS(es) Affected: Windows

PassShow, also known as PassShow.a, is a questionable program that may be classified with Potentially Unwanted Programs (PUPs). PassShow is not a virus but it may act like malware in that it could load at startup of Windows and start display unwanted pop-up alerts. Additionally, PassShow could redirect users through popular web browsers to unwanted sites or ones that are potentially malicious. It is best that the actions of PassShow be avoided by performing a removal process using updated and trusted antispyware software.

Aliases

Generic5.BAHT [AVG]Trj/Genetic.gen [Panda]Generic PUA OH [Sophos]TR/Graftor.146558.4 [AntiVir]Win32:Adware-gen [Adw] [Avast]Artemis!592207E401AF [McAfee]Generic5.AZBQ [AVG]Riskware/AddLyrics [Fortinet]Trojan/Win32.SGeneric [Antiy-AVL]Adware/Graftor.147412.23 [AntiVir]Application.Win32.Adware.WDUnlocker.A [Comodo]Win32:Malware-gen [Avast]Artemis!29352A8A7495 [McAfee]Generic_r.QA [AVG]AdWare.Generic [Ikarus]
More aliases (47)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\PassShow-soft\PassShowZTwzBw.exe File name: PassShowZTwzBw.exe
Size: 77.31 KB (77312 bytes)
MD5: a2b0f88a4a9f74c220ed6c2144d19958
Detection count: 841
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow-soft
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow-soft\PassShowZTw158.exe File name: PassShowZTw158.exe
Size: 131.58 KB (131584 bytes)
MD5: b75083ddb976fc1d30ae581fa3f729a5
Detection count: 817
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow-soft
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow-soft\PassShowZTw.exe File name: PassShowZTw.exe
Size: 365.05 KB (365056 bytes)
MD5: d1f12c9136aef44d536552da22407a97
Detection count: 728
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow-soft
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow Corp\PassShow_wd.exe File name: PassShow_wd.exe
Size: 77.31 KB (77312 bytes)
MD5: a434067a27634fadab20a0ad2728170c
Detection count: 721
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow Corp
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow Corp\PsUP..exe File name: PsUP..exe
Size: 365.05 KB (365056 bytes)
MD5: 72e944f17bc5146defad41761daf0822
Detection count: 567
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow Corp
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\v01PassShow\v01PassShowz64.exe File name: v01PassShowz64.exe
Size: 295.42 KB (295424 bytes)
MD5: 20151e598600262c1d47cc9e298e4c71
Detection count: 543
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\v01PassShow
Group: Malware file
Last Updated: August 6, 2014
%PROGRAMFILES%\PassShow Corp\PassShow_wd.exe File name: PassShow_wd.exe
Size: 77.31 KB (77312 bytes)
MD5: 8b1abde555aef6bdc7d4d187899a9929
Detection count: 485
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\PassShow Corp
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow-soft\PassShowZTw.exe File name: PassShowZTw.exe
Size: 365.05 KB (365056 bytes)
MD5: e6c38e216da3c7df9002cdb85bb3893e
Detection count: 314
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow-soft
Group: Malware file
Last Updated: July 11, 2018
%PROGRAMFILES%\PassShow_P\PassShowZTw161.exe File name: PassShowZTw161.exe
Size: 131.58 KB (131584 bytes)
MD5: 0156cacfbb2f72ad1c6f177501cd6e95
Detection count: 269
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow-soft\PassShowZTw158.exe File name: PassShowZTw158.exe
Size: 131.07 KB (131072 bytes)
MD5: d8ec967238e3a05f833f70c6153f060f
Detection count: 244
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow-soft
Group: Malware file
Last Updated: July 11, 2018
%PROGRAMFILES%\PassShow_P\PassShowZTwzBw.exe File name: PassShowZTwzBw.exe
Size: 77.31 KB (77312 bytes)
MD5: 28c87d8fdaebe4280d7c06e25e740712
Detection count: 227
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow_P\PassShowZTw161.exe File name: PassShowZTw161.exe
Size: 132.09 KB (132096 bytes)
MD5: f9bd57ad7b8d5555a7298c62a55008fc
Detection count: 183
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES%\PassShow_P\PassShowZTw.exe File name: PassShowZTw.exe
Size: 347.13 KB (347136 bytes)
MD5: e4aa1a82b0fe8d928f6dcbabaa6b2ecf
Detection count: 176
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow_P\PassShowZTw.exe File name: PassShowZTw.exe
Size: 347.13 KB (347136 bytes)
MD5: 4340c44a65cad92eff0f1406bf48ddea
Detection count: 157
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow_P\PassShowZTw161.exe File name: PassShowZTw161.exe
Size: 131.58 KB (131584 bytes)
MD5: ef7fc5f9d1f36a9ae4546d774a774bcf
Detection count: 115
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow_P\PassShowZTwzBw.exe File name: PassShowZTwzBw.exe
Size: 77.31 KB (77312 bytes)
MD5: 6fd15bc76a0d6e4a0bc01db5e92b6667
Detection count: 110
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow_P\PassShowZTw.exe File name: PassShowZTw.exe
Size: 347.13 KB (347136 bytes)
MD5: ad1c64b27b2525a8de58d82e0b46c283
Detection count: 63
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES%\PassShow-soft\PassShowZTw161.exe File name: PassShowZTw161.exe
Size: 132.09 KB (132096 bytes)
MD5: 3387c6b126fcf47e4f16a1ab84f49286
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\PassShow-soft
Group: Malware file
Last Updated: May 5, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{4e1dfdc4-5474-47fc-bcaa-6f1f0c49bae2}{77bf05d1-5f5f-40d2-8feb-7e326c73a257}{ade2113b-9952-46c8-85b0-b115be39a9fa}HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\PassShowSoftware\InstalledBrowserExtensions\ShowPassSoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411631145}SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\PassShow-bg.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PassShow UpdateSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{4e1dfdc4-5474-47fc-bcaa-6f1f0c49bae2}Software\Mozilla\Firefox\Extensions\{591f9d2f-ffb2-4bbe-98fc-2fb86649c789}SOFTWARE\PassShowSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\PassShow-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{4e1dfdc4-5474-47fc-bcaa-6f1f0c49bae2}SYSTEM\ControlSet001\services\PassShowSYSTEM\ControlSet002\services\PassShowSYSTEM\CurrentControlSet\services\PassShowHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}c20771cf-b330-43f0-bd27-e728ae7fe413

Additional Information

The following directories were created:
%PROGRAMFILES%\ShowPassword%PROGRAMFILES(x86)%\PassShow Corp%PROGRAMFILES(x86)%\ShowPassword%ProgramFiles%\PassShow%ProgramFiles%\PassShow-soft%ProgramFiles(x86)%\PassShow%ProgramFiles(x86)%\PassShow-soft
Loading...