How to Get Rid of Think Point Antivirus?

in Antivirus

Think Point Antivirus is not a legitimate and Real Antispyware Program but itself a spyware, more precisely a new kind of rogue antispyware program from the same family of System Armor. The only difference being the core files are modified a little bit and the name is changed to hide it's detection by legitimate Antivirus programs installed on your PC.

This program is distributed with the help of trojans. When the trojan is started, it will automatically download and install Think Point Antivirus onto your computer without your consent and knowledge and configure it to run when you start Windows.

When Think Point Antivirus is started, it will imitate a system scan and detect a lot of various infections that will not be fixed unless you first purchase the program. Important to know, all of these reported infections are fake and don't actually exist on your computer! So you can safely ignore the scan results.

While Think Point Antivirus is running, it will block the ability to run any programs as a method to scare you into thinking that your computer is infected with malware.

The following warnings will be shown

Spyware Alert!
Your computer is infected with spyware. It could damage your critical files or expose your private data on the Internet. Click here to register your copy of Peak Protection 2010 Antivirus and remove spyware threats from your PC.

Your computer is under a great risk! Malware applications are still running. This will lead to the loss of personal date and system damage.
Do you want to remove the malware and protect your system?

Security Center Alert!
Infiltration Alert!
Your computer is being attacked by an Internet Virus. It could be a password- stealing attack, a trojan- dropper or similar.

Message from Webpage Warning! your PC is at risk of virus and malware attack.

Your system requires immediate check!
System security will perform a quick and free scan of your PC for viruses and malicious programs.

To help protect your computer, Windows web security have detected trojans and ready to remove them

You can notice this virus as random file name as random.exe similar to FOE84.exe or vur4.exe on the App data folder.

e.g: "C:\Documents and Settings\All Users\Application Data\random number\random.exe"

Remove the following files and registry entries. If you do not have sufficient expertise in dealing with computer files, folders, processes, DLL files, services & registry entries, please take help from some one who can does this for you.

Other wise Get Reimage key by going to PC Reimage in order to remove Think Point Antivirus.

Impacted Registry Entries, Files and Folders.

Regidstry Entries.
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "Think Point"
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%Documents and Settings%\[UserName]\Application Data\hotfix.exe"

Think Point.exe
[Random Characters].exe

Files & Folders
C:\Documents and Settings\User\Application Data\hotfix.exe
%UserProfile%\Application Data\hotfix.exe
%UserProfile%\Application Data\Think Point.exe

As you can see, Think Point Antivirus is a scam that designed with one purpose to trick you into purchasing the so-called full version of the program. Do not fall for these virus creators bait into buying the Rogueware! and if you already have, you should contact your credit card company and dispute the charges.

And now coming back on How to Get Rid of Think Point Antivirus, you need a solid program to fix the damages, the rogue has caused. It alters files, folders,permissions and registry keys completely to revive your PC from malicious trojans that may still reside and make your PC slow and to stop from getting re-infected.

When you try to fix this rogue, by running legitimate antivirus you encounter that app cannot be executed warning, task manager disabled, registry editing disabled etc..

In order to get rid of Think Point Antivirus completely, start your PC in safe mode with networking, If you can`t run the IE, then you should repair the proxy settings of Internet Explorer. Run Internet Explorer, Click Tools -> Internet Options. Select Connections Tab and click to Lan Settings button. Uncheck "Use a proxy server" box. Click OK. Click Apply. Click OK. And go to to run a Scan.

Reimage works by comparing each and every OS system files with the correct files from a web repository of 25 million Windows components. (since Reimage works by comparing with correct file, it can easily find the hiding rootkit, infact this is what a rootkit remover do dumps a list of files from your hard disk drive and compares it with the list from the recovery console in order to find a hiding virus) This is the sole reason you can get a PC as good as new once you run Reimage, all other antivirus and antimalware programs just delete the virus but they don't correct the damage which results in re-infection and slow performing PC.

Reimage first scans your computer thoroughly; all the files, folders, registry keys and values, drivers, softwares, stacks and then either repair or remove those stuffs that should be there. But it's not just that it does. They have an enormous web repository of application, drivers, system objects, etc. from where they compare your PC's files and if corrupted replace it with the healthy ones.

 How to Remove ThinkPoint Uninstall Guide

Author Box
Mike J Bennett has 1 articles online and 4 fans

Mike J Bennett is a Software System Architect, who has more than 15 years of experience. He has wide knowledge on System Security. Mike also has great interest in sports, fitness and games.

Add New Comment

How to Get Rid of Think Point Antivirus?

Log in or Create Account to post a comment.
Security Code: Captcha Image Change Image
Showing 21 comments

Sort by: Subscribe by RSS

  • comment_image

    reehasmith@+louisvuittonreplicahandbags- 2011/03/11 18:33:52 pm

    nice post ,very useful for me.

  • comment_image

    acmz123 smith- 2010/12/09 13:07:23 pm

    Thanks the author, very useful advice. my pc very slow too, which always drive me crazy, I want a program to solve my slow computer, several days ago my friend recommend me a software tuneup360, now I'm waiting for the result.

  • comment_image

    chris- 2010/12/05 08:24:23 am

    i relly need help this "ThinkPoint"box keeps poping up and everything i try to google just won't let me do it and when i go on a website it just shows me the instruchens please help me. send me a message

  • comment_image

    Russ- 2010/12/05 04:46:17 am

    NUTRON....Love 'ya, man. I thought I was screwed 'til I did what you suggested. You saved the day for me. Thanks!!!!!

  • comment_image

    insignia609- 2010/12/03 23:55:04 pm

    .. coulld get rid of it by loggin in by Safe mode and restoring the system through another admin profile (as think point also runs in safe mode if the same Profile is accessed)

  • comment_image

    manuth- 2010/12/02 14:59:25 pm

    OMG, this is the first time I see fake antivirus. It infects me :( however Regrun Reanimator can remove it too. I run both Avast and Malwarebytes and nothing found

  • comment_image

    Lee Majors- 2010/12/02 02:13:09 am

    I can't get IE to start up. Can't access the task manager either. It keeps popping up with this stupid screen. It locks me out of everything. I have malawarebytes and when I scan, it says there's nothing there. HELP!!!

  • comment_image

    James- 2010/12/01 08:03:23 am

    Thanks a lot nutron you helped a ton..... I hope it doesn't come back, but everything is working well know!

  • comment_image

    Terry Reiley- 2010/11/28 05:13:44 am

    Thank you Mike, and especially NUTRON for your clear directions. I was able to remove this virus from my computer. Tom's comment also helped when my icons disappeared. THX all!

  • comment_image

    Katherine- 2010/11/26 00:14:46 am

    I have the big think point box in the middle of my screen and I can not see most of my desk top. I have XP on the infected computer, so there is no tab in the control panel to show hidden files. I tried to download malware bytes but can not get to the box that says run because of the big think point panel on my desk top. How do I get that off?javascript:void(0)

  • comment_image

    Alli- 2010/11/23 05:03:47 am

    Hi. this helped the first time but it came back. i used the same steps, but now all of my icons are gone! help?!

  • comment_image

    jim byrom- 2010/11/22 11:17:36 am

    Thanks for the great article Mike. I was skeptic about PC reimage but thought to give a try. It really fixed the virus and license is valid for a year and I can fix any spyware/virus pops up during this time by running this tool ..really cool. Worth spending.

  • comment_image

    joietadutta- 2010/11/20 18:01:23 pm

    good article post

  • comment_image

    - 2010/11/18 04:37:34 am

    If you can`t run the IE, then you should repair the proxy settings of Internet Explorer. Run Internet Explorer, Click Tools -> Internet Options. Select Connections Tab and click to Lan Settings button. Uncheck "Use a proxy server" box. Click OK. Click Apply. Click OK. Before you do this, taskill hotfix.exe with this Go to ‘Start’ Click ‘Run’ Type taskkill /f /im hotfix.exe next taskkill /f /im thinkpoint.exe

  • comment_image

    - 2010/11/16 04:34:07 am

    i tired EVERYTHING to get this stupid virus off. it making my computer slow and it will comtinue to x out shit and saying its not responding i really dont know what to do! add me on msn please!

  • comment_image

    Nami Carry- 2010/11/15 14:30:07 pm

    Great article !!

  • comment_image

    sarah a bennett- 2010/11/15 10:31:15 am

    what if it wont let me start up the internet!? It keeps telling me that the internet was "force to shut down" because of malicious spyware.

  • comment_image

    J- 2010/11/15 10:17:09 am

    Hi You have to run this as a administrator not as guest user. Adminstrative priviliges required to remove certiain files. I PC Reimage support is very good ..they can remotely help you to fix the issue.

  • comment_image

    hv- 2010/11/14 22:26:55 pm

    hi mike, my computer was infected w/thinkpoint on the guest account. the main account is ok. i tried to get rid of it w/reimage from the guest account but it did not work. do i need to get onto the main account for reimage to work? wound the program delete or replace "healthy" files? any help would be greatly appreciated. Thanks. - hv

  • comment_image

    John- 2010/11/13 02:10:36 am

    Cool Site!

  • comment_image

    Satinder Sahota- 2010/10/26 20:34:40 pm

    wonderful articles, I have followed your instructions, worked for me. Thank you very much

This article was published on 2010/10/19