Thinkpoint virus on my computer..Please help!?

Question

About a week ago I got the Thinkpoint virus on my computer. I've followed everyone's advice and have downloaded and ran rkill, shell.reg, and Malewarebyte's software. The problem is, every time I try to run a scan of my computer, the virus will automatically take me to a screen that just shows my desktop image, then I have to unplug the computer to get it working again. If anybody has any suggestions about how to deal with this, I would greatly appreciate it.

Answer 1

Follow this instructions to Remove Virus in you Computer.

Restart You Computer Safe Mode with Networking



1. Log out and reboot your machine.



2. When the machine starts the reboot sequence, press the F8 key repeatedly.



3. Select Safe Mode with Networking from the resulting menu.



4. Login. If the malware has changed your password, try logging in as

Administrator. By default, Administrator has no password.



5. The machine will continue booting, but the Windows desktop will look different.



Then in The Safe With Networking .Download by using Rkill press here http://www.bleepingcomputer.com/forums/topic308364.html



Download and Scan By Using Malwarebytes’ Anti-Malware http://download.cnet.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.html?tag=contentMain;contentAux



Download and Scan By Using Super Anti-Spyware Press here http://www.superantispyware.com/



Download ATF is a new, freeware, temporary file cleaner for Windows, IE, Firefox and Opera with a simple, easy-to-use interface.



The main screen allows the user to either clean all temporary files, or select files for cleaning. The program also knows if Firefox and or Opera is being used, and gives the option of cleaning the temporary files associated with those applications.



ATF Cleaner provides the user with a window showing the total bytes freed upon completion. The program is small (36kb), quick to run and no installation required. to Download ATF Cleaner press this link http://download.cnet.com/ATF-Cleaner/3000-18512_4-89432.html



Download and Scan By using

Remove Fake Antivirus 1.64 press here http://www.softpedia.com/progDownload/Remove-Fake-Antivirus-Download-127588.html



After Finish Scan and Remove all Virus,Restart you Computer to be Normal.



Then

Download and Scan again By using Norman Malware Cleaner Press here http://www.norman.com/support/support_tools/58732/en This is to make sure you Virus, Malware, Trojan, Worm,

Rogue Fake Anti-Virus, Hijack Web Browser, Pop up Advertisements,

Rootkit and Spyware it is not on you Computer Forever.



Please give me the feedback and Rate Me

Answer 2

2

Answer 3

if you dont already have malewarebytes installed, heres the link



http://www.techspot.com/downloads/4716-m…



1. reboot in safe mode with command prompt (hold F8 when its booting up)



2. when its booted type notepad.exe



3. when notepad opens go to file->open



4. go to my computer->program files->malewarebytes->and find the malewarebytes exe.



5. right click and got to run as->administrator and perform a full scan





the reason you want to open in safe mode with command is because this doesnt load explorer.exe. explorer.exe is the GUI for windows (what loads all the windows and the start menu, etc) which is where allot of viruses like to patch themselves. also, safe mode only loads the bare minimum of services for windows. basically the hardest places for viruses to install themselves.





if it doesnt work, you can still use notepads open as a GUI to copy all your stuff off the computer.

Answer 4

Here are instructions for removal of your threat. Since there are also a trojan that will install the thinkpoint malware, you could also have that on your computer. So when you remove your threat it's just reinstalled. If this does not work go to the forum at this site and post there for some free help with removal of your threats.

http://www.myantispyware.com/2010/10/18/how-to-remove-thinkpoint-uninstall-instructions/

Answer 5

Reboot into safe mode (without networking). IF thinkpoint starts, stop it with ctrl+shift+esc (task manager should work). If you see blank screen, use task manager to start new task (c:\Windows\explorer.exe )

Then search your hard disk for thinkpoint.exe or hotfix.exe. Open the folder with these files and delete the executables. There might be a file in the same folder taskmgr.dll ( somewhere in c:\users... or c:\Documents and settings... ). Delete it too.

launch regedit, and search for HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon . Replace it to explorer.exe

Reboot into safe mode with networking. Download and scan your PC with hitman pro and spyware doctor.

Full instructions here : http://www.2-viruses.com/remove-thinkpoint

Answer 6

When you have the Think Point screen on your computer screen the time you startup your computer.

>Open the Task Manager using Ctrl+Alt+Delete or Ctrl+Shift+Esc.

>Kill the process called hotfix.exe from the Task Manager processes list

>Force Explorer.exe using the Task Manager(Click to File>New Task>Type in explorer.exe and click OK). This will open your desktop screen.

>Open the Application Data folder(Windows key+R to open Run window and type in %appdata% and click OK) and delete the file called hotfix.exe

>Open registry editor(Windows key+R to open Run window and type in regedit and click OK) and search for hotfix.exe and delete the file called Shell in the location HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon “Shell” = “%LocAppData%\hotfix.exe”

......................................…

Also following are the steps to win over ThinkPoint Antivirus in the normal mode with its own fake interface.

1. Click Settings on the ThinkPoint menu tab.





2. Check Allow unprotected startup.





3. Click Save settings.





Result: After doing this you can close the rogue’s window and explorer will run. (It takes some time to complete the fake scanning illusion before it allows us to close -There is a Scan in progress that runs for ~ 5 Min (Think Point)The only time we will be able to close the Think point Screen is only after that scan is complete)



4. Open a command prompt. To do this on Windows XP, click on Start>Run and type "cmd.exe" (without the quotes). To do this on Windows Vista and Windows 7, click on the Windows icon and type "cmd.exe" (without the quotes).

5. Kill 'hotfix.exe' by typing following command:

taskkill /IM hotfix.exe

6. Open registry. Navigate to the following Registry Key: HKEY_CURRENT_USER\Software\Microsoft\Win… NT\CurrentVersion\Winlogon\Shell and change the shell value to “explorer.exe”

7. Launch Microsoft Security Essentials and run a quick scan.

Answer 7

I had virus and adwares , etc so i downloaded exterminate-it and it tells me i have 72 virus so

I bought and downloaded from www.exterminate-it.com it cost me $24.99 and it's good for whole year , anyway, after i scanned it my computer WIPED clean . i mean squeaky clean . I recommand to everyone and you should try too.

Answer 8

Alternate ThinkPoint virus removal video: http://www.youtube.com/watch?v=EdaaG96GsU4

Answer 9

Restart your computer in safe mode and run what ever antivirus you are using