Express Files

Express Files Description

Express Files is a potentially unwanted toolbar that may be spread to PCs via Conduit and install a Conduit OurToolbar in Web browsers such as Internet Explorer, Google Chrome and Mozilla Firefox. Express Files may gather and store information about a PC user's Web browsing and transmit this information to OurToolbar so they can suggest services or display relevant pop-up or banner advertisements via the toolbar. Express Files may change the default start page, search engine or a new tab window with Conduit.com. Express Files may also replace the browser's search box and auto-search settings. Express Files may redirect computer users to 'page not found' error websites. Express Files may carry out daily auto-updates. Express Files may integrate with the PC user's Facebook profile, which may require the computer user to approve to do so. In doing so, Conduit may have access to the computer user's profile feed and friends list.

Technical Information

Registry Details

Express Files creates the following registry entry or registry entries:
RegistryKey
HKEY_LOCAL_MACHINE\SOFTWARE\Conduit\AppPaths\ExpressFiles.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%PROGRAMFILES%\ExpressFiles\ExpressDL.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%PROGRAMFILES%\ExpressFile
HKEY_USERS\.DEFAULT\Software\ExpressFiles
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%PROGRAMFILES%\ExpressFiles\ExpressDL.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%PROGRAMFILES%\ExpressFiles\ExpressFiles.exe
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%PROGRAMFILES%\ExpressFiles\ExpressFiles.exe
HKEY_CURRENT_USER\Software\ExpressFiles
HKEY_LOCAL_MACHINE\SOFTWARE\ExpressFiles
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\%PROGRAMFILES%\ExpressFiles\ExpressFiles.exe
s\ExpressDL.exe

More Details on Express Files

The following URL's were found:
Tip: We recommend blocking the domain names as well as the IP addresses associated with them.
  • Expressfiles.OurToolbar.com

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.

By ESGI Advisor in Malicious Toolbars