Bookmark and Share

virusLately, users are reporting a nasty virus infecting a lot of computers. The virus is called ThinkPoint and it tricks users into thinking that it is a legitimate antivirus protection tool. Once installed on a computer or laptop it causes multiple pop-ups, fake virus infection alerts, purchase advices, security issues etc. Other more serious consequences include: Internet connection issues (users can not connect to the Internet anymore) and locked Windows files. Such virus gives also issues after it has been uninstalled by triggering the following Windows error message: “Windows Explorer has stopped working”.  What follows is a list of solutions on how to remove and uninstall it and get rid of all the problems it causes. Thinkpoint antiviurs will alert and scare you  with the following pop message:

Microsoft Security Essentials Alert Potential threat details

Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. Your access to these items may be suspended until you take an action. Click ‘Show details’ to learn more:

Unknown Win32/Trojan Severe

Here are some remedies  which will help you remove and uninstall the Thinkpoint fake antivirus.

First Solution (it will let you gain Internet connection so that you will be able to download a good antivirus).

  1. Restart your Windows OS in Safe Mode with Networking.
  2. Go to C:\Documents and Settings\ UserProfile\ Application Data. (for Windows XP).
  3. Go to C:\Users\ AppData\Roaming or C:\Users\ AppData\Local (for Windows Vista and Windows 7).
  4. Rename the following files: hotfix  to hotfixbak, tmp to tmpbak, thinkpoint to thinkpointback.
  5. Reboot your computer normally. Now you should be able to connect to the Internet.

Second Solution.

  1. Restart your computer. Once ThinkPoint appears press Ctrl+Alt+Delete or Ctrl+Shift+Esc. You should be able to see the Windows Task Manager screen.
  2. Click the Porcesses tab and kill: hotfix.exe.
  3. Now on the Task Manager window, click File – New Task – Run…  and type explorer.exe.
  4. Click OK.
  5. Open your browser, download and run  Spybot-S&D.

Third Solution.

Read my old article on how to delete fake antiviruses. (download Sandboxie)

Clean your computer from Thinkpoint leftovers

Now, let’s delete all the junk Thinkpoint installed on our computer. Delete the following files:

Windows XP

  • C:\Documents and Settings\ Username\Application Data\ hotfix.exe
  • C:\Documents and Settings\ Username \Application Data\ [random words and numbers].bat

Windows Vista and Windows 7

  • C:\Users\ Username\AppData\Roaming\ hotfix.exe
  • C:\Users\ Username\ AppData\Roaming\ [random words and numbers].bat

Now, delete the following registry keys: (click Start – Click Run… or type in the Search filed CMD and press Enter).

  • HKEY_CURRENT_USER\ Software\ Microsoft\ Windows\CurrentVersion\ Internet Settings “WarnonBadCertRecving” = “0”
  • HKEY_CURRENT_USER\ Software\Microsoft\ Windows\CurrentVersion\ Internet Settings “WarnOnPostRedirect” = “0”
  • HKEY_CURRENT_USER\Software\ Microsoft\ Windows NT\CurrentVersion\ Winlogon “Shell” = “%AppData%\hotfix.exe”

After this, some users still reporting issues related to the following error message: Windows Explorer has stopped working. Read this article and ITS COMMENTS to solve it.

Related Articles Latest Articles

4 Comments to “How to Remove Fake ThinkPoint Anti Virus”

  1. Hannah Says:

    This really frightened me, and i’m so glad my antivirus software caught this, for i was about to fall right into its trap and give it my credit card number, Whew!

  2. Nadine Jarjoura Says:

    Hey guys, this is Nadine from Adware Threat, so after doing so much research with different applications and software, the Spyware Doctor with Antivirus has finally pin pointed the virus, removed it completely, but after trying few different ways, I finally figured it out, make sure you start your computer into Safe Mode with Networking – download the program and install it , run a full deep scan, takes anywhere between 15 to 30 minutes depends how large your hard drive is and how much files you have, when completed the thinkpoint virus will be eliminated for good, after that I downloaded Registry Mechanic and cleaned up and organized my files so the speed and performance was back to normal, I am so excited about this, I spoke with about 2 customers today walked them through the same steps and everything worked perfectly. I think we can step on the thinkpoint finally.

    Thank you Nadine

  3. Adware Threat Says:

    ThinkPoint virus infected my computer, I could not access my desktop, or able to do anything, I guess it controlled everything, so I was told by Adware Threat, to restart in Save Mode with Networking and follow there instruction, everything was back to normal and the thinkpoint virus was deleted, thanks guys

  4. sean Says:

    I was able to log on as a different user on my computer and was able to do a system restore before the ThinkPoint then did what you mentioned above. that seems to have worked. thank you for your article.

Copyright © 2007-2017 | Sitemap | Privacy | Back To Top
Best screen resolution 1280x800 or higher.
Web Talk is best viewed in Firefox.