Removal of the virus form the PC

It could be usually thats how they start. Do not respond to any kind of download they recommend. If you don't have anti virus you can download Avira here. It's free and will handle most usual problems.:
http://www.avira.com/en/avira-free-antivirus
If you have anti virus runit now or soon, if you don't get this and try it. Are your popup's blocked? If you have questions let me know at "add a comment"
Dave

Manual Removal procedure for Palladium Pro The first step you must take in order to remove Palladium Pro is to stop one of the following processes below. Only one of them will be running.

• Palladium.exe
  
• PalladiumPro.exe
  
• Palladiumantivirus.exe
  
• Z.exe
  

To Stop this process you can browse to the file location shown below and re-name the file first and then restart your computer. Then browse to that file location again and delete the file.
The next step in Palladium Pro removal is to delete the following file:
Windows XP :

• C:\Program Files\Palladium Pro\PalladiumPro.exe
  
• C:\Documents and Settings\USER NAME\Application Data\Palladium.exe
  
• C:\Documents and Settings\USER NAME\Application Data\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Palladium Pro.lnk
  
• C:\Documents and Settings\USER NAME\Application Data\Roaming\Microsoft\Windows\Start Menu\Programs\Palladium Pro\Palladium Pro.lnk
  
• C:\Program Files\Startup\Palladium Pro.lnk

Windows Vista / Windows 7 :

• C:\Users\YOUR USER NAME\AppData\Palladium.exe
  
• C:\Program Files (x86)\Palladium Pro\PalladiumPro.exe
  
• C:\Users\YOUR USER NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Palladium Pro.lnk
  
• C:\Users\YOUR USER NAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Palladium Pro\Palladium Pro.lnk
  
• C:\Program Files (x86)\Startup\Palladium Pro.lnk
  
• C:\%AppData%\Z.exe
  

Once you have successfully deleted these traces, Palladium Pro should no longer be running in your machine and now you should run a complete virus scan for the system using Spyware Doctor with Antivirus. This will let you know whether you have been able to remove all the traces of Palladium Pro successfully and also whether there is any other threat still available in the system.
If you need advanced help or an expert we recommend www.onlinecomputerrepair.org
Palladium Pro Registry Removal Procedures Now that your system is free from the Palladium Pro file traces that have been mentioned above, it is time to get rid of the infected registry items.

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Palladium"
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Palladium Pro"
  
• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Palladium Pro"
  
• HKEY_CURRENT_USER\Software\Palladium Pro
  

It is important that you run a complete virus scan for your computer when you are done with the removal procedure to ensure maximum protection for the system. For that, we suggest you to run the scan with Spyware Doctor with Antivirus.
Palladium Pro Directories: XP

• C:\Program Files\Palladium Pro\
• UPDATED: We have a report of it being at C:\Windows\Palladium Pro for some users.

Windows 7 / Windows Vista

• C:\Program Files (x86) \Palladium Pro
  

Or mail me [email protected] we will remove it through remote desktop support

Manual Method:
Kill Process
--------
1. Press CTRL+SHIFT+ESC
2. Windows Task Manager should pop up
3. Go to "Processes" tab
4. Kill "WP345d.exe", "eb.exe", "fix.exe", "ppal.exe" by ending the process. (There may only be one of these listed)
5. A warning prompt will come up, Click Yes to End anyway.
6. To confirm the spyware is no longer running, the icon should dissapear when you hover your mouse over the system tray in the lower right. (The icon is a red brick wall)

Remove Registry Keys
--------
1. Press WIN+R (The WIN key is the key between CTRL and ALT that looks like a Windows logo)
2. In the run box, type "regedit"
3. Windows Registry Editor will pop-up. *Be cautious when editing the registry*
4. Navigate to the following folder on the left-hand pane, and delete the listed items below:

------------------------
HKEY_CLASSES_ROOT\CLSID\{3F2BBC05-40DF-11D2-9455-00104BC936FF}

HKEY_CLASSES_ROOT\WP345d.DocHostUIHandler

HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\SearchScopes "URL" => "http://search-gala.com/?&uid=201&q={searchTerms}"

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer "PRS" = "http://127.0.0.1:27777/?inj=%ORIGINAL%"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings "UID" = "201"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "89770891803"

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Windows PC Defender"

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windows PC Defender"
------------------------

Registry Locations may vary, If you can not locate a certain item, use Edit > Find and type in the name of the key in quotes, For example:
To find...
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run "Windows PC Defender"
Search for "Windows PC Defender" without quotes.

4. Delete the Folders

Navigate to the following folders through My Computer, and delete the listed items.

C:\Documents and Settings\All Users\Application Data\
Delete the folder "3ad5ffe"

c:\Documents and Settings\All Users\Application Data\
Delete the folder "345d567" (This is a randomly generated set of numbers/letters)

c:\Documents and Settings\All Users\Application Data\
Delete folder "WPCDSys"

%UserProfile%\Application Data\ (Copy-Paste into Explorer's Address bar)
Delete folder "Windows PC Defender"

5. Reboot the PC and then refer to Step 1 to finish clean-up with MalwareBytes if necessary.

Try this,
1: uninstall Firefox
2: delete Firefox files under c:\Documents and Settings\user\Application Data\Mozilla\ for all users
3: delete firefox files under c:\Documents and Settings\user\Local Settings\Application Data\Mozilla\ for all users
4: reboot
5: download install latest firefox version.

Hope it helps.

nod32

When the executable is run on the victim's machine, the worm copies itself to the following locations:

• %Application Data%\remove.exe (Copy of itself)
• %Application Data%\autorun.inf

Where %Application Data% = c:\Documents and Settings\All Users\Application Data
Autorun.inf has following command
Exp: [autorun]
shellExecute=remove.exe
The worm adds a Run entry in registry so that it executes itself at every startup:

• HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
  "(Default)" = "%Application Data%\remove.exe"

Symptoms -

• Presence of above mentioned files.
• Presence of registry entries mentioned above.

Method of Infection Method of Infection - This worm spreads by using autorun.inf on shared drives and removable devices.
Removal - A combination of the latest DATs and the Engine will be able to detect and remove this threat. AVERT recommends users not to trust seemingly familiar or safe file icons, particularly when received via P2P clients, IRC, email or other media where users can share files.


Thanks for using fixya..

http://www.computernerdforrent.com/virus.html, if you go on the site above you can scan and repair your computer online.

If the machine is a Dell with DellControlPoint, open start, run then type msconfig and hit enter. Choose the Startup tab and find the startup item named "Dell" with the Command from "C:\Program Files\Dell\Dell Control Point\Connection Manager\Dell.UCM.exe" and uncheck the box. Hit Ok, then reboot your computer.

Ok here are 2 suggested security programs that i use and are free also hight recommended you can google the names and download them

AVG Anti Virus > anti virus
SUPER ANTI SPYWARE > spyware remover

and here is the removal instructions http://www.ca.com/us/securityadvisor/virusinfo/virus.aspx?id=49744

I done research on this but not tested to my computer ..just try this remover created in philippines . this the link: http://www.geocities.com/six519/Remover.zip may this help.