• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

How to remove ThinkPoint (Uninstall instructions)

Myantispyware team October 18, 2010    

ThinkPoint is a rogue (fake) antivirus program that is distributed through the use of Microsoft Security Essentials Alert trojan. Important to know, the program is unable to detect or rid your system of parasites nor will be protect you from legitimate future threats. You need to remove ThinkPoint from your computer as quickly as possible!

When started, this malware configures itself to start automatically every time, when your computer loads. Immediately after launch, ThinkPoint starts scanning your computer and list a lot of infections to trick you into thinking your PC in danger. It will report that was able to clean the majority of infected files, but was not able to cure a few important Windows files, such as firefox.exe, taskmgr.exe, iexplore.exe and offer to purchase its full version to clean them. However, the scan results is a scam, because the program can`t detect any infections. So, you may easily ignore all that ThinkPoint will display you.

What is more, while ThinkPoint is running, it will hide your desktop, Start button and Windows taskbar. Moreover, the rogue will also block Windows Task Manager. When you try to run it, this malware will display a security alert that states:

The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.
This happened because the application was infected by a malicious program which might pose a threat for the OS.
It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.

As you can see, ThinkPoint is a totally scam, which created with one purpose to scare you into purchasing so-called “full” version of the program. Most important do not purchase it! Please use the removal guide below in order to remove ThinkPoint and any associated malware from your computer for free.

More screen shoots of ThinkPoint



Use the following instructions to remove ThinkPoint

Step 1. Stop ThinkPoint process

Once Windows loaded you will see a window similar to the one below.


ThinkPoint screen

Now press CTRL + ALT + DEL. It will open Windows Task manager. Select hotfix.exe process as shown in the screen below.


Windows Task manager

Click “End Process” button. It will close ThinkPoint.

Now click File, New Task. Type explorer and press Enter. It will back the Start button and task bar.

Step 2. Remove ThinkPoint associated malware

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for ThinkPoint infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.


Malwarebytes Anti-malware, list of infected items

Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove ThinkPoint. MalwareBytes Anti-malware will now remove all of associated ThinkPoint files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.

ThinkPoint removal notes

Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.

Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.

ThinkPoint creates the following files and folders

%AppData%\hotfix.exe
%AppData%\{RANDOM}.bat

ThinkPoint creates the following registry keys and values

HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnonBadCertRecving” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPostRedirect” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | “Shell” = “%AppData%\hotfix.exe”

ThinkPoint removal – Video guide

Malware removal Rogue Anti Spyware

 Previous Post

How to remove antispytag.com browser hijacker

Next Post 

Remove antispyway.com hijacker and Antivirus Action malware

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

348 Comments

  1. Patrik
    ― November 29, 2010 - 11:23 am  Reply

    Claudia, uninstall all your antivirus/antispyware programs. Next, check browser`s proxy settings.

  2. Patrik
    ― November 29, 2010 - 11:27 am  Reply

    Dennis, probably your computer is infected with a hidden trojan/rootkit. Please start a new topic in our Spyware removal forum. I will check your PC.

  3. Bill
    ― November 29, 2010 - 1:41 pm  Reply

    Patrik, Thanks to your help I was able to get rid of Thinkpoint. I am now missing 3 .dll’s upon boot. How do I get the .dll’s back?

  4. Sal Uki
    ― November 29, 2010 - 2:52 pm  Reply

    Followed your simple instructions and I am quickly back in business.

    THANK YOU!!!!!!!!!!!!!!!!!

  5. Kelby
    ― November 29, 2010 - 3:42 pm  Reply

    Think you guys soooo much, your advise said our computer. But my computer keeps on poping up the MALWARE and asking me if i want to change to my harddrive, Is that ok?

  6. Jason
    ― November 29, 2010 - 7:42 pm  Reply

    Awesome stuff. Just preordered cataclysm and this plauged my comp. Thank god for smart phones 🙂

  7. Jr
    ― November 29, 2010 - 8:09 pm  Reply

    So helpful! Thanks a ton!

  8. Mike
    ― November 30, 2010 - 11:42 am  Reply

    Patrik:

    I’m having the exact same problem Mike M had on Nov. 17. He said:

    I have the thinkpoint virus on my system as well. I can’t even open in safe mode. After hitting F8, I get the open in safe mode prompt, open with networking, and open with command prompt. If i try to open with safe mode (or any mode) the screen goes completly black. If I hit ctl-alt-del, it restarts and gives me a black screen before the windows logon. I can’t get anything past that point, and have to press the power button myself to shut down the computer. The computer operating system is xp. Please Help

    Comment by Mike M — November 16, 2010 #

    I downloaded Malwarebytes and scanned. After a lengthy (3+ hours) scan, my computer froze. A reboot ended with a black screen. Safe Mode, Safe Mode with Command Prompt and Safe Mode with Networking all result in a black screen. I, too, have XP, not certain of the version. I’m not at home at the moment. Advice?

  9. shafeek
    ― November 30, 2010 - 2:49 pm  Reply

    thank youuuuuuuuu so much….

  10. George
    ― November 30, 2010 - 5:16 pm  Reply

    Hi, whilst on a dubious site, ran into thinktank, searched on my phone to find its nasty and tried to shutdown. After it wouldn’t, scared, i ended up pulling the plug, and now i get the blue screen when trying to load. Tried safe mode, no luck.
    Please help!

  11. Drew Hamilton
    ― November 30, 2010 - 11:49 pm  Reply

    I was just about to take my laptop to a computer guy… who would have charged a fortune. Glad I found this site! thnx! I will buy the full version now!

  12. jeffrey
    ― November 30, 2010 - 11:51 pm  Reply

    Ok I removed thinkpoint once and it was easy but now its back and everytime I run malware bytes it comes up with a big fat goose egg with objects infected. What can I do???

  13. Jenny
    ― November 30, 2010 - 11:59 pm  Reply

    Patrik:
    I hope you know how super awesome wonderful you are, helping so many people by posting this, then actually commenting back. There are so many people, such as is my scenario, who encounter such sucky problems by stupid people who create viruses and have no idea what to do, and need their computers for school/jobs, and i just wanted to say that you are like Jesus-worthy because, honestly, if it wasn’t for you, so many people would miss deadlines for school/work, maybe lose major points in a course, lose money, maybe even get fired. You are truly truly awesome. Thank you.

  14. Patrik
    ― December 1, 2010 - 7:10 am  Reply

    Mike and George, try Last good configuration mode.

  15. Patrik
    ― December 1, 2010 - 7:15 am  Reply

    jeffrey, open a new topic in our Spyware removal forum. I will help you.

  16. Mike
    ― December 1, 2010 - 10:33 am  Reply

    I forgot to mention that I also tried Last Good Configuration Mode. Got the same results, i.e., nothing. No matter which command I try, I’m then prompted to select my operating system, and when I do, the screen goes dark. Please help, but know that I’m not computer-literate, so not very well versed in non-software computer actions. In other words, I can use applications that tell me what to do, but not much else. Thank you in advance for any help you can give.

  17. jeffrey
    ― December 1, 2010 - 11:00 am  Reply

    Patrk send me your email so I could send you a pic my computer just took a dump on me it won’t even start up now Idk what’s wrong with it and I’m really great with computers and I’ve never ever seen anything like this

  18. Mike
    ― December 1, 2010 - 12:10 pm  Reply

    I’m confused. Right in the description of the thinkpoint virus it states that it also blocks your task manager from opening. Then step one of your fix says open task manager.

  19. Brian
    ― December 1, 2010 - 3:32 pm  Reply

    FANTASTIC JOB BY WHOEVER PUT THIS INFORMATION TOGETHER TO BE USED BY EEN THE SIMPLEST OF MINDS. WORKED LIKE A CHRM AND WISH I KNEW WHERE YOU WERE SO I COULD SEND IN LUCNH. THE GOOD GUYSGET OVER ON THE MORONS THAT HAVE NOTHING BETER TO DO THAN HOPE THE CAN MKE MONEY OFF THESE VIRUSES. I CALLED A NUMBER FROM THE SAME SCREEN THAT I FOUND YOU GUYS ON AND THE NICE YOUNG GRL SAID SHE COUL HELP AND GET ME GOING FOR A MERE $199.00

    HOPE SHE AND HER FELLOW EMPLOYEES GET SOME VIRUSES OF THIER OWN BUT NOT THE COMPUTER TYPE!

    THANK YOU VERY MUCH FORALL YOU HAVE DONE WITH THIS SITE.

  20. Ken
    ― December 1, 2010 - 3:47 pm  Reply

    Thanks, was quick and easy to get rid of.

  21. George
    ― December 1, 2010 - 5:40 pm  Reply

    Hi again, i disconnected a second hard drive i had and it booted, followed the procedure, and got rid of think point, but it came with a pal…… Its called win fragmenter, and although rkill stops it, malwarebytes doesn’t find it. Any ideas?

  22. matt
    ― December 1, 2010 - 6:23 pm  Reply

    I have thinkpoint on my laptop right now, and i got up to step two when i realized that i couldnt open up the windows task manager. I hit control alt delete and it came up with boxes like shut down computer log off, but the task manager one was untouchable. Is there any way to get into it or am i doomed?

  23. jeliarra
    ― December 1, 2010 - 7:13 pm  Reply

    Follow all steps to type in explorer, iexplorer, explorer.exe and used browse to locate and everything I try I get “OPEN WITH” no matter what I try “OPEN WITH” another popup opens asking to download.

    How do I get around this step to get to deasktop with taskbar and START button?

    Thank you

  24. tim
    ― December 1, 2010 - 7:33 pm  Reply

    ctrl alt del brought menu up behinde thik point menu, clicked on hotfix.exe, then end process. Nothing happened. Whatdo I do now, please help.

  25. Sylvie
    ― December 1, 2010 - 7:37 pm  Reply

    Many thank for your great procedure to delete this spam on my computer. I really appreciate. I was easy to follow the step and have my computer back to run. Once again many thanks. You make my day. Itès nice to have people like you to share their knowlegde with the communauty. Bye..

  26. gtrg
    ― December 1, 2010 - 7:47 pm  Reply

    Omg. Thanks sooo much. This was the easiest step by step guide to follow. The video was precise.
    FYI, when I first tried it, Be was installing the aware, I didn’t see the 2 boxes that were to be checked that said update aware so I hit the finish button and it automatically restarted my computer without getting to the section to acNE Nd view results. In turn, think point was still on my computer when I restarted. I followed the steps the second time being sure to check the 2 boxes and it worked. Hope this helps anyone who still sees think point on their computer.

    I also couldnt see my desktop icons, right click anywhere on desktop and click show desktop.

    Someone mentioned not being able to access internet explorer, if you successfully completed the first couple of steps to the point where you type explorer and the few steps after, that should stop think point.

  27. Patrik
    ― December 2, 2010 - 12:05 pm  Reply

    Mike, looks like thinkpoint malware has damaged a few system files or part of Windows registry. Have a Windows installation disk ? We can use it to back to pre-last restore point.

  28. Patrik
    ― December 2, 2010 - 12:06 pm  Reply

    jeffrey, please start a new topic in our Spyware removal forum and post a pic into it or send through private messages.

  29. Patrik
    ― December 2, 2010 - 12:09 pm  Reply

    Mike, Task Manager is not blocked before you push Safe Startup button.

  30. Patrik
    ― December 2, 2010 - 12:12 pm  Reply

    George, try update Malwarebytes and perform a fresh scan. If it does not help, then follow the instructions http://www.myantispyware.com/2010/12/02/how-to-remove-win-defragmenter-uninstall-instructions/ (steps 1-3).

« Previous 1 … 8 9 10 11 12 Next »

Leave a Reply to s Cancel reply

New Guides

STDEI GLP 1 Review, Stdei GLP-1 Weight Loss Oral Solution Scam
scam alert
GOTEEX.com Review: Promo Code Scams Exposed
Olygee Cooling Ace Review, Don’t Be Fooled by False Promises and Misleading Ads
Suzuki Moorai Robot Dog Vehicle Real or a Scam, What You Need to Know
Liketonline Cooling Ace Review, Scam or Legit? What You Need to Know

Follow Us

Search

Useful Guides

How to remove pop-up ads [Chrome, Firefox, IE, Opera, Edge]
adwcleaner
AdwCleaner – Review, How to use, Comments
Managed by your organization chrome virus
Chrome Managed by your organization malware removal guide
Files encrypted by ransomware become useless
How To Recover Encrypted Files (Ransomware file recovery)
How to remove browser hijacker virus (Chrome, Firefox, IE, Edge)

Recent Guides

How to remove antispytag.com browser hijacker
How to remove System Defragmenter (Uninstall instructions)
How to remove Smart Engine (Uninstall instructions)
How to remove Antivirus Action (Uninstall instructions)
How to remove IronProtector (Uninstall instructions)

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.