PUP.Astromenda Removal Report

Table of Contents

Aliases

14 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AVG	Generic36.AFHE
Antiy-AVL	GrayWare[AdWare:not-a-virus]/Win32.Agent
Sophos	Troj/Agent-AJJO
McAfee-GW-Edition	BehavesLike.Win32.Dropper.fh
TrendMicro	ADW_STARTPAGE
Comodo	ApplicUnwnt
Kaspersky	not-a-virus:AdWare.Win32.Agent.gpgg
Symantec	Adware.DealPly
McAfee	Artemis!6C83D6FDCE5C
CAT-QuickHeal	AdWare.Agent.r6 (Not a Virus)
AVG	Generic_s.DM
DrWeb	Adware.Downware.8492
Avast	Win32:Dropper-gen [Drp]
Symantec	Trojan Horse

SpyHunter Detects & Remove PUP.Astromenda

File System Details

PUP.Astromenda may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	UpdateTask.exe	1c03f480fbe4181a98346c9774dcb2f7	82
Name: UpdateTask.exe MD5: 1c03f480fbe4181a98346c9774dcb2f7 Size: 537.25 KB (537251 bytes) Detections: 82 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
2.	UpdateTask.exe	6e1f5d6ec652d993672aeda0ed35490c	55
Name: UpdateTask.exe MD5: 6e1f5d6ec652d993672aeda0ed35490c Size: 537.71 KB (537717 bytes) Detections: 55 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
3.	UpdateTask.exe	1b96bd58fbaf9646448004effa61a25a	45
Name: UpdateTask.exe MD5: 1b96bd58fbaf9646448004effa61a25a Size: 501.79 KB (501792 bytes) Detections: 45 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
4.	UpdateTask.exe	7872c835da46c29736d0e8b7d2f73ff5	30
Name: UpdateTask.exe MD5: 7872c835da46c29736d0e8b7d2f73ff5 Size: 537.91 KB (537916 bytes) Detections: 30 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
5.	UpdateTask.exe	aad5fc7396c4117aa1bc1d2293af39a1	27
Name: UpdateTask.exe MD5: aad5fc7396c4117aa1bc1d2293af39a1 Size: 512.36 KB (512365 bytes) Detections: 27 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
6.	UpdateTask.exe	06ce970cd88d511d50fbe2c50eb671cb	26
Name: UpdateTask.exe MD5: 06ce970cd88d511d50fbe2c50eb671cb Size: 538.19 KB (538192 bytes) Detections: 26 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
7.	bkup.dat	d99b3faa579c71391318c52462c3f21f	26
Name: bkup.dat MD5: d99b3faa579c71391318c52462c3f21f Size: 16.9 KB (16901 bytes) Detections: 26 Type: Data file Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: July 7, 2017
8.	UpdateTask.exe	228ef1c2d1c8d0f1b80da0ae9f9eb750	21
Name: UpdateTask.exe MD5: 228ef1c2d1c8d0f1b80da0ae9f9eb750 Size: 502.4 KB (502402 bytes) Detections: 21 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
9.	UpdateTask.exe	31536a79e297140ba591c6a634913d01	19
Name: UpdateTask.exe MD5: 31536a79e297140ba591c6a634913d01 Size: 538.03 KB (538030 bytes) Detections: 19 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
10.	UpdateTask.exe	91af9bdce640e7e0eb08fab569fa4e1e	17
Name: UpdateTask.exe MD5: 91af9bdce640e7e0eb08fab569fa4e1e Size: 538.46 KB (538468 bytes) Detections: 17 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
11.	UpdateTask.exe	4a0a6d2cffa1bfcf80a805742e3cdc31	16
Name: UpdateTask.exe MD5: 4a0a6d2cffa1bfcf80a805742e3cdc31 Size: 537.1 KB (537105 bytes) Detections: 16 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
12.	UpdateTask.exe	2af6fd501749d4abde7f1b8920cb3aba	14
Name: UpdateTask.exe MD5: 2af6fd501749d4abde7f1b8920cb3aba Size: 537.44 KB (537449 bytes) Detections: 14 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
13.	UpdateTask.exe	756ee93646c9567480ac05a3261667b2	13
Name: UpdateTask.exe MD5: 756ee93646c9567480ac05a3261667b2 Size: 537.76 KB (537768 bytes) Detections: 13 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
14.	UpdateTask.exe	8807418aa5e4b7bac119017fa7bd8aaa	13
Name: UpdateTask.exe MD5: 8807418aa5e4b7bac119017fa7bd8aaa Size: 492.48 KB (492488 bytes) Detections: 13 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
15.	UpdateTask.exe	37e67a4947544814f6aa5accdd98ec4a	12
Name: UpdateTask.exe MD5: 37e67a4947544814f6aa5accdd98ec4a Size: 502.62 KB (502624 bytes) Detections: 12 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
16.	UpdateTask.exe	385928ae698e982e060955515576b6df	11
Name: UpdateTask.exe MD5: 385928ae698e982e060955515576b6df Size: 537.66 KB (537661 bytes) Detections: 11 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
17.	UpdateTask.exe	7f8e292ecece1f91690b5aee2391172b	11
Name: UpdateTask.exe MD5: 7f8e292ecece1f91690b5aee2391172b Size: 537.59 KB (537598 bytes) Detections: 11 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
18.	UpdateTask.exe	e90414b1b88e28ed45b69bfad696ef80	10
Name: UpdateTask.exe MD5: e90414b1b88e28ed45b69bfad696ef80 Size: 527.46 KB (527461 bytes) Detections: 10 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
19.	UpdateTask.exe	1ac29e2494eb03c60d9d9a5f0757d213	9
Name: UpdateTask.exe MD5: 1ac29e2494eb03c60d9d9a5f0757d213 Size: 537.72 KB (537723 bytes) Detections: 9 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
20.	UpdateTask.exe	8a8fdc88d3b2644681b2ad1d886f4000	9
Name: UpdateTask.exe MD5: 8a8fdc88d3b2644681b2ad1d886f4000 Size: 527.17 KB (527179 bytes) Detections: 9 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
21.	UpdateTask.exe	045dc81ccdc5da56a2c1f6986deffced	9
Name: UpdateTask.exe MD5: 045dc81ccdc5da56a2c1f6986deffced Size: 501.97 KB (501973 bytes) Detections: 9 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
22.	UpdateTask.exe	4f75285599ffe76130d96738a7fb85a4	9
Name: UpdateTask.exe MD5: 4f75285599ffe76130d96738a7fb85a4 Size: 502.47 KB (502473 bytes) Detections: 9 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
23.	UpdateTask.exe	7276dccac0f383fb945680da4d9eb2f0	9
Name: UpdateTask.exe MD5: 7276dccac0f383fb945680da4d9eb2f0 Size: 538.76 KB (538769 bytes) Detections: 9 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
24.	UpdateTask.exe	7f6a78ea233028607d2dbd1aa4c74b66	8
Name: UpdateTask.exe MD5: 7f6a78ea233028607d2dbd1aa4c74b66 Size: 537.1 KB (537100 bytes) Detections: 8 Type: Executable File Path: %SystemDrive%\Users\<username>\AppData\Roaming\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
25.	UpdateTask.exe	9eca9703952e73cdd8c79d76e3dd485a	8
Name: UpdateTask.exe MD5: 9eca9703952e73cdd8c79d76e3dd485a Size: 537.08 KB (537088 bytes) Detections: 8 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016
26.	UpdateTask.exe	970cda0c11e2ca60a0827979a104125d	8
Name: UpdateTask.exe MD5: 970cda0c11e2ca60a0827979a104125d Size: 537.93 KB (537932 bytes) Detections: 8 Type: Executable File Path: %APPDATA%\WSE_Astromenda\UpdateProc Group: Malware file Last Updated: March 22, 2016

More files

Registry Details

PUP.Astromenda may create the following registry entry or registry entries:

File name without path

Astromenda.lnk

Regexp file mask

%LOCALAPPDATA%\Astromenda\Application\astromenda.exe

%WinDir%\System32\Tasks\Astromenda

%WINDIR%\System32\Tasks\WSE_Astromenda

%windir%\Tasks\Astromenda.job

%WINDIR%\Tasks\WSE_Astromenda.job

HKEY..\..\..\..{RegistryKeys}

Software\astromenda

Software\Astromenda Browser

SOFTWARE\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}

SOFTWARE\Classes\Wow6432Node\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}

Software\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\WSE_Astromenda.job

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\WSE_Astromenda.job.fp

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Astromenda

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\astromenda.exe

Software\Microsoft\Windows\CurrentVersion\RunOnce\Astromenda

Software\Microsoft\Windows\CurrentVersion\RunOnce\WSE_Astromenda

SOFTWARE\Wow6432Node\Classes\AppID\{9CB2CD61-FFA0-406C-9D2D-8FDE6F4A4D8A}

Software\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{2E00D31D-D171-423D-836D-1A4D7EA7F1A9}

SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\astromenda.exe

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\astromenda.exe

Software\WSE_Astromenda

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

Astromenda

WSE_Astromenda

Directories

PUP.Astromenda may create the following directory or directories:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Astromenda

%APPDATA%\WSE_Astromenda

%AppData%\Astromenda

%LOCALAPPDATA%\Astromenda

%LOCALAPPDATA%\AstromendaKMS

%PROGRAMFILES%\Astromenda

%PROGRAMFILES%\WSE_ASTROMENDA

%PROGRAMFILES(x86)%\Astromenda

%PROGRAMFILES(x86)%\WSE_ASTROMENDA

%UserProfile%\Local Settings\Application Data\Astromenda

URLs

PUP.Astromenda may call the following URLs:

Astromenda Search Addon

astromenda.com

http://astromenda.com/?a=&q=

Ranking:	607
Threat Level:	10 % (Normal)
Infected Computers:	149,349

First Seen:	July 29, 2014
Last Seen:	May 17, 2024
OS(es) Affected:	Windows

Promote SpyHunter via ShareASale & Get a 55% Payout

Search

Change Region

PUP.Astromenda

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove PUP.Astromenda

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

Maxask.com

Onlinenothome.com

OpenCloud Antivirus

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?