ThinkPoint is a fake anti-malware you should never trust

ThinkPoint virus is a rogue anti-spyware program that usually comes into Windows after users get tricked by the fake Microsoft Security Essentials Alert. It is promoted through e-mail phishing and P2P (peer-to-peer) networks and often comes along with Trojans and exploit kits.
Once installed, the rogue program will prompt you to restart your computer because of the supposedly found malware on your computer. After a restart, ThinkPoint will scan your computer for malware without your permission and claim that your device is infected with all sorts of viruses.
As evident, the main goal of this malicious software is to monetize users by using scam and fraud techniques. Thus, once victims are convinced that their PCs are infected with malware, they might panic and end up buying rogue anti-virus software.
What users might believe that they are paying for is a virus removal program, but in reality, they would not only be scammed out of their money but also install a virus on their systems. Not to mention that crooks behind ThinkPoint might steal credit card information and use it for malicious purposes, resulting in financial losses to victims.
During the operation of the ThinkPoint virus, you are likely to see various pop-up messages – here are a few examples:
Microsoft Security Essentials detected potential threats that might compromise your privacy or damage your computer. Your access to these items may be suspended until you take action.
Unable to remove threat. Click ‘Scan online’ to remove this threat
In reality, thought, these notifications are fake, and the program only pretends to scan your computer. Even if you try scanning your computer online, it remove any infections from your computer because they are simply non-existent. If you do not purchase the full version of the program, it may start dropping threatening messages that the computer is supposedly bombarded with viruses trying to get in.
However, you should not be deceived because it is merely a scareware program, using social engineering techniques to trick people into bringing easy profit for this virus creators. You should take action as soon as you notice this program or its threatening notifications on your device. ThinkPoint removal instructions provided at the end of this article. However, it is always advisable scanning your computer with a reliable antivirus tool, such as FortectIntego to delete the rogue program automatically.
While running, ThinkPoint will block legit programs on your computer. It will block task manager, registry editor and other tools too claiming that these tools were block due the security reasons and might be infected with malicious code. The main process of the virus is usually called hotfix.exe or thinkpoint.exe.
You will have to end this process first and then either remove ThinkPoint-related files manually or use an automatic removal tool. One possible way is to reboot your computer in safe mode with networking and download an automatic removal tool and run a quick system scan or manually delete ThinkPoint files listed below. It seems like the malicious app allows you to run only Internet Explorer, but in some cases it might allow you to run other web browsers as well.
ThinkPoint removal guide
As you can see, ThinkPoint is nothing more but a scam. It reports fake infections and prompts to pay for a full version of the program to remove them. The problems that the reported infection do not even exist. Also, this rogue program significantly diminishes the computer's performance, so you may also start encountering different system errors too.
If you have already bought this rogue program, then you should contact your credit card company and dispute the charges. Finally, please use an automatic removal tool given below to remove ThinkPoint from your computer or delete its files manually.
Before you remove this infection, you have to recover the Internet connection if you have problems with that and end all processes associated with ThinkPoint malware. Otherwise, you will not be able to run any anti-spyware/virus software.
Disable proxy server for LAN in Internet Explorer or use another browser, for example, Firefox or Opera.
How to disable a Proxy server for LAN in Internet Explorer:
- Open Internet Explorer. Click on the Tools menu and then select Internet Options.
- In the Internet Options window, click on the Connections tab. Then click on the LAN settings button.
- Now, you will see the Local Area Network (LAN) settings window. Uncheck the checkbox labeled Use a proxy server for your LAN under the Proxy Server section and press OK.
- Now download renamed Process Explorer (explorer.com) and terminate ThinkPoint processes. Should be hotfix.exe and thinkpoint.exe.
NOTE: Do not reboot your computer after using Process Explorer and terminating ThinkPoint processes. Also, don't forget to clean your web browsers as explained below.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Did this guide help?
44 comments
Guest
Thanks for the clear concise removal instruction. Worked like a charm
Guest
No matter how I restart my computer, I cannot get past Thinkpoint. Any suggestions?
Hartmut
Thanks a lot for the good structured help; it works fine. To start the task manager, you have to press quickly alt-ctrl-del, before the full ThinkPoint window appears. From withinTskmgr you can run the remedies listed.
Jayant
Really...this is a high quality spyware...it infected my brother's computer...
trying to remove it.... well, thanks for the info. :)
Guest
Worked for me! Thanks! Safe mode with networking.. then control alt delete to task manager.. delete hotfix.exe .. the go to file in task manager and RUN NEW ..regedit .. delete HKEY listed above.. then you can SEARCH under ALL FILES for hotfix and delete them all..
Guest
it will not let me open my task manager...
Guest
WORKED GREAT GOT RID OF THE ISSUE
By George!
I did the Safe mode with networking -> stop hotfix*32.exe using Task Manager -> Run System Restore thing. Looks like it worked. :)
Guest
I can't get into the system. How do I get to safe mode with networking?
Guest
Taskmanager does not work, what to do now?
Guest
10x! works as stated!
Guest
Another tip for windows 7 users, and possibly others...you can't get to your desktop from the Thinkpoint screen, just go to task manager (Alt, Ctrl, Del) then go to the top of the task manager window, hit "File", then select New Task(Run) and type in "explorer.exe" Your desktop should pop right up!
Guest
thank you! this worked perfectly for me.
Guest
I meant to write documents and settings
Guest
Help I can't access my disconnects abs settings and I cannot access the internet either! Using phone now please help
Guest
Thank you so much.I have removed Think Point spyware with your help.
Guest
Thank you so much.I have removed Think Point spyware with your help.Great work keep it up........
Guest
thinkpoint has infected my laptop. i can not access the internet, or run task manager. someone please help me remove it from my computer.
thanks,Brian
Guest
me cago en todos tus muertos,,si te tubiera aqui a mi lado te corto las manos,,,,hijodeput..si no teneis nada que hacer,,,rebanarse el cuello,,antes de que se os adelante,,cobrones,,,heso no se ace,,malditos hijosdeputa
Guest
for win7 users
the application "hotfix.exe" is found in
computer > local disk(c:) > users > (then chose the main addministrators user account)
> App data > Roaming > (then sroll down its probably at the bottom of the list)
Guest
Thanks for the tip Think Point logo is gone now, but I can not get onto Internet for a long time . The internet is not responding. Am i missing something? Any idea on how to fix it?
Zelly
Thanks a lot for this information. I save my laptop from this scrammer spyware.
By the way, avast don't detect this troyan.
Tom
thank you sooooooooooooooo much
Guest
I was lucky, I had a system restore point 2 days ago. I simply just did
a system restore and it seems to have completely solved the problem.
Guest
I have problem with thinkpoint want to detract from the pc that does not leave me to use the Internet ...
xD
i have a problem with thinkpoint and i can´t leave this
Guest
Just to let people kniw that Avira and Spybot have both failed to detect this nasty, time consuming, infuriating virus!!! I am just downloading Spyware doctor now from a USB stick - will let you all know how it goes....
Guest
Spyware doctor need a key/license . Anyone can help me?
Guest
Comment #17. Thanks!
Guest
I can't find a way to remove thinkpoint. And its asking me credit card info.won't let me go online to download anything to remove it
Guest
I can't open internet because thinking point keeps comeing on
Guest
I can't go anywhere! Using Windows 7. Clicking the popup which says to run unprotected will do away only to come back when I try to open anything. Help!
Guest
I did a system restore and it has taken care of the problem at least for now. I have Win 7. Keeping my fingers crossed.
Guest
I am using my work computer to send this. On my home computer I cannot get into anything when I try to remove processes - it jiust keeps rebooting. What should I do?
Guest
I am using my husbands computer. I receive this thinkPoint virus this morning. I can't get into my internet, or run task manager. Can someone help me figure out how to get in my computer to get rid of this virus?
Sam
Thank you for posting the manual removal instructions. Somehow I got Task Manager running (quick with the ctrl-alt-del on reboot, I think) and was able to kill hotfix.exe. After that I refreshed the screen and I was able to follow manual instructions.
Guest
Your instruction to remove Thinkpoint cannot be used because Thinkpoint does not allow me to open Internet Explorer to begin with. How can I open Internet Explorer?
Guest
just ran free AVG and it got it. Malwarebytes picked it up also. This kinda of problem is why I run Linux on my systems but this makes me money. Thanks for the info.
Ramindra Walia
This was very simple and good way to remove Thinkpoint. Thanks
Guest
Hey i used Spybot and it worked on my system. It was free and i used it on another machine and it worked there too.
Mark
help! can't use the internet and won't let me use the taksmanager
Guest
i cant go on the internet tho, it wont let me -.-
Guest
i can't get on internet task manager or system restore how do i get rid of think point
trish
i can get into windows please help