Content

Adware-HelpExpress

Type
Program
SubType
Adware
Discovery Date
08/09/2003
Minimum DAT
4284 (08/11/2003)
Updated DAT
4620 (11/04/2005)
Minimum Engine
5.1.00
Description Added
10/29/2003
Description Modified
10/29/2003 7:56 AM (PT)

Tab Navigation

Characteristics

This is not a virus nor a trojan. It is a direct-marketing adware application. This application generates extra pop-up ads while using Internet Explorer.

It runs in the background and displays sponsored ads at regular intervals when the user is performing specific tasks (it may help promote ink cartridges with pop-up ads when the printer is being used etc…)

It is designed to enhance every day computer use:

This kind of application generally comes bundled with commercial programs, which usually discloses the fact that it is ad-supported.  Users agree to have the Adware installed in the license agreement, although they may not realise at first that this file was packaged with the product they installed.

Installation

Adds a new registry key:

  • HKEY_CURRENT_USER\Software\Alset

The following value is also added:

  • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "HXDL.EXE"

New folders are created:

  • C:\Program Files\Alset
  • C:\Program Files\Alset\HelpExpress
  • C:\Program Files\Alset\HelpExpress\"UserName " where it drops itself as HXDL.EXE
  • C:\Program Files\Alset\HelpExpress\"UserName "\Download

N.B. The name of the subfolder UserName changes according to the name of the user logged on to the system.

The detection of this type of file is not automatically activated. Users who would like to check for the presence of this kind of files on their system should run the command line scanner with the /PROGRAM switch.
Please note that VirusScan 7 has also an option, which enables users to detect this kind of program automatically (see below).

Aliases

Aliases

    N/A