From Google.
I've had a persistent problem with the Astromenda highjack malware since I first began setting up my brand-new Yoga 2 Pro. MalwareBytes was the second or third app I installed and it immediately found Astromenda. Preinstalled? Who knows? It kept recurring after MB removed it. I might have uninstalled it manually -- I don't remember. I did go into Regedit and rip out every reference, but MB kept picking it up in a Preferences file buried seven layers deep in App Data.
Finally, yesterday after some research to determine the safety of AdwCleaner I downloaded and ran that. It identified Pokki as malware. I had already decided not to use Pokki, especially after reading about problems with it, so I let AdwCleaner do its thing. Pokki is gone. I've restarted half a dozen times, opening and closing Chrome, and rescanned with MalwareBytes. No more sign of Astromenda, even though it is still listed in that Preferences file.