Windows Expansion System is capable to infect targeted computer unnoticeably for the user and he won’t be even asked any permission. This scam tries to convince its victims that it’s a perfectly normal anti-malware tool which needs to be followed. However, it’s highly recommended to ignore WindowsExpansionSystem alerts that seek to steal the money by offering to pay its licensed version. Remove Windows Expansion System which is typical spyware tool hailing from the same falimy as Windows Power Expansion and trying to increase income for scammers.

Windows Expansion System is marketed as anti-spyware removal tool and starts pretending to be such as soon as it gets inside the PC. It manages to apply Trojans for additional modifications, like changing of some registry entries or dropping some fake files that later will be detected as malware. Having been admitted to belong to a category of rogue anti-spyware, Windows Expansion System starts displaying only fake alerts, pop-ups and warnings giving the same misleading information, like:

Microsoft Security Essentials Alert
Potential Threat Details
Microsoft Security Essentials detected potential threats that might compromise your private or damage your computer. Your access to these items may be suspended until you take an action. Click ‘show details’ to learn more.

System Security Warning
Attempt to modify register key entries is detected. Register entries analysis is recommended.

System component corrupted!
System reboot error has occurred due to lsass.exe system process failure.
This may be caused by severe malware infections.
Automatic restore of lsass.exe backup copy completed.
The correct system performance can not be resumed without eliminating the cause of lsass.exe corruption.

Warning!
Name: firefox.exe
Name: c:\program files\firefox\firefox.exe
Application that seems to be a key-logger is detected. System information security is at risk. It is recommended to enable the security mode and run total System scanning.