24,953,750 programs installed

Should I remove PassShow?

What percent of users and experts removed it?
88% remove it12% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #3,272
United States Rank #2,219
Reach 0.2347%
Installation trends (last 30 days)
Uninstallation trends (last 30 days)
Lifespan of installation (until removal)
< 0.63 days
18.55 days >
Average installed length: 9.74 days

PassShow

What is PassShow?

PassShow is an adware program that integrates with the user's web browser (IE, Chrome and Firefox) and will hijack the normal home, search and new tab pages as well as redirections. In addition, it will display ads within the browser including banner, context and popup ads.

From the EULA:
"The Extension enables you to view the characters you enter on your keyboard in the password field when you login to any website or system. The Extension will enhance your online experience by adding features, functionality and content through your browser. The Extension is FREE of charge and sponsored by advertisements and commercial offers that may be displayed to you by Vendors.

To ensure continuous Service and proper functionality of the Extension we may operate in a proxy configuration. Proxy is a server that acts as an intermediary for requests from clients seeking resources from other servers. At your sole request you can manually revert back your proxy configuration to its original state or by completely uninstall the Extension."

About  (from Revizer Technologies)

The Extension enables you to view the characters you enter on your keyboard in the password field when you login to any website/system. The use of the Extension is free of charge and sponsored by advertisements that would be served to you by Us, by Our affiliates or by third party vendors (“Vendors”) under their sole t...  Read more
Overview
  • Malware detected in the program
  • Automatically starts with Windows
  • Integrates into the web browser
  • Installs a Windows Service
  • Typically distributed through a pay-per-install bundle
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in PassShow.
PsUP.exe (9d0a795cf9e2d500262ea7ed8dc64b63) has been flagged by the following 13 scanners:
Anti-Virus softwareVersionDetection
Lavasoft Ad-Aware 1120 Gen:Variant.Adware.Graftor.126142
AhnLab-V3 2014.01.04 Adware/Win32.AddLyrics
avast! 2014.9-140110 Win32:Agent-ASMU [PUP]
Baidu-International 4.0.3.14110 Adware.Win32.AddLyrics.77
Bitdefender 1.0.20.50 Gen:Variant.Adware.Graftor.126142
Comodo Security 17547 Application.Win32.AddLyrics.X
Emsisoft Anti-Malware 8.14.01.10.12 Gen:Variant.Adware.Graftor.126142
F-Secure 11.2014-10-01_6 Gen:Variant.Adware.Graftor.126142
G Data 14.1.22 Gen:Variant.Adware.Graftor.126142
IKARUS anti.virus t3scan.2.2.29 Win32.SuspectCrc
MicroWorld-eScan 15.0.0.30 Gen:Variant.Adware.Graftor.126142
Panda Antivirus 14.01.10.12 Suspicious file
TrendMicro-HouseCall 7.2.10 TROJ_GEN.F47V1221
154.dll (e376f6f63b9535937f4dce83db62689a) has been flagged by the following 7 scanners:
Anti-Virus softwareSoftware versionDetection
AVG 13.0.0.3169 Generic5.ANSH
Baidu-International 3.5.1.41473 Adware.Win32.AddLyrics.gen
IKARUS anti.virus T3.1.5.6.0 AdWare.Win32.AddLyrics
K7 AntiVirus 9.176.11311 Riskware ( 0040f01a1 )
K7GW 9.176.11311 Riskware ( 0040f01a1 )
Microsoft Security Essentials 1.10302 Adware:Win32/AddLyrics
Trend Micro 9.740-1012 BREX_ADDLYRICS.A
PassShow_wd.exe (4ffc4e4cf1e124f0edae8db55ff1a607) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.AD150.A
ESET-NOD32 9492 a variant of Win32/AdWare.AD150.A
Fortinet FortiGate 4 Riskware/AD150
McAfee 6.0.4.564 Adware-AddLyrics!4FFC4E4CF1E1
McAfee-GW-Edition 2013 Adware-AddLyrics!4FFC4E4CF1E1
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0222
PassShow155.exe (ece74a8b7bc72a632ff83041e41f49a3) has been flagged by the following 4 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.AD150.A
Comodo Security 17876 ApplicUnwnt
ESET-NOD32 9492 a variant of Win32/AdWare.AD150.A
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0222
       View all 30 all detections

Program detailsProgram details

URL: passshow.com
Installation folder: C:\Program Files\passshow
Uninstaller: C:\Program Files\PassShow\Uninstall.exe
Estimated size: 1.14 MB

Program filesFiles installed by PassShow

Program executable:PsUP.exe (Malware detected)
Path:C:\Program Files\passshow\PsUP.exe
MD5:9d0a795cf9e2d500262ea7ed8dc64b63
Additional files:
  • (Malware detected) PsUP.exe
  • Uninstall.exe
  • 150.dll
  • (Malware detected) 154.dll
  • 157.dll
  • (Malware detected) PassShow_wd.exe
  • (Malware detected) PassShow155.exe
  • PassShow157.exe
  • PassShowwd.exe
  • PsUPeg.exe
  • Sqlite3.dll

Program behaviorsBehaviors exhibited

3 Internet Explorer BHOs
  • 157.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'PassShow' with the class of {4e1dfdc4-5474-47fc-bcaa-6f1f0c49bae2}.
  • 154.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'PassShow' with the class of {0d97db6b-c9b0-4c07-98b7-818628ab37e2}.
  • 150.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'PassShow' with the class of {2d661e5b-7d7a-417c-b5b5-6479017bb314}.
4 Scheduled Tasks
  • PsUPeg.exe is scheduled as a task named 'PassShow Update' (runs daily at 6:47 AM).
  • PassShow_wd.exe is scheduled as a task named 'PassShow_wd' (runs daily at 6:58 AM).
  • PsUP.exe is scheduled as a task named 'PassShow Update' (runs daily at 4:23 PM).
  • PassShowwd.exe is scheduled as a task named 'PassShow_wd' (runs daily at 4:34 PM).
4 Scheduled Tasks (Boot/Login)
  • PsUPeg.exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PassShow_wd.exe is automatically launched at startup through a scheduled task named PassShow_wd.
  • PsUP.exe is automatically launched at startup through a scheduled task named PassShow Update.
  • PassShowwd.exe is automatically launched at startup through a scheduled task named PassShow_wd.
2 Services
  • PassShow157.exe runs as a service named 'PassShow' (PassShow).
  • PassShow155.exe runs as a service named 'PassShow' (PassShow).

How do I remove PassShow?

Quickly and completely remove PassShow from your computer by downloading "Should I Remove It?", its 100% FREE and installs in seconds (click the button below).
Download "Should I Remove It?", it's FREE!Remove PassShow from your computer.
Or, you can uninstall PassShow from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program PassShow, click it, and then do one of the following:
    • Windows Vista/7/8: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove PassShow.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by PassShow you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome
Scan your PC for malware
If you do not have a good anti-virus program, please consider installing one. Below are some we highly recommend.

HOW IT RUNS
Windows Service? Yes
(Installs a service)
 
USER ACTIONS
Uninstall it 88%
Keep it 12%
 
GLOBAL RANK
#3,272

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 60.51%
Windows 8 26.46%
Windows Vista 6.87%
Windows XP 6.15%
Which OS releases does it run on?
Windows 7 Home Premium 38.53%
Windows 8.1 13.02%
Windows 7 Professional 9.81%
Windows 7 Ultimate 9.19%
Windows 8 7.23%
Microsoft Windows XP 5.79%

Distribution by countryGeography

69.69% of installs come from the United States
Which countries install it?
  United States 69.69%
  Canada 4.87%
  United Kingdom 4.79%
  Australia 3.47%
  Saudi Arabia 2.73%
  Italy 1.57%
  United Arab Emirates 1.49%
  Germany 1.24%
  Netherlands 1.07%
  IQ 0.99%
  Sweden 0.99%
  France 0.91%
  Belgium 0.74%
  DK 0.66%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 28.96%
Dell 27.01%
Acer 13.13%
ASUS 8.36%
Toshiba 7.16%
GIGABYTE 4.63%
Lenovo 4.03%
Samsung 4.03%
Intel 2.09%
American Megatrends 0.60%
Common models
HP Pavilion dv6 Notebook ... 6.14%
Dell Inspiron N5110 3.41%
HP Pavilion g6 Notebook P... 3.41%
HP 2000 Notebook PC 3.07%
HP Pavilion g7 Notebook P... 2.39%
Dell Inspiron N5010 2.05%

comments2 comments

user comment
user comment
Yoker2 months ago
This is Malware in itself
user comment
lightness3 months ago
this is a monetization malware that makes a http://gip.driverdiv.net/ popup show up every 2 click or so. and adblock doesnt work against it. and it injects horrible ads in all surfed website.