Main Menu
Contact Us

HelpExpress Adware Information

Name: HelpExpress
Category: Adware
Advice: Remove
Risk: Elevated Risk Elevated threats are usually threats that fall into the range of adware in which data about a user's habits are tracked and sent back to a server for analysis without your consent or knowledge.
Description: HelpExpress is an adware program that downloads and displays advertisements.

HelpExpress appears to be advertising spyware
that displays sponsored ads.

HelpExpress has been bundled with a large number of software products. The following are a few or Alset's partners: Best Buy,, Micro Warehouse, Hewlett-Packard, Earthlink, Cosmi, Directv, Topics Entertainment.

Apparently this is part of a software called "Aveo Attune," which is an
automated helpdesk software. It downloads and runs a file called
hxiul.exe. Hxiul.exe sets up an uninstall entry in the control panel
("add/remove programs") which can be used to remove HXDL.EXE. This is
unconfirmed since there are reports that it will reinstall itself upon
removal, a signature indication of a trojan.............

The Attune program containing the HXDL.EXE is apparently bundled with
CorelDraw software. It's been confirmed that the file has been listed
on Computer Associates most recent listing of virii and trojans, under
the title "WIN32/HXDL AL." View the listing HERE

Aveo is affiliated with Incova Group Inc. and another company called
Alset Inc. Their phones have been reported to be disconnected, and Aveo
websites currently show nothing but "under construction" messages.

Signatures: process: attunedl.exe: MD5 Hash: b11dfcfecc06b474f35... process: attunel.exe: MD5 Hash: 04a0aedb7f7aec7701f... process: removemm.exe: MD5 Hash: 0c7f095efa173f5d57f... process: hxdlalhx.exe: MD5 Hash: ... process: helpexpress.exe: MD5 Hash: adfe8d3885f36597ecd... process: helpexp.exe: MD5 Hash: 8ba5a031a7d8244ef26... process: hxdl.exe: MD5 Hash: 51fa84c5bd8029e19f4... process: hxiul.exe: MD5 Hash: 9c8fcdca98ee450ef96..
Type: Adware - Adware is generally software that displays advertisements. Some advertisers may covertly install adware on your system and generate a stream of unsolicited advertisements that can clutter your desktop and affect your productivity. The advertisements may also contain pornographic or other material that you might find inappropriate. The extra processing required to track you or to display advertisements can tax your computer and hurt your system performance.

Top Adware Visited Pages:
Adw.WinSoftware.WinAntiSpyware - 2703 visits
ClickSpring.PuritySCAN.Downloader - 643 visits
DMCast - Alias: Desktop Media Cast - 229 visits
Claria.GAIN - Alias: Gator, Gator Advertising Information Network, Claria, GAIN, GAIN Publishing, Gator eWallet - 195 visits
RBot.schvost - Alias: WORM_RBOT.CAU - 161 visits
WhenU.SaveNow - Alias: SAVE!, SaveNow, WhenU.SaveNow, WhenUSaveNow - 130 visits
Adw.FreePcScan.SpywareSlayer - 120 visits
ABetterInternet.Transponder.Ceres - Alias: Ceres - 117 visits
HelpExpress - Alias: Adware.HelpExpress - 113 visits
Seekmo Search Assistant - 110 visits

Random Adware Pages:
eXact.NaviSearch - Alias: NaviSearch, NaviSearch 404
WindUpdates.MediaGateway - Alias: Media Gateway
WindUpdates.MediaAccess - Alias: Media Access
RXToolbar - Alias: RX Bar, RX Bar Personal Internet Assistant, SearchEngineBar
Hithopper Toolbar
Claria - Alias: Gator, GAIN, GIAN Publishing


2006-2008 - Privacy Policy