• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

How to remove Palladium Pro virus (Uninstall instructions)

Myantispyware team January 4, 2011    

Palladium Pro is a rogue (fake) antivirus program that is distributed through the use of Microsoft Security Essentials Alert trojan. This malware displays false information that states “Unknown Win32/Trojan was detected on your computer” and then will suggest you to perform a scan of your PC. It will reports that a program is infected with Trojan.Horse.Win32.PAV.64.a. Remember, the fake antivirus is unable to detect or rid your system of parasites nor will be protect you from legitimate future threats. You need to remove Palladium Pro from your computer as quickly as possible!

During installation, this malware configures itself to start automatically every time, when your computer loads. Once the installation is complete, it will reboot your computer. When Windows is loaded, you will be shown the Palladium Pro start screen instead of Windows desktop. But there is no any choice, only “Safe startup” button is active. After click to it, Palladium Pro starts scanning your computer and list a lot of infections to trick you into thinking your PC in danger. It will report that was able to clean the majority of infected files, but was not able to cure a few important Windows files, such as firefox.exe, taskmgr.exe, iexplore.exe and offer to purchase its full version to clean them. However, the scan results is a scam, because the program can`t detect any infections. So, you may easily ignore all that Palladium Pro will display you.

As you can see, Palladium Pro is a totally scam that hides your desktop, displays false information and detects fake infections. The program created with one purpose to trick you into purchasing so-called “full” version of the program. Most important do not pay for the bogus program! Please use the removal guide below in order to remove Palladium Pro and any associated malware from your computer for free.

Use the following instructions to remove Palladium Pro

Step 1. Stop Palladium Pro process

Once Windows loaded you will see a window similar to the one below.


ThinkPoint screen

Now press CTRL + ALT + DEL. It will open Windows Task manager. Select palladium.exe process as shown in the screen below.


Windows Task manager

Click “End Process” button. It will close Palladium Pro.

Now click File, New Task. Type explorer and press Enter. It will back the Start button and task bar.

Step 2. Remove Palladium Pro associated malware

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for Palladium Pro infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.


Malwarebytes Anti-malware, list of infected items

Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove Palladium Pro. MalwareBytes Anti-malware will now remove all of associated Palladium Pro files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.

Palladium Pro removal notes

Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.

Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.

Palladium Pro creates the following files and folders

%AppData%\palladium.exe
%AppData%\{RANDOM}.bat

Palladium Pro creates the following registry keys and values

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnonBadCertRecving” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPostRedirect” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | Shell = “%AppData%\palladium.exe”

Malware removal Rogue Anti Spyware

 Previous Post

How to remove Quick Defrag virus

Next Post 

How to remove HDD Fix virus

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

28 Comments

  1. Donna
    ― January 8, 2011 - 7:40 pm  Reply

    thank you thank you thank you so much

  2. connie
    ― January 15, 2011 - 7:07 pm  Reply

    thanks very much for the help

  3. MSP
    ― January 18, 2011 - 12:01 am  Reply

    Thanks for helping!

  4. Lamont
    ― January 18, 2011 - 9:36 am  Reply

    I followed your instructions for removal of Paradigm. It worked for a while but its back again. But now it onto allow me to sign onto the task master to access the stop or remove the program. What do I do now to remove it.

  5. Lamont
    ― January 18, 2011 - 9:37 am  Reply

    Palladium not paradigm

  6. John
    ― January 18, 2011 - 8:57 pm  Reply

    Thank you so much.
    Youve saved me alot of stress.

  7. Gilbert
    ― January 18, 2011 - 11:53 pm  Reply

    Thanks for the help I will use and recommend you

  8. Patrik (Myantispyware admin)
    ― January 19, 2011 - 10:09 am  Reply

    Lamont, probably your computer is infected with a trojan that reinstalls the rogue. Start a new topic in our Spyware removal forum. I will help you to clean your PC.

  9. Lolo
    ― January 20, 2011 - 5:29 am  Reply

    Oh my God! Thank you so so so much. I thought I lost my laptop definitely…..thank you again! Great instruction!

  10. Jane
    ― January 20, 2011 - 5:35 am  Reply

    Thank you so so much!!!

  11. James
    ― January 22, 2011 - 1:18 am  Reply

    Where do you access those registry keys/values?

  12. Beth
    ― January 23, 2011 - 8:39 am  Reply

    I did the CTRL + ALT + DEL and cannot view the processes runnung. What do I do?

  13. Patrik (Myantispyware admin)
    ― January 23, 2011 - 11:32 am  Reply

    Beth, have you selected the Processes tab ?

  14. Franck
    ― January 23, 2011 - 12:40 pm  Reply

    thanks a lot for the info
    It’s a great topic

  15. diddie
    ― January 23, 2011 - 12:58 pm  Reply

    bless you!

  16. geoff
    ― January 24, 2011 - 12:00 pm  Reply

    Help please! this thing has taken over and my computer is toast!

    When i type explorer it responds back

    C:\windows\explorer.exe is not a valid win32 application

    What next?

    THanks massively

  17. geoff
    ― January 25, 2011 - 8:04 pm  Reply

    still completely dead – any help?

    thx as oer comment below

    Palladium
    Help please! this thing has taken over and my computer is toast!
    When i type explorer it responds back
    C:\windows\explorer.exe is not a valid win32 application
    What next?
    THanks massively

  18. Vvn
    ― January 27, 2011 - 12:15 am  Reply

    Life saver!!! Thank u sooo much!! Easy and accurate instructions!!

  19. jessica
    ― January 28, 2011 - 4:27 am  Reply

    By far most helpful site. Saved me!!! Thanks

  20. Patrik (Myantispyware admin)
    ― January 28, 2011 - 10:19 am  Reply

    geoff, probably explorer.exe has been damaged by virus. Start a new topic in our Spyware removal forum. We can to try some steps to repair your computer.

  21. Sarah
    ― February 3, 2011 - 11:54 pm  Reply

    thank you soooooo much 🙂 have spent over an hour trying fixes and this one has worked 🙂

  22. Vaughn
    ― February 13, 2011 - 6:13 pm  Reply

    thanks very much for the fix – really appreciated

  23. Mel C
    ― February 17, 2011 - 5:46 pm  Reply

    I think I got rid of the virus…mostly. But now my computer no longer recognizes removable disks and when I click on a search result, I get redirected. I have Norton, but apparently it’s not working. Please advise

  24. Martyn
    ― February 28, 2011 - 10:00 am  Reply

    Hi, my missus’ computer has this virus. I’ve tried to remove it but I’ve fallen at the first hurdle. C+A+D fires back the following:

    The applicatin taskmgr.exe was launched succesfully but it was forced to shut down due to security reasons. etc etc

    Please help.

  25. Patrik (Myantispyware admin)
    ― March 4, 2011 - 8:37 am  Reply

    Martyn, start a new topic in our Spyware removal forum. I will help you to remove this malware.

  26. Katie
    ― April 15, 2011 - 11:52 pm  Reply

    I tried this and got stuck on the first step! I’ve tried opening Windows Task Manager many times and it won’t. It won’t even open after I’ve gone through the ‘scan’ and accessed my account homescreen.

  27. Patrik (Myantispyware admin)
    ― April 18, 2011 - 8:19 am  Reply

    Katie, probably your PC is infected with a new version of the rogue. To remove this malware, ask for help in our Spyware removal forum.

  28. jonathan
    ― May 4, 2011 - 11:01 am  Reply

    IM having the same problem as katie at the palladium screen you guys tell me to press alt ctrl del but it just turns my screen black now i have removed scams before but this one is a little tricky can you post further instruction or can you post a downloadable link where i can use my usb driver to download and then upload it to the infected cpu..

Leave a Reply to Patrik (Myantispyware admin) Cancel reply

New Guides

scam alert
Remove Searchernow.com Redirect: Chrome, Edge, Firefox
Avoid the ExLig.com Bitcoin Scam: Insights on Promo Code Frauds
scam alert
Denwex.com Review: Bitcoin Promo Codes as a Scam
scam alert
CEFOLEX.com Review: A Closer Look at the Bitcoin Promo Code Scam
The Bigexcoin.com Bitcoin Promo Code Scam: How to Stay Safe

Follow Us

Search

Useful Guides

Files encrypted by ransomware become useless
How To Recover Encrypted Files (Ransomware file recovery)
adwcleaner
AdwCleaner – Review, How to use, Comments
Tech Support Scam
Remove Tech Support Scam pop-up virus [Microsoft & Apple Scam]
search.yahoo.com
Remove Search.yahoo.com Redirect Virus ✅ (Quick & Easy) in 2024
Smart Captcha Virus redirect
What is a Virus that Redirects Web Pages? A Comprehensive Guide

Recent Guides

How to remove Quick Defrag virus
How to remove Full Scan virus
How to remove Personal Internet Security 2011 (Uninstall instructions)
How to remove Win Scanner virus
How to remove Disk Repair virus

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.