Exterminate It! Antimalware

malpedia

Known threats:700,085 Last Update:March 01, 12:55

Testimonials

I am currently evaluating Exterminate It!. I had no problems with downloading and activating the software. It’s easy to navigate and follow. Would recommend giving it a trial.

Jon R D.

Astromenda- Registry Values List

This is a complete list of Astromenda registry values collected by Exterminate It!. If you find any of these registry values on your PC, your computer is very likely to be infected with the Astromenda - pua.

IMPORTANT: Because the registry is a core component of your Windows system, it is strongly recommended that you back up the registry before you begin deleting keys and values. For information about backing up the Windows registry, refer to the Registry Editor online help.
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E2D93E13-8EBE-4A05-AAFB-E85C4BE38D8A}]FaviconPath=[%PROGRAM_FILES%]\WSE_Astromenda\FavIcon.ico
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E2D93E13-8EBE-4A05-AAFB-E85C4BE38D8A}]TopResultURLFallback=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_dnldstr_14_38_ff&cd=2XzuyEtN2Y1L1QzuyCyEyD0AtDyEtAyD0AtCtDzyzz0DtC0EtN0D0Tzu0SzyzzzytN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0AyC0Azy0AzztAtGtAyB0BzytGtCzz0EyCtGyBtBtB0AtGyB0FtA0F0B0FyDzzyEtAyCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AyDyDtD0CyDtA0CtGtCyD0DtDtGyEzzzzyCtG0AyDtAtDtGtCyByCtA0ByEtB0E0AtByDyC2Q&cr=1828777379&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{E2D93E13-8EBE-4A05-AAFB-E85C4BE38D8A}]URL=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_dnldstr_14_38_ff&cd=2XzuyEtN2Y1L1QzuyCyEyD0AtDyEtAyD0AtCtDzyzz0DtC0EtN0D0Tzu0SzyzzzytN1L2XzutAtFtBtFtCtFyCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StD0AyC0Azy0AzztAtGtAyB0BzytGtCzz0EyCtGyBtBtB0AtGyB0FtA0F0B0FyDzzyEtAyCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0AyDyDtD0CyDtA0CtGtCyD0DtDtGyEzzzzyCtG0AyDtAtDtGtCyByCtA0ByEtB0E0AtByDyC2Q&cr=1828777379&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]TopResultURLFallback=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_35_ie&cd=2XzuyEtN2Y1L1QzuyDzzzyyEyC0BtCtBtA0EtCzy0F0D0A0EtN0D0Tzu0SzyyCzztN1L2XzutAtFtDtFtCtDtFtAtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtD0C0DtByC0CzytG0C0C0A0BtG0E0CtDtCtGyCzy0E0BtGyBtBtCzz0Ezz0A0F0ByB0FyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyCyC0BtCzy0EyEtG0A0F0CyEtGyEzztByEtGzz0E0EzztG0FyD0ByDtB0DtA0AzztC0Ezy2Q&cr=1009640979&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}]URL=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_35_ie&cd=2XzuyEtN2Y1L1QzuyDzzzyyEyC0BtCtBtA0EtCzy0F0D0A0EtN0D0Tzu0SzyyCzztN1L2XzutAtFtDtFtCtDtFtAtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtD0C0DtByC0CzytG0C0C0A0BtG0E0CtDtCtGyCzy0E0BtGyBtBtCzz0Ezz0A0F0ByB0FyC2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0CyCyC0BtCzy0EyEtG0A0F0CyEtGyEzztByEtGzz0E0EzztG0FyD0ByDtB0DtA0AzztC0Ezy2Q&cr=1009640979&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]TopResultURLFallback=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_dnldstr_14_36_ch&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DtCtD0CtC0C0CtB0C0AtCtN0D0Tzu0SzyyBzytN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAyE0B0DyDyB0CyDtGtByCyEtDtG0D0EyEyBtGyByCtDtDtGyC0EyEyByC0DyB0AzzyByCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0EyD0C0A0CtAtG0FyC0ByCtGyE0EtBtCtGzz0AyD0FtGyEtD0E0FzztDyE0CyC0ByDyE2Q&cr=1068629759&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}]URL=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_dnldstr_14_36_ch&cd=2XzuyEtN2Y1L1QzutDtDtByEtC0DtCtD0CtC0C0CtB0C0AtCtN0D0Tzu0SzyyBzytN1L2XzutAtFtBtFtCtFyDtN1L1CzutCyEtBzytDyD1V1StN1L1G1B1V1N2Y1L1Qzu2StAyE0B0DyDyB0CyDtGtByCyEtDtG0D0EyEyBtGyByCtDtDtGyC0EyEyByC0DyB0AzzyByCzy2QtN1M1F1B2Z1V1N2Y1L1Qzu2StDtA0EyD0C0A0CtAtG0FyC0ByCtGyE0EtBtCtGzz0AyD0FtGyEtD0E0FzztDyE0CyC0ByDyE2Q&cr=1068629759&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]TopResultURLFallback=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_wnzp01_14_35_ch&cd=2XzuyEtN2Y1L1QzuyEyEzzyB0F0C0D0BtCyCtDtB0A0EtC0BtN0D0Tzu0SzyyBtBtN1L2XzutAtFtBtFtCtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCzyzzzyyDtByD0EtG0BtBtA0EtGyEyDzz0EtG0A0E0D0BtGtDyDyB0CyByCtA0C0CyEzy0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCzyyD0F0FtDzytAtGtDtDtByEtGyEtAtB0AtGzz0B0E0DtGzz0Azy0FyE0CyEtDyEyE0D0F2Q&cr=399700550&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}]URL=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_wnzp01_14_35_ch&cd=2XzuyEtN2Y1L1QzuyEyEzzyB0F0C0D0BtCyCtDtB0A0EtC0BtN0D0Tzu0SzyyBtBtN1L2XzutAtFtBtFtCtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2StCzyzzzyyDtByD0EtG0BtBtA0EtGyEyDzz0EtG0A0E0D0BtGtDyDyB0CyByCtA0C0CyEzy0A2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyCzyyD0F0FtDzytAtGtDtDtByEtGyEtAtB0AtGzz0B0E0DtGzz0Azy0FyE0CyEtDyEyE0D0F2Q&cr=399700550&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C267ED22-02D5-4151-A325-3F507FE4418F}]DisplayName=Astromenda
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C267ED22-02D5-4151-A325-3F507FE4418F}](default)=Astromenda
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C267ED22-02D5-4151-A325-3F507FE4418F}]FaviconPath=[%PROGRAM_FILES%]\WSE_Astromenda\FavIcon.ico
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C267ED22-02D5-4151-A325-3F507FE4418F}]TopResultURLFallback=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_35_ie&cd=2XzuyEtN2Y1L1QzuzzyEzz0FyCzy0CtByCyDyB0Fzy0A0AtCtN0D0Tzu0SzyyByEtN1L2XzutAtFtBtFtCtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCyBtAtC0B0C0E0AtG0DtCyBtBtGtDyEtAyCtGzz0C0C0FtGtAyC0CyCyDyCtDzzzy0DtDzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0D0F0A0C0FzytCtG0AtA0F0EtGyEtB0DzytGzytDyE0AtGtC0EyEyD0D0D0DyDtByB0EtD2Q&cr=2059839529&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{C267ED22-02D5-4151-A325-3F507FE4418F}]URL=http://astromenda.com/results.php?f=4&q={searchTerms}&a=ast_ir_14_35_ie&cd=2XzuyEtN2Y1L1QzuzzyEzz0FyCzy0CtByCyDyB0Fzy0A0AtCtN0D0Tzu0SzyyByEtN1L2XzutAtFtBtFtCtFtCtN1L1CzutCyEtBzytDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyCyBtAtC0B0C0E0AtG0DtCyBtBtGtDyEtAyCtGzz0C0C0FtGtAyC0CyCyDyCtDzzzy0DtDzz2QtN1M1F1B2Z1V1N2Y1L1Qzu2S0D0D0F0A0C0FzytCtG0AtA0F0EtGyEtB0DzytGzytDyE0AtGtC0EyEyD0D0D0DyDtByB0EtD2Q&cr=2059839529&ir=
  • [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes]DefaultScope={2E00D31D-D171-423D-836D-1A4D7EA7F1A9}