XfireXO Toolbar

XfireXO Toolbar

Known Toolbar

by Conduit Ltd.

What is XfireXO Toolbar?

XfireXO Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 84.55% of installations running this operating system. XfireXO Toolbar's installer is typically 4.00 MB in size and installs around 19 files. The most common release is 6.3.3.3 with 20.33% of all installations currently using this version.

XfireXO Toolbar is most popular in the United States with 46.64% of installations residing in this country.

XfireXO Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, XfireXO Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About XfireXO Toolbar?

The XfireXO Toolbar, developed by Conduit, is a Community Toolbar specifically designed to seamlessly integrate with Internet Explorer, Chrome, and Firefox web browsers. This toolbar aims to provide users with personalized services and targeted advertisements based on their web browsing activities. Additionally, it offers a customizable search box and other standard features typically found in similar toolbars. Please note that during installation, the toolbar may prompt the user to change their browser's home page and search provider settings, with these options being checked by default. Furthermore, the toolbar has the capability to automatically download and install updates without prior notification to the user. It is important to disclose that the XfireXO Toolbar operates as a PPI (pay per install) platform, allowing the publisher to receive compensation from Conduit for each installation and for every month the toolbar remains active within a user's web browser, with the amount varying based on the user's country of installation.

Multiple virus scanners have detected malware in XfireXO Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbXfir.dll (MD5: 469b44ae63d2ae02b512ec92c64d4a06) has been flagged by 13 scanners:
Scanner Software Result
Bkav FE HW32.Stranact
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Dr.Web Adware.Conduit.299
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
IKARUS anti.virus PUA.ClientConnect
tbXfi2.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 11 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~A
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
AVware Conduit (fs)
tbXfi0.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 13 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
IKARUS anti.virus PUA.ClientConnect
prxtbXfi2.dll (MD5: 59f4aa1a1ecf4c023f44872a9aae3b76) has been flagged by 6 scanners:
Scanner Software Result
Dr.Web Adware.Conduit.16
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • XfireXOToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • XfireXOToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://xfirexo.ourtoolbar.com
Support:
https://xfirexo.ourtoolbar.com/help
Installation path:
C:\Program Files\xfirexo
Uninstaller:
C:\Program Files\XfireXO\uninstall.exe
Size:
4.00 MB
Language:
English

XfireXO Toolbar Executable Details

Primary executable:
tbXfir.dll
Name:
XfireXO Toolbar
Path:
C:\Program Files\xfirexo\tbXfir.dll
MD5:
469b44ae63d2ae02b512ec92c64d4a06
SHA-1:
SHA-256:
Files installed by XfireXO Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
973567b98cdfc147df4e60471d9df072
DLL
tbXfir.dll
Malware
469b44ae63d2ae02b512ec92c64d4a06
DLL
tbXfi2.dll
Malware
975993043e355206a1fba5a702044f0c
DLL
tbXfi0.dll
Malware
1a8438854dd15e4389f5bdef502c369d
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
59f4aa1a1ecf4c023f44872a9aae3b76
DLL
2fffa4711ee94bed0a982886f65aaf3a
DLL
c89d9c80fd468c6b51c4aadcc8463c2d
DLL
66544b26974fba1616f31f9731759252