"hotingzilla" <firstname.lastname@example.org> wrote in message
>I keep on finding farmmext.exe and its related files in C:\Windows and
> C:\WIndows\LastGood even though I have removed them by SPySweeper.
> It is pretty annoying that the spyware is repeatedly embedding itself onto
> my computer. And using Spyware removal tools doesn't prevent further
> appearances of farmmext.exe.
> Spysweeper does detect a Trojan downloader sort of stuff but cannot stop
> from downloading farmmext.exe again. It basically redownloads itself every
> hour or so when I am connected onto the Internet.
> I have checked with MSConfig and nothing weird there. All I want to know is
> the thing that is triggering the download. BTW, my IP is not static.
February 6, 2005 11:25:26 PM
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)
Thanks but I just did. The script on their website detected a
transponder/pynix installed, but I cannot find them by following their
However, I noticed something special. After I realized this problem, I
opened up a Guest account, and ever since, farmmext.exe have not been
redownloaded. Nothing suspicious so far. So can anyone tell me where I should
look now (Guest account may be a clue) in order to remove it from my main
Steer clear of Microsoft Windows AntiSpyware (BETA) until it's ready for
public release. It has too many problems yet!!!!
Some of this does not apply if you have Windows XP SP2. If you do not have
SP2, get it
First. Make sure of these settings and nothing will install without you
answering YES. (Except what may install as part of some other software.)
Don't click YES if you don't know/trust the source.
Start | Settings | Control Panel | Internet Options | Advanced tab |
Make sure both of these are NOT checked.
Enable Install On Demand (Internet Explorer)
[[Specifies to automatically download and install Internet Explorer
components if a Web page needs them in order to display the page properly or
perform a particular task.]]
Enable Install On Demand (Other)
[[Specifies to automatically download and install Web components if a Web
page needs them in order to display the page properly or perform a
Apply | OK
Enable Install On Demand (Other)
Is part of the driveby downloading of unwanted programs. i.e. Scumware or
whatever will install w/o you even being aware of it.
It is known as scumware. Visit these sites. 1, 2, 3 and 4 are really good.
Download, install, run, update and run again; one or all. They are all
good, FREE utilities. Make sure you update every program, even if you
just downloaded it. You must have the latest updates. Without updates,
you have a gun without ammo. You also need to use more than one
anti scumware program. One program will not catch everything.
[[SpywareBlaster doesn't scan and clean for spyware - it prevents it from
ever being installed.
The most important step you can take is to secure your system. And
SpywareBlaster is the most powerful protection program available.]] http://www.javacoolsoftware.com/spywareblaster.html
> Thanks but I just did. The script on their website detected a
> transponder/pynix installed, but I cannot find them by following their
> However, I noticed something special. After I realized this problem, I
> opened up a Guest account, and ever since, farmmext.exe have not been
> redownloaded. Nothing suspicious so far. So can anyone tell me where
> I should look now (Guest account may be a clue) in order to remove it
> from my main account?
> "Taurarian" wrote:
>> Check this site out, manual removal instructions included: