Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

8.0 6.67%
8.0 6.67%
8.0 20.00%
8.0 26.67%
8.0 6.67%
7.0 33.33%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
LookupAccountNameW, ConvertSidToStringSidW, LsaNtStatusToWinError, GetTokenInformation, GetSidIdentifierAuthority, RegEnumValueW, GetSidSubAuthorityCount, RegisterServiceCtrlHandlerExW, SetNamedSecurityInfoW, ConvertStringSecurityDescriptorToSecurityDescriptorW, CreateServiceW, ChangeServiceConfig2W, ImpersonateLoggedOnUser, RegOpenCurrentUser, RevertToSelf, DuplicateTokenEx, CreateProcessAsUserW, StartServiceW, QueryServiceStatus, GetSidLengthRequired, InitializeSid, GetSidSubAuthority, SetSecurityDescriptorDacl, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, CopySid, IsValidSid, GetLengthSid, RegEnumKeyExW, InitializeSecurityDescriptor, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, GetSecurityDescriptorSacl, MakeAbsoluteSD, GetSecurityDescriptorControl, GetAclInformation, InitializeAcl, AddAce, RegQueryInfoKeyW, RegSetValueExW, RegDeleteValueW, ControlService, DeleteService, OpenSCManagerW, OpenServiceW, CloseServiceHandle, RegDeleteKeyW, RegCreateKeyExW, OpenProcessToken, LookupPrivilegeValueW, AdjustTokenPrivileges, StartServiceCtrlDispatcherW, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, SetServiceStatus, RegisterEventSourceW, ReportEventW, DeregisterEventSource, CryptReleaseContext, CryptDestroyHash, CryptDestroyKey, CryptAcquireContextW, CryptGetHashParam, CryptHashData, CryptCreateHash, CryptDeriveKey, CryptEncrypt, CryptDecrypt, GetUserNameW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel, SaferCreateLevel
kernel32.dll
DllMain
ole32.dll
StringFromGUID2, OleRun, CoCreateGuid, CoTaskMemFree, CoUninitialize, CoInitializeEx, CoCreateFreeThreadedMarshaler, CoCreateInstance, CoTaskMemRealloc, CoTaskMemAlloc, IIDFromString, StringFromIID, CoInitializeSecurity, CoAddRefServerProcess, CoReleaseServerProcess, CoResumeClassObjects, CoRegisterClassObject, CoRevokeClassObject, CoSuspendClassObjects
psapi.dll
EnumProcesses
secur32.dll
LsaGetLogonSessionData, LsaEnumerateLogonSessions, LsaFreeReturnBuffer
sensapi.dll
IsNetworkAlive
shell32.dll
ShellExecuteW, SHGetFolderPathA, SHGetFolderPathW, SHGetSpecialFolderPathW, SHFileOperationW, ShellExecuteExW
shlwapi.dll
PathRemoveFileSpecW, PathFileExistsW
user32.dll
PostThreadMessageW, LoadStringW, PostMessageW, GetWindowThreadProcessId, CharNextW, CharUpperW, MessageBoxW, EnumWindows, PeekMessageW, DispatchMessageW, TranslateMessage, GetMessageW, wsprintfW, UnregisterClassA, KillTimer, SetTimer, CallWindowProcW, GetWindowLongW, CreateWindowExW, RegisterClassExW, DefWindowProcW, DestroyWindow, LoadCursorW, GetClassInfoExW, SetWindowLongW, GetGUIThreadInfo
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
wininet.dll
InternetGetConnectedState
ws2_32.dll
getaddrinfo, WSAIoctl, freeaddrinfo
wtsapi32.dll
WTSFreeMemory, WTSEnumerateSessionsW, WTSQueryUserToken, WTSQuerySessionInformationW

Bandoo.exe

Bandoo by Bandoo Media Inc (Signed)

Remove Bandoo.exe
Version:   8.0
MD5:   6f9dd1fdef97f205b536b64339733225
SHA1:   c89f9df975f377e2373dbbc21e294c5d0c3d197f
SHA256:   e85fea93df691b09a7cd0f6ea1bc84c1c6fb01cdcfc8c90007ed8ae9ddf19b09

What is Bandoo.exe?

Bandoo Coordinator is the core Windows Service for the Bandoo program. Bandoo Media bundles and advertises other Bandoo Media programs that are typically unwanted such as Window Search, Bandoo and Searchqu Toolbars. These prorgams are known to slow down your PC as well as impact your Web browser performance.

About Bandoo.exe (from Bandoo Media Inc)

Bandoo gives you cool new ways to express yourself in Live Messenger, Hotmail, Yahoo IM & Mail, Gmail and Outlook Express, pumping your conversations full of endless fun and surprises! With countless

DetailsDetails

File name:bandoo.exe
Publisher:Bandoo Media Inc.
Product name:Bandoo
Description:Bandoo Coordinator
Typical file path:C:\Program Files\bandoo\bandoo.exe
File version:8.0
Product version:8.0.0.127233
Size:1.84 MB (1,925,048 bytes)
Certificate
Issued to:Bandoo Media Inc
Authority (CA):Thawte
Expiration date:Friday, October 5, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Bandoo Media Inc
  52% remove
Bandoo is an IM/messaging program. From the EUAL: "You hereby acknowledge that the Applications use various tools to enhance Your view of Web pages which You browse by adding Bandoo features to them, such as, for example, emoticons, winks and ads. In order to provide such enhancements, the Applications automatically apply certain JavaScript code and/or other elements provided by Bandoo to the Web pages you view. By using this Site and/o...

BehaviorsBehaviors

Service
Runs under 'SYSTEM\CurrentControlSet\Services' by the Service Controller (services.exe)
  • 'Bandoo Coordinator'

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.02783904%
0.028634%
Kernel CPU:0.02046307%
0.013761%
User CPU:0.00737598%
0.014873%
Kernel CPU time:981 ms/min
100,923,805ms/min
Context switches:572/sec
284/sec
Memory
Private memory:2.82 MB
21.59 MB
Private (maximum):200 KB
Private (minimum):200 KB
Non-paged memory:2.82 MB
21.59 MB
Virtual memory:43.29 MB
140.96 MB
Virtual memory (peak):47.29 MB
169.69 MB
Working set:200 KB
18.61 MB
Working set (peak):5.99 MB
37.95 MB
Resource allocations
Threads:6
12
Handles:157
600
GUI GDI count:8
103
GUI USER count:1
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\bandoo\bandoo.exe"
Owner:SYSTEM
Windows Service
Service name:Bandoo Coordinator
Description:“Coordinates Bandoo plugins work”
Type:Win32OwnProcess, InteractiveProcess
Parent process:services.exe (Services and Controller app by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 26.67%
Windows 7 Professional 26.67%
Windows 7 Ultimate N 26.67%
Windows 7 Ultimate 13.33%
Windows Vista Home Premium 6.67%

Distribution by countryDistribution by country

United States installs about 35.71% of Bandoo.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 50.00%
Toshiba 50.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE