Filetonic Filetonic logo print version

Ask a Question

To find an exe file, dll file or file extension visit the library »

 

How do I Remove Freddy K Trojan?

Freddy K Removal

Freddy K is a remote administration tool or RAT.  This Trojan enters through a security hole in the operating system to gain unauthorized access to personal information.  It is capable of recording and storing keystrokes.  Typically, it becomes installed on the computer without the user’s knowledge of its capability and remains resident for some time before its negative nature is discovered.

Download our recommended Spyware Scanner 

Freddy K is designed to allow the remote attacker to control the computer through a client on the remote attacker’s machine and the server on the infected computer.  It may infect the computer through email or file sharing. 

Commonly, computer users might run this application while under an impression that it is a helpful application.  An email might arrive and indicates that Freddy K should be used for the benefit of the computer user. 

The program then copies itself to the Windows installation folder, adding keys and files that will allow it to operate each and every  time the computer boots up.  It can change the registry, the executing commands, the start up services, and the listing files. 

In essence, this program allows this intruder, or hacker, to control the computer.  It has multi-functionality and operates according to the needs of its originator.

The best thing to do is to remove Freddy K as soon as you discover its negative capability.  Freddy K can effectively be removed with an up-to-date anti-spyware program. 

Additionally, manual removal of Freddy K can be accomplished.  However, you should not attempt this unless you are well-versed with the workings of computers.  It is a long and difficult process and mistakes can be made quite easily.

All Freddy K registry values, registry keys, DLL files, processes, and files must be completely removed from the infected computer.  To delete each file, process, and key manually, complete the following set of directions. 

• Click Start.
• Click Run.
• Type ‘regedit’.
• Click ok to open the registry editor, referred to as regedit.
• Click my computer at the top of the box.
• Click edit.
• Click find.
• Type in the one of the keys or files in the following lists, and click find or find next.  Begin with the ones that do not start with HKEY, since these are more easily discovered and deleted.  Make sure that the box is checked in front of keys, values, and data, so that the regedit looks in the correct places.  Regedit should locate a key for you.  Right click on the key and delete it by clicking delete in the menu that appeared or on the keyboard.

• You will do this one file at a time.  After you delete each one, hit the F3 key on your keyboard to reopen the find next box.  Continue the process and delete additional bad registry files.
• Once regedit indicates that the search is finished, you should click on my computer in the regedit and redo the search to guarantee that you have deleted all possible bad files from this program.

Freddy K files:

freddyk.exe
freddyk3.exe
freddykkillerr.exe
micronet.exe
winapi.exe
wintool.exe
micronet.dll
anleitung.txt
freddy.hlp
roh.2
serversetup.doc
serversetup.txt
server.txtw32freddy02a.vex

Detecting and deleting the Freddy K files or keys that begin with HKEY involve a more involved set of steps. 

Use the following steps to manually delete the Freddy K values that start with HKEY.

• Click Start.
• Click Run.
• Type ‘regedit’.
• Click ok to open the registry editor, referred to as regedit.
• Click my computer at the top of the box.
• Follow the path given in each value, clicking each folder open to locate the next item in the path until you have reached the last item.  Once you have gotten to the last item, you can delete it.  Each slash indicates a new folder.

Freddy K registry values:

HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\
unwinapi.exe
HKEY_LOCAL_MACHINE\software\Microsoft\windows\currentversion\
unwintool.exe

Use the uppermost set of directions to find and delete these Freddy K DLL files:

micronet.dll

To manually detect and delete the Freddy K processes, complete the following set of instructions.

• Click Start.
• Click Search.
• Click for files or folders.
• Type in the name of the file, one at a time, from the following list of Freddy K processes.
• Click search.
• Delete the found files.

Freddy K processes:

freddyk.exe
freddyk3.exe
freddykkillerr.exe
micronet.exe
winapi.exe
wintool.exe

Related posts

You can leave a comment, or trackback from your own site.

Leave a Reply

  •