Share via

Express Files Malware

Anonymous
2013-04-29T23:12:09+00:00

A relative downloaded Express Files on my computer and my computer started acting wierd.  I found out that Express Files is a malware that hides in your computer in the root system.  I was told that it can get into your personal files on your computer.  Does anyone know how to get rid of it completely?  Thanks.

Windows for home | Previous Windows versions | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

  1. Anonymous
    2013-06-23T04:51:14+00:00

    Yesterday my screen started flickering and my anti-virus program found a virus which took a lot of getting rid of. 

    But the flickering continued.

    Then I saw that a new program had been installed. I didn't intentionally install it.

    The program was Express Files.

    I closed it via the tray and then stopped the running process.

    I used Revo to  uninstall it.

    After the self uninstall Revo pointed to around a dozen registry entries that still needed to be removed, which I did.

    After that the flickering stopped!

    Michael

    2 people found this answer helpful.
    0 comments

7 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2013-11-06T13:44:41+00:00

    Dear Stephen,

    I had to make an account just to reply to this.

    1.  The ExpressFiles "FAQ" does not work, and it actually is indeed a program that causes your internet browser to be hijacked and turned into a huge fan of QOne8.com ( a taiwanese search engine modelled after google ) overnight i.e it permenantly sets your search functions, home page and subsequent pages visited to be linked back to QOne8.
    2.  Even if you do uninstall the program, clear out some of their fiddlings in your shortcuts and reset your defaults on the browser, it will just reapply them when your computer boots up once more.

    I did not utilize the method given, but a program called "adwcleaner" that scanned and removed it. ( I am no tech-geek, sadly, unlike the stereotyping of my race )

    1.  However, I can attest to the fact that ExpressFiles does result in the installing of the QOne8 browser hijacker (read more here: http://www.pcinfected.com/start-qone8-removal/ ) once it is run.

    Please make sure to look into a problem properly. As a Microsoft Moderator, clueless people like me would usually come seek your forums for help, and you pretty much just told the original poster that "Their FAQ advises how to remove the program".

    Well...it says, and I quote,

    "It's very simple, please follow next steps:

    Start -> All Programs -> Express Files -> Uninstall"

    Cheers,

    B

    0 comments
  2. Anonymous
    2013-04-30T02:31:54+00:00

    Yes. I had a hard time uninstalling it and it showed up in different places after uninstalling.  I was told that it goes to the root and hides and can get into your personal files!

    Whoever told you that was wrong or it wasn't the Express-files available from that link. Their FAQ: http://www.express-files.com/faq advises how to remove the program. What you may have seen remaining would be the data folders used by the program. If someone with access to your PC was able to install that program, I'd be concerned what else they monkeyed with.

    -steve

    0 comments
  3. Anonymous
    2013-04-30T01:49:24+00:00

    Yes. I had a hard time uninstalling it and it showed up in different places after uninstalling.  I was told that it goes to the root and hides and can get into your personal files!

    0 comments
  4. Anonymous
    2013-04-30T00:35:54+00:00

    Are you referring to this? http://www.express-files.com/download

    Uninstall it from Control Panel - programs.

    It isn't malware.

    -steve

    0 comments