Gtarcade

Results of the Farbar Recovery Scan Tool (x64) Version: 24.10.2018
Executed by mariel (26-10-2018 22:02:39) Run:1
Executed from C:\Users\marie\Desktop
Loaded profiles: mariel (Available profiles: mariel)
Boot mode: Normal
==============================================

fixlist content:

End of Fixlog 22:02:39

here is the content

Here I have restarted the computer and there is no trace of gtarcade anymore.

Thank you very much for your help.

For CCleaner and Glary Utilities, okay I will uninstall them. I am currently reading your article on cleaning, very informative, thank you again.

Sorry for the very big delay, yes I confirm, the problem is 100% resolved

Thank you very very much.

@RyanYou're welcome and have a nice weekend! :)

Thank you very much, have a great weekend too! :D

Yes, because 4 GB of RAM.

Processor: Intel(R) Celeron(R) CPU N2840 @ 2.16GHz
Memory usage percentage: 86%
Physical memory - RAM - total: 3979.21 MB


You have programs that were installed when you bought the computer or installed later that may not be useful.
They clutter Windows and can slow it down.
You can therefore uninstall them.
Go to the Control Panel
then Programs and Features.
Uninstall:

Avast Free Antivirus (Windows Defender is lighter)
Avast Cleanup Premium (useless)
CCleaner (useless)
GTarcade
HP Dropbox Plugin (unless you sync)
HP Google Drive Plugin (unless you sync)
Nicequest Premium (unless you use it)


PS: CCleaner is not really useful, even if it's recommended everywhere.
If you want to keep it, disable CCleaner's monitoring, unnecessary, it starts with Windows and slows it down with its incessant cleaning, see: https://www.malekal.com/supprimer-ccleaner-demarrage-windows/

Here is the correction to be made with FRST. You can use this explanatory note with screenshots.
Restart FRST then on your keyboard press the CTRL + Y key.
The notepad will open, copy/paste this.

Start
CloseProcesses:
CreateRestorePoint:
HKU\S-1-5-21-3592871095-664895162-644060240-1001\...\Run: [Nicequest Premium] => C:\Users\Murielle\AppData\Local\Nicequest Premium\Nicequest Premium.exe [1233144 2017-06-23] (Wakoopa B.V. -> Wakoopa)
HKU\S-1-5-21-3592871095-664895162-644060240-1001\...\Run: [gtarcade] => C:\Users\Murielle\AppData\Local\Gtarcade\app\gtarcade.exe [3546016 2019-04-29] (Shanghai Youzu Information Technology Corporation Limited -> ) [Unsigned file]
C:\Users\Murielle\AppData\Local\Gtarcade
EmptyTemp:
RemoveProxy:
Reboot:
End

Save the content through the file menu then save.

Close the notepad, return to FRST and click on the "Fix" button
A restart may be necessary and automatic.
A text file appears, copy/paste the content here in a new message.

Restart the computer.

~~

You need to uninstall the Amazon Assistant extension for Opera.

@Malekal_morte-Thank you for your help.

But after doing everything: Gtarcade is still there :-(
It reinstalls itself on reboot even though I took the precaution of deleting all remaining files beforehand.
Or maybe I didn't follow the procedure correctly...
It's getting late, I'll try again tomorrow.
Thank you and good night!

@Faustine75Have you done the FRST correction?
Can you provide the report?
Where do you see GTArcade?

@Malekal_morte-I have gone through the entire procedure again and this time I can't find the Gtarcade files.
Here is the report:
Murielle => 2758108 B

RecycleBin => 244063 B
EmptyTemp: => 407.8 MB of temporary data deleted.

================================

The system had to restart.

End of Fixlog 16:37:14

But the Gtarcade program still remains in my list of programs and when I try to uninstall it I get a message: "you do not have sufficient access rights ......".

@Faustine75It seems like the beginning is missing.
We only have the end here.

Hello,

When you install an antivirus, Windows Defender automatically disables itself.
If no antivirus is present (so if you uninstall Avast), it will reactivate.

@Aranud87Thank you for this information that, of course, no one reveals anywhere ;-)

Hello,

To uninstall:
Avast Secure Browser
CCleaner

CCleaner is not really useful, even though it is recommended everywhere.
If you want to keep it, disable the CCleaner monitoring, which is unnecessary, as it starts up with Windows and slows it down with its constant cleanings. See: https://www.malekal.com/supprimer-ccleaner-demarrage-windows/

Here is the correction to perform with FRST. You can refer to this explanatory note with screenshots.
Restart FRST then press CTRL + Y on your keyboard.
The notepad will open, copy/paste this.

CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-1985577829-2675674164-2342876404-1001\...\Run: [gtarcade] => "C:\Users\marie\AppData\Local\Gtarcade\app\gtarcade.exe" /game_id=332 /startgame=RXJhIG9mIENlbGVzdGlhbHM=
C:\Users\marie\AppData\Local\Gtarcade
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

Save the content using the file menu then save.

Close the notepad, return to FRST and click on the "Fix" button.
A restart may be necessary and automatic.
A text file will appear, copy/paste the content here in a new message.

Restart the computer.

Results of Farbar Recovery Scan Tool (x64) Version: 20.01.2019
Executed by Cécile (01-24-2019 20:03:38) Run:3
Executed from C:\Users\Cécile\Desktop
Profiles loaded: Cécile (Available profiles: Cécile)
Boot mode: Normal
==============================================

fixlist content:
CreateRestorePoint:
CloseProcesses:
HKU\S-1-5-21-1985577829-2675674164-2342876404-1001\...\Run: [gtarcade] => "C:\Users\marie\AppData\Local\Gtarcade\app\gtarcade.exe" /game_id=332 /startgame=RXJhIG9mIENlbGVzdGlhbHM=
2018-10-26 18:46 - 2018-10-26 18:46 - 000000000 ___HD C:\GTarcade
Hosts:
EmptyTemp:
RemoveProxy:
Reboot:

The restore point was created successfully.
Processes closed successfully.
"HKU\S-1-5-21-1985577829-2675674164-2342876404-1001\Software\Microsoft\Windows\CurrentVersion\Run\\gtarcade" => not found
"C:\GTarcade" => not found
C:\Windows\System32\Drivers\etc\hosts => successfully moved
Hosts restored successfully.

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully deleted
"HKU\S-1-5-21-2052373595-2782729040-2076756327-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => successfully deleted
"HKU\S-1-5-21-2052373595-2782729040-2076756327-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => successfully deleted

========= End of RemoveProxy: =========

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 2100480 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 40 B
Edge => 0 B
Chrome => 7834981 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 0 B
Cécile => 284008953 B

RecycleBin => 3002 B
EmptyTemp: => 288.3 MB of temporary data deleted.

================================

The system had to restart.

End of Fixlog 20:09:15

@KawaiijiieIs it resolved?

After restarting, gtarcade is still present and cannot be uninstalled.. however, I followed the instructions.

@KawaiijiieYou can remove it from the list of programs by following these instructions: https://forum.malekal.com/viewtopic.php?t=44630&start=
Perform a file search on GTArcade and delete the leftovers.

Hi,

yes, of course, do provide the links.