1. /
  2. Security Response/
  3. Adware.HelpExpress

Adware.HelpExpress

Updated:
February 13, 2007 11:35:53 AM
Type:
Adware
Publisher:
Alset, Inc.
Risk Impact:
Low
File Names:
helpexpress.exe HXDL.exe HXIUL.exe HelpExp.exe hxinstall.exe
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.HelpExpress is executed, the installer does the following:
  1. Installs several files into the folder:

    C:\Program Files\Alset Network\HelpExpress\<Login Username>


    Note: <Login Username> is a variable. The installer uses the name of the user who is logged onto the system as the folder name.

  2. Creates the keys:
    • HKEY_CURRENT_USER\Software\Alset
    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\HelpExpress

  3. Adds the value:

    "HELPEXP.EXE" = "C:\Program Files\Alset Network\HelpExpress\<Login Username>\Client\HelpExp.exe"

    to the registry key:

    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run

  4. Displays the following window:




  5. Downloads and displays advertisements.


Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
Internet Security Threat Report