Remove Thinkpoint Virus – Removal Security Microsoft Windows
In few days, computer user at US attack from fake ThinkPoint anti-spyware application. What is Thinkpoint ?. ThinkPoint virus masquerades as a legitimate security product from Microsoft called Microsoft Security Essentials. Once installed on your computer, it will list numerous problems and claim that you should fix them immediately.
Thinkpoint Virus
ThinkPoint associated files and registry values. ThinkPoint will state that you need a heuristic program to fix the problems and it even offers to sell one for $99.90. Please don’t purchase Think Point. This program is fake. It won’t fix your computer because there actually are no problems except the ThinkPoint itself. If you are reading this article then you probably got infected with this malware.
ThinkPoint removal instructions:
1. Restart your computer. Once the ThinkPoint window comes press Ctrl+Alt+Delete or Ctrl+Shift+Escape. You should now see the Windows Task Manager screen as shown in the image below.
Click on the Processes tab. Then click and highlight hotfix.exe and click End Task. If it asks you “Are you sure you want to terminate the process?” click yes. This will close the ThinkPoint program.
2. While in Windows Task Manager, click the File -> “New Task (Run…)” button on the bottom right. Type in explorer.exe and click OK. Your desktop and icons should start up as normal.
NOTE: if you got an error message “Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access them”, then please run this command first:
cacls “C:\Windows\explorer.exe” /G Everyone:F
A new windows will come up asking “Are you sure?” Type Y and press enter.
Now run explorer.exe again.
3. Download the following file to your Desktop: windows-shell.reg. Double-click to run it. Click “Yes” when it asks if you want to add the information to the registry. This file will fix the Windows Shell entry. This step is important because if you won’t fix this entry, then your Windows Desktop will not be displayed the next time you reboot. Once the new registry value has been added, you can delete the file from your computer.
4. Run Internet Explorer or any other browser and download free anti-malware software from the list below:
Run a full system scan and remove ThinkPoint from your computer.
NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as administrator.
5. New threats appear every day. In order to protect your PC from such (new) infections we strongly recommend you to use ESET Smart Security.
ThinkPoint associated files and registry values:
Files:
For Windows XP users:
- C:\Documents and Settings\[User Name]\Application Data\hotfix.exe
- C:\Documents and Settings\[User Name]\Application Data\[SET OF RANDOM CHARACTERS].bat
For Windows Vista and Windows 7 users:
- C:\Users\[User Name]\AppData\Roaming\hotfix.exe
- C:\Users\[User Name]\AppData\Roaming\[SET OF RANDOM CHARACTERS].bat
Registry values:
- HKEY_CURRENT_USER\Software\PAV
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnonBadCertRecving” = “0″
- HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings “WarnOnPostRedirect” = “0″
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%AppData%\hotfix.exe”
for more security, please install avg antivirus internet security get promo for free 1 year serial avg 2011 (key).
via : deletemalware
Other posts you might like:
Remove System Defragmenter Virus (Uninstall Guide)
Remove ProtectShield Removal Tools
How to Remove Antimalware Doctor Virus
System Tool 2011 Removal
17 Responses to “Remove Thinkpoint Virus – Removal Security Microsoft Windows”
Hi,
Good work ..this article really helped us to get this solved.
Thanks
Thank you for this information. I was able to remove the Thinkpoint Virus with this site.
It was an easy fix with your help. Thank you again!
[...] that scans your hard drives and memory for problems. It’s fake computer defragmenter like thinkpoint virus, that hijacks your computer and does not allow you to use it properly. Becarefull choosing tool, [...]
[...] It’s make computer not run normaly causes any wrong at registry. New virus popular now is thinkpoint. They make windows explorer can [...]
I HAVE THINKPOINT PROBLEM. TRIED TO GET TO TASKMANAGER BUT VIRUS BLOCKS IT IS THERE ANOTHER ACCESS TO STOP HOTFIX.EXE?
@ JC : try to re enable Task Manager, visit http://windowsxp.mvps.org/Taskmanager_error.htm
Hello, I have followed these instructions and many more to get rid of thinkpoint and the antimalware doctor. I don’t know if I renamed the new spyware software before it downloaded. I did rename it after it downloaded – how do you rename it before you download? Once it was loaded and I renamed it I rebooted my computer like it asked and then when I ran it it wanted a list of updates. I clicked on that and it can’t get to the website in order to download the updates. I’m having alot of trouble trying to get rid of this thing. (I’ve spent two days on it so far- I am at my work computer now
Please help if possible
[...] reff for Remove Think Point Virus. Via : http://www.robinbenedict.com/ « Combofix Windows 7 Download Anti Spyware [...]
i’m usin xp…and i can’t access task manager at start up…wt shud i do?
I did everything you said to do, then restarted my computer. When I restarted the ThinkPoint Screen didn’t come up before the login screen, so I was starting to feel good. But then about 15 seconds after I logged on, I was having all of the thinkpoint problems again. What can I do differently now? I have scanned my computer with 3 different antivirus software programs and aparently it passed all of them because I am still infected…
thanks a ton, you saved me from taking it to a tech guy for 100 or so dollars, I owe you big.
Thank you SO much for this info. This is the second time I have came to your website for help with two seperate viruses, and both times I have been able to fix them on my own with the steps you gave. This info got rid of the Think Point virus….thanks again!!!!!
Installeld Norton before I got to step 3. Norton rebooted computer and now the desktop is lost.
Thanks guys! Removed the infection quick and easy.
I have the think point virus and it has me locked out of everything. Even when I try and download a different spyware program to scan the computer, it won’t let me run it correctly. It took the pc into safe mode and is not allowing me access to the internet. I try and run spyware programs from my CD, but that always has the program install it on my hard drive and then the virus controls it and doesn’t allow it to run correctly.
I am pulling my hair out and nothing is working…….. HeLP…
Help me please – i got this damn think point virus on my computer and i cannot remove it – when i get to your instruction: “Download the following file to your Desktop: windows-shell.reg. Double-click to run it” how do i do that?? when i “double click” on windows-shell.reg – all it does is bring me to a goole sign in page. Please help me remove this virus – i am not computer savy – and cannot afford to take it in to fix it.
Thanks
Do i delete the registry values associated with Thinkpoint virus?