Bandoo.exe
Bandoo by Bandoo Media Inc (Signed)
Overview
There are 6 versions of bandoo.exe in the wild, the latest version being 8.0. It is started as a Windows Service with the name 'Bandoo Coordinator' and described as “Coordinates Bandoo plugins work”. . In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 1.85 MB. The file is a digitally signed and issued to Bandoo Media Inc by Thawte. Some variations of the file have been seen to be installed with the program Bandoo from Bandoo Media Inc. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 2.35 MB with the maximum memory reaching around 3.52 MB. Addionally, typically read and write I/O disk operations is about 60 Bytes per minute for reads and 0 Bytes per minute for writes.
What is bandoo.exe?
Bandoo Coordinator is the core Windows Service for the Bandoo program. Bandoo Media bundles and advertises other Bandoo Media programs that are typically unwanted such as Window Search, Bandoo and Searchqu Toolbars. These prorgams are known to slow down your PC as well as impact your Web browser performance.
About bandoo.exe (from Bandoo Media Inc)
“Bandoo gives you cool new ways to express yourself in Live Messenger, Hotmail, Yahoo IM & Mail, Gmail and Outlook Express, pumping your conversations full of endless fun and surprises! With countless ”
Details |
File name: | bandoo.exe |
Publisher: | Bandoo Media Inc. |
Product name: | Bandoo |
Description: | Bandoo Coordinator |
Typical file path: | C:\Program Files\bandoo\bandoo.exe |
Certificate |
Issued to: | Bandoo Media Inc |
Authority (CA): | Thawte |
Expiration date: | Friday, October 5, 2012 |
Windows Service |
Service name: | Bandoo Coordinator |
Description: | “Coordinates Bandoo plugins work” |
Type: | Win32OwnProcess, InteractiveProcess |
Programs installed in
(Note, the programs listed below are for all versions of Bandoo.)
Bandoo is an IM/messaging program. From the EUAL: "You hereby acknowledge that the Applications use various tools to enhance Your view of Web pages which You browse by adding Bandoo features to them, ...
Behaviors
(Note, the behaviors below are for all versions of bandoo.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
All file variations of bandoo.exe
Distribution by Windows OS
OS version | distribution |
Microsoft Windows XP |
26.67% |
|
Windows 7 Professional |
26.67% |
|
Windows 7 Ultimate N |
26.67% |
|
Windows 7 Ultimate |
13.33% |
|
Windows Vista Home Premium |
6.67% |
|
Distribution by country
United States installs about 35.71% of Bandoo.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Hewlett-Packard |
50.00% |
|
Toshiba |
50.00% |
|