freddy75.exe

freddy75.exe was added to FreeFixer's database on 19th November 2009. The most recent search for this file was done on 19th November 2009. freddy75.exe is located in the 'c:\WINDOWS\' folder and has a size of 38912 bytes.

So far there has been 1 search for freddy75.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

freddy75.exe does not have any version or vendor information.

Digital signatures [?]

freddy75.exe is not signed.

Hashes [?]

Property	Value
MD5	0b5a2e6227c9879fb21f62eec3******
SHA256	353eea5ffe2cea5e6967fdd3644d63d78bca3079b6db16589bfec04351******

What will you do with freddy75.exe?

To help other users, please let us know what you will do with freddy75.exe:

What did other users do?

The poll result listed below shows what other users chose to do with freddy75.exe:

User vote results: There were 86 votes to remove and 5 votes to keep

chartAPI.org

NOTE: Please do not use this poll as the only source of input to determine what you will do with freddy75.exe.

Trends

The following graph shows how often freddy75.exe has been searched on Google over time:

Malware or legitimate?

If you feel that you need more information to determine if your should keep this file or remove it, please read this guide.

Free online surveys

And now some shameless self promotion ;)

Hi, my name is Roger Karlsson. I've been running this website since 2006. I want to let you know about the FreeFixer program. FreeFixer is a freeware tool that analyzes your system and let you manually identify unwanted programs. Once you've identified some malware files, FreeFixer is pretty good at removing them. You can download FreeFixer here. It runs on Windows 2000/XP/2003/20008/Vista/7 RC1. (32-bit only).

If you have questions, feedback on FreeFixer or the freefixer.com website, need help analyzing FreeFixer's scan result or just want to say hello, please contact me. You can find my email address at the contact page.

Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

Roger Karlsson writes

3 thumbs

If you got freddy75.exe on your machine, it's infected with Koobface:

http://www.virustotal.com/sv/analisis/536c0432125f91e8766c3cc94134aeba1e164a2381e6c39b70fe80662ca006a7-1258726065

It's relatively easy to remove this variant of Koobface. Locate

"c:\windows\freddy75.exe",
"c:\windows\ld15.exe" and
"c:\Program Files\captcha.dll"

in Freefixers scan result and check them for removal. Restart your machine and run a Freefixer scan again. Verify that the 3 files above no longer appear anywhere in the scan result.

Hope that helps.

# 20 Nov 2009, 6:09

michael writes

1 thumb

I found freddy75.exe in the NVIDIA files of windows. Also got it from facebook after wife opened a suspicious video message. It keeps popping up messages every 10 minutes.

# 23 Nov 2009, 1:21

skip writes

3 thumbs

what I did to remove this was to get into run msconfig disabled start-up programs starting in safe mode might be easy to do. restarted installed MalwareBytes anti-malware updated it & ran a quick scan found this along with 30+ more problems. note some virus maybe removed but some hide in the system restore so I disable it restart & complete a full scan using MalwareBytes anti-malware & restart to be sure.

# 23 Nov 2009, 22:35

Geir writes

1 thumb

I found a file under window/ with the name freddy73.exe.

# 24 Nov 2009, 15:28

Roger Karlsson writes

0 thumbs

@Geir: freddy73.exe is also Koobface file. It's usually located in c:\Windows\. You can safely delete it from your hard drive.

# 25 Nov 2009, 3:15

Kiki writes

0 thumbs

THANKS!
I ran it on my computer, and it went through very fast. (actually, faster than McAfee!!)
I hope it's gone now. I don't see freddy in there, so I think it's fine. Thank so much! I think I'm gonna keep and eye one FreeFixer for a VERY long time!!

# 25 Nov 2009, 17:10

Andrew writes

0 thumbs

Seems to get stuck at the Windows XP Firewall allowed programmes part of scan.

# 29 Nov 2009, 14:02

Roger Karlsson writes

0 thumbs

@Andrew: If FreeFixer repeatedly gets stuck during the Windows XP Firewall application scan, you can disable that scan location by adding

plugins.xpfwauthapps.enable=0

to the settings file. The settings file location is "C:\Documents and Settings\%USERNAME%\Application Data\FreeFixer\settings.txt", where %USERNAME% is your user name.

You can find more information on the available settings here:

http://www.freefixer.com/manual.html#configfile

Did that solve the problem?

# 30 Nov 2009, 15:07

Andrew writes

0 thumbs

Thank you for replying, Roger. Unfortunately, when I navigate to that folder, it appears empty.

# 1 Dec 2009, 14:01

Roger Karlsson writes

0 thumbs

@Andrew: Oh, sorry! The settings file is initially created when FreeFixer is shut down with the X button in the upper right corner in the FreeFixer window. Just start FreeFixer and close it, and the settings.txt file should be available to edit in the "C:\Documents and Settings\%USERNAME%\Application Data\FreeFixer\" folder.

# 4 Dec 2009, 13:30

Andrew writes

0 thumbs

That got it working and Freddy removed. Many thanks.

# 6 Dec 2009, 11:50

Roger Karlsson writes

0 thumbs

The Koobface worm knows how to escape detection. Here's a virustotal scan from a new variant of freddy75.exe. Only 5/41 antivirus programs detects it:

http://www.virustotal.com//analisis/1053fe78ba7f6f070fa2b355d529ead366d8ec65eed4fa036ce094c4a4972771-1260232147

# 7 Dec 2009, 16:33

Hot files

sshnas21.dll, monnid32, wwwpos32.exe, aqlb.hjo, incognito.exe, rarype32.exe, netuza32.exe, 9fo3ar0j.exe, kbdsock.dll, freddy84.exe, freddy82.exe, freddy81.exe, freddy80.exe, extrac64_cab.exe, wmpscfgs .exe, cliconfg64.exe, winhlp64.exe, siszyd32.exe, sshnas.dll, IS2010.exe, smss32.exe, winlogon32.exe, helper32.dll, IS15.exe, richtx64.exe, settdebugx.exe, sr882388.exe, questservice111.exe, ccdrive32.exe, av_md.exe, essledv.exe, msa.exe, algqeh32.exe, ld16.exe, freddy79.exe, photo_id.exe, winupdate86.exe, kwanzy131.exe, wind7upd.exe, mstre26.exe, winlogon86.exe, AVR10.exe, webserver.exe, ihaupd32.exe, wyeke.exe, wyeke.dll, AdobeARM.exe, WLIDSVC.EXE, ssscheduler.exe, getPlus_Helper.dll, wscsvc32.exe, zavupd32.exe, herss.exe, ie3sh.exe, pp14.exe, zwangi.exe, msb.exe
filterpipeline..,

freddy75.exe

Vendor and version information [?]

Digital signatures [?]

Hashes [?]

What will you do with freddy75.exe?

What did other users do?

Trends

Malware or legitimate?

And now some shameless self promotion ;)

Comments

Roger Karlsson writes

michael writes

skip writes

Geir writes

Roger Karlsson writes

Kiki writes

Andrew writes

Roger Karlsson writes

Andrew writes

Roger Karlsson writes

Andrew writes

Roger Karlsson writes

Leave a reply

Hot files