Transponder: Best Offer - farmmext.exe

This section provides a tutorial example on remove spyware 'Best Offer' and related files farmmext.exe.

Symptom: After IE was launched, some "Best Offer" IE windows popped up randomly offering on-line product marketing pages.

HijackThis Report: I ran HijackThis on my friend's system and saw this line:

... C:\WINDOWS\farmmext.exe

Quick Research: I did a Google search on "C:\WINDOWS\farmmext.exe" and located a good description from http://www.malwhere.com/processes/farmmext.exe.html:

farmmext.exe is a process associated with the Transponder parasite. 
It monitors your online activities and opens pop-ups based on it. 
This process should be removed to protect your personal privacy.

Another page, http://www.doxdesk.com/parasite/Transponder.html, gives a very detailed introduction on this transponder, and says that it is responsible for the "Best Offer" popup IE windows.

What I Did:

1. Looked at C:\WINDOWS\farmmext.exe, found the file, and deleted it:

>dir C:\WINDOWS\farmmect.*
   farmmext.exe
   farmmext.ini

>del C:\WINDOWS\farmmect.*

Result: "Best Offer" windows are still popping up. I need to work on this more.

Table of Contents

 About This Book

 Introduction to Microsoft Windows

 Introduction to Windows Explorer

 Introduction to Internet Explorer

 "Paint" Program and Computer Graphics

 GIMP - GNU Image Manipulation Program

 JPEG Image File Format Quality and Size

 GIF Image File Format and Transparent Background

 "WinZip" - ZIP File Compression Tool

 "WinRAR" - RAR and ZIP File Compression Tool

 FTP Server, Client and Commands

 "FileZilla" - Free FTP Client and Server

 Web Server Log Files and Analysis Tool - "Analog"

Spyware Adware Detection and Removal

 What Is Spyware?

 "HijackThis" - Spyware and Browser Hijacker Detector

 "HijackThis" Report Entry Types

 Spyware: WebBar - htwtb.bin and bar.dll

 Spyware: SurfBuddy - sbuddy.dll

 Spyware: WebSpecials - webspec.dll

 Spyware: DSSAgent - DSSAgent.exe

Transponder: Best Offer - farmmext.exe

 Spyware: dinst.exe - dsr.dll

 IE Addon Program Listing and Removal

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 Spybot - Spyware Blocker, Detection and Removal

 Setting Up and Using Crossover Cable Network

 Home Network Gateway - DSL Modem/Wireless Router

 Windows Task Manager - The System Performance Tool

 "tasklist" Command Line Tool to List Process Information

 "msconfig" - System Configuration Tool

 Configuring and Managing System Services

 Windows Registry Key and Value Management Tools

 Startup Programs Removal for Better System Performance

 Winsock - Windows Sockets API

 Java on Windows

 Glossary of Terms

 Outdated Tutorials

 References

 PDF Printing Version