Windows Thinkpoint? Is it a virus?

xxlaurissaxx

Please any help would be hugely appreciated.

My sister has had problems with virus's so I downloaded AVG for her last Friday and did a full scan.
It came back with over 200+ virus's. It deleted them but now Windows Thinkpoint keeps coming up everytime she tries to log on. she can't do anything else. What is it and can she delete it?

Any help would be greatly appreciated.:beer:

Thanks

xxLaurissaxx

closed

yes, try malwarebytes full scan, after updating, fix anything found before closing.

with 200 viruses, I'd backup your data, and restore it to factory install using the restore partition, then install avast.

[Deleted User]

First result on Google...

http://social.answers.microsoft.com/Forums/en-US/w7security/thread/c283deaa-66ba-4ea0-8623-d5f218688f5d

xxlaurissaxx

Ok I think she has removed it and we have run a scan following these instructions from another thread -

Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan
Download MALWAREBYTES (Make sure you click 'DOWNLOAD LATEST VERSION')
http://www.filehippo.com/download_ma..._anti_malware/
Open malwarebytes and goto UPDATE and click 'check for updates'. After its updated goto SCANNER and click PERFORM QUICK SCAN then click SCAN
Remove everything thats found (needs to be ticked)
Post the COMPLETE log here AFTER youve deleted everything it finds
If anything was found then do the exact same but run a FULL scan



Could someone take a look at the log and see if there is anything?

Sorry im terrible at IT:(

Thanks

xxlaurissaxx

My sister has just emailed me the log she got -



Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org
Database version: 5051
Windows 6.0.6002 Service Pack 2
Internet Explorer 8.0.6001.18975
18/11/2010 22:57:12
mbam-log-2010-11-18 (22-57-12).txt
Scan type: Quick scan
Objects scanned: 169878
Time elapsed: 14 minute(s), 45 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
(No malicious items detected)
Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\shell (Trojan.Agent) -> Quarantined and deleted successfully.
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
C:\Users\Jennifer_2\AppData\Roaming\hotfix.exe (Trojan.Agent.Gen) -> Quarantined and deleted successfully.
C:\Users\Jennifer_2\AppData\Local\Temp\0.6303481175071957.exe (Trojan.Dropper) -> Quarantined and deleted successfully.


If anyone can have a look at this, it would be great and hugely appreciated.

xx

peter_the_piper

Get her to do a full scan as well. It sometimes picks up other things.

xxlaurissaxx

Thanks to everyone for the help, both of us are hopeless at IT. Its really appreciated xx

debitcardmayhem

Laura , get Jenny or Jennifer to look on here and follow the responses(and if she feels able sign up too) . It will be quicker and saves her ringing you I have emailed the bits, most folks on here are very sympathetic

xxlaurissaxx

debitcardmayhem wrote: »

Laura , get Jenny or Jennifer to look on here and follow the responses(and if she feels able sign up too) . It will be quicker and saves her ringing you I have emailed the bits, most folks on here are very sympathetic

Thanks, I would have but she couldnt get online as the Thinkpoint wouldn't let her get anywhere else or read anything else. I will definately tell her to sign up and read it here though.

Thanks xx