Severity scale:  

Windows Expert Console. How to remove? (Uninstall guide)

removal by Gabriel E. Hall - -   Also known as WindowsExpertConsole | Type: Rogue Antispyware

Windows Expert Console is a dangerous application, which belongs to a huge group of viruses known as FakeVimes. This group is already known for Windows Protection Maintenance, Windows Safety Series, Windows Anti-Malware Patch and other rogues. As soon as one of them infiltrates computer, it starts displaying continuous pop-up advertisements that all report about hundreds of different viruses. Of course, these viruses are invented and are displayed for the only reason – making users believe that their machines are infected and that they need to purchase a licensed version for fixing them. In order to check your computer and see what in reality your computer is infected with, we recommend using reputable anti-spyware, not Windows Expert Console. This program has no virus data base and it must be eliminated as soon as possible.


Windows Expert Console is mostly distributed by Trojan horse, which can easily infiltrate computer via security vulnerabilities found. Once this virus enters itthe system, it makes several modifications there what helps it to begin its annoying campaign every time user reboots his/hers machine. As a result, Windows Expert Console gets ability to display its fake alerts and starts reporting about nonexistent viruses. Some of its alerts will look like that:

Torrent Alert
Please use secure encrypted protocol for torrent links.Torrent link detected!Receiving this notification means that you have violated:- the copyright laws. Using Torrent for downloading movies and licensed software shall be prosecuted and you may be sued for cybercrime and break of law under the SOPA legislation.

Attempt to run a potentially dangerous script detected.Full system scan is highly recommended.

System data security is at risk!To prevent potential PC errors, run a full system scan.

Please, avoid this fake anti-spyware because it seeks to steal your money. If you see alerts that belong to this program, follow a guide below and remove Windows Expert Console from the system.

HOW TO REMOVE Windows Expert Console?

We hope that you didn't purchase Windows Expert Console because in this case you should immediately contact your bank and dispute these charges. Additionally, scan the system with updated anti-spyware. For that we recommend choosing Reimage, Malwarebytes Malwarebytes, Plumbytes Anti-MalwareNorton Internet Security or other reputable anti-malware, which will automatically detect malicious files for you.

The latest parasite names used by FakeVimes:
[newest id=”fakevimes”]

We might be affiliated with any product we recommend on the site. Full disclosure in our Agreement of Use. By Downloading any provided Anti-spyware software to remove Windows Expert Console you agree to our privacy policy and agreement of use.
do it now!
Reimage (remover) Happiness
Reimage (remover) Happiness
Compatible with Microsoft Windows Compatible with OS X
What to do if failed?
If you failed to remove infection using Reimage, submit a question to our support team and provide as much details as possible.
Reimage is recommended to uninstall Windows Expert Console. Free scanner allows you to check whether your PC is infected or not. If you need to remove malware, you have to purchase the licensed version of Reimage malware removal tool.

Note: Manual assistance required means that one or all of removers were unable to remove parasite without some manual intervention, please read manual removal instructions below.

More information about this program can be found in Reimage review.
Press mentions on Reimage
Alternate Software
Plumbytes Anti-Malware
We have tested Plumbytes Anti-Malware's efficiency in removing Windows Expert Console (2013-12-02)
We have tested Malwarebytes's efficiency in removing Windows Expert Console (2013-12-02)
Hitman Pro
We have tested Hitman Pro's efficiency in removing Windows Expert Console (2013-12-02)
We have tested Malwarebytes's efficiency in removing Windows Expert Console (2013-12-02)
Windows Expert Console snapshot
Windows Expert Console snapshot

Windows Expert Console manual removal:

Kill processes:


Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionRun "GuardSoftware" = "%AppData%guard-toiy.exe"

HKEY_CURRENT_USERSoftwareMicrosoftWindows NTCurrentVersionWinlogon "Shell"="C:\Users\User\AppData\Roaming\guard-fvtb.exe"


HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAssociations "LowRiskFileTypes"=".zip;.rar;.nfo;.txt;.exe;.bat;.com;.cmd;.reg;.msi;.htm;.html;.gif;.bmp;.jpg;.avi;.mpg;.mpeg;.mov;.mp3;.m3u;.wav;"

HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesAttachments "SaveZoneInformation"=1

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsseces.exe "Debugger"="svchost.exe"

HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmsmpeng.exe "Debugger"="svchost.exe"

Delete files:


About the author

Gabriel E. Hall
Gabriel E. Hall - Passionate web researcher

If this free removal guide helped you and you are satisfied with our service, please consider making a donation to keep this service alive. Even a smallest amount will be appreciated.

Contact Gabriel E. Hall
About the company Esolutions

Removal guides in other languages