After you have used all the information contained in this article run a full free computer safety scan from Microsoft at this link: http://onecare.live.com/site/en-us/default.htm?s_cid=sah: You can also call Microsoft for free help through this link, for your version of windows : http://windows.microsoft.com/en-US/windows/help/contact-support
This article is for information purposes only and we are not liable or accountable for its contents. This worked for us and we felt obligated to pass it along to you.
Our hints and tips article this week deals with a virus we got on one of our computers. The dos and don’ts should be followed to the letter. We provide you with information you will need if your computer does become infected, and to help you keep informed.
Print and Save this article in case this happens to you! You will need these instructions to start fixing your system! Yesterday one of Hubcaps and Gravy’s computers got a virus from an e-mail. The e-mail subject read, "Unable to deliver package to your address”. It appeared to be from a common carrier. When opened we got a security alert Win32/Trojan alert. The only thing that would come up was a Microsoft “looking” security program called ThinkPoint. Do Not buy anything From ThinkPoint! We tried using http://microsoft.com; and using their fix. It did NOT work. We were lucky to have a second computer to use in searching for a fix. We found the following helpful information at bleepingcomputer.com and wanted to share it with you.
What this infection does:
ThinkPoint is a fake rogue anti-spyware program that is part of the Fake Microsoft Security Essentials infection. When this infection is installed on your computer it will display a fake Microsoft Security Essentials alert that states that it has detected an Unknown Win32/Trojan on your computer. It will then prompt you to scan your computer, which will start a fake scan of your computer that ultimately states that C:\Program Files\Messenger\msmsgs.exe is infected with Trojan.Horse.Win32.PAV.64.a and that it will install ThinkPoint to remove the virus. It will then prompt you to press the OK button, which will reboot your computer to finish the installation.
When your computer reboots you will be presented with the ThinkPoint start screen before your normal Windows desktop is shown. It then prompts you to scan your computer, which will state that your computer is infected with numerous infections. It will not, though, allow you to use your computer as the Windows desktop or the Windows task manager will not be allowed to run until you purchase the ThinkPoint program. In fact if you try to close the program it will state that "Current settings don't allow unprotected startup. Please check your settings.". As you can see this program is a scam as it is ransoming the proper operation of your computer until you purchase it. It goes without saying that you should not purchase this program for any reason.
The ThinkPoint infection will not allow you to access your desktop. Therefore, we will need to follow certain steps to close the infection process so that you can regain access to your desktop. When you first start your computer you will most likely be presented with the ThinkPoint start screen as shown below.
2. When the Task Manager starts, click on the Processes tab.
3. You will now be at the Processes tab as shown in the image below.
4. When you are at the above screen, scroll down through the list of running processes and left-click once on the hotfix.exe process.
5. Once the hotfix.exe process is higlighted, click on the End Process button. When you press this button, Windows will ask if you are sure you want to terminate the process. You should press the Yes button to terminate it.
6. ThinkPoint will now be terminated and you will be at a blank screen with Task Manager running. Now click on the File menu and select New Task (Run...) from the menu.
7. When the Create New Task prompt appears, type explorer.exe into the Open: field and press the OK button. After a minute or so you should be back at your Windows desktop.
At this point start “Internet Explorer” and go to this page! http://www.bleepingcomputer.com/virus-removal/remove-thinkpoint You have done everything up to # 9 on the fix, and need to follow the instructions completely. Do Not Stop or you will have to start over!
It is possible that the infection you are trying to remove will not allow you to download files on the infected computer. If this is the case, then you will need to download the files requested in their guide on another computer and then transfer them to the infected computer. You can transfer the files via a CD/DVD, external drive, or USB flash drive.
The software you download will fix your computer with a scan that may last for hours. Our computer took 6 hours to run the scan. Let it run! When the scan ends with all the infections listed, you can delete them. Thank you bleepingcomputer.com for this helpful and valuable information; and especially for the FREE fix.
Important: Then use Microsoft Safety scan. Use the full scan version.
Our hints and tips, dos and don’ts, and help you keep informed page is looking to help. If you have a good tip that you think people need to read, send us an email at service@hubcapsandgravy.com.
No comments:
Post a Comment