Home > Rogue Anti-Spyware > ThinkSmart

How to remove ThinkSmart?

November 2nd, 2010

What is ThinkSmart?

ThinkSmart is a fake anti-spyware from Microsoft Security Essentials impersonators family, similar to Thinkpoint. The infection is spread by Java exploits, faked updates to various software or other kinds of trojans. As the symptoms of ThinkSmart infection might hit a while after actual infection, some of the users can not identify the exact cause.

This kind of malware enters PC in 2 stages: First, it starts showing a faked window of Microsoft Security Essentials, a good and legitimate antivirus, with warning that there is an serious infection. The user is asked to reboot PC to fully remove infection. During that time another application is installed. That application is ThinkSmart – a rogue antivirus, that is quite hard to remove. After the reboot, user is greated with ThinkSmart window which scans the PC and tries to scare the user further.

First, ThinkSmart will start showing various alerts, varying from infections detected to hackers attacking the PC. These alerts are fake. If user clicks on the alerts, a fake scan window will be presented and it is claimed that ThinkSmart removed some of the infections, but requires additional module to remove them from important system files. Coincidently, these files belong to antiviruses and other tools, that can be used to remove this scareware.

To Remove thinkSmart, follow these removal instructions:
1. press Ctrl+shift+esc right after booting up in windows and stop processes mentioned in removal guide (usually hotfix.exe).
2. Press File->New task in task manager and enter full path to explorer.exe
3. Search for hotfix.exe and thinksmart.exe or other mentioned files on your PC, and delete all occurrences under C:\Users, C:\Documents and Settings or in temporary folders.
4. Disable proxy settings in your browser, or use another PC and usb disk to download and install tools in next step
5. Install and scan with TDSS Killer, Spyhunter, Hitman Pro and Malwarebytes Anti-Malware. Perform full scans with last 3 tools and delete everything they find.
6. Update your Antivirus Software. Preferably to internet security version, or use full version of Spyhunter or MBAM to protect from similar infections


ThinkSmart is Extremely dangerous

arrow ThinkSmart is a corrupt Anti-Spyware program
arrow ThinkSmart may spread via Trojans
arrow ThinkSmart may display fake security messages
arrow ThinkSmart may install additional spyware to your computer
arrow ThinkSmart may repair its files, spread or update by itself
arrow ThinkSmart violates your privacy and compromises your security
Download Spyhunter
for ThinkSmart detection

Note: Spyhunter trial provides detection of parasite like ThinkSmart and assists in its removal for free. You can remove detected files, processes and registry entries yourself or purchase a full version.



ThinkSmart screenshots


ThinkSmart screenshot

Manual ThinkSmart removal


Important Note: Although it is possible to manually remove ThinkSmart, such activity can permanently damage your system if any mistakes are made in the process, as advanced spyware parasites are able to automatically repair themselves if not completely removed. Thus, manual spyware removal is recommended for experienced users only, such as IT specialists or highly qualified system administrators. For other users, we recommend using Spyhunter or other malware and spyware removal applications found on 2-viruses.com.
Stop these ThinkSmart processes:
Remove these ThinkSmart Registry Entries:
Remove these ThinkSmart files:
It is impossible to list all file names and locations of modern parasites. You can identify remaining parasites, other ThinkSmart infected files and get help in ThinkSmart removal by using free Spyhunter scanner. It comes with free real-time protection module that helps preventing ThinkSmart and similar threats.

ThinkSmart is classified as Rogue Anti-Spyware. After infecting a user’s system, it proceeds to scare its victim into buying the “product” by displaying fake security messages, stating that your computer is infected with spyware and only ThinkSmart can help you to remove it after you download the trial version. As soon as the victim downloads ThinkSmart trial version, it pretends to scan your computer and shows a grossly exaggerated amount of non-existent errors. Then, ThinkSmart offers to buy the full version to fix these false errors. If the user agrees, ThinkSmart does not only fix the errors, but it also takes the user’s money and may even install additional spyware into the victim’s computer.

Some Rogue Anti-Spyware, such as ThinkSmart, may offer users to buy it after the victim clicks on a banner or a pop-up while surfing the internet. Usually, a Trojan is installed to a victim’s computer after clicking on the advertisement. It then proceeds to download or even install ThinkSmart, which is another way for Rogue Anti-Spyware to spread itself.

Most of rogue Anti-Spyware, such as ThinkSmart, is nearly impossible to remove manually.


How to tell if your PC has been infected by a Rogue Anti-Spyware such as ThinkSmart?

Numerous undesirable and annoying pop-ups: A typical Rogue Anti-Spyware parasite keeps track of your internet browsing habits, sending your browsing history data to remote servers, owned by third party companies that use this information to advertise their products via numerous pop-ups, toolbars, hijacked homepages and spam letters. All these undesirable advertising methods are used on the victims of Rogue Anti-Spyware.
Changed or new icons: Sometimes, Rogue Anti-Spyware installs unwanted software to a victim’s PC without user’s knowledge and consent. This may lead to slower PC performance and stability, as well as more unwanted programs you can't remove.

Rogue Anti-Spyware

  1. No comments yet.
  1. No trackbacks yet.