Windows Tutorials - Herong's Tutorial Examples - v5.62, by Dr. Herong Yang
Transponder: Best Offer - farmmext.exe
This section provides a tutorial example on remove spyware 'Best Offer' and related files farmmext.exe.
Symptom: After IE was launched, some "Best Offer" IE windows popped up randomly offering on-line product marketing pages.
HijackThis Report: I ran HijackThis on my friend's system and saw this line:
... C:\WINDOWS\farmmext.exe
Quick Research: I did a Google search on "C:\WINDOWS\farmmext.exe" and located a good description from http://www.malwhere.com/processes/farmmext.exe.html:
farmmext.exe is a process associated with the Transponder parasite. It monitors your online activities and opens pop-ups based on it. This process should be removed to protect your personal privacy.
Another page, http://www.doxdesk.com/parasite/Transponder.html, gives a very detailed introduction on this transponder, and says that it is responsible for the "Best Offer" popup IE windows.
What I Did:
1. Looked at C:\WINDOWS\farmmext.exe, found the file, and deleted it:
>dir C:\WINDOWS\farmmect.* farmmext.exe farmmext.ini >del C:\WINDOWS\farmmect.*
Result: "Best Offer" windows are still popping up. I need to work on this more.
Table of Contents
Introduction to Microsoft Windows
Introduction to Windows Explorer
Introduction to Internet Explorer
"Paint" Program and Computer Graphics
GIMP - GNU Image Manipulation Program
JPEG Image File Format Quality and Size
GIF Image File Format and Transparent Background
"WinZip" - ZIP File Compression Tool
"WinRAR" - RAR and ZIP File Compression Tool
FTP Server, Client and Commands
"FileZilla" - Free FTP Client and Server
Web Server Log Files and Analysis Tool - "Analog"
►Spyware Adware Detection and Removal
"HijackThis" - Spyware and Browser Hijacker Detector
"HijackThis" Report Entry Types
Spyware: WebBar - htwtb.bin and bar.dll
Spyware: SurfBuddy - sbuddy.dll
Spyware: WebSpecials - webspec.dll
Spyware: DSSAgent - DSSAgent.exe
►Transponder: Best Offer - farmmext.exe
IE Addon Program Listing and Removal
Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal
Trojan and Malware "Puper" Description and Removal
VSToolbar (VSAdd-in.dll) - Description and Removal
Spybot - Spyware Blocker, Detection and Removal
Setting Up and Using Crossover Cable Network
Home Network Gateway - DSL Modem/Wireless Router
Windows Task Manager - The System Performance Tool
"tasklist" Command Line Tool to List Process Information
"msconfig" - System Configuration Tool
Configuring and Managing System Services
Windows Registry Key and Value Management Tools