Lyrics & Knowledge Personal Pages Record Shop Auction Links Radio & Media Kids Membership Help
The Mudcat Cafemuddy

Post to this Thread - Sort Descending - Printer Friendly - Home


Tech: ThinkPoint - Trojan? What to Do?

GUEST,Ebbie at the Library 31 Oct 10 - 05:52 PM
GUEST,Ebbie still at the library 31 Oct 10 - 06:15 PM
GUEST,James in San Diego, CA 03 Nov 10 - 02:31 PM
Share Thread
more
Lyrics & Knowledge Search [Advanced]
DT  Forum
Sort (Forum) by:relevance date
DT Lyrics:




Subject: Tech: ThinkPoint - Trojan? What to Do?
From: GUEST,Ebbie at the Library
Date: 31 Oct 10 - 05:52 PM

This morning a screen popped up- it called itself Microsoft Security something and it claimed that I MAY be infected. It would not let me delete it or even close it.

I went to my Malwarebytes (which I do regularly, kn addition to a daily virus scan) and did a full scan of my system. It said it found one infection and could not remove it. Then that screen disappeared.

Since then I have not been able to get online or get past the screen which now says 'ThinkPoint, the most secure name on the internet - or something like that. I can't close it or delete it; I've done numerous re-starts.

I've gone into Safe Start a couple of times and the screen is still there.

My system is WinXP and I'm currently using IE since Firefox has problems with a non-existent proxy server. Grrrrrr.

Now what? Please?


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: ThinkPoint - Trojan? What to Do?
From: GUEST,Ebbie still at the library
Date: 31 Oct 10 - 06:15 PM

FWIW, I went looking online and found some info. Here is what STOPzilla.com/thnkpoint_help says, paraphrased:

Think Point is a virus that tries to tell you that your system is infected and that it can help. And of course, you don't want to go there.

Here is what STOPzilla says to do:

Go into Safe Mode with Networking, enter, CTRL-Shift-ESC, Task manager. Stop ThinkPoint processes.

Open Internet Explorer, Tools, Internet Options, Connections, LAN settings, uncheck proxy server. Then use a spyware tool, such as Spyware Doctor, do a Full Scan. Delete files it says that are infected.

So off to home I go. I hope it will fix it. (I posted this second post in case someone else down the line runs into this problem.)


Post - Top - Home - Printer Friendly - Translate

Subject: RE: Tech: ThinkPoint - Trojan? What to Do?
From: GUEST,James in San Diego, CA
Date: 03 Nov 10 - 02:31 PM

I just ran into this virus on my own system last night and im highly animate about keeping these things out of my system. How it got in I suspect it was bundled with a smaller app or something freeware that may have been installed as far back as August.

Once you see the 'ThinkPoint' front screen you have already installed the actual virus into your system. It will then claim its scanning files and that Heuristics are needed in order to properly clean to file then prompts you to pay for the service contract (somewhere in the area of $70 USD) but if you look closely you'll notice grammatical errors, and misspellings that Microsoft would never do.

How to remove ThinkPoint once it has been installed?

First force the computer to restart and boot it up in Safemode with Networking.

Once in windows ThinkPoint will take over again and display its frontscreen asking you to make a selection. ***IGNORE IT*** Press Ctrl + Alt + Delete instead, and attempt to access the Task Manager.

Once you are in the Task Manager click on the 'Processes' Tab at the top of the window and scroll through the processes until you find 'Hotfix.exe'

Select this file and either click the End Process button, or right click it in the list and select End Process Tree. (I prefer the right click method as it closes anything associated with that process as well.)

Now that Hotfix is disabled the virus should be at a standstill so you can access programs that it would normally prevent you from accessing.

If like me you find that your start bar is missing or Windows Explorer refuses to function, go back to the Task Manager and click on File, then New Task (Run...)

In the box simply type MSConfig and press enter to bring up a window with your Start Up settings. Click the 'Start Up' Tab and disable the entire list, then apply your settings and close this window.

Now you have disabled it from auto-loading itself when windows starts, and have disabled it enough so that you can clean it from the system using AV or Malwarebytes Anti-Malware software. (which is recommended currently)

If you need more help with this feel free to contact me at:
JWCarriger@hotmail.com or James.Carriger@sbtpg.com

I had my system logged back in after about an hour or two without losing any critical data.


Post - Top - Home - Printer Friendly - Translate
  Share Thread:
More...

Reply to Thread
Subject:  Help
From:
Preview   Automatic Linebreaks   Make a link ("blue clicky")


Mudcat time: 23 February 8:06 PM EST

[ Home ]

All original material is copyright © 1998 by the Mudcat Café Music Foundation, Inc. All photos, music, images, etc. are copyright © by their rightful owners. Every effort is taken to attribute appropriate copyright to images, content, music, etc. We are not a copyright resource.