Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

8.0 6.67%
8.0 6.67%
8.0 20.00%
8.0 26.67%
8.0 6.67%
7.0 33.33%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
LookupAccountNameW, ConvertSidToStringSidW, LsaNtStatusToWinError, GetTokenInformation, GetSidIdentifierAuthority, RegEnumValueW, GetSidSubAuthorityCount, RegisterServiceCtrlHandlerExW, SetNamedSecurityInfoW, ConvertStringSecurityDescriptorToSecurityDescriptorW, CreateServiceW, ChangeServiceConfig2W, ImpersonateLoggedOnUser, RegOpenCurrentUser, RevertToSelf, DuplicateTokenEx, CreateProcessAsUserW, StartServiceW, QueryServiceStatus, GetSidLengthRequired, InitializeSid, GetSidSubAuthority, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, CopySid, IsValidSid, GetLengthSid, RegEnumKeyExW, InitializeSecurityDescriptor, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, GetSecurityDescriptorSacl, MakeAbsoluteSD, GetSecurityDescriptorControl, GetAclInformation, InitializeAcl, AddAce, RegQueryInfoKeyW, RegSetValueExW, RegDeleteValueW, ControlService, DeleteService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegDeleteKeyW, RegCreateKeyExW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, StartServiceCtrlDispatcherW, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, CryptReleaseContext, CryptDestroyHash, CryptDestroyKey, CryptAcquireContextW, CryptGetHashParam, CryptHashData, CryptCreateHash, CryptDeriveKey, CryptEncrypt, CryptDecrypt, GetUserNameW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel
kernel32.dll
DllMain
ole32.dll
StringFromGUID2, OleRun, CoCreateGuid, CoTaskMemFree, CoUninitialize, CoInitializeEx, CoCreateFreeThreadedMarshaler, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, IIDFromString, StringFromIID, CoInitializeSecurity, CoAddRefServerProcess, CoReleaseServerProcess, CoResumeClassObjects, CoRegisterClassObject, CoRevokeClassObject, CoSuspendClassObjects
psapi.dll
EnumProcesses
secur32.dll
LsaGetLogonSessionData, LsaEnumerateLogonSessions, LsaFreeReturnBuffer
sensapi.dll
IsNetworkAlive
shell32.dll
ShellExecuteW, SHGetFolderPathA, SHGetFolderPathW, SHGetSpecialFolderPathW, SHFileOperationW, ShellExecuteExW
shlwapi.dll
PathRemoveFileSpecW, PathFileExistsW
user32.dll
PostThreadMessageW, LoadStringW, PostMessageW, GetWindowThreadProcessId, CharNextW, CharUpperW, MessageBoxW, EnumWindows, PeekMessageW, DispatchMessageW, TranslateMessage, GetMessageW, wsprintfW, UnregisterClassA, KillTimer, SetTimer, CallWindowProcW, GetWindowLongW, CreateWindowExW, RegisterClassExW, DefWindowProcW, DestroyWindow, LoadCursorW, GetClassInfoExW, SetWindowLongW, GetGUIThreadInfo
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wininet.dll
InternetGetConnectedState
ws2_32.dll
getaddrinfo, WSAIoctl, freeaddrinfo
wtsapi32.dll
WTSFreeMemory, WTSEnumerateSessionsW, WTSQueryUserToken, WTSQuerySessionInformationW

Bandoo.exe

Bandoo by Bandoo Media Inc (Signed)

Remove Bandoo.exe
Version:   8.0
MD5:   d49a224622fc7cc4c71d0e140a0a9ba4
SHA1:   c14223fe43e4952030740776874b8529fe8911a5
SHA256:   837d64f21821c3485c8cca170a87be1cfe2386f2a2a3c47b10e9ff4de841f510

What is Bandoo.exe?

Bandoo Coordinator is the core Windows Service for the Bandoo program. Bandoo Media bundles and advertises other Bandoo Media programs that are typically unwanted such as Window Search, Bandoo and Searchqu Toolbars. These prorgams are known to slow down your PC as well as impact your Web browser performance.

About Bandoo.exe (from Bandoo Media Inc)

Bandoo gives you cool new ways to express yourself in Live Messenger, Hotmail, Yahoo IM & Mail, Gmail and Outlook Express, pumping your conversations full of endless fun and surprises! With countless

DetailsDetails

File name:bandoo.exe
Publisher:Bandoo Media Inc.
Product name:Bandoo
Description:Bandoo Coordinator
Typical file path:C:\Program Files\bandoo\bandoo.exe
File version:8.0
Product version:8.0.0.123984
Size:1.8 MB (1,883,536 bytes)
Certificate
Issued to:Bandoo Media Inc
Authority (CA):Thawte
Expiration date:Friday, October 5, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Bandoo Media Inc
  52% remove
Bandoo is an IM/messaging program. From the EUAL: "You hereby acknowledge that the Applications use various tools to enhance Your view of Web pages which You browse by adding Bandoo features to them, such as, for example, emoticons, winks and ads. In order to provide such enhancements, the Applications automatically apply certain JavaScript code and/or other elements provided by Bandoo to the Web pages you view. By using this Site and/o...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Bandoo Coordinator'

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 26.67%
Windows 7 Professional 26.67%
Windows 7 Ultimate N 26.67%
Windows 7 Ultimate 13.33%
Windows Vista Home Premium 6.67%

Distribution by countryDistribution by country

United States installs about 35.71% of Bandoo.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 50.00%
Toshiba 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE