ARhome
by Vonteera LLC
What is ARhome?
ARhome is software application developed by Vonteera LLC. It is most commonly found on computers running Windows 7 with nearly 75.22% of installations running this operating system. ARhome's installer is typically 1.00 MB in size and installs around 6 files. The most common release is 4.1.0.0 with 48.18% of all installations currently using this version.
ARhome is most popular in the United States with 28.59% of installations residing in this country.
ARhome adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.
About ARhome?
ARhome is a web browser extension designed to display popup and banner ads, as well as modify the user's web browser search and home page settings. It is compatible with Internet Explorer (as a BHO), Chrome (as an extension), and Firefox (as an add-in). The extension may monitor user behavior and inject additional advertisements, a practice to which users inadvertently agree if they do not read the full EULA. ARhome is commonly bundled by third-party download managers/installers or distributed through questionable online ads. Notably, it is digitally signed by Yordan Damyanov, a prominent adware provider, and distributed through adware bundlers such as Somoto Ltd. via softingo.com, down1oads.com, and solidfiles.com.
Multiple virus scanners have detected malware in ARhome.
| Scanner Software | Version | Result |
|---|---|---|
| ESET-NOD32 | 8.9905 | a variant of Win32/AdWare.Vonteera.E |
| Symantec | 1/11/2014 rev. 7 | WS.Reputation |
| TrendMicro-HouseCall | 7.2.11 | TROJ_GEN.F47V0102 |
Software Behaviors
- Scheduled tasks:
-
- Updater.exe is scheduled as a task named '5FOFD9B73D6C-2CRMOI6' (runs when idle).
Startup Entries
- Registry entries:
-
- Updater.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ARHome' and executes as "C:\Documents and Settings\user\Application Data\ARHome\Updater.exe".
Software Details
- URL:
- https://www.adnetwork100.info
- Support:
- –
- Installation path:
- C:\users\user\appdata\roaming\novooit\arhome
- Uninstaller:
- C:\users\user\appdata\Roaming\NoVooIT\ARhome\uninstall.exe
- Size:
- 1.00 MB
- Language:
- English
ARhome Executable Details
- Primary executable:
- Updater.exe
- Name:
- ARhome
- Path:
- C:\users\user\appdata\roaming\novooit\arhome\Updater.exe
- MD5:
- a624cde4950054b8623b569a21cc537c
- SHA-1:
- –
- SHA-256:
- –