XfireXO Toolbar

XfireXO Toolbar

Known Toolbar

by Conduit Ltd.

What is XfireXO Toolbar?

XfireXO Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 84.55% of installations running this operating system. XfireXO Toolbar's installer is typically 4.00 MB in size and installs around 19 files. The most common release is 6.3.3.3 with 20.33% of all installations currently using this version.

XfireXO Toolbar is most popular in the United States with 46.64% of installations residing in this country.

XfireXO Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, XfireXO Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About XfireXO Toolbar?

The XfireXO Toolbar, developed by Conduit, is a Community Toolbar specifically designed to seamlessly integrate with Internet Explorer, Chrome, and Firefox web browsers. This toolbar aims to provide users with personalized services and targeted advertisements based on their web browsing activities. Additionally, it offers a customizable search box and other standard features typically found in similar toolbars. Please note that during installation, the toolbar may prompt the user to change their browser's home page and search provider settings, with these options being checked by default. Furthermore, the toolbar has the capability to automatically download and install updates without prior notification to the user. It is important to disclose that the XfireXO Toolbar operates as a PPI (pay per install) platform, allowing the publisher to receive compensation from Conduit for each installation and for every month the toolbar remains active within a user's web browser, with the amount varying based on the user's country of installation.

Multiple virus scanners have detected malware in XfireXO Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbXfir.dll (MD5: 469b44ae63d2ae02b512ec92c64d4a06) has been flagged by 13 scanners:
Scanner Software Result
Bkav FE HW32.Stranact
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Dr.Web Adware.Conduit.299
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
IKARUS anti.virus PUA.ClientConnect
tbXfi2.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 11 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~A
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
AVware Conduit (fs)
tbXfi0.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 13 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
IKARUS anti.virus PUA.ClientConnect
prxtbXfi2.dll (MD5: 59f4aa1a1ecf4c023f44872a9aae3b76) has been flagged by 6 scanners:
Scanner Software Result
Dr.Web Adware.Conduit.16
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • XfireXOToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • XfireXOToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://xfirexo.ourtoolbar.com
Support:
https://xfirexo.ourtoolbar.com/help
Installation path:
C:\Program Files\xfirexo
Uninstaller:
C:\Program Files\XfireXO\uninstall.exe
Size:
4.00 MB
Language:
English

XfireXO Toolbar Executable Details

Primary executable:
tbXfir.dll
Name:
XfireXO Toolbar
Path:
C:\Program Files\xfirexo\tbXfir.dll
MD5:
469b44ae63d2ae02b512ec92c64d4a06
SHA-1:
SHA-256:
Files installed by XfireXO Toolbar
File Type Filename MD5
DLL
e94cd032c188546fd629b194364f19c4
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
f7057821b040a7d169711ce27c55012a
DLL
9a302f14b18a9fb9b351ad7048cc15b5
DLL
bbccf6b24155d931fd339c6c4210710c
DLL
8f7928532b88f3c8ae75d7af16d13bdd
EXE
3167b101e3345524acebba29772a858e
EXE
a320df2b47cfcaf98d06eb59cd72084c
DLL
tbXfi1.dll
Malware
d9a0ce26ada5bd15b1b03a752ddf14a6