Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Additional versions

de40d	5.26%
05f95	5.26%
683f0	10.53%
b15fa	5.26%
2267d	10.53%
e69af	5.26%
6cf82	15.79%
c2fff	10.53%
1da58	5.26%
69f05	5.26%
9a179	5.26%
58245	5.26%
aee81	5.26%
e4873	5.26%

(Note, Bandoo Media publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE file structure

Show functions

Import table

dbghelp.dll

ImageNtHeader

gdi32.dll

CreateSolidBrush, CreateCompatibleDC, CreateCompatibleBitmap, SelectObject, DeleteObject, BitBlt, DeleteDC, GetStockObject, GetObjectW, GetDeviceCaps, CreateDCW

kernel32.dll

DllMain

ntdll.dll

RtlCreateUserThread, ZwClose, NtQueryInformationProcess, NtAllocateVirtualMemory, NtFreeVirtualMemory

user32.dll

PrintWindow, SendDlgItemMessageW, MapDialogRect, SetWindowContextHelpId, EndDialog, IsDlgButtonChecked, CheckDlgButton, DialogBoxIndirectParamW, RegisterWindowMessageW, GetWindowTextLengthW, GetWindowTextW, SetWindowTextW, BeginPaint, EndPaint, IsChild, GetFocus, GetWindow, GetDlgItem, IsWindow, GetSysColor, GetClassInfoExW, DestroyWindow, CreateAcceleratorTableW, ClientToScreen, SetCapture, ReleaseCapture, FillRect, InvalidateRgn, InvalidateRect, GetDC, ReleaseDC, GetDesktopWindow, DestroyAcceleratorTable, LoadCursorW, RedrawWindow, ScreenToClient, ShowWindow, GetKeyState, SetFocus, SetWindowPos, GetClientRect, SetClassLongW, GetParent, GetWindowLongW, SetWindowsHookExW, CallNextHookEx, UnhookWindowsHookEx, EnumWindows, GetWindowRect, MsgWaitForMultipleObjectsEx, PeekMessageW, IsWindowUnicode, GetMessageA, DispatchMessageA, GetAsyncKeyState, CallWindowProcW, SetWindowLongW, PostThreadMessageW, PostMessageW, DispatchMessageW, TranslateMessage, GetMessageW, CreateWindowExW, RegisterClassExW, SendMessageW, DefWindowProcW, EnumChildWindows, FindWindowExW, GetWindowThreadProcessId, GetClassNameW, CharNextW, UnregisterClassA, MoveWindow

Export table

BHOCheck

DllCanUnloadNow

DllGetClassObject

DllInstall

DllRegisterServer

DllUnregisterServer

IEBHO.dll

By Bandoo Media (Signed)

Remove IEBHO.dll

MD5:	582452c6c9b10013eff053b84fbca7ad
SHA1:	b3a6b2389e4bc933c10de2367575e2d5594d4155
SHA256:	226b26780f476fe8340e4d1d0182332c4c8b966696a34bcfadee3e2efd59c383

Warning 3 antivirus scanners has detected malware.

What is IEBHO.dll?

Windows Searchqu Toolbar IEBHO.dll is the Browser Helper Object installed into Internet Explorer which has the ability to access and monitor all loaded and requested web pages and content. The DNS BHO will attempt to redirect search results to a third party search provider if the domain name entered into a search box has an error associated with it. Searchqu Toolbar is a browser add-on which adds various shortcuts and other buttons to your Internet Explorer.

About IEBHO.dll (from Bandoo Media)

“Windows Searchqu Toolbar is an Internet browser toolbar that offers helpful search suggestions as the user types keywords into the search box. Additionally, it catches misspelled words and suggests a ”

Details

File name:	IEBHO.dll
Typical file path:	C:\Program Files\Windows Searchqu Toolbar\Datamngr\IEBHO.dll
Size:	1.13 MB (1,188,792 bytes)
Certificate
Issued to:	Bandoo Media
Authority (CA):	Thawte
Expiration date:	Saturday, February 23, 2013
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Searchqu Toolbar

Bandoo Media Inc

83% remove

The Searchqu Toolbar is a Bandoo powered toolbar (by Bandoo Media Inc) for Intenet Explorer and Firefox. Searchqu collects and stores information about your web browsing habits and sends this information to Conduit so they can suggest services or provide advertising via the toolbar. The Bandoo Searchqu Toolbar will attempt to change your home page and search provider if you are not careful during installation and provides a search box a...

Windows iLivid Toolbar

Bandoo Media Inc

79% remove

This toolbar is typiclaly bundled with the installation of the free iLivid software. Windows iLivid Toolbar by Bandoo for Intenet Explorer collects and stores information about your web browsing habits in order to suggest services or provide advertising via the toolbar. Windows iLivid Toolbar will change your home page and search provider during installation. The Toolbar is typically bundled with the free iLivid software as an option du...

MediaBar

iMesh Inc.

73% remove

Visicom MediaBar is an ad-supported (users may see additional banner, search, pop-up, pop-under, interstitial and in-text link advertisements) cross web browser plugin for Internet Explorer (BHO) and Firefox/Chrome (plugin) and distributed through various monitization platforms during installation. The browser extension includes various features that will modify the default or custom settings of the browser including the home page, sea...

Windows Searchqu Toolbar

Koyote-Lab Inc

81% remove

Windows Searchqu Toolbar by Koyote is installed as a Browser Helper Object (BHO) in Internet Explorer which attempts to redirect legitimate search queries and results.

Behaviors

Internet Explorer Browser Helper Object

Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'

BHO CLSID: {A40DC6C5-79D0-4ca8-A185-8FF989AF1115}

Malware detections

Based on 40+ industry antivirus scanners, 3 of them detected the following malware.

Antivirus engine	Engine version	Detection
ESET NOD32	7.7780	a variant of Win32/Toolbar.SearchSuite
K7 AntiVirus	9.155.7968	Trojan
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.F47V1205

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate N	52.63%
Windows 7 Home Premium	26.32%
Windows 8 Pro	10.53%
Windows Vista Home Basic	5.26%
Windows 7 Ultimate	5.26%

Distribution by country

United States installs about 58.82% of IEBHO.dll.

Distribution by PC manufacturer

PC Manufacturer	distribution
ASUS	33.33%
Dell	33.33%
GIGABYTE	16.67%
Hewlett-Packard	16.67%

Remove Adware and Spyware Programs, FREE Download!