Solved

How to remove WSE_Astromendav Malware?

Posted on 2014-10-30
3
524 Views
Last Modified: 2014-10-31
Hi,
I'm a local admin on Windows 7 PC.  I tried uninstalling in program and Feature but it said I have no access.  I followed this article, http://www.exterminate-it.com/malpedia/file/wse_astromenda#location, gain access to this folder, C:\Windows\System32\Tasks\WSE_Astromenda   (I see WSE_Astromenda file name there).
But still getting no access message when I tried to uninstall it.  
I have Sophos at work that Quarnteen the virus but I have not permission to take action.   The desktop support is coming this afternoon and maybe need to reimage my pc to remove the virus.  Is there a way to remove this without reimaging my PC?  Thank you.
0
Comment
Question by:lapucca
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 50

Accepted Solution

by:
jcimarron earned 500 total points
ID: 40414120
lapucca --
Try deleting in SafeMode.  Astromenda may be tied up with some other process in Normal Mode.

If no help take ownership and possession of the folder and file.
http://www.addictivetips.com/windows-tips/windows-7-access-denied-permission-ownership/

Try the procedure here
http://www.exterminate-it.com/malpedia/file/wse_astromenda
How to Remove WSE_Astromenda
I have never used software from this site, so cannot recommend you use it, but the procedure given may help.
0
 

Author Comment

by:lapucca
ID: 40414143
The problem is that I don't see the file name mentioned in this site, http://www.exterminate-it.com/malpedia/file/wse_astromenda , in the file folder or in the task manager to terminate or delete.  The only possible files found in the Tasks folders are
{7EC5DF29-7B59-4F7D-B6B6-065DACBFB051} and WSE_Astromenda.  However, I don't know what the first file is.

What about this Trojan Killer tool?  https://www.system-tips.net/tips-remove-astromenda-search-virus/
0
 
LVL 81

Expert Comment

by:David Johnson, CD, MVP
ID: 40415195
go into task scheduler and remove astromedia, task manager should be able to stop it now, now you can delete it.
0

Featured Post

Automating Your MSP Business

The road to profitability.
Delivering superior services is key to ensuring customer satisfaction and the consequent long-term relationships that enable MSPs to lock in predictable, recurring revenue. What's the best way to deliver superior service? One word: automation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
SharpDesk V3.3 Scanning Issue 7 52
laserjet printer error 10 51
How to move files from subfolders in one folder 8 53
prevented Firefox in organization 7 38
OfficeMate Freezes on login or does not load after login credentials are input.
A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
This Micro Tutorial will teach you how to change your appearance and customize your Windows 7 interface to your unique preference. This will be demonstrated using Windows 7 operating system.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

732 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question