Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

8.0 6.67%
8.0 6.67%
8.0 20.00%
8.0 26.67%
8.0 6.67%
7.0 33.33%

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
LookupAccountNameW, ConvertSidToStringSidW, LsaNtStatusToWinError, GetTokenInformation, GetSidIdentifierAuthority, RegEnumValueW, GetSidSubAuthorityCount, RegisterServiceCtrlHandlerExW, SetNamedSecurityInfoW, ConvertStringSecurityDescriptorToSecurityDescriptorW, CreateServiceW, ChangeServiceConfig2W, ImpersonateLoggedOnUser, RegOpenCurrentUser, RevertToSelf, DuplicateTokenEx, CreateProcessAsUserW, StartServiceW, QueryServiceStatus, GetSidLengthRequired, InitializeSid, GetSidSubAuthority, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, CopySid, IsValidSid, GetLengthSid, RegEnumKeyExW, InitializeSecurityDescriptor, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, GetSecurityDescriptorSacl, MakeAbsoluteSD, GetSecurityDescriptorControl, GetAclInformation, InitializeAcl, AddAce, RegQueryInfoKeyW, RegSetValueExW, RegDeleteValueW, ControlService, DeleteService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegDeleteKeyW, RegCreateKeyExW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, StartServiceCtrlDispatcherW, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, CryptReleaseContext, CryptDestroyHash, CryptDestroyKey, CryptAcquireContextW, CryptGetHashParam, CryptHashData, CryptCreateHash, CryptDeriveKey, CryptEncrypt, CryptDecrypt, GetUserNameW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel
kernel32.dll
DllMain
ole32.dll
StringFromGUID2, OleRun, CoCreateGuid, CoTaskMemFree, CoUninitialize, CoInitializeEx, CoCreateFreeThreadedMarshaler, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, IIDFromString, StringFromIID, CoInitializeSecurity, CoAddRefServerProcess, CoReleaseServerProcess, CoResumeClassObjects, CoRegisterClassObject, CoRevokeClassObject, CoSuspendClassObjects
psapi.dll
EnumProcesses
secur32.dll
LsaGetLogonSessionData, LsaEnumerateLogonSessions, LsaFreeReturnBuffer
sensapi.dll
IsNetworkAlive
shell32.dll
ShellExecuteW, SHGetFolderPathA, SHGetFolderPathW, SHGetSpecialFolderPathW, SHFileOperationW, ShellExecuteExW
shlwapi.dll
PathRemoveFileSpecW, PathFileExistsW
user32.dll
PostThreadMessageW, LoadStringW, PostMessageW, GetWindowThreadProcessId, CharNextW, CharUpperW, MessageBoxW, EnumWindows, PeekMessageW, DispatchMessageW, TranslateMessage, GetMessageW, wsprintfW, UnregisterClassA, KillTimer, SetTimer, CallWindowProcW, GetWindowLongW, CreateWindowExW, RegisterClassExW, DefWindowProcW, DestroyWindow, LoadCursorW, GetClassInfoExW, SetWindowLongW, GetGUIThreadInfo
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wininet.dll
InternetGetConnectedState
ws2_32.dll
getaddrinfo, WSAIoctl, freeaddrinfo
wtsapi32.dll
WTSFreeMemory, WTSEnumerateSessionsW, WTSQueryUserToken, WTSQuerySessionInformationW

Bandoo.exe

Bandoo by Bandoo Media Inc (Signed)

Remove Bandoo.exe
Version:   8.0
MD5:   46d1c0b3df0b99cf223da311d6b5e741
SHA1:   73ebe2bf9ff2d69c4ca88663819a75fbf08181e8
SHA256:   ddf634933f827844860cd60d6e322c2f61a701249e878fb1f4265a0459f09388

What is Bandoo.exe?

Bandoo Coordinator is the core Windows Service for the Bandoo program. Bandoo Media bundles and advertises other Bandoo Media programs that are typically unwanted such as Window Search, Bandoo and Searchqu Toolbars. These prorgams are known to slow down your PC as well as impact your Web browser performance.

About Bandoo.exe (from Bandoo Media Inc)

Bandoo gives you cool new ways to express yourself in Live Messenger, Hotmail, Yahoo IM & Mail, Gmail and Outlook Express, pumping your conversations full of endless fun and surprises! With countless

DetailsDetails

File name:bandoo.exe
Publisher:Bandoo Media Inc.
Product name:Bandoo
Description:Bandoo Coordinator
Typical file path:C:\Program Files\bandoo\bandoo.exe
File version:8.0
Product version:8.0.0.128804
Size:1.84 MB (1,925,048 bytes)
Certificate
Issued to:Bandoo Media Inc
Authority (CA):Thawte
Expiration date:Friday, October 5, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Bandoo Media Inc
  52% remove
Bandoo is an IM/messaging program. From the EUAL: "You hereby acknowledge that the Applications use various tools to enhance Your view of Web pages which You browse by adding Bandoo features to them, such as, for example, emoticons, winks and ads. In order to provide such enhancements, the Applications automatically apply certain JavaScript code and/or other elements provided by Bandoo to the Web pages you view. By using this Site and/o...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Bandoo Coordinator'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00004817%
0.028634%
Kernel CPU:0.00002408%
0.013761%
User CPU:0.00002408%
0.014873%
Kernel CPU time:10 ms/min
100,923,805ms/min
CPU cycles:88,677/sec
17,470,203/sec
Context switches:2/sec
284/sec
Memory
Private memory:1.95 MB
21.59 MB
Private (maximum):6.54 MB
Private (minimum):6.54 MB
Non-paged memory:1.95 MB
21.59 MB
Virtual memory:56.16 MB
140.96 MB
Virtual memory (peak):63.16 MB
169.69 MB
Working set:6.54 MB
18.61 MB
Working set (peak):6.63 MB
37.95 MB
Page faults:1,911/min
2,039/min
I/O
I/O read transfer:44 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:17 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:5
12
Handles:156
600

BehaviorsProcess properties

Integrety level:System
Platform:32-bit
Command line:"C:\Program Files\bandoo\bandoo.exe"
Owner:SYSTEM
Windows Service
Service name:Bandoo Coordinator
Description:“Coordinates Bandoo plugins work”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 26.67%
Windows 7 Professional 26.67%
Windows 7 Ultimate N 26.67%
Windows 7 Ultimate 13.33%
Windows Vista Home Premium 6.67%

Distribution by countryDistribution by country

United States installs about 35.71% of Bandoo.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 50.00%
Toshiba 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE