I think you should go to this forum and register and post exactly what you have posted here over there and they will help you run some scans to get your pc cleaned. If you need help let me know I am over there too.

Analysis and Malware Removal

I'd like to add the description of just what ThinkPoint is/does and where it comes from to help protect others reading this thread.

ThinkPoint is a rogue anti-spyware program that comes bundled with the fake Microsoft Security Essentials Alert. It is promoted through the use of fake online anti-malware scanners, misleading websites and other malicious software. Once installed, the rogue program will prompt you to restart your computer because of the supposedly found malware on your computer. After a restart, ThinkPoint will scan your computer for malware without your permission. After the fake scan, it will claim that your computer is infected with all sort of viruses but in order to remove all the infections you need to buy certain modules that are not included in a trial version of Think Point. In reality, thought, this fake program only pretends to scan your computer and it won't remove any infections from your computer simply because it reports non-existent infections. Please don't purchase it.

While running, ThinkPoint will block legit programs on your computer. It will block task manager, registry editor and other tools too claiming that these tools were block due the security reasons and might be infected with malicious code.

It seems like ThinkPoint allows you to run only Internet Explorer, but in some cases it might allow you to run other web browsers as well.

As you can see, ThinkPoint is nothing more but a scam. It reports fake infections and prompts you to pay for a full version of the program to remove them. The problems are that the reported infection don't even exist.

If you have already bought this rogue program than you should contact your credit card company and dispute the charges.

Good catch! Smart girl! Please follow ravens advice!

Thanks, BBB--good idea. I followed Raven's advice and posted on Landzdown. I can't even get to the Task Manager on the affected computer; it's at a standstill with the ThinkPoint screen.

Meanwhile, I downloaded Malwarebytes on the computer I'm using to write this.

Hi alisande,

Be patient. Someone will come to your rescue soon at LandzDown. I saw your post. I'm a member there too. Please don't touch or try to fix your infected computer till they guide you as to what to do next. Seems that you are being held for "ransom". They'll know exactly what to do. I can't give any further instructions due to being in school for malware removal myself. I took a vow and I must honor that. You are in good hands over there...trust me!

Good luck!

Before I read your message, BBBluz (do we like BB King, BTW?) I posted the following on Landzdown:

I think I'm cured. Please tell me if I need to do anything further.

I came upon instructions from the University of Delaware for dealing with an infected computer. Following them, I restarted in Safe Mode With Networking. I was then able to open the Task Manager and end the hotfix.exe process. Then I created a New Task and opened explorer.exe. From there I was able to download and run Malwarebytes, which found three infected files. As part of the removal process, it requested a restart. When the computer started up again, the normal desktop appeared. Everything seems fine.

I'm relieved! Should I be?

Thanks!

Please go ahead and see what is recommended at LzD you may not be fully clean yet.
good work realizing you had been infected.
I suggest once all is done, if you do not have WOT on your browsers to put it on them it will help stop you from going to questionable sites with these kinds of infections.

Please follow through with what ravencajun suggests. I see that Corrine did post a request for you to ran a special scan to verify that you are free and clear of this infection. I would follow through with her request. Some of these infections are so advanced that just one little entry in the registry will lie dormant...then wham! Got you again!

Also as raven suggests, install WOT (Web of Trust) and I'd also install SpywareBlasters. Install WOT first from ink provided then google SpywareBlasters to find a good link to install from. Even good programs are found at bad sites.

Here is a link that might be useful: WOT (Web of Trust)

Ever cautious, I Googled RSIT and saw this:

Rsit.exe is a hazardous trojan that hijacks systems by altering file names in Windows registry.

I assume this is a false message from a bad website? .....man, it's complicated out there!

After reading Gene's post, I took a look at this thread again. I see that I've been a little stingy with my thanks! I'm not usually (really!). My good manners must have been paralyzed in my panic over the state of my computer last night.

Many thanks to my caring helpers!

the Rsit that Corrine wants you to use is fine it is used daily on the support forums. Just follow through with the LzD directions now.

Web of Trust seems to be some kind of a popularity contest frequented by self-important, wannabe security experts who have an inordinate amount of free time to criticize the work of others. I read one thread where the only complaint about a little web site was the lack of a privacy policy detailing what information was being collected and how it would be used. As if a privacy policy is worth anything more than the electrons it's displayed with. I could write a privacy policy promising not to do anything and do it anyway. How would you know and more importantly what could you do about it? Sue for pain and suffering when your inbox is filled with ads for imitation Viagra?

I suppose Web of Trust serves some purpose and might give you a bit of heads up before wandering into danger but I wouldn't count on it.

WOT is a very helpful addition to a security protocol for any pc user. It is highly regarded and recommended by the security community. I have seen it many times save a user from clicking on to a known site that was infected with clickjacking rogue AV infections.
I always urge anyone that is using WOT to give a rating to use the comments section to specify exactly why that rating was given.
And please understand that a site may have unknowingly been the host of an infection and by the community finding that infection and letting the site owners (and visitors) know that their site was infected were able to correct their site problems, once the site has been cleared it works it's way back up to green status. A site with poorly written code that is unwilling to correct it which then allows the opportunity for hackers to gain access and add infection links is going to stay red listed as should be.

to the point WOT is the best of it's kind available at this time and fills a need. It is an addition to smart surfing habits, no one thing is the magic pill, it is one part of the learning process and one more layer of security. Layered security is by far the best option.

Hi alisande,
BBBluz (do we like BB King, BTW?)
Actually that was a nickname given to me by my dearly departed grandfather because of my BIG blue eyes! But, yes! I do like BBKing! Love the blues!

I'm glad you posted at LandzDown, I see you found out a few things that were needing attention. Corrine is one of the best in the field of Security.

@ mike kaiser: Yes! I am a wannabe. But I've taken it one step further than wanting...I am a gonnabe! I want to be the best that I can be to help those who can't help themselves. I don't see how that would render one to be self-important. The one thing that I have found while helping others to solve their computer problems, is that not everyone is cut out for learning the Technology that is closing in on us and making our lives difficult. I am not here to help criticize the work of others, just to protect and teach those who are vulnerable to those who create malware and get rich at the expense of those who are unaware of such tyranny that we face while surfing the web. The Web of Trust add on does this very well. Even if you click on a familiar link that is good, there are "sub links" within links that are not so good. I have found many while researching and will do my best to protect and teach those who are not aware of this. That is my goal! Safe surfing and to teach others about the hazards there of.

I am not here to criticize as you have in your post, but to teach and give of myself what others have given to me. I can tell that you are quite an educated man and I'm sure that is your goal as well.

To be completely honest...your response had left me baffled!

WOT definition:
With over 13 million users worldwide, Web of Trust offers Internet users preventive protection against online threats and scams. WOT's patent-pending reputation management system computes ratings from individual users and trusted sources based on trustworthiness, vendor reliability, privacy, and child safety. Sophisticated algorithms guarantee objective reputation management, ensure reliability, and protect against manipulation.