Should I block it?

90%
90% of PCs block this file from running.
Possible reason:
Multiple malware detections

VersionsAdditional versions

c7c6c 20.00%
876d9 40.00%
58a30 20.00%
f2edc 20.00%
(Note, Bandoo Media publishes each variation of this file with the same version, but the hashes are unique.)

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegQueryValueExW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW
kernel32.dll
lstrcmpiW, GetModuleFileNameW, FreeLibrary, MultiByteToWideChar, SizeofResource, LoadResource, FindResourceW, LoadLibraryExW, SetThreadLocale, GetThreadLocale, GetCurrentProcess, LockResource, GetModuleHandleW, lstrlenA, GetCurrentProcessId, ResetEvent, OpenEventA, WaitForSingleObject, GetProcAddress, LeaveCriticalSection, EnterCriticalSection, lstrlenW, SetEvent, CloseHandle, CreateEventA, InterlockedDecrement, InterlockedIncrement, DeleteCriticalSection, InitializeCriticalSectionAndSpinCount, GetLastError, RaiseException, WideCharToMultiByte, FlushFileBuffers, CreateFileW, WriteConsoleW, SetStdHandle, GetConsoleMode, GetLocaleInfoA, GetUserDefaultLCID, GetSystemTimeAsFileTime, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, GetStartupInfoW, GetFileType, SetHandleCount, GetConsoleCP, SetFilePointer, LoadLibraryW, IsValidLocale, HeapDestroy, HeapAlloc, HeapFree, HeapReAlloc, HeapSize, GetProcessHeap, GetStringTypeW, InterlockedExchange, Sleep, InitializeCriticalSection, EncodePointer, DecodePointer, RtlUnwind, GetCurrentThreadId, GetCommandLineA, LCMapStringW, GetCPInfo, WriteFile, GetStdHandle, GetLocaleInfoW, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, SetLastError, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, ExitProcess, HeapCreate, IsProcessorFeaturePresent, GetACP, GetOEMCP, IsValidCodePage, EnumSystemLocalesA
ole32.dll
CoTaskMemRealloc, CoTaskMemFree, StringFromGUID2, CoCreateInstance, CoTaskMemAlloc
user32.dll
EnumChildWindows, CharNextW, GetClassNameW, SendMessageW, FindWindowExW
Export table
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer

DnsBHO.dll

By Bandoo Media (Signed)

Remove DnsBHO.dll
MD5:   876d94bdf0943a4042e5226b7eb70894
SHA1:   ab636741ff2f3c19b303f07d58f1a86879b52084
SHA256:   c2cd123ddb9d3f5a01c0e8981406769ecae64ebff7cbaeba37065f876734abe3
Warning 3 antivirus scanners has detected malware.

What is DnsBHO.dll?

DnsBHO.dll (DNS Error Helper Module by Mediabar) for the Windows Searchqu Toolbar is the Browser Helper Object installed into Internet Explorer which has the ability to access and monitor all loaded and requested web pages and content. The DNS BHO will attempt to redirect search results to a third party search provider if the domain name entered into a search box has an error associated with it.

About DnsBHO.dll (from Bandoo Media)

Windows Searchqu Toolbar is an Internet browser toolbar that offers helpful search suggestions as the user types keywords into the search box. Additionally, it catches misspelled words and suggests a

DetailsDetails

File name:DnsBHO.dll
Typical file path:C:\Program Files\Windows Searchqu Toolbar\Datamngr\DnsBHO.dll
Size:262.93 KB (269,240 bytes)
Certificate
Issued to:Bandoo Media
Authority (CA):Thawte
Expiration date:Saturday, February 23, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Bandoo Media Inc
  83% remove
The Searchqu Toolbar is a Bandoo powered toolbar (by Bandoo Media Inc) for Intenet Explorer and Firefox. Searchqu collects and stores information about your web browsing habits and sends this information to Conduit so they can suggest services or provide advertising via the toolbar. The Bandoo Searchqu Toolbar will attempt to change your home page and search provider if you are not careful during installation and provides a search box a...
Bandoo Media Inc
  79% remove
This toolbar is typiclaly bundled with the installation of the free iLivid software. Windows iLivid Toolbar by Bandoo for Intenet Explorer collects and stores information about your web browsing habits in order to suggest services or provide advertising via the toolbar. Windows iLivid Toolbar will change your home page and search provider during installation. The Toolbar is typically bundled with the free iLivid software as an option du...
Bandoo Media Inc
  88% remove
Windows Searchqu Toolbar is an ad-supported program installed into Internet Explorer, Firefox and Chrome. The programs collects and stores information about web browsing habits and sends this information to its remote servers in order to provide injected advertising in search results and various other places. It will also modify the browser's home page and search provider. It displays various pop-up advertisements and tracks and reports...

MalwareMalware detections

Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
Antivirus engineEngine versionDetection
Emsisoft Anti-Malware 3.0.0.575 Riskware.Win32.Toolbar.SearchSuite.AMN (A)
ESET NOD32 7.8175 a variant of Win32/Toolbar.SearchSuite
K7 AntiVirus 9.164.8447 Adware

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 80.00%
Windows 7 Home Premium 20.00%

Distribution by countryDistribution by country

United States installs about 100.00% of DnsBHO.dll.
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE