Exterminate It! Antimalware

malpedia

Known threats:699,443 Last Update:August 10, 12:54

Testimonials

After scanning my computer many times using big name anti-virus and malware programs I still had several problems. Finally Exterminate It found multiple infections from NetSky. I sent Exterminate It a sample and the next day I received an e-mail instructing me to update and rescan. After following the instructions ZAP the worm/trojan was gone. My computer seems to be completly back to normal now. Good Job Exterminate It!

Melvin

File: WSE_Astromenda.job

Location of WSE_Astromenda.job and Associated Malware

Check whether WSE_Astromenda.job is present in the following locations:

WSE_Astromenda.job file locations that are Windows version independent:

  • C:\Windows\Tasks\WSE_Astromenda.job

If you find WSE_Astromenda.job file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The WSE_Astromenda.job file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of WSE_Astromenda.job File^

File SizeFile Md5Last Seen
330F27FFB5C595AFBF81CDDA69CFFE53ACFAug 26, 2014
312AB05308DE871641A39A7CFF15C9CF2F7Aug 27, 2014
306D96033EF3C7ABCF0D7E38CBFF0FF512BAug 27, 2014
2921CEBDBDA9EDCE03C5C32BDD72DC5CA43Aug 30, 2014
30813FE53D598E6BC93E90B3D3F111D4370Aug 30, 2014
300D4982AF76F94BA405BA2A399F6A79E3AAug 30, 2014
300AC3DB899405272A3FDC49BD0C33B2997Aug 30, 2014
292511E5AEA39351683B45AB2EC2F5CE6D0Aug 30, 2014
2964D1B23FC52C76637B6FD27692D87B05CAug 30, 2014
292B94A4487B12BA7E8B833B63AB047FB18Sep 1, 2014
29268E60F421E1EC3CA22BA1EB2E4478832Sep 2, 2014
2840D023D6DFDD38F70456767C50D02F0CCSep 2, 2014
318210C31A86986D70FE79D3BE67C708C27Sep 3, 2014
352E2073CC70614C11455A4AEA57FF70B20Sep 9, 2014
33801FA315F7838DD0277BEA1BD2E94C3A9Sep 9, 2014
316A82200C2170324772F76F179C69561FFSep 12, 2014
2842A51419464C49885D3D78B0FCB211D8FSep 14, 2014
318456D14AFB7CA8A89DA615902C61B0024Sep 14, 2014
288B8EB15DE5DD635AEFC10EFF92A02DBC6Sep 15, 2014
3049BBA19E8EEF97E82673600E54694916FSep 15, 2014
312D40C2E25CE0E903457383D11A3DAD667Sep 19, 2014
288546367BA127547C6023A22CBBB322065Sep 19, 2014
288FBFBAF0B61DCCE013CD2D8BCD811B1C0Sep 19, 2014
304501D28D1D8F0561873867D605D7E194DSep 19, 2014
288744AAD83F71350BD215667732734EAE9Sep 22, 2014
304B0B166FBADABFC4A4CEAC875519ECC41Sep 23, 2014
2882F916446833D6FA6B6C0397A48C8B07BSep 23, 2014
288CBAF691F93CE0BAD46336F8246DB546EOct 18, 2014
30026FC3E1C6BA89FA3ACDC84FDCE320694Oct 20, 2014
314ECE740CE96942EA8C4CDEB80B1E2472BOct 20, 2014
322A48FD80F72B9E9E2BEE11881B69C59F6Oct 28, 2014
292378B40BA5CC62C53CEB63375501591FAOct 28, 2014
288F0C1B4EFA955663F5CF98687EFFBBB30Oct 28, 2014
324D0D2D60CC958224847597DA78E738261Oct 29, 2014
28823564F05C0C19BE7276AF6B8120E1911Oct 29, 2014
28897A9139C68CDB93E385CCDBA5B6E3CA0Oct 29, 2014
30633B4D414F0F458ADF5078EDEE15A12D9Oct 29, 2014
2969123CE1F9B3EE9742B048D73D9EB5F88Oct 29, 2014
308174E6208DF086046DD33A5CAA8F0E697Oct 29, 2014
300FED788F5F622B330E1FA54A99F0006CEOct 29, 2014
2961DBB20E70C478F70752155ABB625F0ACOct 31, 2014
3241CF8CEA639FE9A245BF8E497A2E25546Nov 2, 2014
3185422B8CF44C3FA0FAB1D024F518F7879Nov 2, 2014
2923CC9B37163C0EA52FA79F3FA3E4F53C9Nov 3, 2014
296B3B373797F9D927D074CABA40A148A49Nov 5, 2014
31680A30D0D128EF1F9303D2D05115409E8Nov 5, 2014
296ABA65DFA14CA5EF373C4E2363AA2C20ENov 5, 2014
30010BE63DD51D5742E609356941493F41DNov 5, 2014
3048C9C02BA7924D12CEF124953234DFC7FNov 5, 2014
28878C53B47A197A6C7E9529CA00298BC4BNov 5, 2014
296E6E3F6C351013D86D82EFDC6252A5AFENov 5, 2014
2840432C50245FB905691216A8272835981Nov 5, 2014
304CADBF1ABE59C185937141F69A7B58157Nov 6, 2014
3049E356FEDA80402868CD6F33920BD383DNov 6, 2014
3183EC923FEB992E84E1702529E646B1C81Nov 6, 2014
3126831AA224A6451B3642CD30F795DBD57Nov 6, 2014
28894D87384C5659BD400FEB727702B3088Nov 7, 2014
31086FA8F00F58BE3E6A346F038884AACF2Nov 9, 2014
2882D995F32D0DB192225001193BFFBF2FFNov 9, 2014
304539F61B78CB8F58F37D91C038ECC26F5Nov 9, 2014
30431ABBF4671A584E16C21FF9071C5535FNov 9, 2014
28820A28EC6394A27DEB50D786202CE96BENov 9, 2014
310210D6AFAD205CA83BB5CA107F3602B40Nov 9, 2014
288BD310A92B27E9131308A9D228097E2CCNov 10, 2014
3203733D2F736AE1120774BDC759A3E8932Nov 10, 2014
34681CACEED82731918CED40E1F13626324Nov 10, 2014
304373A44BCE64421B458AF3D8F45571B9FNov 11, 2014
3044AD674D20923DB7F6798A4F307F9D056Nov 11, 2014
288F1DB793261FA1CE42338EF93B5F9F564Nov 11, 2014
296D774E657E76260CA2599D4FEB40ECB37Nov 11, 2014
3042C8B3F725111D699C518168459262CB3Nov 12, 2014
2966A1844E0AF54A82C86EEA135D1AA5B25Nov 12, 2014
292550487C51C9DBAD45CF26282E84E4817Nov 12, 2014
312F925A872D3ADD65E75881DBEF2130CCDNov 13, 2014
288EE68F383EA0DF812A971BE7DB6A3D98BNov 13, 2014
3245EA9F834D815559BC2EFD21D48176764Nov 14, 2014
296D3EDEEF290A6CD724A407A27119DF1ACNov 14, 2014
292B0BC5968534D50EC7CE42D45E8A2441CNov 26, 2014
308CCB63ADF54A4BAD10C1530049FE2BF02Dec 3, 2014
3348DC2DB0B3A7C561544A4B10917A7435EDec 11, 2014
3206D0A799BE074EE35E5F29E42560BC2A3Jan 10, 2015
300B5BA028C402444CC99ECDECE323786DCJan 10, 2015
292292D25E3B91ACDA87F232B5E73A3C6FDJan 29, 2015
318DAE70134729AFD644EBF1F4ED33C0680Jan 29, 2015
312F17DC5F5119CB8253417374B86562931Feb 8, 2015
308687BFA642B01313290B27206786ECEF5Feb 23, 2015
2924F6506FC2AF778AE1126368C0F3428ABMar 3, 2015
344B0D6AFB8C743973BFAAB75D5A127400FMar 3, 2015
2888564D3B55CA96EFC1AFA74222C45915BMar 12, 2015
3227C903D50A17906E553172B4B1D55F65CApr 12, 2015
3062E7C1A95832187D204007A50558D6E56Apr 12, 2015
288D245B3C436AA1D6224633CB29D17BE5EApr 18, 2015
288230268F161F686E3E014322ECDEB4486Apr 25, 2015
3262ABD3867F8C2A1EF9AB05E2A11FDFB72May 4, 2015
288DF581C002FD59B7B1F311D72E716A314May 8, 2015
30415B861440FE24A558F12BF6C600A6FD4May 14, 2015
28832FA77DD7220945D7B40392395D0E228May 19, 2015
2981F54222FB0D34A7D39B0620DE0E20FA9Jun 15, 2015
296C6B3DF1AA5BC04A20DF87288F07FB69EJun 22, 2015
28085168A01CEA84369B41A9C67620A3FE9Jul 2, 2015
28892F3A77328F2FC5ED8B9C2C6D46BF3A9Aug 7, 2015
2928192DEAEBB620B38CC9A8CD8E814009BAug 8, 2015
288EDC9F5492A9E65E37F6B732A7A1ED989Sep 1, 2015
29625C4ECBB17D5645603C15261907DDD99Sep 10, 2015
30870B671804938BC5E57781C3D0F0AB548Sep 10, 2015
3267AD2DC9ABAAF834644887EA9B522C0BESep 25, 2015
298390B0C124A3F4544D32EA5AA7F3B3553Oct 1, 2015
298210C92825E20A788CF670CF4D1CB98B4Oct 2, 2015
28854D24523F22B231CFF93EE9E15C2A5ACOct 5, 2015
292FF6A2428A97086965CFC1DB2614DCBA6Oct 14, 2015
2981BF0C11EB39EE98EBE113D3F173AA1F1Oct 25, 2015
28835707A71D24E656EC256F5AD9E353A75Nov 2, 2015
29293B88B43D96B2FEFDEA3222CE323A686Nov 28, 2015
3403994C21EE622343848BFA68E93B15F95Dec 10, 2015
300C9CCE0678FFA38C469992A0AE14ABC83Dec 14, 2015
284628B1947FEFE2938BD7B538EE7CA7505Dec 18, 2015
288FA55F29688F70757583324DDDB01DA1BDec 18, 2015
316E201627DE9921FF49488FBC8FDA626F1Dec 23, 2015
31666895471EAC35DFACD8F7C08EC2FEEF7Dec 29, 2015
29628652B5239304AD7A1DCC60D80F77866Jan 2, 2016
288E3C06A26EF4F4E19B3A36301C39A4EAAJan 10, 2016
28890F7B16E84CBE660D47666082F2C49CFJan 11, 2016
30072E29CD8619AC43FC9D89D67A492F19DJan 16, 2016
2882C118D69A853E5C2D30BE0C9E45C1BFBJan 23, 2016
288DC9C8D79B639084854C889EFEB0C9911Jan 24, 2016
300157542B680A5866FE4D7E19F0496F700Feb 2, 2016
29684892E7DF07F491FB5D30F8A10014C2EFeb 3, 2016
2889732E9AA984B56A3011BA9B5AB63212BFeb 4, 2016
30001DC4A3643CE0E86180B0ED51C79A259Feb 7, 2016
288B41A582CA1AA860C169C603B687C2F82Feb 12, 2016
2889FAE921ECB68861CACFF57D49A6B46DBFeb 12, 2016
2881E4E7A1A9BE596E065633CE95270E536Feb 12, 2016
28459D4CC9C6D3461396CD9A9B811E567E5Feb 29, 2016
30063F50A3F751FB6ACE0D48D8242344EC2Mar 16, 2016
30036EC9BAB883A67FF163280690E35885BMar 16, 2016
296564318B376BD5AB5D04B1278364F04A5Mar 27, 2016
330A4E499B3717707278E3D7D43E4EC080FApr 20, 2016
2880E13E7154F9E9A2F68BAE4B9F42138ACApr 21, 2016
296F9F7DF83A3AD1833A1B8F31277458025Apr 30, 2016
292D9205010C732ED609334C3973738EE41May 19, 2016
304DF23645CE4EC20FD57037D345F22CD22May 19, 2016
334912832B8B42AEDBD0E4EB971192B913FMay 20, 2016
2961A78C6DB19438861F7E56F9BAD275CFCMay 21, 2016
29223EA2DC0D408A63A05ABA6DAE3FE86FAMay 26, 2016
3042FC3C4652F7BA7AD8BE0A166CCC23D9BJun 5, 2016
3109CDE2CD40FC70371AF2B7C1A15C975E8Jun 13, 2016
28805DF0AC70636E1DB14E49490AA39E6CBJun 23, 2016
324BAFD91660C2996C4B41CAAE04AD3EB1CJul 7, 2016
3043D853D4F040E68EEAE0A8216FBFD5E38Jul 8, 2016
31804B9EE097BD105C925D3F7F176D54B82Jul 11, 2016
3062F08759989039370A33B877EA25C2648Jul 16, 2016
314277C3F92DB5EDF1EC841FF66D203EFEDJul 25, 2016
292D4B40526E3F491B8FAFCB9A91F3BAA9EJul 26, 2016
3229CBF1F95233DD79B797F5620FC69E1D6Aug 5, 2016
3121F2FEDDF592758066DF444DC0520F3ECAug 11, 2016
280F27B90B268511C8330CCF09FAB65CBC2Aug 17, 2016
29622C9748F20516C418FD122A14400DBFFSep 4, 2016
306ED27B77CB8B87344C2DF18A0B7F0A3FFSep 10, 2016
3083C659D975B3CE5DAC3772D7058FB8BC3Oct 15, 2016
308D673E72A0C2925BEC28641E8EE86EC31Nov 1, 2016
288CB7C017F87AFE8C1A1DB2F62951FDF20Nov 12, 2016
3244927692204D62B7461EF5210B87513E0Nov 22, 2016
3002634E5383E4BCF040547461DB1106BE9Dec 6, 2016
2926674F0406FD014092896AAD7711BC196Dec 15, 2016
31080ED1D896CC1F0D9BB94DADBE49B5872Dec 15, 2016
3168FA3F2ACE3ECD814172D42DBD1BE67FBJan 7, 2017
326D25679B762EDE738782D166C546C3C1CJan 10, 2017
296E32701309FC5CDA428C6ED963F526729Jan 30, 2017
292C3BBA0D5BB1776BCAF2B5E690481C647Feb 13, 2017
2964AED7F664CF95F3EF010064C416E6CCBFeb 23, 2017
324AA6C5BF21A9F82CF706AD64B0A8F8128Mar 2, 2017
31433505AC561E846DAD99DDA40FED8E486Mar 12, 2017
312FD9BFBB143374FD1C1D23EEF193B5AEAMar 23, 2017
2887ECF8BE0BA49344C8BE451802D9C1EE9Mar 25, 2017
32627191E5E09ECF11C1D9733AB6282A69BMar 28, 2017
28845993192CCF6B674B8511B01E25C974DApr 8, 2017
29652D6F553DAAC0A89ACE165DB7990EDC1Apr 14, 2017
3283D906B449F71FDA20FD7AFAA2776C07AApr 25, 2017
292192AD628D532FFF78C017C64102A9F18May 8, 2017
312FB43B5F6D6B22FC77F246A1AB87057B1May 13, 2017
304EFFCFF5B70423DF46CD3F22DFF4D3713May 26, 2017
2884986D9028F108E99E3C81CDC5E06E4FBJun 3, 2017
322585552D1BCD596FD71E012F3F07CDC60Jun 7, 2017
3005B8C20ABC107F4B5B8E723198A4A3227Jun 8, 2017
314A1DFC9EE6C90B87A45BC74F96542B7E6Jun 17, 2017
3187F60BC6163461CB8156ABD1654FA0C6DSep 22, 2014
29295B4E1B09151314F2A1EB539A292F2B3Oct 15, 2014
2964A5E1BED51A8CF295B9126D79967E40FNov 27, 2014
288C9B5821A90EA3B6D40AF1B48F9D6D3CENov 28, 2014
300270CC389083199A694DD01DFBB808716Nov 29, 2014
2920679A4C6801288792931703BEEC8B21DNov 29, 2014
29226DA27592C77F5B5DF45BF47F7A0B041Mar 6, 2015
292FA89F2B7DEE1D495663A93AA1AE38A15May 31, 2015

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove WSE_Astromenda.job^

  1. To enable deleting the WSE_Astromenda.job file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select WSE_Astromenda.job and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of WSE_Astromenda.job and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of WSE_Astromenda.job and Associated Malware.
  6. Notes:

    • The deletion of WSE_Astromenda.job will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of WSE_Astromenda.job will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a WSE_Astromenda.job malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type WSE_Astromenda.job. The name of the first found registry value referencing WSE_Astromenda.job is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to WSE_Astromenda.job, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of WSE_Astromenda.job and Associated Malware.