Panda subscription expired: Panda Dome drops to limited free protection

Fix it now

Panda Dome checks its entitlement against your Panda account rather than against anything stored on the PC, and when that check comes back as expired the paid modules switch themselves off. Basic scanning continues, which is why the machine can look protected while the layers you were paying for are not running.

1. Open Panda Dome and check which account it is signed in with. If that is not the account holding your licence, sign out and back in with the right one.
2. Sign in to your Panda account in a browser and read the licence state: expiry date, plan, and how many devices it covers.
3. If the plan has ended, renew it or add a new activation code to the account, then let the app synchronise.
4. If the plan is live but the device count is full, remove a machine you no longer use from the account, then reactivate this one.
5. Open Settings, Time & language, Date & time and switch on automatic time and time zone, then restart and confirm the tiles your plan covers are back on.

If you meet 1643 or 1644 while a renewal is repairing or reinstalling the product, stop and read the Windows Installer section below. Both are policy refusals, and retrying the download will not change either.

If the app shows a future expiry date and the paid tiles are active, you are done. If not, the next section separates the licence question from the installer one, which are different problems that arrive together.

Why it happens

Panda Dome is sold as tiers, and the difference between them is which modules are permitted to run rather than which files get scanned. When the entitlement check fails, the modules belonging to the paid tier stop and the base scanning engine keeps going. That produces the confusion this message is known for: the tray icon still says something reassuring, scans still work, and layers such as the firewall are no longer doing anything.

The check is an online one against your Panda account, and the answer is cached so that a laptop offline for a week does not lose protection. That cache is why the message sometimes arrives days after the plan lapsed, and why a machine with a badly wrong clock can be told it has expired while the account is perfectly healthy. Panda documents that a purchased product must be activated with an activation code, and that trial and preinstalled versions activate automatically, so a machine that never had a code entered is in a different situation from one whose code has run out.

The numbers that arrive alongside the message usually come from Windows Installer rather than from the licence check, because renewing often prompts a repair or a reinstall. Two of them are worth knowing precisely. 1643 is ERROR_PATCH_PACKAGE_REJECTED, published as the patch package not being permitted by system policy. 1644 is ERROR_INSTALL_TRANSFORM_REJECTED, one or more customisations not permitted by system policy. Both are refusals by policy, not failures of a download.

That distinction changes what you do. A licensing message needs an account change. A policy refusal needs someone to look at the Windows Installer policies applied to the machine, which on a managed PC means Group Policy and on a home PC usually means something a tuning or security tool set. Retrying the installer, clearing the cache and downloading a fresh copy address neither.

Full reference

Reading the symptom before you buy anything

The installer codes, precisely

Neither says the download was bad, and neither says the machine is short of space. They say a policy on this machine will not allow the operation. That is a distinction worth being firm about, because the usual advice for a failed antivirus repair, reboot and download it again, will produce the same refusal every time on a machine whose installer policy has not changed.

The numbers with no published meaning

The pair 9-906 circulates alongside this message. Panda publishes no definition for it that can be read as documentation, so this article does not assign one. Treat it as an internal identifier for a licence or service check that did not complete, and diagnose from the account, the device list and the clock.

Activation, as Panda documents it

• A purchased product must be activated with an activation code, which arrives by email when you buy online.
• Trial and preinstalled versions activate automatically and have no code, which is why a preinstalled copy that lapses often has nothing to renew.
• A product that has been activated updates itself against new threats; a product that has not been is not in that loop at all.
• Where the code was bought from a reseller, check the product and region it was issued for before entering it.

If you decide not to renew

Remove Panda Dome cleanly rather than leaving it installed and unlicensed, then open Windows Security, go to Virus & threat protection and under Who’s protecting me? choose Manage providers, and confirm Microsoft Defender Antivirus is turned on. Microsoft documents Defender being re-enabled automatically once a non-Microsoft product is uninstalled or stops providing real-time protection. Run a full scan afterwards, because the period while the paid modules were off is a window nobody was watching.

An expired product left in place holds the Windows antivirus registration while running only its base scanning. That is the arrangement most likely to leave a machine believing it is covered when it is not.

Every code this article covers

Confirm the fix worked

1. Panda Dome shows an expiry date in the future for the account you are signed in with.
2. The modules that belong to your tier are active rather than greyed out or offering to upgrade.
3. The device list in your Panda account shows this machine once, not twice.
4. The system clock and time zone are set automatically and are correct.
5. Restart and confirm protection returns without another prompt.

Questions people ask about this