What is ThinkPoint, How to remove ThinkPoint
October 19th, 2010 Rogue Antispyware/AntivirusThinkPoint is a harmful program.
It is a fake security program, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum. |
ThinkPoint associated files and folders:
%AppData%\hotfix.exe
%AppData%\{RANDOM}.bat
ThinkPoint associated registry keys and values:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPost” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnZoneCrossing” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnonBadCertRecving” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPostRedirect” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | “Shell” = “%AppData%\hotfix.exe”
Core filename: hotfix.exe
Command: %AppData%\hotfix.exe
Description: fake antivirus that is installed with the help of Microsoft Security Essentials FakeAlert trojan
How to remove: use the ThinkPoint removal instructions or the steps below.
1. When Windows is loaded press CTRL + ALT + DEL to open Windows Task Manager. Select hotfix.exe process and click to “End process” button.
2. Click File -> New Task. Type explorer and Press Enter. It will display the Windows desktop and taskbar.
3. Download Malwarebytes Anti-malware. Install, perform a scan and let it remove what it found. Reboot afterwards (important).