The following instructions have been created to help you to get rid of "FileFreedom" manually.
Use this guide at your own risk; software should usually be better suited to remove malware, since it is able to look deeper.

If this guide was helpful to you, please consider donating towards this site.

Threat Details:

  • spyware

The answer to the question if the program would spy that it is not hidden - during my tests those three disappeared even when the process was still running. Also they say they don't log downloads by name, but using numbers. Using unique IDs still allows personal identification! Furthermore the EULA (which isn't displayed, but saved in its folder) wants the user to agree to automated software updates without his knowledge.
Privacy Statement:
From readme.txt:
2. Is this program watching me? Answer: When you download a new file using a P2P program, the Companion will look that file up in the File Catalog and display the information to you. A note is also made that you downloaded that particular file. This information is used to bring you personalized recommendations of other files. Recommendations are calculated by comparing the file's you downloaded to those of other users in order to find users that have similar tastes with you (the technical term for this is collaborative filtering). Information on what files you downloaded is stored in the form "user 424322 downloaded file 342525." FileFreedom does not track personally identifiable information - i.e. we DO NOT store something like "John Smith downloaded file.mp3"[...]
4. Is this program spyware? Answer: NO! Spyware is a term that refers to programs that hide on your computer and collect personal information about you. The Companion meets none of these criteria. Whenever the FileSharing Companion is running, there will be 3 orange dots in your system-tray (by the clock). Furthermore, whenever the Companion communicates with the FileFreedom servers, a window will appear. There is nothing hidden about this program.
Removal Instructions:


Please use Spybot-S&D, RunAlyzer or msconfig.exe to remove the following autorun entries.
  • Entries named "FileFreedom_Plugin".


Please use Windows Explorer or another file manager of your choice to locate and delete these files.
  • The file at "<$PROGRAMFILES>\FILEFREEDOM\wtm.exe".
  • The file at "<$WINDIR>\..\Program files\FILEFREEDOM\wtm.exe".
Make sure you set your file manager to display hidden and system files. If FileFreedom uses rootkit technologies, use our RootAlyzer or our Total Commander anti-rootkit plugins.
You will have to use a global search for files without a name specified. Be extra careful, because just the name might not be enough to identify files!


You can use regedit.exe (included in Windows) to locate and delete these registry entries.
  • Delete the registry key "FilleFreedom Plugin - FileFreedom, LLC" at "HKEY_CURRENT_USER\Software\".
  • Delete the registry key "FileFreedom Plugin - FileFreedom, LLC" at "HKEY_CURRENT_USER\Software\".
  • Delete the registry key "{6E83AE1C-F69C-4AED-AF98-D23C24C6FA4B}" at "HKEY_CLASSES_ROOT\Interface\".
  • Delete the registry key "Flt" at "HKEY_LOCAL_MACHINE\Software\".
If FileFreedom uses rootkit technologies, use our RegAlyzer, RootAlyzer or our Total Commander anti-rootkit plugins.

Final Words:

If neither Spybot-S&D nor self help did resolve the issue or you would prefer one on one help,
  1. Please read these instructions before requesting assistance,
  2. Then start your own thread in the Malware Removal Forum where a volunteer analyst will advise you as soon as available.