84,488,480 programs installed

Should I remove ARhome?

What percent of users and experts removed it?
82% remove it18% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #4,793
United States Rank #23,742
Reach 0.1085%
Lifespan of installation (until removal)
< 8.99 days
265.14 days >
Average installed length: 139.31 days

Versions

VersionDistribution
4.1.0.0 48.18%
3.0.0.0 40.04%
2.1 1.31%
2.0.0.0 10.48%

Other programs by Vonteera

ARhome

What is ARhome?

ARhome is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings. This plugin will update Internet Explorer (as a BHO), Chrome (as an extension) and Firefox (as an add-in). In some cases, the program will monitor a user's behavior (which the user agreed to if they did not read the full EULA) and will inject rival advertisements over existing one or just inject new ones all together. This toolbar is typically bundled by third party download managers/installers or through questionable online ads.

The software is distributed through adware bundlers including Somoto Ltd. via softingo.com, down1oads.com and solidfiles.com. It is digitally signed by Yordan Damyanov, a known adware provider.

Overview

The most used version is 4.1.0.0, with over 98% of all installations currently using this version. Upon installation, it defines an auto-start registry entry which allows the program run on each boot for the user which installed it. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The main program executable is Updater.exe. Typically most users end up uninstalling this just after a few days. The software installer includes 6 files and is usually about 1.63 MB (1,707,063 bytes). Updater.exe is the automatic update component of the software designed to download and apply new updates should new versions be released.
  • Possible malware installed by this program
  • Automatically starts with Windows
  • Displays unwanted advertisements
  • Hijacks the web browser's home page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in ARhome.
Updater.exe (a624cde4950054b8623b569a21cc537c) has been flagged by the following 3 scanners:
Anti-Virus softwareVersionDetection
ESET-NOD32 8.9905 a variant of Win32/AdWare.Vonteera.E
Symantec 1/11/2014 rev. 7 WS.Reputation
TrendMicro-HouseCall 7.2.11 TROJ_GEN.F47V0102
Bundled relationships
       View all 5

Program detailsProgram details

Displayed publisher: NoVooIT
URL: www.adnetwork100.info
Installation folder: C:\users\user\appdata\roaming\novooit\arhome
Uninstaller: C:\users\user\appdata\Roaming\NoVooIT\ARhome\uninstall.exe
Estimated size: 1.63 MB

Program filesFiles installed by ARhome

Program executable:Updater.exe (Malware detected)
Name:SWUpdate
Path:C:\users\user\appdata\roaming\novooit\arhome\Updater.exe
MD5:a624cde4950054b8623b569a21cc537c
Additional files:
  • (Malware detected) Updater.exe (by NoVooIT) - NoVooIT Updater (NoVooIT)
  • NoVooITUpdaterSetup.exe (by NoVooIT) - ARhome
  • uninstall.exe
  • RemoveTool.exe

Program behaviorsBehaviors exhibited

Scheduled Task
  • Updater.exe is scheduled as a task named '5FOFD9B73D6C-2CRMOI6' (runs when idle).
Startup File (User Run)
  • Updater.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ARHome' and executes as "C:\Documents and Settings\user\Application Data\ARHome\Updater.exe".

How do I remove ARhome?

You can uninstall ARhome from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program ARhome, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove ARhome.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

OS VERSIONS
Win 7 (SP1) 60%
Win 8 0%
 
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
 
USER ACTIONS
Uninstall it 82%
Keep it 18%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 75.22%
Windows 10 17.81%
Windows XP 5.98%
Windows Vista 0.98%
Which OS releases does it run on?
Windows 7 Ultimate 31.02%
Windows 7 Professional 18.72%
Windows 7 Home Premium 16.00%
Microsoft Windows XP 5.87%
Windows 8.1 Single Langua... 4.83%
Windows 7 Home Basic 4.65%

Distribution by countryGeography

26.79% of installs come from Saudi Arabia
Which countries install it?
  Saudi Arabia 26.79%
  United Arab Emirates 17.78%
  MA 10.47%
  DZ 8.24%
  IQ 5.14%
  Egypt 4.60%
  Kuwait 4.41%
  Qatar 3.73%
  United States 3.59%
  TN 3.34%
  Jordan 3.10%
  OM 1.89%
  BH 1.65%
  Lebanon 1.36%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 27.24%
Dell 24.64%
Acer 17.51%
Toshiba 11.67%
Lenovo 5.25%
ASUS 5.06%
GIGABYTE 3.76%
Samsung 3.76%
Intel 1.10%
Common models
HP Pavilion dv6 Notebook ... 6.75%
HP Pavilion g6 Notebook P... 6.39%
Dell Inspiron N5110 3.73%
Dell Inspiron 3521 3.37%
TOSHIBA Satellite C660 2.65%
Dell Inspiron N5010 2.41%

comments2 comments

user comment
user comment
MiBaover a year ago
Figured it out and deleted..thanks. I also found this code 4CEFD9B73D6C-1CRMOI2, its part of updater.exec. Deleted both. Crossing my fingers the problem is gone.
user comment
MiBaover a year ago
Thank you with this problem. Its been plaguing me for months. I found the scheduled task 5FOFD9B73D6C-2CRMOI6 , but can't seem to locate the folder its in. If I open each folder will it show me this code or is it disguise as something else?