Home Malware Programs Potentially Unwanted Programs (PUPs) Expresso Helper Ads

Expresso Helper Ads

Posted: February 10, 2015

Threat Metric

Threat Level: 2/10
Infected PCs: 68
First Seen: February 10, 2015
Last Seen: May 20, 2020
OS(es) Affected: Windows

Computer users that are online shopping may start receiving various advertisements provided by an application called Expresso Helper. When this happens, it is because their computers have been affected by a Possibly Unwanted Program (PUP) that is linked to an advertisement-supported adware. If the computer users didn't install Expresso Helper voluntarily, they may be wondering where this application came from. Expresso Helper may have entered their machines bundled with a free product that they downloaded from the Web previously. Some computer users may find Expresso Helper's advertisements useful, but they need to know that the presence of this PUP may create some unwanted problems and distort their shopping experience. Also, Expresso Helper adware may decrease their machines performance, collect their browsing data and perform other unwelcomed actions.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{A6629839-6636-4998-95D6-2B0F52141861}Regexp file mask%PROGRAMFILES%\Expresso\Extension32.dll%PROGRAMFILES%\Expresso\Extension64.dll%PROGRAMFILES%\Expresso\ExtensionUpdaterService.exe%PROGRAMFILES%\Expresso\source.crx

Additional Information

The following directories were created:
%PROGRAMFILES%\Expresso\Firefox
Loading...