Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

8.0 25.00%
8.0 25.00%
8.0 25.00%
7.0 25.00%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegEnumValueW, CryptEncrypt, CryptDeriveKey, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptAcquireContextW, CryptDestroyKey, CryptDestroyHash, CryptReleaseContext, CryptDecrypt, IsValidSid, RegQueryValueExW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW, LookupAccountNameW, ConvertSidToStringSidW, SaferCreateLevel, InitializeSid, GetSidLengthRequired, GetLengthSid, CopySid, GetUserNameW, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel
gdi32.dll
DeleteDC, SelectObject, DeleteObject, CreateCompatibleBitmap, CreateCompatibleDC, BitBlt, GetDeviceCaps, CreateSolidBrush, GetObjectW, GetStockObject
kernel32.dll
DllMain
ole32.dll
CoCreateFreeThreadedMarshaler, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, OleRun, CoInitialize, CoUninitialize, CoRevokeClassObject, CoRegisterClassObject, StringFromGUID2, CoAddRefServerProcess, CoReleaseServerProcess, OleLockRunning, CoGetClassObject, CLSIDFromProgID, CLSIDFromString, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, ProgIDFromCLSID, CoCreateInstance, StringFromIID, CoCreateGuid
sensapi.dll
IsNetworkAlive
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderPathW, ShellExecuteExW, SHFileOperationW
shlwapi.dll
PathFileExistsW
user32.dll
TranslateMessage, DispatchMessageW, CharNextW, CharUpperW, PostThreadMessageW, GetSystemMetrics, SetWindowPos, GetPropW, EnumChildWindows, AnimateWindow, EqualRect, SetPropW, RemovePropW, RegisterWindowMessageW, GetMessageW, UnregisterClassA, KillTimer, SetTimer, CallWindowProcW, CreateWindowExW, RegisterClassExW, DefWindowProcW, DestroyWindow, LoadCursorW, GetClassInfoExW, PostMessageW, ShowWindow, LoadImageW, GetForegroundWindow, GetClientRect, GetClassNameW, SystemParametersInfoW, MoveWindow, RedrawWindow, GetWindowLongW, SetWindowLongW, SetLayeredWindowAttributes, GetWindowRect, SendMessageW, GetKeyState, IsWindowVisible, MapWindowPoints, GetMonitorInfoW, MonitorFromWindow, GetWindow, GetParent, GetSysColor, ClientToScreen, ScreenToClient, GetDC, ReleaseDC, InvalidateRect, InvalidateRgn, SetCapture, IsChild, GetDlgItem, ReleaseCapture, FillRect, EndPaint, BeginPaint, GetDesktopWindow, DestroyAcceleratorTable, SetFocus, GetFocus, IsWindow, CreateAcceleratorTableW, SetWindowTextW, GetWindowTextW, GetWindowTextLengthW, GetLastInputInfo, GetGUIThreadInfo
wininet.dll
InternetGetConnectedState
ws2_32.dll
getaddrinfo, freeaddrinfo, WSAIoctl
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory

bndcore.exe

Bandoo by Bandoo Media Inc (Signed)

Remove bndcore.exe
Version:   7.0
MD5:   408fa5200698f02c6986df2e90d58693
SHA1:   8a268bdada52c9e257945c74407d17077136195c
SHA256:   910c0bb7fb8240a930cbf14b154bd476a934687d6e06e31780c7f732087289a7

What is bndcore.exe?

Bandoo Core is the main process of Bandoo. Bandoo Media bundles and advertises other Bandoo Media programs that are typically unwanted such as Window Search, Bandoo and Searchqu Toolbars. These prorgams are known to slow down your PC as well as impact your Web browser performance.

About bndcore.exe (from Bandoo Media Inc)

Bandoo gives you cool new ways to express yourself in Live Messenger, Hotmail, Yahoo IM & Mail, Gmail and Outlook Express, pumping your conversations full of endless fun and surprises! With countless

DetailsDetails

File name:bndcore.exe
Publisher:Bandoo Media Inc.
Product name:Bandoo
Description:Bandoo Core
Typical file path:C:\Program Files\bandoo\bndcore.exe
Original name:BandooCore.exe
File version:7.0
Product version:7.0.0.122226
Size:1.6 MB (1,680,784 bytes)
Certificate
Issued to:Bandoo Media Inc
Authority (CA):Thawte
Expiration date:Friday, October 5, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Bandoo Media Inc
  52% remove
Bandoo is an IM/messaging program. From the EUAL: "You hereby acknowledge that the Applications use various tools to enhance Your view of Web pages which You browse by adding Bandoo features to them, such as, for example, emoticons, winks and ads. In order to provide such enhancements, the Applications automatically apply certain JavaScript code and/or other elements provided by Bandoo to the Web pages you view. By using this Site and/o...

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.08860821%
0.028634%
Kernel CPU:0.02383613%
0.013761%
User CPU:0.06477208%
0.014873%
Kernel CPU time:47 ms/min
100,923,805ms/min
Context switches:2/sec
284/sec
Memory
Private memory:2.71 MB
21.59 MB
Private (maximum):5.71 MB
Private (minimum):5.67 MB
Non-paged memory:2.71 MB
21.59 MB
Virtual memory:50.09 MB
140.96 MB
Virtual memory (peak):50.09 MB
169.69 MB
Working set:5.72 MB
18.61 MB
Working set (peak):5.72 MB
37.95 MB
Resource allocations
Threads:7
12
Handles:123
600
GUI GDI count:8
103
GUI USER count:8
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\bandoo\bndcore.exe" -embedding
Owner:User
Parent process:svchost.exe (Generic Host Process for Win32 Services by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 50.00%
Windows 7 Ultimate N 50.00%

Distribution by countryDistribution by country

United States installs about 66.67% of Bandoo.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE