Sunday, November 14, 2010

ThinkSmart Removal GuideThinkSmart Removal Guide

ThinkSmart Removal Guide
ThinkSmart is a fake antivirus program which is much similar to ThinkPoint. ThinkSmart will start automatically when Windows boot after install in the computer. Then it will scan the computer and WILL SURELY states that the computer are infected by malwares. ThinkSmart will force the user to purchase the full version of ThinkSmart so that to cheat the money from the user. ThinkSmart cannot detect and remove any malware. The user the can follow the removal guide stated below to remove ThinkSmart completely from the computer.

ThinkSmart provide some fake features such as Scanner, Heuristic and Firewall. All of them cannot protect our computer from any kind of virus. They are SCAMS!

ThinkSmart should be removed immediately!

ThinkSmart Removal Guide
Kill Process
(How to kill a process effectively?)
defender.exe
hotfix.exe
tmp.exe
antispy.exe
thinkpoint.exe

Delete Registry
HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%LocAppData%\antispy.exe"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnonBadCertRecving" = "0"
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings "WarnOnPostRedirect" = "0"
HKCU\Software\Microsoft\Windows\CurrentVersion\Run "tmp"
HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce "SelfdelNT"
HKCU\Software\PAV
HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon "Shell" = "%Documents and Settings%\[UserName]\Application Data\hotfix.exe"
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "thinksmart"
HKEY_CURRENT_USER\Software\PAV

Remove Folders and Files
%LocAppData%\antispy.exe
%LocAppData%\defender.exe
%LocAppData%\hotfix.exe
%LocAppData%\tmp.exe
%TempDir%\kjkkklklj.bat
%UserProfile%\Application Data\completescan
%UserProfile%\Application Data\hotfix.exe
%UserProfile%\Application Data\install

No comments:

Post a Comment