How to Get Rid of Thinkpoint Virus? Thinkpoint.



How to Get Rid of Thinkpoint Virus? Thinkpoint.exe Hotfix.exe Tmp.exe Virus Installed via Fake Microsoft Security Essentials Alert

How to Get Rid of Thinkpoint Virus? Thinkpoint.exe Hotfix.exe Temp.exe Virus Installed via Fake Microsoft Security Essentials Alert

Thinkpoint Antivirus is a Fake Antivirus program installed through a Trojan Fake Alert that mimics Microsoft Security Essentials Alert. Thinkpoint is not a legitimate antivirus program but itself a spyware.

This program is distributed with the help of trojan Fake Microsoft Security Essentials Alert.

The fake "Microsoft Security Essentials Alert" is actually a Trojan that looks very similar to real alert from legitimate Microsoft Security Essentials.

This trojan will try to trick you into thinking that your computer is infected. It will show the warning below

"Microsoft Security Essentials Alert Potential threat details

Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. Your access to these items may be suspended until you take an action. Click 'Show details' to learn more

Unknown Win32/Trojan Severe"

When you click 'Show details' It will then prompt you to clean your computer using the program in order to remove it. When you click on the 'Clean Computer' or 'Apply actions' button, it will state that it was unable to remove it and then prompt you to scan online.

"Unable to remove threat. Click "Scan online" to remove this threat"

If you click on the Scan Online button it will list 35 different anti-virus programs, 30 of which are legitimate anti-virus programs and 5 that are rogues that the Trojan is distributing.

These five rogue programs are:

'Red Cross Antivirus
'Red Cross Antivirus
'Pest Detector 4.1
'Major Defense Kit
'AntiSpySafeguard or AntiSpy Safeguard

  • Think Point

This fake alert was endorsing only five applications as above but recently it included Think Point as an addition to the family

So that you will then 'Free Install' and purchase this rogue anti-virus program that this Fake Microsoft Security Essentials Alert Trojan is distributing.

During this fake online scan only the 5 fake anti-virus programs plus ThinkPoint listed above will state that this supposed Microsoft Security Essentials Alert Trojan as an infection like 'Unknown Trojan, Trojan Horse or Rootkit'.

It does this to scare you into clicking the Free Install button next to them that will install the rogue program onto your computer and then reboot your computer. It should be noted that  ThinkPoint, Red Cross Antivirus, Peak protection 2010, Pest Detector 4.1, Major Defense Kit, AntiSpySafeguard or AntiSpy Safeguard theTrojan is distributing are exactly the same. They just have different names and different (GUI) graphical user interfaces.

When the trojan Fake Microsoft Security Essentials Alert is started, it will automatically download and install ThinkPoint Virus tool onto your computer without your consent and knowledge and configure it to run when you start Windows.

When ThinkPoint Antivirus is started, it will imitate a system scan and detect a lot of various infections that will not be fixed unless you first purchase the program. Important to know, all of these reported infections are fake and don't actually exist on your computer! So you can safely ignore the scan results.

While ThinkPoint is running, it will block the ability to run any programs as a method to scare you into thinking that your computer is infected with malware.

The following warnings will be shown

What is more, the rogue will flood your computer with warnings and fake security alerts. Some of the alerts:

"The application iexplore.exe was launched successfully but it was forced to shut down due to security reasons.

This happened because the application was infected by a malicious program which might pose a threat for the OS.

It is highly recommended to install the necessary heuristic module and perform a full scan of your computer to exterminate malicious programs from it."

Furthermore, these rogues will also display security alerts from your Windows taskbar that display messages such as:

Warning! Database updated failed!
Database update failed!
Outdated viruses database are not effective can't guarantee adequate protection and security for your PC! Click here to get the full version of the product and update the database!

Warning! Running trial version!
The security of your computer has been compromised! Now running trial version of the software! Click here to purchase the full version of the software and get full protection for your PC!

Of course, all of above warnings and alerts nothing more but a scam and like false scan results should be ignored!

As you can see ThinkPoint Antivirus, is a scam that is designed with one purpose to trick you into purchasing the so-called full version. Do not fall for these virus creators bait into buying the Rogueware and if you already have, you should contact your credit card company and dispute the charges.

And now coming back on How to Get Rid of ThinkPoint Antivirus, you need a solid program to fix the damages, the rogue has caused. It alters files, folders,permissions and registry keys.

So you need something as good as Reimage, to fix all the damages that was left behind, to delete all the traces completely....to revive your PC from malicious trojans that may still reside and make your PC slow and to stop from getting re-infected.

When you try to fix this rogue, by running legitimate antivirus you encounter that app cannot be executed warning, task manager disabled, registry editing disabled etc..

So, in order to get rid of ThinkPoint Antivirus completely, start your PC in safe mode with networking, If you can`t run the IE, then you should as below.

Go to C:\Documents and Settings\UserProfile\Application Data.

It will open the contents of Application Data folder (for Windows XP) or the contents of Roaming folder (for Windows Vista, Windows 7).

By default, this is C:\Documents and Settings\\Application Data for Windows 2000/XP. For Windows Vista and Windows 7 it is C:\Users\\AppData\Roaming or C:\Users\\AppData\Local. Conversely you can also Click on Start > Run and type shell:Local AppData 

Now rename as below

-if you find 'hotfix' rename it to hotfix1,

-if you find 'tmp' rename it to 'tmp1'. 

-if you find 'thinkpoint' rename it to 'thinkpoint1'

It is normal if some files listed above does not exist. 

Next, reboot your computer. Now you should now be able to connect to internet .

If you have problems renaming hotfix.exe, then do this.

Kill the process from Task Manager using instructions below.

Go to 'Start'

Click 'Run'

Type 

taskkill /f /im hotfix.exe

next

taskkill /f /im tmp.exe

next

taskkill /f /im thinkpoint.exe

Go to http://reimagepcrepair.com/ and run scan to fix ThinkPoint Antivirus.

Reimage works by comparing each and every OS system files with the correct files from a web repository of 25 million Windows components. (since Reimage works by comparing with correct file, it can easily find the hiding rootkit, infact this is what a rootkit remover do......dumps a list of files from your hard disk drive and compares it with the list from the recovery console in order to find a hiding virus) This is the sole reason you can get a PC as good as new once you run Reimage, all other antivirus and antimalware programs just delete the virus....but they don't correct the damage...which results in re-infection and slow performing PC.

Reimage first scans your computer thoroughly; all the files, folders, registry keys and values, drivers, softwares, stacks and then either repair or remove those stuffs that should be there. But it's not just that it does. They have an enormous web repository of application, drivers, system objects, etc. from where they compare your PC's files and if corrupted replace it with the healthy ones.

Visit Reimage For a Complete Scan Now to Get Rid of ThinkPoint Antivirus Fake Antivirus Completely

About the Author:
Tom Parks works for Microsoft. He is currently researching on PC optimization and system security. He is also an avid gamer and owns xbox, PS3, Nintendo Wii, Dsi and PSP. Visit my blog http://reimagerepairreview.com

Author: Tom Parks