Think Point

I have Norton Antivirus on a few computers but an unprotected computer has Think Point.  I can't get around the Think Point screen, and Think Point is on in Safe Mode.  I have a Bootable Virus Removal Disc which I am pretty sure I created with a Norton registered copy, so I booted from that CD and got the message it has expired and was created from a pre release version.  So that didn't work.

 

My registered Norton disc is at my office at the moment, if I used that disc could I use it to remove the virus from the infected computer?   What about a store bought disc? Is that bootable?  Could I make a bootable virus removal disc from the registered copy on this computer, would that work? 

 

Thanks. - Glenn Czulada


glenncz wrote:

I have Norton Antivirus on a few computers but an unprotected computer has Think Point.  I can't get around the Think Point screen, and Think Point is on in Safe Mode.  I have a Bootable Virus Removal Disc which I am pretty sure I created with a Norton registered copy, so I booted from that CD and got the message it has expired and was created from a pre release version.  So that didn't work.

 

My registered Norton disc is at my office at the moment, if I used that disc could I use it to remove the virus from the infected computer?   What about a store bought disc? Is that bootable?  Could I make a bootable virus removal disc from the registered copy on this computer, would that work? 

 

Thanks. - Glenn Czulada


Hi glenncz

 

Download and burn the Norton Bootable Recovery Disk to use from here. When you go to use it you will need to provide a valid activation key from your Norton Product.

 

www.norton.com/nbrt

 

Hello glencz

 

Please try to bring up task manager and new task and type in exeplorer.com and see if you can get to the free version of Malwarebytes and do the full scan with that.

 

Download the free version, install and update then run a FULL scan. After the scan completes you should post the logs back to this thread.

You can find Malwarebytes here

http://www.filehippo.com/download_malwarebytes_anti_malware/

It is a safer location to get the program from than malwarebytes themselves because some malware creators have large lists of sites that they block. Please be careful to down load the correct program ----the FREE version of MALWAREBYTES

(Thanks to Delph for providing the alternative site)

 

You have a rogue antivirus program installed now.

 

Please let us know how you made out. If you can't get to malwarebytes, then please see if you can use another computer and use a pen drive to bring it to your computer. Thanks.

The CD ROM drive in the infected computer is failing and i received a failing drive warning when I tried to boot from Norton Bootable disc there.  So I saved my bootable recovery to a USB stick.  But now I get the warning that there is an invalid partition.  Is that possibly because the good computer that I used to created the recovery bootable is Win 7 and the infected computer is a Win Vista??  I don't see any options for creating this bootable recovery for a specific win version.

 

My other option is that i do have a working external CD drive that I could use.

"you people" are WONDERFUL!  Thanks.  I'm working on it.

I thought thinkpoint was legitimate, but it didn't let my open Internet Explorer or any other program. I Googled it on my  laptop to see if it's legitimate, and found out it wasn't. I searched for removal steps and found this useful information on yahoo answers: 

 

After the ThinkPoint screen loads push the command CTRL+ALT+DELETE quickly. This will bring you to task manager. Open the tab called Processes, find the process hotfix.exe and end it. The rogue program should be gone now. Next, you need to bring your Desktop and taskbar back. While in task manager go to File and select "Run new task". Type explorer.exe in the open box. This will bring back Windows explorer. More detailed instructions are given below. At this point you should be able to download anti-malware software which will remove ThinkPoint. 

 

Source: http://deletemalware.blogspot.com/2010/10/how-to-remove-thinkpoint-uninstall.html

 

The other guy used superantispyware to remove thinkpoint, but it didn't help me. A program called Malwarebytes did the trick. 

Now my computer is back to normal! 

Hello

 

That's what I said to do in my post above. I said to use the task manager and do a new task and bring  up explorer.exe and to use Malwarebytes. I didn't copy the whole post from that thread, but put it into my own words. I got the information from the same site.

Bleeping Computer instructions

 

 http://www.bleepingcomputer.com/virus-removal/remove-thinkpoint

 

I think I have found the Installer /dropper for Think Point, but it all installs drivers etc.

 

Added, Norton detects the hotfix.exe   http://www.virustotal.com/file-scan/report.html?id=e8b9d9d222148200e60932fd756092a3198ae67915bd38fdabb0681d6106e067-1287951072

 

Quads

Thank you, thank you, thank you! With your instructions I was able to get rid of the thinkpoint window boxes that were 30 deep on my desktop. I'd been working on ridding my laptop of the nasty parasite for hours until I found the Norton Community. I'm very grateful.

thanks!  the fix above that was recommended worked, we're running smooth now.  hopefully the deep crevasses in my box are cleaned out of the bad stuff.

Thanks so much for your help.  My Mother-in-law's computer was infected with this malware.  The step by step directions for removal worked for me.

This malware can be removed by running a scan with Norton Power Eraser in Safe Mode:

http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20100914184709EN


Yogesh

CAREFUL!!! the likes of the Rogue Antivirus8 has been found to be bundled with TDL3 + and now the 0.03 version of TDL4 (Tidserv.inf and Boot.Tidserv) and the associated files.

 

Pull out that with NPE and see what happens as you are removing the rogue :smileyvery-happy: :smileyvery-happy:

 

We all know what happens when using NPE once, twice, whatever and not getting back into Windows.

 

Quads

Hello

 

All the people who posted in this thread with the malware have already been cleaned up.

Hopefully, those coming along that found this thread by name, will heed Quads' warning.  The NPE is not a "fixall" especially when everything is already fixed.  :smileytongue:

Note to others, if you suspect that you are infected with TDDS rootkit you are better off running the TDDS killer from Kaspersky: http://support.kaspersky.com/viruses/solutions?qid=208280684

This is ridiculous.

 

Having a Rogue (plus maybe others) with TDSS,  using TDSSkiller could be a struggle, Rogue or other Malware is blocking the running of files or part of, or Can't see the desktop properly.

 

But at least I could have a laugh.

 

Oh and there are now Rogues also seemingly with Ramnit also.

 

Quads

 

What I mean is that instead of running NPE to cure TDDS infection (after you have cured the rest), you are better off running the TDDS killer.

 

OR better yet, seek help at other malware removal forums:

http://www.bleepingcomputer.com

http://www.geekstogo.com/forum/

http://www.cybertechhelp.com/forums/

http://forums.whatthetech.com/

(Thanks to Delph for providing the list of sites)

Please come back and let us know which one you are going to sign up with and keep us informed. Thanks.

Please come back and let us know which one you are going to sign up with and keep us informed. Thanks.

 

 


As mentioned previously, the multiple users have already solved their combined issues.

 

I also had problems with this trojan virus. I got rid of it by using system restore and going back before it was downloaded. try it, it worked for me.

 

mongoose49w