There is residual ARCADE GIANT and a RunDLL still pops up on the screen (not on web browser)

  • 2 February 2015
  • 1 reply
  • 18 views

There is residual ARCADE GIANT and a RunDLL still pops up on the screen (not on web browser).  I ran a search on C drive and found several files and folders with ARCADE in their name.  I was able to delete all but three of those, but the RunDLL still popsup.  I cannot get to the location where the RunDLL says it is located.  Even when I make sure there the hidden files are supposed to show.
 
How do I get rid of the RunDLL showing up?  Is there a way to deleted/get rid of the remaining files/folders that have ARCADE in their name?

1 reply

Userlevel 7
Badge +62
Hello and Welcome to the Community Forum,
 
The Arcade Giant adware infection is designed specifically to make money. It generates web traffic, collects sales leads for other dubious sites, and will display advertisements and sponsored links within your web browser.
Arcade Giant it’s technically not a virus, but it does exhibit plenty of malicious traits, such as rootkit capabilities to hook deep into the operating system, browser hijacking, and in general just interfering with the user experience.
 
What you are seeing and describing is what we on the Community refer to as a PUA. (Potentially Unwanted Application)These are very annoying at best in that they cause pop-us, redirect your browser home page, and other behavior that may slow down the computer and direct ads your way, but they are not actually doing anything bad like damaging files or stealing information. Often they are installed intentionally by you the user as browser add-ons for various tasks such as quick search tools.. but they also come with the result of added annoying pop-ups and ads. Other times they 'piggy back' with other software that you installed, or try to 'sneak' onto your system entirely.
 
WSA does detect and remove many PUA's, and more are being added, but WSA does not detect all of them. A simple browser add-on with PUA behavior that is easy to identify and easy to remove is not likely to be detected and removed by WSA. Those that are intentionally difficult to locate and remove are. Please see THIS LINK for more information regarding Webroot's stance on these annoying programs.
 
The best thing to do is to submit a Trouble Ticket and ask Webroot Support to take a look and remove these for you.  There is NO CHARGE for this for valid WSA license holder.
 
Also, we have had a lot of discussion regarding these recently, and I have posted an Idea for Webroot to consider asking them to increase PUA detection.  The more  users that need help removing a particular PUA the more likely and faster that PUA will be added to detection.
 
I hope this helps!
 
 

Reply