General Information: The rouge anti-virus known as thinkpoint is similar to other fake Microsoft security essential infects, in that it produces fake alerts on a user’s PC. As soon as the machine is started up the thinkpoint screen will appear prompting the user to use a safe start up. the program then acts like it found malware on the PC and alerts the user to buy their software, these are fake warnings and users should not by any means buy the program from them.

Thinkpoint removal: to begin removing thinkpoint, first you need to end the actual process that is running the program, open up the task manager by pressing the ctrl+shift+esc buttons at once, once the task manager is open click on the Processes tab and click on the name hotfix.exe and click the end process button on the bottom of the windows task manager screen. once the process is no longer running you will need to remove the files associated with thinkpoint, they are located in %AppData% folder and the two files that need to be removed are hotfix.exe and {random}.bat (think point creates a entry that is just assorted numbers). and finally users will need to remove the registry entries.

Registry Entries that should be removed:

HKEY_CURRENT_USER\Software\PAV

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnonBadCertRecving” = “0″

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings | “WarnOnPostRedirect” = “0″

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon | “Shell” = “%AppData%\hotfix.exe”

Please Contact Us Here for more information on ThinkPoint Scareware

Need help removing ThinkPoint or other PC problems? E-Mail Us Here