Exterminate It! Antimalware


Known threats:699,742 Last Update:November 20, 22:46


Just purchased Exterminate It to remove Fake Screensaver and Richvideocodec, within minutes solved a problem I have been agonising over for days, saved my computer and sanity with minimum expense and fuss, thanks for a great product.

Craig H.

File: WSE_Astromenda

Location of WSE_Astromenda and Associated Malware

Check whether WSE_Astromenda is present in the following locations:

WSE_Astromenda file locations that are Windows version independent:

  • C:\Windows\System32\Tasks\WSE_Astromenda

If you find WSE_Astromenda file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The WSE_Astromenda file is associated with malware only if found in the locations listed above.


Different Variations of WSE_Astromenda File^

File SizeFile Md5Last Seen
2668191D4EBD4169689A15ED0C87150A3CF8Aug 26, 2014
326035B3E2CB1E5E702A2002DE6B930194CDAug 27, 2014
32247C9B6531EF0469185E04A6641F97B665Sep 3, 2014
32907A86CDA96DD8E6729E6939F1483C1D36Sep 3, 2014
3240A91A6EA810FD8F81154FB5976F2950C8Sep 7, 2014
3284617EA5B7C72E3D1E627CCBB95AFEEEBCSep 11, 2014
3248BB2FF962598D4D29C2BB16610E3D7478Sep 11, 2014
32241D3FC9A4351F9F1DA9FD64589F29C79CSep 15, 2014
3238ACEDC097F232A017ED722E212BD9E181Sep 17, 2014
3238C0040E529928B10F0D972420FCDBC0BCSep 17, 2014
32329633A37E73A74960120E76E758F255C5Sep 19, 2014
32083DFEFE80FDC4F6D25D344B2C4DC25439Sep 19, 2014
2668F4D9E97331A7AED803693B1A25C2965FSep 20, 2014
32245434DE9DADD404447857D6A94D36263FOct 18, 2014
32163150E7A9C5F7C862BF4582BE3197C0B5Oct 27, 2014
2636E506734A8C7034FEE2A374E3CD1EAE5DOct 27, 2014
32205B2469A314B62D6F88AB4D076F52704DOct 28, 2014
31422E187D7739F37EEC9D64B5F50CAABBF1Oct 29, 2014
3226F82367A7DB1096D6221B9B173619D183Nov 2, 2014
32165F680D2E1190E8D978716B1075F7DF8FNov 4, 2014
3248F49C9EB46561986464AFAC642333B71BNov 4, 2014
3224BA4CF73D8076ECFB259D344F1F797073Nov 7, 2014
32504742BDEB5671562E4C698CF64F43FBE0Nov 9, 2014
2648C639D643A08E0D4E0A54426B7BB56839Nov 9, 2014
32960A2D604A298EEF9F6495FD0E40F298AFNov 10, 2014
32408CCDFF7482240BC4E718AEDDF9953BD1Nov 11, 2014
32565A03F95B3EF1629C060307E3A2DEE157Nov 11, 2014
3248B5625D827C5B1EDB4190623B5AE93E99Nov 12, 2014
3150A295788F549E89C4C369DC87BFB05A5BNov 13, 2014
330449CCE8E96A2AABF9ED9262447D0E2854Nov 14, 2014
32320B168D7A61F7D222EE7E5564AB2E14BFNov 26, 2014
3240C2FB6FED96EC59C393EBA3659E74E199Dec 29, 2014
325804E9E5AAA789015857739BC35CCC89F5Feb 8, 2015
2646C3D714FC7404BE5064CA493FB1CCA187Feb 23, 2015
3224AA8F63C0830F2D587D878E1C8EC410D7Mar 12, 2015
3224EBD72199DD7C58EAE5B85F733F00DCA6Apr 18, 2015
325086D9376B4830D7F945F19F68DBC222FDMay 14, 2015
32165D573B7C03E6EE3B5B8194C85317118DJun 7, 2015
32409D54392999879DB45C4F761F4F0E2F44Sep 10, 2015
3224F2F1C77D5368AEEA5D0D98CD8646B03CNov 2, 2015
27685FC2C47E8F21E5664BC0351C4AAD2918Dec 18, 2015
32161D9BA4011CEDE1E1437101F629036C0DFeb 29, 2016
3230854852644D7D0FCE5D448C50DFB929F4Mar 27, 2016
323809E20FA4E7407358D516B75835A69E46Jun 17, 2016
325638C4EEE5A3C09013B7D18CAB30916B3FJul 8, 2016
3250C51B1947CE49219EE172C4C868D09CEFSep 4, 2016
32242018660BDCAA82DD806A7D84524765B0Nov 11, 2016
3240A79B0428871ADFEB13ECA22EC14A4A4CJan 30, 2017
266248C46D0445EE50A508AA15F5A2077D1EMar 2, 2017
33305170B4823747E9FE53F4384C4A6DA516Mar 25, 2017
32303D4D841308721275D01E25F3AFA82DC5May 8, 2017
3220CDEE13487BE6A3F4B7FBBE3BA69D3CECJun 3, 2017
2382D851D5229A679DC217DD3C98774D45E9Jun 7, 2017
3248E937770D204CC38F9EF9A594D622E31CJun 8, 2017
3140F2D5D386AE1F9D180613E1969E825634Sep 27, 2014
32268A8CA0F62C6E8F81158EFB7F2A06D4D8Oct 7, 2014
3216C260FA3886F63E402148FEC799CB2BE3Nov 29, 2014

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove WSE_Astromenda^

  1. To enable deleting the WSE_Astromenda file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select WSE_Astromenda and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of WSE_Astromenda and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of WSE_Astromenda and Associated Malware.
  6. Notes:

    • The deletion of WSE_Astromenda will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of WSE_Astromenda will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a WSE_Astromenda malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type WSE_Astromenda. The name of the first found registry value referencing WSE_Astromenda is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to WSE_Astromenda, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of WSE_Astromenda and Associated Malware.