1. Symantec/
  2. Security Response/
  3. Adware.HelpExpress


February 13, 2007 11:35:53 AM
Alset, Inc.
Risk Impact:
File Names:
helpexpress.exe HXDL.exe HXIUL.exe HelpExp.exe hxinstall.exe
Systems Affected:
Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP

When Adware.HelpExpress is executed, the installer does the following:
  1. Installs several files into the folder:

    C:\Program Files\Alset Network\HelpExpress\<Login Username>

    Note: <Login Username> is a variable. The installer uses the name of the user who is logged onto the system as the folder name.

  2. Creates the keys:
    • HKEY_CURRENT_USER\Software\Alset
    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\HelpExpress

  3. Adds the value:

    "HELPEXP.EXE" = "C:\Program Files\Alset Network\HelpExpress\<Login Username>\Client\HelpExp.exe"

    to the registry key:


  4. Displays the following window:

  5. Downloads and displays advertisements.

Summary| Technical Details| Removal

Search Threats

Search by name
Example: W32.Beagle.AG@mm
STAR Antimalware Protection Technologies
2016 Internet Security Threat Report, Volume 21
  • Twitter
  • Facebook
  • LinkedIn
  • Google+
  • YouTube