Main Menu
Contact Us

HelpExpress Adware Information

Name: HelpExpress
Category: Adware
Advice: Remove
Risk: Elevated Risk Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge.
Description: HelpExpress is an adware program that downloads and displays advertisements.

HelpExpress appears to be advertising spyware
that displays sponsored ads.

HelpExpress has been bundled with a large number of software products. The following are a few or Alset's partners: Best Buy,, Micro Warehouse, Hewlett-Packard, Earthlink, Cosmi, Directv, Topics Entertainment.

Apparently this is part of a software called "Aveo Attune," which is an
automated helpdesk software. It downloads and runs a file called
hxiul.exe. Hxiul.exe sets up an uninstall entry in the control panel
("add/remove programs") which can be used to remove HXDL.EXE. This is
unconfirmed since there are reports that it will reinstall itself upon
removal, a signature indication of a trojan.............

The Attune program containing the HXDL.EXE is apparently bundled with
CorelDraw software. It's been confirmed that the file has been listed
on Computer Associates most recent listing of virii and trojans, under
the title "WIN32/HXDL AL." View the listing HERE

Aveo is affiliated with Incova Group Inc. and another company called
Alset Inc. Their phones have been reported to be disconnected, and Aveo
websites currently show nothing but "under construction" messages.

Signatures: process: attunedl.exe: MD5 Hash: b11dfcfecc06b474f35... process: attunel.exe: MD5 Hash: 04a0aedb7f7aec7701f... process: removemm.exe: MD5 Hash: 0c7f095efa173f5d57f... process: hxdlalhx.exe: MD5 Hash: ... process: helpexpress.exe: MD5 Hash: adfe8d3885f36597ecd... process: helpexp.exe: MD5 Hash: 8ba5a031a7d8244ef26... process: hxdl.exe: MD5 Hash: 51fa84c5bd8029e19f4... process: hxiul.exe: MD5 Hash: 9c8fcdca98ee450ef96..
Type: Adware - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance.

Top Adware Visited Pages:
Adw.WinSoftware.WinAntiSpyware - 2645 visits
ClickSpring.PuritySCAN.Downloader - 640 visits
DMCast - Alias: Desktop Media Cast - 228 visits
Claria.GAIN - Alias: Gator, Gator Advertising Information Network, Claria, GAIN, GAIN Publishing, Gator eWallet - 192 visits
RBot.schvost - Alias: WORM_RBOT.CAU - 160 visits
WhenU.SaveNow - Alias: SAVE!, SaveNow, WhenU.SaveNow, WhenUSaveNow - 128 visits
Adw.FreePcScan.SpywareSlayer - 119 visits
ABetterInternet.Transponder.Ceres - Alias: Ceres - 116 visits
HelpExpress - Alias: Adware.HelpExpress - 112 visits
Seekmo Search Assistant - 109 visits

Random Adware Pages:
Zipclix Toolbar - Alias: System Soap
Crontel Dialler
BeSys - Alias: MyIM
eBates Moe MoneyMaker - Alias: Ebates Moe Money Maker, MoneyMaker
Lie Spyware


2006-2008 - Privacy Policy