Windows Expert Series definitely not a program you would want to trust. Even if you think that this program will help you to remove viruses from your computer, it won't. This rogue program itself is almost a virus. In fact, all the files reported by Windows Expert Series are harmless, and some of them may be even important for your system. Like many other threats from FakeVimes family, this rogue antivirus tries to scare people into buying a full version of itself. That's why it shows so many infections on your pc. However, the only real threat for your PC is Windows Expert Series. Please remove it from your PC as soon as you detect it.
SYMPTOMS OF Windows Expert Series
Windows Expert Series infiltrates to your computer through trojan droppers. These trojans exploit security holes and lets rogue programs inside. Additionally, when Windows Expert Series is installed on the PC, it is set to start every time PC starts. Just after the installation, this rogue starts to scan your PC without your permission and shows a lot of alerts that your pc is being infected with lot's of malware and viruses. However, this scan is just a mimic of a real scan. It has no ability to scan the computer. You can ignore all of the alerts, because they all are fake.
Here are some alerts of Windows Expert Series:
Software without a digital signature detected.
Your system files are at risk. We strongly advise you to activate your protection.
Warning! Spambot detected!
Attention! A spambot sending viruses from your e-mail has been detected on your PC.
Nevertheless Windows Expert Series looks very real, in reality it should never be trusted. There are lot's of programs nowadays who uses fake alerts to scare users, and all of them shouldn't be trusted.
HOW TO REMOVE Windows Expert Series
It is very important to remove Windows Expert Series from your PC, because it can download more malware. Probably it's not listed on Add/Remove Programs, so we recommend running a full system scan with reputable anti-malware programs, like Plumbytes Anti-MalwareWebroot SecureAnywhere AntiVirus or Reimage
The latest parasite names used by FakeVimes:
Windows Expert Series manual removal:
Protector-[3 random characters].exe
Protector-[4 random characters].exe
Delete registry values:
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionInternet Settings "WarnOnHTTPSToHTTPRedirect" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegedit" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableRegistryTools" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesSystem "DisableTaskMgr" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "ID" = 0
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "net" = "2012-2-17_2"
HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionSettings "UID" = "rudbxijemb"
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avp32.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Options_avpcc.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution OptionsashDisp.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsdivx.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsmostat.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionsplatin.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionstapinstall.exe
HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionImage File Execution Optionszapsetup3001.exe
There are more similar entries, you should let spyware Doctor to identify them.
%AppData%Protector-[3 random characters].exe
%AppData%Protector-[4 random characters].exe