Home Malware Programs Potentially Unwanted Programs (PUPs) PassShow

PassShow

Posted: December 31, 2013

Threat Metric

Ranking: 13,303
Threat Level: 2/10
Infected PCs: 48,111
First Seen: December 31, 2013
Last Seen: March 9, 2025
OS(es) Affected: Windows

PassShow, also known as PassShow.a, is a questionable program that may be classified with Potentially Unwanted Programs (PUPs). PassShow is not a virus but it may act like malware in that it could load at startup of Windows and start display unwanted pop-up alerts. Additionally, PassShow could redirect users through popular web browsers to unwanted sites or ones that are potentially malicious. It is best that the actions of PassShow be avoided by performing a removal process using updated and trusted antispyware software.

Aliases

Generic5.BAHT [AVG]Trj/Genetic.gen [Panda]Generic PUA OH [Sophos]TR/Graftor.146558.4 [AntiVir]Win32:Adware-gen [Adw] [Avast]Artemis!592207E401AF [McAfee]Generic5.AZBQ [AVG]Riskware/AddLyrics [Fortinet]Trojan/Win32.SGeneric [Antiy-AVL]Adware/Graftor.147412.23 [AntiVir]Application.Win32.Adware.WDUnlocker.A [Comodo]Win32:Malware-gen [Avast]Artemis!29352A8A7495 [McAfee]Generic_r.QA [AVG]AdWare.Generic [Ikarus]
More aliases (47)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\PassShow-soft\PsUP.exe File name: PsUP.exe
Size: 314.88 KB (314880 bytes)
MD5: dd14538f712237c828a31a759de223ea
Detection count: 7,654
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\PassShow-soft\PsUP.exe
Group: Malware file
Last Updated: March 16, 2023
C:\Program Files\PassShow-soft\157.dll File name: 157.dll
Size: 163.84 KB (163840 bytes)
MD5: 5737282402ef67b5830e6cbb00f19a85
Detection count: 2,122
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files\PassShow-soft\157.dll
Group: Malware file
Last Updated: March 16, 2023
%PROGRAMFILES%\ShowPassword\Show-Password155.exe File name: Show-Password155.exe
Size: 182.27 KB (182272 bytes)
MD5: 20eb15c462415fea018fddc79a133f57
Detection count: 934
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ShowPassword
Group: Malware file
Last Updated: July 21, 2017
%PROGRAMFILES(x86)%\ShowPassword\Show-Password_wd.exe File name: Show-Password_wd.exe
Size: 93.18 KB (93184 bytes)
MD5: f987c140b234dd44b5f2b0076e6d0e57
Detection count: 862
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\ShowPassword
Group: Malware file
Last Updated: July 21, 2017
%PROGRAMFILES(x86)%\v01PassShow\v01PassShowz64.exe File name: v01PassShowz64.exe
Size: 295.42 KB (295424 bytes)
MD5: 20151e598600262c1d47cc9e298e4c71
Detection count: 543
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\v01PassShow
Group: Malware file
Last Updated: August 6, 2014
%PROGRAMFILES%\PassShow\PassShow155.exe File name: PassShow155.exe
Size: 182.78 KB (182784 bytes)
MD5: ece74a8b7bc72a632ff83041e41f49a3
Detection count: 326
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\PassShow
Group: Malware file
Last Updated: June 12, 2019
%PROGRAMFILES(x86)%\PassShow-soft\PassShowZTw158.exe File name: PassShowZTw158.exe
Size: 131.07 KB (131072 bytes)
MD5: d8ec967238e3a05f833f70c6153f060f
Detection count: 244
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow-soft
Group: Malware file
Last Updated: July 11, 2018
%PROGRAMFILES(x86)%\PassShow_P\PassShowZTw161.exe File name: PassShowZTw161.exe
Size: 132.09 KB (132096 bytes)
MD5: f9bd57ad7b8d5555a7298c62a55008fc
Detection count: 183
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES(x86)%\PassShow_P\PassShowZTw.exe File name: PassShowZTw.exe
Size: 347.13 KB (347136 bytes)
MD5: 4340c44a65cad92eff0f1406bf48ddea
Detection count: 157
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\PassShow_P
Group: Malware file
Last Updated: May 5, 2014
%PROGRAMFILES%\PassShow\150.dll File name: 150.dll
Size: 146.43 KB (146432 bytes)
MD5: 0cfd879b9a17cbc0c4c5e5d51addebd2
Detection count: 32
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\PassShow
Group: Malware file
Last Updated: January 16, 2014
passshow.exe File name: passshow.exe
Size: 3.8 MB (3806679 bytes)
MD5: df92f9892c2042a5c3433df0b337c7a8
Detection count: 25
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
Last Updated: January 16, 2014
%PROGRAMFILES%\PassShow\PassShow-bho.dll File name: PassShow-bho.dll
Size: 636.92 KB (636928 bytes)
MD5: 1b82b783e43126a55f3bf52282666bba
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\PassShow
Group: Malware file
Last Updated: January 16, 2014
%PROGRAMFILES(x86)%\PassShow\PassShow-bho64.dll File name: PassShow-bho64.dll
Size: 962.04 KB (962048 bytes)
MD5: 21859ca94d650ebbf41f65ab9fcb5e14
Detection count: 5
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%\PassShow
Group: Malware file
Last Updated: January 16, 2014

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{4e1dfdc4-5474-47fc-bcaa-6f1f0c49bae2}{77bf05d1-5f5f-40d2-8feb-7e326c73a257}{ade2113b-9952-46c8-85b0-b115be39a9fa}HKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\PassShowSoftware\InstalledBrowserExtensions\ShowPassSoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411631145}SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\PassShow-bg.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\PassShow UpdateSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{4e1dfdc4-5474-47fc-bcaa-6f1f0c49bae2}Software\Mozilla\Firefox\Extensions\{591f9d2f-ffb2-4bbe-98fc-2fb86649c789}SOFTWARE\PassShowSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\PassShow-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{4e1dfdc4-5474-47fc-bcaa-6f1f0c49bae2}SYSTEM\ControlSet001\services\PassShowSYSTEM\ControlSet002\services\PassShowSYSTEM\CurrentControlSet\services\PassShowHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}c20771cf-b330-43f0-bd27-e728ae7fe413

Additional Information

The following directories were created:
%PROGRAMFILES%\ShowPassword%PROGRAMFILES(x86)%\PassShow Corp%PROGRAMFILES(x86)%\ShowPassword%ProgramFiles%\PassShow%ProgramFiles%\PassShow-soft%ProgramFiles(x86)%\PassShow%ProgramFiles(x86)%\PassShow-soft
Loading...