ThinkPoint provide fake features such as Quick Scan, Full Scan and Firewall. It scares the user that the %ProgramFiles%\Messenger\msmsgs.exe is infected with Trojan.Horse.Win32.PAV.64.a. Don't be cheated as the file is clean. It disable Windows Task Manager and stop other legitimate antivirus program from protecting the computer.
ThinkPoint should be removed immediately!
ThinkPoint Removal Guide
Kill Process
(How to kill a process effectively?)
hotfix.exe
Delete Registry
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = %AppData%\hotfix.exe
Remove Folders and Files
%UserProfile%\Application Data\completescan
%UserProfile%\Application Data\hotfix.exe
%UserProfile%\Application Data\install
ThinkPoint should be removed immediately!
ThinkPoint Removal Guide
Kill Process
(How to kill a process effectively?)
hotfix.exe
Delete Registry
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = %AppData%\hotfix.exe
Remove Folders and Files
%UserProfile%\Application Data\completescan
%UserProfile%\Application Data\hotfix.exe
%UserProfile%\Application Data\install
1 comment:
Thank you very much !!!!
Think Point gave me a sleepless night.....
I am very grateful for the perfect description to remove this rogue program.
Thanks a lot !!!!
drtank
Post a Comment