Episodes
Wednesday Nov 10, 2010
Removal Instructions for ThinkPoint
Wednesday Nov 10, 2010
Wednesday Nov 10, 2010
Here’s a step by step on how to delete it, you might want to print this off Start up your comp with 'safe mode with networking' you so this by shutting down your comp and switching it back on and constantly pressing f8 until you come to a screen that has options and you select 'safe mode with networking' By doing this the virus can't interfere with what you are doing. The page will load up (1-2 mins) and then you will log on as usual (the screen might be bigger and look different, this is fine) (if you can't get on safe mode just do it on normal mode) IMPORTANT: AS SOON AS YOU LOG IN go on task manager quickly (ctrl alt delete) then go on processes and search for 'hotfix.exe' and end process Then go on file, new task and type in ‘explorer.exe’ to get to the internet, (If an error message comes up then instead type in 'C:\Windows\explorer.exe" /G Everyone:F' enter that then try 'explorer.exe) Now download this, to scan your computer. It’s the best virus remover you can get for free http://filehippo.com/download_malwarebyt… (If link doesn't work type 'malware' in the search box and click on the first one ''malware bytes'') It’s a reputable website that my internet company uses and this has helped me tons of times before. Download it and run it (it’s free) (you might have to disable your pop up blocker at the top of the screen when downloading) Perform quick scan (should take 10 to 20 mins) View results Remove all (CLICK NO TO RESTART COMPUTER) Go on quarantine (4th from the right column) Then delete all Then restart your comp Good luck :) This is from another source
ThinkPoint graphical user interface |
The application taskmgr.exe was launched succesfully but it was forced to shut down due to security reasons. This happened because the application was infected by a malicious program which might pose a threat for the OS. It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.However, there is a way to disable this virus. After the ThinkPoint screen loads push the command CTRL+ALT+DELETE quickly. This will bring you to task manager. Open the tab called Processes, find the process hotfix.exe and end it. The rogue program should be gone now. Next, you need to bring your Desktop and taskbar back. While in task manager go to File and select "Run new task". Type explorer.exe in the open box. This will bring back Windows explorer. More detailed instructions are given below. At this point you should be able to download anti-malware software which will remove ThinkPoint. Without a doubt, ThinkPoint is a scam. Don't fall victim to this bogus security program. If you have already purchased it then you should contact your credit card company and dispute the charges. Please note that this rogue program may come bundled with Trojans that can download and install additional malware onto your computer. So, you should remove the rogue program as soon as possible. And, of course, it's always a good idea to scan the computer with at least trow anti-malware programs. By the way, your pictures, music and other files should be safe. ThinkPoint doesn't delete files. It's just a very annoying program. Last, but not least, if you have any questions or additional information about this virus, please leave a comment. Good luck and be safe online!
ThinkPoint removal instructions: 1. Restart your computer. Once the ThinkPoint window comes press Ctrl+Alt+Delete or Ctrl+Shift+Escape. You should now see the Windows Task Manager screen as shown in the image below. Click on the Processes tab. Then click and highlight hotfix.exe and click End Task. If it asks you "Are you sure you want to terminate the process?" click yes. This will close the ThinkPoint program. 2. While in Windows Task Manager, click the File -> "New Task (Run...)" from the menu on the bottom right. Type in explorer.exe and click OK. Your desktop and icons should start up as normal. NOTE: if you got an error message "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access them", then please run this command first: cacls "C:\Windows\explorer.exe" /G Everyone:F A new windows will come up asking "Are you sure?" Type Y and press enter. Now run explorer.exe again. 3. Download the following file to your Desktop: windows-shell.reg. Double-click to run it. Click "Yes" when it asks if you want to add the information to the registry. This file will fix the Windows Shell entry. This step is important because if you won't fix this entry, then your Windows Desktop will not be displayed the next time you reboot. Once the new registry value has been added, you can delete the file from your computer. 4. Run Internet Explorer or any other browser and download free anti-malware software below: Run a full system scan and remove ThinkPoint from your computer. NOTE: in some cases the rogue program may block anti-malware software. Before saving the selected program onto your computer, you may have to rename the installer to iexplore.exe or winlogon.exe With all of these tools, if running Windows 7 or Vista they MUST be run as administrator. 5. New threats appear every day. In order to protect your PC from such (new) infections we strongly recommend you to use ESET NOD32 Antivirus 4.
ThinkPoint associated files and registry values: Files: For Windows XP users:
- C:\Documents and Settings\[User Name]\Application Data\hotfix.exe
- C:\Documents and Settings\[User Name]\Application Data\[SET OF RANDOM CHARACTERS].bat
- C:\Documents and Settings\[User Name]\Application Data\install
- C:\Documents and Settings\[User Name]\Application Data\start
- C:\Users\[User Name]\AppData\Roaming\hotfix.exe
- C:\Users\[User Name]\AppData\Roaming\[SET OF RANDOM CHARACTERS].bat
- C:\Users\[User Name]\AppData\Roaming\install
- C:\Users\[User Name]\AppData\Roaming\start
- HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell = %AppData%\hotfix.exe
Associated ThinkPoint Files:
%UserProfile%\Application Data\completescan %UserProfile%\Application Data\hotfix.exe %UserProfile%\Application Data\installFile Location Notes: %UserProfile% refers to the current user's profile folder. By default, this is C:\Documents and Settings\ for Windows 2000/XP, C:\Users\ for Windows Vista/7, and c:\winnt\profiles\ for Windows NT.Associated ThinkPoint Windows Registry Information:
HKCU\Software\Microsoft\Windows NT\CurrentConfiguration\Winlogon\\Shell = %AppData%\hotfix.exe
Comments (0)
To leave or reply to comments, please download free Podbean or
No Comments
To leave or reply to comments,
please download free Podbean App.