express-files Toolbar

express-files Toolbar

Known Toolbar

by express-files

What is express-files Toolbar?

express-files Toolbar is software application developed by express-files. It is most commonly found on computers running Windows 7 with nearly 78.28% of installations running this operating system. express-files Toolbar's installer is typically 4.00 MB in size and installs around 19 files. The most common release is 6.10.3.27 with 45.58% of all installations currently using this version.

express-files Toolbar is most popular in the United States with 20.59% of installations residing in this country.

express-files Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, express-files Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About express-files Toolbar?

The software installs OurToolbar, a browser toolbar compatible with Internet Explorer, Chrome, and Firefox. This toolbar is designed to enhance the user's browsing experience by offering personalized services and ads based on their web activity. Additionally, it can modify the browser's home page, search box, and auto-search settings, as well as perform redirects for "page not found" errors and daily auto-updates. It also integrates with the user's Facebook profile, with the user's permission, granting access to their profile feed and friends list for an enhanced browsing experience.

Multiple virus scanners have detected malware in express-files Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
prxtbexpr.dll (MD5: 9117027aea464e41c60b87b9826e8447) has been flagged by 7 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
IKARUS anti.virus PUA.ClientConnect
ldrtbexpr.dll (MD5: 76b3946090c94bb38dbbca54ac8ff9f7) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A
express-filesToolbarHelper.exe (MD5: da11d78d765e4b8fa4cfa5a37e8a94ff) has been flagged by 6 scanners:
Scanner Software Result
Baidu-International Adware.Win32.Conduit.45
ESET-NOD32 Win32/Toolbar.Conduit.Q
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbexpr.dll (MD5: 73406fa9287b36ca4163797c73a2cd04) has been flagged by 13 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.Agent.azm
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.M
Cyren W32/Conduit.TTAU-0102
F-Prot W32/Conduit.A
G Data Win32.Application.Conduit.F
K7 AntiVirus Trojan ( 004b219d1 )
K7GW Trojan ( 004b219d1 )
Kaspersky not-a-virus:WebToolbar.Win32.Agent.azm
Panda Antivirus PUP/Conduit.A
IKARUS anti.virus PUA.ClientConnect

Software Behaviors

Firewall:
  • express-filesToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • express-filesToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://expressfiles.ourtoolbar.com
Support:
https://expressfiles.ourtoolbar.com/help
Installation path:
C:\Program Files\express-files
Uninstaller:
C:\Program Files\express-files\uninstall.exe toolbar
Size:
4.00 MB
Language:
English

express-files Toolbar Executable Details

Primary executable:
tbexpr.dll
Name:
express-files Toolbar
Path:
C:\Program Files\express-files\tbexpr.dll
MD5:
73406fa9287b36ca4163797c73a2cd04
SHA-1:
SHA-256:
Files installed by express-files Toolbar
File Type Filename MD5
DLL
b134ef24a73e6139a0dbe65d9e34f552
DLL
5ccb53ed1720a908675ff400a0102016
DLL
9117027aea464e41c60b87b9826e8447
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
9a302f14b18a9fb9b351ad7048cc15b5
DLL
8f7928532b88f3c8ae75d7af16d13bdd
EXE
da11d78d765e4b8fa4cfa5a37e8a94ff
DLL
tbexpr.dll
Malware
73406fa9287b36ca4163797c73a2cd04
EXE
662ada3e6097efb39fcc96f1aeb23ff4