Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:August 10, 12:54

Testimonials

I was having problems with gamevance, My computer had slowed down quite a bit and I wanted to get rid of the problem but didn't know how. So I started searching and came across Exterminate It. I was a little apprehensive about purchasing your product, thinking, what if I make the problem worse than it is. I went to youtube and found someone who had great success with your product. So I purchased your product and did the scan. Oh man, it got rid of all the malware gamevance. I was so pleased that I had to let you guys know. You guys ROCK!!! Thank you so much for a great product.

George B.

File: Astromenda.xml

Location of Astromenda.xml and Associated Malware

Check whether Astromenda.xml is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific Astromenda.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\Astromenda.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific Astromenda.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\Astromenda.xml

If you find Astromenda.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The Astromenda.xml file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of Astromenda.xml File^

File SizeFile Md5Last Seen
2825909FB6168786B7B8ED75688BBBCCF08CAug 11, 2014
12231D96FAE8EC0A685582A9CCB8728788EDAug 12, 2014
28336209E0E43445E849C723B7DECC61EC86Aug 13, 2014
123373004FB2496BD425ABE62F6594F1AC96Aug 13, 2014
2789CDC319940453CD4E01A605F756FC3EA4Aug 15, 2014
1229674449EA62F6C7FBCCE77D0CB9335554Aug 15, 2014
12276E9789263911EB3B927BEDC93D6E79EFAug 15, 2014
2835FF8DB94AEE34826DA35D779747B726B0Aug 15, 2014
284910B62D3ADC8F65218CE8AF99B9FCA102Oct 23, 2014
2779024205B63198760CB2B025851DF8E8CEAug 16, 2014
2833463049D9D6923017362F6DEC0C7EAF91Aug 18, 2014
1241E1F342BD8125AA9AF7B19A1485FCB533Aug 18, 2014
2817532397466BAC495D30C9609FA3FDEA4FAug 18, 2014
2787260DF1FD0B85D226BA6CBD71ED0C5B7EAug 19, 2014
2815B4D3B10FA4BB223B08EC9DE299FC234DAug 19, 2014
12258D68D5F1A1CA6A8E9F354F42BB69A78CAug 19, 2014
2779E11B8C83D297DAECE801F2079D3F6AF7Aug 23, 2014
2793232A16AA36DC7494EEA52453EB8B96CDAug 25, 2014
124359E6EC880AC57C27344716A15680A62BAug 26, 2014
12319A477373CBBB5F192A9BED43F10C8A03Aug 26, 2014
28236C1001C944FCAAA29E891191940B7790Aug 26, 2014
1243ADA5726F3F92A628ED0AD02F65F6320CAug 26, 2014
281946A78A834A21647248DB974D732AFFA4Aug 29, 2014
1235516B67843A84E8E54520A61CC4BDEC60Aug 29, 2014
281727AC3CDCBF452C2DA1C0F511C2B5B4AFAug 30, 2014
1229B51960F45995722E84A7C79BA9D72452Aug 30, 2014
2827F9A8E3F65BB4002254B3F0F4BF378155Aug 30, 2014
124153378E5FC4CAD8B743554C369546EC43Aug 31, 2014
2825EF9A08048BA6789CA4217D0E0CC1E945Sep 3, 2014
27893AB2DA72B7D98D3781D6A3B78B41CBB7Sep 3, 2014
12292E81A77EF3008F98CEA9F61AB9C27E84Sep 9, 2014
2829D2AAFC80676225E171976D5CD519B9AFSep 9, 2014
28210927C3F2960F26C9368EF0006B796B14Sep 11, 2014
2823A41E587F9B292F98248B19C9AF8E8639Sep 12, 2014
2791C78C8F601E93F9C98D36BA5B1B34C946Sep 14, 2014
2819F7FD6EEDC1A5F08EEADD17E87356A5B3Sep 14, 2014
2821C00AEF4C3C07541D4D592D195E2E7465Sep 15, 2014
2821F0369D3304CF2B32F7A157104D941FF3Sep 15, 2014
1227A31F222A8C26DCB00B39E9C6D2234A1CSep 15, 2014
1229B7D7A035E2A714B505258B3B3508D070Sep 15, 2014
125946D77C4A2B98F5E16C960EA05D944A01Sep 15, 2014
28290691FF8E644664067C37BCC6ED88B993Sep 15, 2014
281914598433FCD858AABF50883FE6BE5B5ESep 15, 2014
2823E1822E14BF1A49A4C7916286BF253345Sep 19, 2014
2833874A44C072D18C104EEFD23D3B49D4DFSep 19, 2014
12373AE44210A8B0153E411E8AF9AD41AEE1Sep 22, 2014
2827CE6C1A8B0D565DBD87C4B118EE71B48BSep 23, 2014
12292508CCF028FAC93B6BDCBFEBFB6B2CA3Sep 23, 2014
284156B992A3235BD6819171B105D32F076DSep 23, 2014
123589191B1FE48B60C35D77E4F93F96E0D9Oct 18, 2014
1235CE7A86AE85E34219CF2ACE62D6E568E3Oct 18, 2014
12337BB356AED34702576E7E28AC53FAD3BAOct 19, 2014
1231FFC26DFF76227AE7FD2B86A199F87D0AOct 20, 2014
12397210812D831FF8E3658F8216D8669F31Oct 24, 2014
2827ED88C4039B262482971F19E7012936D1Oct 27, 2014
282306FA5DFE9723074CC91AB0A7A15CFCDFOct 29, 2014
125917F9BFCC18FAF1C15710F7C556059597Oct 29, 2014
28294B1F8BFAB1582B887928EA22CD560E10Oct 29, 2014
123183C73D6D8AD6EEC5FF488A96E3CB692BOct 29, 2014
2821FEFF82BE9FA3E6764957D4B8002E8709Oct 29, 2014
2823AA3736525E764A7F546AC0C083BDB8DCOct 29, 2014
121562CB816ECD1D1C91882EFEC09D36990COct 29, 2014
282352DEF2117EBB38FB5EC4E820A447AB9BOct 29, 2014
2825E6FBC692821428BDC5991AE23F5CB138Oct 31, 2014
1215AAC875042952ED92100D01918AABDFACNov 2, 2014
12319C7C58B82F78F3ED1963056C83120260Nov 2, 2014
2823D864B17F7D6EA50420049C053915B3DBNov 3, 2014
27955DB38CD5B050D992732091D61C6670C5Nov 4, 2014
28233761EB65AE924D6C831A56ECFFD2D4BENov 4, 2014
2801B830C12FCEF989D090875069298C1A83Nov 4, 2014
28272AE0185D6AB50AF7C4F5CD5286EA5DDBNov 4, 2014
123155DBDE4A4912DEE5EE72BE6AAF42AFADNov 4, 2014
28253165991036E0512B2F1AA18BAA67EFB8Nov 5, 2014
28255CEBC8AD9EC0A566A40839923AD745D4Nov 5, 2014
28413CFB32BDCB17D2F934AD6A8694593506Nov 5, 2014
284718635E368970891AB0E6C533D97DF8F0Nov 5, 2014
28492120A46DDAE6A2404BB5EAF527A3D9CENov 5, 2014
125938E571A149774F9D7E4FB9B86182594BNov 5, 2014
28255AFF6A81AE5845A25001C4C9DA8FDFA0Nov 5, 2014
282548257206D57E7E24EFDC62A4CE9BC252Nov 6, 2014
28318BAE4E6B05C4064EB3E833564A1C374ANov 6, 2014
27997A026019435E76165916B94693C548C3Nov 6, 2014
1233FB4A354AB947E3174CCD85AA4FB320E4Nov 6, 2014
283124B7C6A29E2828631B1212E4E6462D65Nov 7, 2014
28439EDFAEFE15C11074208108B36893BB8ENov 7, 2014
28272A86977F707C430B4C532D5F3D3DDD37Nov 9, 2014
2849611F97288316E6339FD3E65BB417AC62Nov 9, 2014
12316BBE16E87F62945F5875B1E70C2C7828Nov 9, 2014
28256FD35AC733E4E681E3C996C4F4AACBA0Nov 9, 2014
282950E093478910C1ABADA831881E8B3FE2Nov 10, 2014
28314A9BDD19FB443C2CF335414DB8CBFC9BNov 10, 2014
283555ADDD5036563B40AAB3DCA7E5EAF660Nov 10, 2014
123717FA6D6CC7DEBF56C6227E20F2E6546CNov 10, 2014
2821EEE42A3BE3EFDCE1BF26033FAD11E5CENov 10, 2014
2791280885FE39E69BDA8140ED5A65B4A427Nov 10, 2014
282526EDB1908FAE13FB1D512CB67DF18130Nov 11, 2014
2845B16CA3DB7224DCB945D8ED787AD73C26Nov 11, 2014
123340684B00467B5E0C1DF8339B2FBACD78Nov 11, 2014
123398169448D6928DF6B59A06EC2A262B7ENov 11, 2014
28517B462ED64B0F6AEB2C8A96D78E001FDDNov 11, 2014
2833126D587A9EB828D7028906050221ABD4Nov 11, 2014
1231B6927ADFCCC1D7C4A5EEE3F5C779DF09Nov 11, 2014
12318610C1F5A53398E03D8D327EB19F8715Nov 12, 2014
282598E44A9054FE455EAD9A55C2D759A537Nov 12, 2014
28331494B11EEC6BC5C7F03C859C98D0FA60Nov 13, 2014
2829D6E782A6AA9CABC013B229379FF7D6D9Nov 14, 2014
1227ACFC511F36C0C25A6559F950AE35EF54Nov 21, 2014
2793C9A1F96C838E182DEB0AC4E1C72D8DDCNov 26, 2014
2825EA51F757A37654BC1397B59847398E21Dec 27, 2014
28013092795EE4991A961A2AF7BEE23F5AD3Jan 10, 2015
28499D48C4EE373A450F86FB390A2B6939FAJan 29, 2015
2819282209F3B465AE39CEB68505DB6817AEFeb 8, 2015
279595D24E7AE9E5F53AB491782043394D0BFeb 10, 2015
2827B5A30FF21406537BD179F660B7D48DE4Feb 21, 2015
121505CFC7DA4DFCCBC885180970BB81C68AMar 19, 2015
12412439F02A7A5CFAA9EDA6A851FC4C0095Mar 23, 2015
2821DEC2F57AFEF51CDDF8F199136E8039D3Apr 21, 2015
12231E008EEDE88AB38DE64B3F019488A0E9Apr 25, 2015
279307978AFBC1DB786F19BD41A1D2F5F49EMay 3, 2015
282535879799C568307A9F28E4E3DDB0A2B4May 10, 2015
2783B5A3F2EBEDD5810EDB922C10F46FC7B0May 21, 2015
2825739200AC54DCBD46872B03C58F1E759DJun 5, 2015
2821DCD505ED5B48B973F912A21535F43D00Jul 17, 2015
28290F544ADB063919E39D3660DBA07165ABAug 7, 2015
2827D9EF9E476037F544AEB2C675464282FBAug 8, 2015
282971062E13453BE58BFA3937524CC59997Sep 4, 2015
27950BB2A07C18230D69E5E1F52B8FC9C7B7Sep 7, 2015
2795F5398A441BAF36319062862B99FE5F1BSep 10, 2015
282556D7C3BA4A03ED838F6DD3D102CB8AF5Sep 20, 2015
2831A0EE77E6B164D7FAB60F4C5E39742F25Sep 20, 2015
2274707F152A25108B96400BBEBE34F0A840Sep 29, 2015
2825BF8DB03FA6044482F7B43AD1A3C00E2FOct 6, 2015
2825AE746BF556AB6D73B10B4ED1C2EEE246Oct 24, 2015
2825983608C6B8DBF2930DFBF17684A66D0DOct 30, 2015
1233BBCDCF205FFB29F7A3D6357160C30A63Oct 30, 2015
28290738B0D09EBFE71308E2AA67A4E8E4C3Nov 9, 2015
2831FC550CB1211E60D2AD6B91D8DCDB07C0Dec 30, 2015
28313AC7CB0CC7500CDA45B9E0070EAA34A5Jan 11, 2016
1239EE9856A9DE09C3FB04E5289986636D3CJan 11, 2016
12358ACA8F76110C30AAF31389881C890C8FJan 14, 2016
2799141DFE729538F39A10200F598F5B2C33Jan 20, 2016
1237E397250F8D15A1CF6C282D548BEEF693Jan 20, 2016
284972C9E2543F2ECCA1FAA5917E91C412EAJan 24, 2016
27911CE7E44EEAADCA2E182A3B9D4449DE96Feb 6, 2016
2793F980D065281679753AE731705288C35EFeb 12, 2016
12437CA1A693AB0E8FDCDA0806F9FA91AB20Feb 12, 2016
2835FEF425E0B621BB272E412DF81437A4ECFeb 12, 2016
2777FFF8F3F3AAD2135A9B0C41F09B426EBDFeb 16, 2016
2829248180823BEE25C7FA65EF6966A97342Mar 6, 2016
1237807A397B2C79CBB247CAE394C159B007Mar 6, 2016
282963E72C6B4891EB021C369A52F93D15C6Mar 10, 2016
277983F3CDD64ECBFBEA3F317708B0E4D807Apr 28, 2016
1217B276027C8B066490427585CCD61FB736Apr 28, 2016
28298E7EDD09246891391D04417A5A1E1A8EMay 15, 2016
28291D47054C7338729E07F3994C618A9871May 20, 2016
2831B3C35231C7E31357AF93F147EDDB4DA0May 20, 2016
28019741CEBAB58E448E1DD16248FAF63EA4Jun 20, 2016
1239BC2EEF2CAC4A9C061905F39AD6420AEBJun 29, 2016
28070113331F95600A35BFADA3E39B235AE7Jul 5, 2016
28017E36E38C5C4C6F545180B015450D2C4AJul 11, 2016
1225ECAE758FB2985760EEA240313635DDB9Jul 20, 2016
2823E22E0583495D41D441F47623F98841D3Jul 23, 2016
28233AF686803CDCFB8F2E5882A416958758Jul 26, 2016
28218A6ABFD180D11BA2841804ADB13675A8Jul 26, 2016
2823F37B6EEE95798F2C72973F757313A50BJul 26, 2016
28212576B2AD0B7E2EE510557DFD7C21B006Jul 30, 2016
2793556759C57C9A9088BDE5EADA251EDA55Aug 2, 2016
283111DC25C59DC38C3EA3B0B8C9A27F4E50Aug 10, 2016
1239743D08D8ABB455D0F6BFB4954862E62DAug 10, 2016
2825D31403C2B88E05F109EAF131C4A1659CAug 13, 2016
124315E00967C60D7FD5679BCA8683F99BA0Sep 4, 2016
283103B036D2A3240609C4EE271DCA58768FSep 12, 2016
2823D490AEB720B5653C4FFC63B524E4E6E7Sep 20, 2016
2815799A9E72C46E092608BDAA33904270D8Oct 2, 2016
2831EE9B4A0164D0004ACB5F32228F9C68A3Oct 2, 2016
2811D6CC77DACD78B31B74F487A799C6DCE4Oct 3, 2016
28111E442DE4AE8F823BA052A5273F0B8783Nov 7, 2016
282308858523C6A1EB7DD323BF7017A0DCF4Nov 12, 2016
124743A87B97183C64B9E86799D713A5E659Nov 25, 2016
282340E4556F6DC072ABB5A31C6BD70B95A9Dec 22, 2016
27778F82330B59FCB8308482DB11F1E4E62BDec 22, 2016
2799C9B6701134D039A5ADA29FF625A9E401Jan 11, 2017
282573FC249A4688233419A012A9EDF6B1BBJan 29, 2017
12279526AC7E9BD6F2DE24219A739907A29DJan 30, 2017
27970901B1B7695B40259849A6A7B4477664Feb 10, 2017
12354BE5BE668BCCC930E6EC0CC90F783D53Feb 10, 2017
2809420C45B812E85C642EA5423152921D5CFeb 13, 2017
282184EF4C2544AD06A6DE51A8E424BE04B4Feb 24, 2017
1237F92412A3E5EBC1ECE48FF7573C2EE571Feb 24, 2017
1227832D2B057A42A397CC97C47986A5EEC2Mar 14, 2017
123911D7AB69F01F16F7E3CEA8D201560A58Mar 16, 2017
27934D7C4306B3C62C75E201F38B19CD036EMar 24, 2017
28253EBB2B0C4FB41582445291F687E3A1A1Mar 28, 2017
27931A24C5132DF6E25121A918E6E30B3A2EApr 22, 2017
12539352C267F91233EC72942444694AAE28May 3, 2017
1241E6B2EB3D3C501B71A7F0D0990F5EEC02Jun 20, 2017
2833E8CF98A8F2BDA1F58D826C0CE5332D00Jun 20, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove Astromenda.xml^

  1. To enable deleting the Astromenda.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select Astromenda.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of Astromenda.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of Astromenda.xml and Associated Malware.
  6. Notes:

    • The deletion of Astromenda.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of Astromenda.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a Astromenda.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type Astromenda.xml. The name of the first found registry value referencing Astromenda.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to Astromenda.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of Astromenda.xml and Associated Malware.