Think Point – Fake security software attacking the web

If you’ve come across Think Point antispyware software – be aware. It is a fake program created with intention to trick scared computer users into purchasing a useless full version.

The infection sources may vary, but most popular ones include installing a video codec on an untrustworthy site, opening an e-mail attachment from a falsified e-mail named after a courier company (such as DHL, or FedEx), pop-up’s, or as even some users reported, while playing a game on Facebook.

After clicking on fake warning messages, a Trojan is installed which opens up a “backdoor” to internet. An automated script does a series of instructions hijacking your browser and changing registry entries that result in an unusable computer – desktop icons are removed, task manager and internet connection is disabled.

Some users may be presented with a Microsoft Security Essentials Alert which is actually created by the Think Point infection. This alert promotes five security programs, including Think Point. While one is given a choice to select, Think Pont will be installed no matter what you choose.

Think Point will perform a computer scan which generates a false report including massive amounts of Trojans, viruses and spyware being found your machine. It is also impossible to run any executable application, because all is blocked by Think Point – a message will be popped up stating that executable file is already infected.

All this is done in order to scare an amateur computer user and force him into purchasing a full version, which costs 90$.

Please print these instructions:

1.       As ThinkPoint infection is not giving any access to the Desktop you must restart Windows. Just after Windows boots up, press CTRL + ALT & DEL on your keyboard at once. This should bring up the Windows Task Manager.

2.       In the Task Manager window select the Processes tab on the top.

3.       Look through the list of processes until you find the hotfix.exe process.

4.       Click left mouse button on it and press END PROCESS button situated at the bottom of the Task manager. Windows should ask you to confirm killing the process, select Yes to terminate hotfix.exe .

5.       Now ThinkPoint was disabled, and you should restore a normal desktop by clicking File menu on the Task manager, select New Task (Run) and type iexplorer.exe in the OPEN field. This will grant you access to the Internet Explorer.

6.       After this you must search and delete the hotfix.exe file on your computer which may be hidden.

7.       If after deleting the file and rebooting the pc you’re still left with a blank desktop repeat step 5. You will need to fix various registry settings or use a popular and trustworthy security program.