ThinkPoint is a rogue (fake) antivirus program that is distributed through the use of Microsoft Security Essentials Alert trojan. Important to know, the program is unable to detect or rid your system of parasites nor will be protect you from legitimate future threats. You need to remove ThinkPoint from your computer as quickly as possible!
When started, this malware configures itself to start automatically every time, when your computer loads. Immediately after launch, ThinkPoint starts scanning your computer and list a lot of infections to trick you into thinking your PC in danger. It will report that was able to clean the majority of infected files, but was not able to cure a few important Windows files, such as firefox.exe, taskmgr.exe, iexplore.exe and offer to purchase its full version to clean them. However, the scan results is a scam, because the program can`t detect any infections. So, you may easily ignore all that ThinkPoint will display you.
What is more, while ThinkPoint is running, it will hide your desktop, Start button and Windows taskbar. Moreover, the rogue will also block Windows Task Manager. When you try to run it, this malware will display a security alert that states:
The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.
This happened because the application was infected by a malicious program which might pose a threat for the OS.
It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.
As you can see, ThinkPoint is a totally scam, which created with one purpose to scare you into purchasing so-called “full” version of the program. Most important do not purchase it! Please use the removal guide below in order to remove ThinkPoint and any associated malware from your computer for free.
More screen shoots of ThinkPoint
Use the following instructions to remove ThinkPoint
Step 1. Stop ThinkPoint process
Once Windows loaded you will see a window similar to the one below.
Now press CTRL + ALT + DEL. It will open Windows Task manager. Select hotfix.exe process as shown in the screen below.
Click “End Process” button. It will close ThinkPoint.
Now click File, New Task. Type explorer and press Enter. It will back the Start button and task bar.
Step 2. Remove ThinkPoint associated malware
Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.
Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.
If an update is found, it will download and install the latest version.
Once the program has loaded you will see window similar to the one below.
Malwarebytes Anti-Malware Window
Select Perform Quick Scan, then click Scan, it will start scanning your computer for ThinkPoint infection. This procedure can take some time, so please be patient.
When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.
Malwarebytes Anti-malware, list of infected items
Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove ThinkPoint. MalwareBytes Anti-malware will now remove all of associated ThinkPoint files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.
ThinkPoint removal notes
Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.
Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.
Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.
ThinkPoint creates the following files and folders
%AppData%\hotfix.exe
%AppData%\{RANDOM}.bat
ThinkPoint creates the following registry keys and values
HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnonBadCertRecving” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPostRedirect” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | “Shell” = “%AppData%\hotfix.exe”
I have tried to restart my computer several times and even shut it down completely. But I never see the “task manager ” option. Is there anything else that I can do? Thanks
Make sure you guys hit ctrl alt delete, then start the task manager, then turn off hotfix.exe.
then click on “new task” and type in explorer.exe.
that should get you online and show you the desktop, where from you can download malware bytes
This site has saved the day!! I was getting ready to give Microsoft a call. That Thinkpoint is soooo annoying!
really good guide it did help thanks so much
Wow, thank you so much for posting this in such a timely manner. I was so confused with this “anti-virus” program not letting me access internet that I was about to throw my laptop out the window. You just saved my computer’s life.
This worked like a charm!! I love how viruses are no match for a quick google search nowadays 🙂
thankyou soo much, worked a charm. whoever made that should be killed.
Thank you so much! I couldn’t find any clearer instructions for a non-techie person than right here! Great step by step instructions!
thanks buddy.. 😉
my cousin’s comp. also got infected with it and this post solved his/mine problem…
the only thing bad is that it stops to execute most of the best browsers…. i figured it out and installed a dumb unknown browser which worked and I found this tutorial…
After numerous tries finally I am back in action without running any program. Opened in safe mode with networking, clt+alt+delete, hit processes tab and closed two files that had *after the 32, one was hotfix.exe but can’t remeber the other one, then went to applications tab and hit the new task button, entered the word regedit and hit okay, once registry opened then I deleted the following:HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | “Shell”, then went back to new task button and hit browse, there was an option to seach and I searched for hotfix, once file popped up I right clicked it and selected delete. Closed down and came back up and it was working.
I previously used your instructions to remove Smart Security. Once again, success with Think Point! Thanks again!
Thank you thank you thank you!!!!!
The solution listed here, using Malwarbytes, seems to have worked for me. Vista operating system.
Thanks; I have Malwarebytes installed but it didn’t catch it, but I haven’t keep it updated. Your step-by-step directions let me get my computer back again. I have now updated Malwarebytes, and I’ll see if it will catch any leftover remnants now.
thank you so much!!!!!!
totally worked!
Thanks, thanks, thanks. I’m the “dummiest” one. I thought I’d lost all my PC info!!
One question: after having eliminated thinkpoint, when I restarted the PC a notepad screen appeared (I closed it) Is this normal?
guys,
if none of the above don’t work the way i got rid of it was, launching the internet and going to “http://www.superantispyware.com/” and clicking on the free edition download from the main screen,
then it runs and bypasses the thinkpoints ‘internet security settings’.
p.s. seems like some of you are having troubles with geting the intenet up, another way of doing it is:
1) ctrl+alt+del
2) go to the file menu, press run
3) click on the drop down menu, there are usually lots on internet address’ there :).
Thats how i got my thinksmart away :D!
*thinkpoint :$
Rory, read the instructions http://www.myantispyware.com/2009/06/08/malwarebytes-wont-install-run-or-update-how-to-fix-it/ and try the fix “Fix 5: Use Inherit.exe to fix inappropriate permissions.”
pls help i can not even get the task thing to come up, im on my computer now but its my daughters that has the problem. thanxs for any help.
Outstanding job, if you encounter thinkpoint, this sight took care of the problem.
We did the ctrl alt delete and the screen went black. any suggestions??
This worked like a charm – No more Thinkpoint! Thanks so much for posting these instructions and the video.
this virus won’t allow me to access the task manager or do anything else without first purchasing IT.
Thank you! Steps were easy to follow and removed 23 infected files.
IT WORKS!!!!!!
Thank you – was really at a loss as to what to do – finally Googled thinkpoint – yours was the 3rd site I went to – the only one that had step by step instructions for those of us who are technologically challenged…everything worked just the way the instructions said it would.
This was great! was able to get the computer back up and running quickly. The step by step process was easy. Thanks for a great site!
Thanks. This worked quickly.
Thinkpoint is still there after running the program. Help?