• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

How to remove ThinkPoint (Uninstall instructions)

Myantispyware team October 18, 2010    

ThinkPoint is a rogue (fake) antivirus program that is distributed through the use of Microsoft Security Essentials Alert trojan. Important to know, the program is unable to detect or rid your system of parasites nor will be protect you from legitimate future threats. You need to remove ThinkPoint from your computer as quickly as possible!

When started, this malware configures itself to start automatically every time, when your computer loads. Immediately after launch, ThinkPoint starts scanning your computer and list a lot of infections to trick you into thinking your PC in danger. It will report that was able to clean the majority of infected files, but was not able to cure a few important Windows files, such as firefox.exe, taskmgr.exe, iexplore.exe and offer to purchase its full version to clean them. However, the scan results is a scam, because the program can`t detect any infections. So, you may easily ignore all that ThinkPoint will display you.

What is more, while ThinkPoint is running, it will hide your desktop, Start button and Windows taskbar. Moreover, the rogue will also block Windows Task Manager. When you try to run it, this malware will display a security alert that states:

The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.
This happened because the application was infected by a malicious program which might pose a threat for the OS.
It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.

As you can see, ThinkPoint is a totally scam, which created with one purpose to scare you into purchasing so-called “full” version of the program. Most important do not purchase it! Please use the removal guide below in order to remove ThinkPoint and any associated malware from your computer for free.

More screen shoots of ThinkPoint



Use the following instructions to remove ThinkPoint

Step 1. Stop ThinkPoint process

Once Windows loaded you will see a window similar to the one below.


ThinkPoint screen

Now press CTRL + ALT + DEL. It will open Windows Task manager. Select hotfix.exe process as shown in the screen below.


Windows Task manager

Click “End Process” button. It will close ThinkPoint.

Now click File, New Task. Type explorer and press Enter. It will back the Start button and task bar.

Step 2. Remove ThinkPoint associated malware

Download MalwareBytes Anti-malware (MBAM). Close all programs and Windows on your computer.

Double Click mbam-setup.exe to install the application. When the installation begins, keep following the prompts in order to continue with the installation process. Do not make any changes to default settings and when the program has finished installing, make sure a checkmark is placed next to Update Malwarebytes’ Anti-Malware and Launch Malwarebytes’ Anti-Malware, then click Finish.

If an update is found, it will download and install the latest version.

Once the program has loaded you will see window similar to the one below.

malwarebytes-antimalware1
Malwarebytes Anti-Malware Window

Select Perform Quick Scan, then click Scan, it will start scanning your computer for ThinkPoint infection. This procedure can take some time, so please be patient.

When the scan is complete, click OK, then Show Results to view the results. You will see a list of infected items similar as shown below. Note: list of infected items may be different than what is shown in the image below.


Malwarebytes Anti-malware, list of infected items

Make sure all entries have a checkmark at their far left and click “Remove Selected” button to remove ThinkPoint. MalwareBytes Anti-malware will now remove all of associated ThinkPoint files and registry keys and add them to the programs’ quarantine. When MalwareBytes Anti-malware has finished removing the infection, a log will open in Notepad and you may be prompted to Restart.

ThinkPoint removal notes

Note 1: if you can not download, install, run or update Malwarebytes Anti-malware, then follow the steps: Malwarebytes won`t install, run or update – How to fix it.

Note 2: if you need help with the instructions, then post your questions in our Spyware Removal forum.

Note 3: your current antispyware and antivirus software let the infection through ? Then you may want to consider purchasing the FULL version of MalwareBytes Anti-malware to protect your computer in the future.

ThinkPoint creates the following files and folders

%AppData%\hotfix.exe
%AppData%\{RANDOM}.bat

ThinkPoint creates the following registry keys and values

HKEY_CURRENT_USER\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnonBadCertRecving” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPostRedirect” = “0”
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | “Shell” = “%AppData%\hotfix.exe”

ThinkPoint removal – Video guide

Malware removal Rogue Anti Spyware

 Previous Post

How to remove antispytag.com browser hijacker

Next Post 

Remove antispyway.com hijacker and Antivirus Action malware

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

348 Comments

  1. amenss
    ― November 16, 2010 - 7:20 am  Reply

    wow thanks a lot…

  2. selim
    ― November 16, 2010 - 8:21 am  Reply

    Thank you verry much Its working BElguim

  3. maxine
    ― November 16, 2010 - 9:01 am  Reply

    is everyone remembering to turn off system restore. before running the spybot ect. other wise virus will be kept in backup files

  4. Shriif
    ― November 16, 2010 - 12:17 pm  Reply

    Hi i Did all steps then when i rebooted My computer i got error code 0211 keyboard error , Maybe someone Can help me?

  5. Mike M
    ― November 16, 2010 - 3:52 pm  Reply

    I have the thinkpoint virus on my system as well. I can’t even open in safe mode. After hitting F8, I get the open in safe mode prompt, open with networking, and open with command prompt. If i try to open with safe mode (or any mode) the screen goes completly black. If I hit ctl-alt-del, it restarts and gives me a black screen before the windows logon. I can’t get anything past that point, and have to press the power button myself to shut down the computer. The computer operating system is xp. Please Help

  6. Patrik
    ― November 17, 2010 - 2:18 am  Reply

    Sam, ask for help in our Spyware removal forum.

  7. Patrik
    ― November 17, 2010 - 2:24 am  Reply

    Kit, repeat step 1.
    Next follow the steps below:
    1. Click Start, type in Search field (select Run , then type in Open field, if you use Windows XP)
    cd %APPDATA%
    Press Enter.
    2. Locate and remove hotfix.exe file.
    3. Reboot computer.
    4. Once Windows loaded, run Malwarebytes, update it and perform a scan.

  8. Alicia
    ― November 17, 2010 - 8:32 am  Reply

    I use this all the time.

  9. steve
    ― November 17, 2010 - 12:59 pm  Reply

    i found a freeware program called NOVIRUSTHANKS

    downloaded quick and dont cost a thing ,my computer is back to normal now, remember this
    is a free remover tool..

  10. James
    ― November 17, 2010 - 3:59 pm  Reply

    Thank you Patrik. I’ve been fighting with this for hours but the task manager screen was hiding behind the thinkpoint screen. Ran the above and worked perfectly.

    thank you thank you.

  11. Dolly
    ― November 17, 2010 - 5:39 pm  Reply

    Thank you so much, I was able to fix one of our computers at work, Feeling lucky and grateful to have found your instructions. I will never understand why people feel the need to attack computers, they are very sick!

  12. Chris
    ― November 17, 2010 - 6:26 pm  Reply

    I have gotten this twice. I find it easier to just goto system restore and run that if you can get to that program.

  13. Ken357
    ― November 18, 2010 - 7:48 am  Reply

    Thanks alot! Much respect!

  14. Patrik
    ― November 18, 2010 - 8:17 am  Reply

    Mike, whats your Windows version ?

  15. mark
    ― November 18, 2010 - 11:32 am  Reply

    THANK YOU!!!! Got rid of thinkpoint no problem! Now can we instate the death penalty for these scumbags that are perpetrating this stuff! Nothing too cruel- maybe drawn and quartered!

  16. Pat
    ― November 18, 2010 - 3:10 pm  Reply

    Thank you so much. I can’t belive it worked. WOW

  17. jim snyder
    ― November 18, 2010 - 5:54 pm  Reply

    if ur task bar is gone like mine i clicked alt cont delete. pressed second tab from left, browsed for my internet and connected that way if that helps anyone, i just kinda stumbled on it

  18. Genri
    ― November 18, 2010 - 10:35 pm  Reply

    Thank you very much, god bless people like you, who is welling to help others in the need of PC trouble.

  19. Hyon
    ― November 18, 2010 - 11:24 pm  Reply

    Thank you!!! so much… btw if you run firefox as administrator, it opens up.

    Do any of you guys know where the company is at? cuz I want to find them and beat ’em up till their bones come out from their body.

  20. Jac
    ― November 19, 2010 - 12:58 am  Reply

    I have this damn virus and eveybody issaying when it logs on blah blah blah hit control + alt + tab but the it is blocked fro mallowign me to do this – so what is next.
    I go to SAFE MODE but that doesnt help either – plz help me!!

  21. Mehul
    ― November 19, 2010 - 1:04 am  Reply

    Hey thank you very much……
    I was scared that now my dad will kill me…..
    But u protected me….
    Thnx Again….
    Thnx a lot…….

  22. Louby
    ― November 19, 2010 - 6:08 am  Reply

    I really need some help here. I’ve somehow managed to infect my laptop with the ThinkPoint Virus. I followed all the instructions to remove it but unfortunately i restarted my computer before repairing the Windows Registry Shell so I am now unable to load my desktop or do anything at all!!! This is my work laptop and I really need to fix it ASAP. If you are able to help me, I would be SO grateful!!!

  23. Patrik
    ― November 19, 2010 - 7:34 am  Reply

    Jac, try the following.
    Once Windows loaded and you see the ThinkPoint screen. Click Safe startup. Wait while this malware loading. Once completed, give it a chance to scan your PC. Once scan is done, click Continue unprotected. Now in ThinkPoint click to Settings menu. Uncheck Allow Unprotected Startup. Save settings and CLOSE ThinkPoint. It will back your desktop and task bar. Next download Malwarebytes and perform a scan. Remove what it found.

  24. Patrik
    ― November 19, 2010 - 7:35 am  Reply

    Louby, what you see when Windows is loaded ?

  25. Louby
    ― November 19, 2010 - 8:02 am  Reply

    Hi Patrik,

    Just the desktop background. No taskbar no start menu, no files that are usually on my desktop, literally just the background. If I leave it for a little while it goes back to the welcome page but if i click to log on it goes blank then says it’s logging off and brings me back to the same page.

  26. Jessica
    ― November 19, 2010 - 8:53 am  Reply

    You guys just saved me from missing my deadline for next semesters class. I can not think you enough!!!

  27. Loyd
    ― November 19, 2010 - 10:38 am  Reply

    After removing the software with Malwarebytes also run a System Restore to restore your Registry to a known good time. (Just before you started having problems.) This should stop ThinkPoint from coming back, if that is an issue.

  28. eworthi
    ― November 19, 2010 - 11:58 am  Reply

    Deleted the hotfix.exe file as directed, then updated and ran SpyBot. Worked like a charm.

  29. Hewan
    ― November 19, 2010 - 1:22 pm  Reply

    the instruction was very easy to follow. thank u very much for helping me to remove thinkpiont because it was driving me crazy. by the way ‘Google images’ is responsible for the virus on my laptop

  30. Kirsten
    ― November 19, 2010 - 3:16 pm  Reply

    I am so thankful to this site and with helping me rid my computer of the ThinkPoint virus!!!! THANK YOU a million times!!!!!!

« Previous 1 … 5 6 7 8 9 … 12 Next »

Leave a Reply to Terrie Cancel reply

New Guides

scam alert
Remove Searchernow.com Redirect: Chrome, Edge, Firefox
Avoid the ExLig.com Bitcoin Scam: Insights on Promo Code Frauds
scam alert
Denwex.com Review: Bitcoin Promo Codes as a Scam
scam alert
CEFOLEX.com Review: A Closer Look at the Bitcoin Promo Code Scam
The Bigexcoin.com Bitcoin Promo Code Scam: How to Stay Safe

Follow Us

Search

Useful Guides

DNSChanger
How to remove DNSChanger malware virus [Updated Apr. 2018]
Managed by your organization chrome virus
Chrome Managed by your organization malware removal guide
Files encrypted by ransomware become useless
How To Recover Encrypted Files (Ransomware file recovery)
How to remove pop-up ads [Chrome, Firefox, IE, Opera, Edge]
ads by adware
How to remove Adware from Windows 10 (Virus removal guide)

Recent Guides

How to remove antispytag.com browser hijacker
How to remove System Defragmenter (Uninstall instructions)
How to remove Smart Engine (Uninstall instructions)
How to remove Antivirus Action (Uninstall instructions)
How to remove IronProtector (Uninstall instructions)

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.