84,488,480 programs installed

Should I remove ExpressFiles?

What percent of users and experts removed it?
61% remove it39% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #3,173
United States Rank #5,952
Reach 0.1813%
Lifespan of installation (until removal)
< 19.14 days
564.65 days >
Average installed length: 296.68 days


571.3 3.41%
10.14.41 0.11%
10.14.40 0.11%
10.14.39 0.48%
10.14.38 0.08%
10.14.37 0.25%
10.14.36 0.17%
10.14.35 0.25%
10.14.34 0.20%
10.14.33 0.20%
10.14.32 0.20%
10.14.31 0.14%
10.14.30 0.11%
10.14.29 0.17%
10.14.28 0.48%
10.14.27 0.25%
10.14.26 0.14%
10.14.25 0.39%
10.14.24 0.34%
10.14.23 0.20%
10.14.22 0.25%
10.14.21 0.31%
10.14.20 0.22%
10.14.19 0.20%
10.14.18 0.42%
10.14.17 0.22%
2.0.4 6.24%
2.0.1 4.09% 9.40%
2.0.0 2.27%
1.15.28 0.06%
1.15.27 0.03%
1.15.26 0.03%
1.15.25 0.06%
1.15.24 0.06%
1.15.22 0.03%
1.15.19 0.03%
1.15.18 0.03%
1.15.17 0.06%
1.15.16 0.03%
1.15.15 0.03%
1.15.14 0.03%
1.15.13 0.06%
1.15.10 0.03%
1.15.09 0.06%
1.15.07 0.03%
1.15.06 0.08%
1.15.04 0.03%
1.15.02 0.03%
1.15.01 0.06%
1.14.52 0.06%
98 versions

Other programs by Express Solutions


What is ExpressFiles?  (from Express Solutions)

No settings, no complications, unimaginable speed, with minimum effort and maximum simplicity! User-friendly interface anyone can manage. Built-in instant search tool with an amazingly intelligent algorithm! It's absolutely free. And, we are con- stantly working to make our product better. Ask why? It's simple! We like...  Read more


ExpressFiles is a program developed by Express Solutions. The most used version is, with over 77% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The programs's main executable is ExpressFiles.exe and has been seen to consume an average CPU of less than one percent, and utilizes about 20.48 MB of memory. It also adds an icon to the Windows notifications area in order to provide access to the program. A vast majority of those who have this installed end up removing it just after a couple weeks. The software installer includes 8 files and is usually about 9.09 MB (9,531,113 bytes). EFupdater.exe is the automatic update component of the software designed to download and apply new updates should new versions be released. In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 23% of users of ExpressFiles come from the United States, it is also popular in Italy and India.
  • Possible malware installed by this program
  • Starts automatically
  • Connects to a server over the Internet
  • Bundles additional prorgams in setup
Warning, multiple anti-virus scanners have detected possible malware in ExpressFiles.
ExpressFiles.exe (76f6e8033be7099c2d26b130f336bc7d) has been flagged by the following 4 scanners:
Anti-Virus softwareVersionDetection
avast! 2014.9-131026 Win32:Expressfiles-C [PUP]
ESET-NOD32 7.8876 a variant of Win32/ExpressFiles.A
TrendMicro-HouseCall 7.2.299 TROJ_GEN.F47V0701
VIPRE Antivirus 22094 ExpressFiles Installer (fs)
uninstall.exe (9f1f067619374ccd9197f8361a1fb438) has been flagged by the following 15 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2013.12.23.00 PUP/Win32.ExpressFiles
Avira AntiVir Adware/ExpressFiles.DA
avast! 8.0.1489.320 Win32:Downloader-TSH [PUP]
AVG MalSign.Faglaro Enterprises Limited
Comodo Security 17483 ApplicUnwnt
ESET-NOD32 9190 a variant of Win32/ExpressFiles.B
G Data 22 Win32.Application.ExpressFiles.B
K7 AntiVirus 9.174.10588 Unwanted-Program ( 00454f261 )
K7GW 9.174.10588 Unwanted-Program ( 00454f261 )
Malwarebytes 1.75.0001 PUP.Optional.ExpressFiles.A
McAfee Artemis!9F1F06761937
McAfee-GW-Edition 2013 Artemis!9F1F06761937
Sophos 4.96.0 Express Files
Vba32 AntiVirus TrojanDownloader.Genome
VIPRE Antivirus 24644 ExpressFiles Installer (fs)
EFUpdater.exe (617d02fa45678fbe403e85838b93fbda) has been flagged by the following 11 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2013.12.17.00 PUP/Win32.ExpressFiles
avast! 8.0.1489.320 Win32:Expressfiles-B [PUP]
AVG MalSign.Faglaro Enterprises Limited
Baidu-International Trojan.Win32.YourFileDownloader.B
Dr.Web Tool.DownLoader.52
ESET-NOD32 9180 a variant of Win32/YourFileDownloader.B
McAfee Artemis!617D02FA4567
McAfee-GW-Edition 2013 Artemis!617D02FA4567
Symantec 20131.1.5.61 WS.Reputation.1
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V1216
VIPRE Antivirus 24448 ExpressFiles Installer (fs)
expressdl.exe (59776ed29a9bf70aa43d381a1a09dd4c) has been flagged by the following 8 scanners:
Anti-Virus softwareSoftware versionDetection
avast! 8.0.1489.320 Win32:Downloader-TSH [PUP]
AVG MalSign.Faglaro Enterprises Limited
G Data 22 Win32.Application.ExpressFiles.B
McAfee 5.600.0.1067 Artemis!59776ED29A9B
McAfee-GW-Edition 2013 Artemis!59776ED29A9B
Rising Antivirus PE:Malware.XPACK/RDM!5.1
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.F47V1125
VIPRE Antivirus 24958 ExpressFiles Installer (fs)
       View all 38 all detections
ExpressFiles has been seen bundling various 3rd party software during the installation process. Make sure to check for and remove unused programs.

Program detailsProgram details

Displayed publisher: http://www.express-files.com/
URL: www.express-files.com
Help link: www.express-files.com/help
Installation folder: C:\Program Files\ExpressFiles
Uninstaller: "C:\Program Files\ExpressFiles\uninstall.exe"
Estimated size: 9.09 MB

Program filesFiles installed by ExpressFiles

Program executable:ExpressFiles.exe (Malware detected)
Name:ExpressFiles Application
Signed by:Faglaro Enterprises Limited
Path:C:\Program Files\ExpressFiles\ExpressFiles.exe
Taskbar:Displays an icon in the notification area
(From the publisher) “It's all-in-one product. Easy to use instant built-in search tool usefully sorts your results and download manager is so handy. With our prod- uct you can find any content of any subject that interests you. And it's so...”
Additional files:
  • (Malware detected) expressfiles.exe (by http://www.express-files.com/) - ExpressFiles Application
  • uninstall.exe (by http://www.express-files.com/)
  • (Malware detected) EFupdater.exe - Express Files Updater
  • (Malware detected) expressdl.exe - ExpressDL Application
  • htmlayout.dll (by Terra Informatica Software,, British Columbia, Canada) - HTMLayout (HTMLayout - embeddable HTML rendering and layout component)

Program behaviorsBehaviors exhibited

2 Scheduled Tasks
  • ExpressFiles.exe is scheduled as a task with the class '{EDAED22B-F07A-4682-8EE6-CDFF7B5AE11A}' (runs on registration).
  • EFUpdater.exe is scheduled as a task with the class '{A1C41E9F-5CF6-4ADE-8409-2E6687ABA69A}' (runs on registration).
Scheduled Task (Boot/Login)
  • EFUpdater.exe is automatically launched at startup through a scheduled task named Express Files Updater.
Startup File (All Users Run)
  • ExpressFiles.exe is loaded in the all users (HKLM) registry as a startup file name 'ExpressFiles' which loads as "C:\Program Files\ExpressFiles\ExpressFiles.exe" -tray.
3 Windows Firewall Allowed Programs
  • ExpressFiles.exe is added as a firewall exception for 'C:\Programfiler\ExpressFiles\ExpressFiles.exe'.
  • expressdl.exe is added as a firewall exception for 'C:\Programfiler\ExpressFiles\ExpressDL.exe'.
  • EFUpdater.exe is added as a firewall exception for 'C:\Program Files\ExpressFiles\EFUpdater.exe'.
Network connections
  • expressdl.exe connects to (port 26399).
  • expressdl.exe connects to ip5455817d.adsl-surfen.hetnet.nl ( port 10645).
  • expressdl.exe connects to cpc9-salf5-2-0-cust71.10-2.cable.virginmedia.com ( port 37249).
  • expressdl.exe connects to host-92-27-248-188.as13285.net ( port 50538).
  • expressdl.exe connects to brezhnev.acc.umu.se ( port 7116).
  • expressdl.exe connects to 203-113-15-213.totisp.net ( port 16883).
  • expressdl.exe connects to 180-196-155-173.aichiwest1.commufa.jp ( port 22124).
  • expressdl.exe connects to b0fdb0b7.bb.sky.com ( port 49227).
  • ExpressFiles.exe connects to torrentz.eu ( port 80).
  • ExpressFiles.exe connects to ip-94-242-253-64.as5577.net ( port 80).

Program resource utilizationResource utilization averages

Memory:20.48 MB
21.09 MB average
Total CPU:0.0015820250%
0.031193% average
Kernel CPU:0.00123359%
0.016088% average
User CPU:0.00034844%
0.015104% average
CPU cycles/sec:59,063,699
8,062,084 average
70 average
I/O reads/min:20.94 MB
435.61 KB average
I/O writes/min:1.36 MB
105.02 KB average
Memory:9.16 MB
Total CPU:0.0004552964%
Kernel CPU:0.00021150%
User CPU:0.00024380%
CPU cycles/sec:68,789
I/O reads/min:19.12 KB
Memory:25.04 MB
Total CPU:0.0138051632%
Kernel CPU:0.00542387%
User CPU:0.00838130%
CPU cycles/sec:15,837,954
I/O reads/min:1.06 MB
I/O writes/min:991 KB

How do I remove ExpressFiles?

You can uninstall ExpressFiles from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program ExpressFiles, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove ExpressFiles.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

Win 7 (SP1) 56%
Win 8.1 0%
Automatically starts? Yes
(Found in the run registry)
Uninstall it 61%
Keep it 39%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 67.50%
Windows 10 19.38%
Windows XP 8.64%
Windows Vista 4.48%
Which OS releases does it run on?
Windows 7 Ultimate 27.33%
Windows 7 Home Premium 25.25%
Windows 7 Professional 9.57%
Microsoft Windows XP 8.61%
Windows 8 Pro 3.80%
Windows 8.1 3.32%

Distribution by countryGeography

22.74% of installs come from the United States
Which countries install it?
  United States 22.74%
  Italy 4.95%
  India 4.93%
  Germany 2.92%
  Brazil 2.75%
  MA 2.39%
  Israel 2.34%
  Canada 2.23%
  Netherlands 2.23%
  DZ 2.17%
  France 2.15%
  United Kingdom 2.09%
  Turkey 1.98%
  Iran 1.95%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 26.70%
Dell 21.99%
Acer 19.38%
ASUS 7.75%
Toshiba 6.53%
Samsung 4.92%
Lenovo 2.96%
Intel 2.26%
American Megatrends 1.22%
Sahara 0.74%
Common models
HP Pavilion dv6 Notebook ... 7.44%
HP Pavilion g6 Notebook P... 6.76%
Dell Inspiron N5110 3.95%
HP G62 Notebook PC 2.93%
HP Pavilion dv7 Notebook ... 2.71%


user comment
No one has commented yet. Help others learn more about this software, share your comments.