HT Logs. Tips, FAQs, Analyze.

ThinkPoint is a harmful program.

It is a fake security program, you should immediately remove it using an antivirus and antispyware program. If that does not help, then ask us for help in the Spyware removal forum.

ThinkPoint associated files and folders:

%AppData%\hotfix.exe
%AppData%\{RANDOM}.bat

ThinkPoint associated registry keys and values:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPost” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnZoneCrossing” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnonBadCertRecving” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPostRedirect” = “0″
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | “Shell” = “%AppData%\hotfix.exe”

Core filename: hotfix.exe
Command: %AppData%\hotfix.exe
Description: fake antivirus that is installed with the help of Microsoft Security Essentials FakeAlert trojan

How to remove: use the ThinkPoint removal instructions or the steps below.

1. When Windows is loaded press CTRL + ALT + DEL to open Windows Task Manager. Select hotfix.exe process and click to “End process” button.

2. Click File -> New Task. Type explorer and Press Enter. It will display the Windows desktop and taskbar.

3. Download Malwarebytes Anti-malware. Install, perform a scan and let it remove what it found. Reboot afterwards (important).

This entry was posted on Tuesday, October 19th, 2010 at 12:06 am and is filed under Rogue Antispyware/Antivirus. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.