ThinkPoint
ThinkPoint Description
ThinkPoint (or Think Point) is a fake anti-spyware program which spreads via phony media downloads and corrupt pop-up alerts. ThinkPoint installs itself before causing chaos all over your computer by hijacking your browser and changing your registry. ThinkPoint will eventually produce a sign up screen for a heuristic program, where you’ll be asked to pay USD$90 for full protection. Think Point is not a real security software so do not fall for this trickery and use an updated malware remover to make sure you PC is threat free.ThinkPoint is designed to trick computer users by imitating Microsoft Security Essentials through a bogus alert message. The message is fabricated by a Trojan horse prompting users to purchase the ThinkPoint program to clean the infection. ThinkPoint is not designed to clean or remove any type of legitimate threat, and consequently serving no real use to computer users.
ThinkPoint and the ‘Microsoft Security Essentials Alert’ message displayed are in no way associated to Microsoft Security Essentials 1.0 or MSE 2.0.
If you believe that you have become a victim to ThinkPoint attacks, it is best to download a legitimate and reputable anti-malware program to detect and rid your system of ThinkPoint and any related malware files automatically from your PC. Many computer users may experience difficulty accessing a reputable anti-malware program. If that is the case, you can try the following:
- Restart your computer and once it starts to load the Windows desktop try repeatedly pressing Ctrl+Alt+Del to open the Task Manager.
- Locate the ThinkPoint process ‘hotfix.exe’ or ‘mstsc.exe’ in the running processes tab in your Task Manager and click ‘End Process’.
- In your Task Manager, select ‘New Task (Run)’, and type in ‘explorer.exe’.
- Install or load a reputable anti-malware tool such as SpyHunter to detect and remove ThinkPoint.
ThinkPoint belongs to the FakeRean family, which includes members such as AntiSpy Safeguard, Antispyware Pro 2012, Antivirus Pro 2009, Antivirus2008, Antivirus2008Pro, AntivirusXP 2008, CleanThis, Internet Protector, Internet Security, Internet Security 2012, Internet Security 2013, Palladium Pro, PC Defender Plus, PCclean Pro, Privacy Protection, Spyware Protection 2010, Vista Antispyware 2013, Vista Antivirus 2008, Vista Antivirus 2012, Vista Antivirus 2013, Vista Defender, Vista Home Security 2013, Vista Internet Security 2012, Vista Security 2012, Vista Security 2013, Vista Security Cleaner Pro, Vista Security Plus 2013, Win 7 Antispyware 2013, Win 7 AntiVirus 2012, Win 7 Antivirus 2013, Win 7 Defender, Win 7 Home Security 2013, Win 7 Home Security Pro 2013, Win 7 Internet Security 2011, Win 7 Internet Security 2012, Win 7 Internet Security 2013, Win 7 Internet Security Pro 2013, Win 7 Security 2012, Win 7 Security 2013, Win 7 Security Cleaner Pro, Win 7 Security Plus 2013, Win 7/Vista/XP Smart Defender, Win 7/Win 8/XP Defender 2013, Win 7/XP/Vista Protection 2013, Win 8 Antispyware 2013, Win 8 Antivirus 2013, Win 8 Defender 2013, Win 8 Home Security 2013, Win 8 Security Suite 2013, Win 8 Security System, Win Server Defender, Windows 7 Antispyware 2012, Windows 7 Internet Security 2012, Windows Antivirus 2008, Windows Essentials Pro 2013, Windows Vista Antivirus 2012, Windows Vista Internet Security 2012, Windows Vista Security 2012, Windows XP Internet Security 2012, XP Anti-Virus 2011, XP Antispyware 2013, XP Antivirus 2013, XP Home Security 2012, XP Home Security 2013, XP Internet Security 2012, XP Internet Security 2013, XP Internet Security Pro 2013, XP Security 2012, XP Security 2013, XP Security Cleaner Pro, XP Security Plus 2013, XP Total Security 2013, Vista Antivirus 2008, Vista Smart Defender Pro, Win 7 Smart Defender Pro, XP Smart Defender Pro and XPdefender.
Aliases
RogueAntiSpyware.SecurityEssentialFraud!rem [PCTools]Malware/Win32.Suspicious [AhnLab-V3]Trojan.FakeAV.2025 [DrWeb]Win32:FakeAV-AWN [Avast]SecurityEssentialFraud [Symantec]a variant of Win32/Adware.FakeAntiSpy.S [NOD32]Crypt.ADBY [AVG]Backdoor/Win32.Cycbot [AhnLab-V3]Medium Risk Malware [Prevx]Trojan.Agent/Gen-Fuffan [SUPERAntiSpyware]
More aliases (68)
ThinkPoint Automatic Detection Tool (Recommended)
Is your PC infected with ThinkPoint? To safely & quickly detect ThinkPoint, we highly recommend you run the malware scanner listed below.
Download SpyHunter's* Malware Scanner to detect ThinkPoint
What happens if ThinkPoint does not let you open SpyHunter or blocks the Internet?
Technical Details
Visual & GUI Characteristics
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read
the tutorials on how to find malware,
kill unwanted processes,
remove malicious DLLs and
delete other harmful files. Always be
sure to back up your PC before making any changes.
- The following files were created in the system:
# File Name Detection Count 1 %APPDATA%\ hotfix.exe 454 2 %AppData%\hotfix.exe 80 3 printdll32.dll 33 4 %APPDATA%\ defender.exe 21 5 %APPDATA%\ Microsoft\ Windows\ shell.exe 12
Additional Information
- The following messages's were detected:
# Message 1 Microsfot Security Essentials Alert
Potential threat details
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. Your access to these items may be suspended until you take an action.
Click 'Show details' to learn more.
Detected items: Unknown Win32/Trojan
Alert level: Severe
Recommendation: Remove
Status: Suspended2 The application taskmgr.exe was launched successfully but it was forced to shut down due to security reasons.
This happened because the application was infected by a malicious program which might pose a threat for the OS.
It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it.3 Warning! Database update failed!
Database update failed!
Outdated viruses databases are not effective and can't
guarantee adequate protection and security for your PC!
Click here to get the full version of the product and update
the database!4 Warning! Running trial version!
The security of your computer has been compromised!
Now running trial version of the software!
Click here to purchase the full version of the software
and get full protection for your PC!
Posted: October 18, 2010 | By SpywareRemove
MoreThreat Level: 10/10
(2 votes, average: 4.50 out of 5)
Loading ...Rate this article:
Detection Count: 5,715
Think Point is a rougue antispyware, which will create unwanted pop ups and mis lead you to buy that application.
Most of the antivirus like Avast, Norton, Mcafee arre able to remove its source file and at the same time they are failed to remove the unwanted registry entries created by the infection. Once its source file is removed by the antivirus, the registry entries started to disable all the executables (applications or softwares) installed on your computer.
In this scenario, we have to remove the registry entries manually.
Please be very cautious while editing the registry.
no matter what i do i still cant access the task manager please help me!!!
plz get out think point!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
For those of you that cannot get into the internet because of Thinkpoint, I was able to bypass by right clicking on the internet icon and running as an administrator. Hope this is helpful to some.
I easily removed ThinkPoint from my brother’s pc by booting up in safe mode which enabled me to access System Restore. I then restored to the previous check point and now all is well. I did re-start his pc to make sure that this rogue programme did not return when re-booted but all seems to be OK.
thank you iammachine.
iammachine is the man. Thanks dude.
My desktop is frozen by ThinkPoint so i’m using my laptop to learn how to get loose.
AT AGE 90, my learning yrs are not unlimited.
I ended up following all the steps, but I couldn’t find any of the components, so I wound up having to restore my uncle’s system to an earlier time, and that seems to have taken care of it. Best of luck to all who run into this! I have since made sure to let all my friends and family know about the program and this site in case they have found ThinkPoint on their computers. Thank you so much for all your advice!
THANK YOU GUYS SO MUCH! VERY EASY INSTRUCTIONS GOT RID OF THAT BAD VIRUS!
Good morning. I have Windows XP and Think point. I have started my computer in both safe mode and safe mode with networking. Once the user screen comes up I am unable to select a user and type in the password to get into the computer as the mouse is not working. Thank you.
IAMMACHINE ……Thank you so much for your great help!! It is sooooo appreciated.
I just cleaned this up from a desktop, when your system starts up and it tries to run the scanner, let it run, then hit Ctrl-Alt-Del…kill it via Task Manager, then select start up Explorer via the Task Manager…
Locate and delete as per your preferred method, outlined in many of the online resources I found.
Thanks for the help with this. I was about to pull my hair out when I can to this site and you got me past it. Glad to know there are people out there that want to help and not hurt.
Thanks, Poulin, for your help. I tried to follow your instructions but they were just not clear enough — all it did was launch the scan which locked the computer up when it was finished.
Could you or someone go through those instructions a little more carefully?
Current version of ThinkPoint DOES NOT let you run Task Manager, it kills it and other Task Manager alternatives before they run. Easiest solution is to go to control panel / users and create a new user and give it admin permissions, now log off and back in as this new user. Go to c:\users\normalusername\appdata\local and rename any EXE files you see there, its not named hotfix.exe anymore, it can be of any name but there shouldn’t be an exe in that folder anyways so just rename it for now. Log off and back in as your normal user. Go to Internet Explorers / tools / internet options / connections and uncheck using a proxy server.
Download and install the latest Microsoft Security Essentials and Malwarebytes do perform full scans
Also recommend using Google DNS servers to prevent resolving malicious websites / their dns servers are 8.8.8.8 and 8.8.4.4 and are free
Millennium Systems Inc
Irvine, CA
GUYS, THIS IS TO HELP YOU
I got affected by ThinkPoint on this computer 10 minutes ago. If you wanna access your desktop, taskbar, etc. ,
1- Go in thinkpoint settings, then check the box; Unable unsafe start of computer
2- Open Internet Explorer (64 bit), because it is not blocked
3- Then, download SpyHunter
4- Finally, destroy ThinkPoint (This is the point I
it all worked until i tried to access Internet xplorer and got message: Windows cannot access the specified device, path, or file. You may not have the appropriate permissions to access the item.” That is word for word what it says and I cannot do anything else. Please help!!!
vij1210 – big thanks for your post, this worked first time; brilliant.
the ctrl+alt+del does not work think point blocks it. it also blocks the internet and if i try to search my system for it it can not find any trace of it. it will not allow a system restore to an earlier date either which was the 1st thing i attempted. it will not even allow me to turn my computer off!
Thank you so Much. This was very helpful and it worked!
A million thanks, Iammachine. I followed your instructions (with a few variations) and everything seems to be OK now. You deserve a medal!
I am also hit with think point andI can not get pass to anything. Need your help.
When I get the thinkpoint screen I do crt alt del key nothing happens I then booted in safe mode and got a pop up saying task manager had been disabled by the administrator. Any ideas?
When I try to open task master a box pops up and says “task master has been disable by the administrator.” What next???
Please please help did everything n though I got rid of the TP virus n done a new scan to ceanothus comp etc. Turned computer on today and just a black screen. Can’t do anything just a black screen. What on earth do I do?? Tried pressing f8 on starting up etc but still just back screen. I’m really worried my comp is our world.
HATE THINKPOINT! I have tried to do what iaammachine said in his post – but thinkpoint is stopping me from going to task manager, wont shut down, restart in safe mode or anything…………it wont let me create a system restore point either so I can try the more advanced options………I am sooo stuck, any help greatly appreciated!????
iamachine, many thanks – you saved my PC! people, that is a REAL HELP!
finally i fixed think point…..its very simple guys….. as the thinkpoint screen comes…do ctl+alt+ del…. go to process tab .. nd end hotfix.exe…..thn go to application tab nd start new process … explorer…. thn windows appear….. thn frm desktop go to thinkpoint shortcut… right click on it … nd go to properties… thn go to find target…. it takes u d folder where hotfix fle saved,,,, delete tht file …… nd delete shotcut toooo…. thn restart ur system… thts it………..hope it helps u………….
F8 OR F10 ON START UP GO TO COMAND PROMP START UP WHEN YOU GET THE CURSOR TYPE IN REGEDIT THEN ENTER,….. SEARCH OR FIND HOTFIX.EXE…. THEN DELETE THE SHELL…..THIS WILL GET YOU MOST OF THE WAY CLEARED UP FORM THERE FIND ANY APP\’S THAT CONTAIN ANYTHING LIKE IT. ALSO GO TO YOUR FIRE WALL AFTER ALL THIS AND MAKE SURE YOU CLEAN UP ANY QUARINTINED VIRUSES. GOOD LUCK
iamachine ….
Great instructions …
Thanks,
Nick Pasichj
Thank you very much iamachine! I thought I would never be able to remove this application!
When I turn my laptop on the first thing I see is this Think Point screen. I cannot get to my icon scren to run Norton. What do I do?
Thanks
Norm
please help me get this think point from popping up on my computer. I have never seen this before I have never ordered it and I want it to leave me alone
i\’M PRESSING CONTROL ALT DELETE……NOTHING HAPPENING. WHAT CAN I DO NOW???
My moms laptop just somehow developed a case of thinkpoint via a pop-up from myyearbook. i followed the instructions and so far so good. thank so much.
How about a penalty of 1 year per infected computer? So if the spyware you wrote has infected 1 million computers you get 1 million years in the slammer.
Thanks for the help your instructions helped.
dear iammachine, thank you so much you are a star
I had to trick Think Point by using Real as a brower just to get to this site and using it now. And it has found it! Thanks!
You guys are amazing, thank you so so much!!!
my laptop lives to fight another day!
THANK YOU!!!!!!
THINKPOINT has attacked my laptop. It would let me access anything unless i purchased the full version. I shut down my laptop a few times – But NOW when i start it… nothing… just a blank screen, not even THINKPOINT. Did it wipe out my hard drive? Need your help!!!!! How do i reboot my laptop? This is a nightmare!!!! Thanks for any help!!!
I really need help I did everything up to run exeplorer nothing happen nothing clear out my computer do not pull up anything else what should I do. Please assist me HELP
can you help me get rid of think point of my laptop plesase
Dear iamachine,
You are absolutely Briliant!! I just followed your instructions and sorted everything out!
Thank you ever so much!!
hi can you help me get think point off my laptop thanks
hi can you help me got think point on my laptop how do i get it off thanks rich
can anyone help i got this virus yesterday my laptop is now in really bad working order i can even reboot my laptop and it wipe my hard drive is there anythink i can do thankyou
Thanks iamachine, it worked perfectly for me. cannot believe that it got theough Norton Anti-virus, i no longer trust it…. but thanks anyways…
SWEEEET!! thanks iamachine (2010_10_18) i was able to get to this website and followed your instructions exactly! Only one point, i couln’t find the hotfix.exe file fromthe last step to delete…so far, i’m good.