Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

8.0 25.00%
8.0 25.00%
8.0 25.00%
7.0 25.00%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegEnumValueW, CryptEncrypt, CryptDeriveKey, CryptCreateHash, CryptHashData, CryptGetHashParam, CryptAcquireContextW, CryptDestroyKey, CryptDestroyHash, CryptReleaseContext, CryptDecrypt, IsValidSid, RegQueryValueExW, RegEnumKeyExW, RegQueryInfoKeyW, RegSetValueExW, RegCloseKey, RegDeleteValueW, RegDeleteKeyW, RegCreateKeyExW, RegOpenKeyExW, LookupAccountNameW, ConvertSidToStringSidW, SaferCreateLevel, InitializeSid, GetSidLengthRequired, GetLengthSid, CopySid, GetUserNameW, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, OpenProcessToken, CreateProcessAsUserW, SetTokenInformation, SaferCloseLevel, SaferComputeTokenFromLevel
gdi32.dll
DeleteDC, SelectObject, DeleteObject, CreateCompatibleBitmap, CreateCompatibleDC, BitBlt, GetDeviceCaps, CreateSolidBrush, GetObjectW, GetStockObject
kernel32.dll
DllMain
ole32.dll
CoCreateFreeThreadedMarshaler, CoTaskMemAlloc, CoTaskMemRealloc, CoTaskMemFree, OleRun, CoInitialize, CoUninitialize, CoRevokeClassObject, CoRegisterClassObject, StringFromGUID2, CoAddRefServerProcess, CoReleaseServerProcess, OleLockRunning, CoGetClassObject, CLSIDFromProgID, CLSIDFromString, CreateStreamOnHGlobal, OleInitialize, OleUninitialize, ProgIDFromCLSID, CoCreateInstance, StringFromIID, CoCreateGuid
sensapi.dll
IsNetworkAlive
shell32.dll
SHGetFolderPathW, SHGetSpecialFolderPathW, ShellExecuteExW, SHFileOperationW
shlwapi.dll
PathFileExistsW
user32.dll
TranslateMessage, DispatchMessageW, CharNextW, CharUpperW, PostThreadMessageW, GetSystemMetrics, SetWindowPos, GetPropW, EnumChildWindows, AnimateWindow, EqualRect, SetPropW, RemovePropW, RegisterWindowMessageW, GetMessageW, UnregisterClassA, KillTimer, SetTimer, CallWindowProcW, CreateWindowExW, RegisterClassExW, DefWindowProcW, DestroyWindow, LoadCursorW, GetClassInfoExW, PostMessageW, ShowWindow, LoadImageW, GetForegroundWindow, GetClientRect, GetClassNameW, SystemParametersInfoW, MoveWindow, RedrawWindow, GetWindowLongW, SetWindowLongW, SetLayeredWindowAttributes, GetWindowRect, SendMessageW, GetKeyState, IsWindowVisible, MapWindowPoints, GetMonitorInfoW, MonitorFromWindow, GetWindow, GetParent, GetSysColor, ClientToScreen, ScreenToClient, GetDC, ReleaseDC, InvalidateRect, InvalidateRgn, SetCapture, IsChild, GetDlgItem, ReleaseCapture, FillRect, EndPaint, BeginPaint, GetDesktopWindow, DestroyAcceleratorTable, SetFocus, GetFocus, IsWindow, CreateAcceleratorTableW, SetWindowTextW, GetWindowTextW, GetWindowTextLengthW, GetLastInputInfo, GetGUIThreadInfo
wininet.dll
InternetGetConnectedState
ws2_32.dll
getaddrinfo, freeaddrinfo, WSAIoctl
wtsapi32.dll
WTSQuerySessionInformationW, WTSFreeMemory

bndcore.exe

Bandoo by Bandoo Media Inc (Signed)

Remove bndcore.exe
Version:   8.0
MD5:   9cce25f03f0a04c0e8720b47c33feffe
SHA1:   f114d921583d1e5db71323fa093627ac254cff70
SHA256:   5cd3d98d98482ddfe2d79c13bd031fa7b8b8829502a4c32eef028a9807ec8eb7

What is bndcore.exe?

Bandoo Core is the main process of Bandoo. Bandoo Media bundles and advertises other Bandoo Media programs that are typically unwanted such as Window Search, Bandoo and Searchqu Toolbars. These prorgams are known to slow down your PC as well as impact your Web browser performance.

About bndcore.exe (from Bandoo Media Inc)

Bandoo gives you cool new ways to express yourself in Live Messenger, Hotmail, Yahoo IM & Mail, Gmail and Outlook Express, pumping your conversations full of endless fun and surprises! With countless

DetailsDetails

File name:bndcore.exe
Publisher:Bandoo Media Inc.
Product name:Bandoo
Description:Bandoo Core
Typical file path:C:\Program Files\bandoo\bndcore.exe
Original name:BandooCore.exe
File version:8.0
Product version:8.0.0.127233
Size:1.44 MB (1,511,864 bytes)
Certificate
Issued to:Bandoo Media Inc
Authority (CA):Thawte
Expiration date:Friday, October 5, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following program will install this file
Bandoo Media Inc
  52% remove
Bandoo is an IM/messaging program. From the EUAL: "You hereby acknowledge that the Applications use various tools to enhance Your view of Web pages which You browse by adding Bandoo features to them, such as, for example, emoticons, winks and ads. In order to provide such enhancements, the Applications automatically apply certain JavaScript code and/or other elements provided by Bandoo to the Web pages you view. By using this Site and/o...

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00517864%
0.028634%
Kernel CPU:0.00345242%
0.013761%
User CPU:0.00172621%
0.014873%
Kernel CPU time:20 ms/min
100,923,805ms/min
Memory
Private memory:2.37 MB
21.59 MB
Private (maximum):284 KB
Private (minimum):108 KB
Non-paged memory:2.37 MB
21.59 MB
Virtual memory:40.05 MB
140.96 MB
Virtual memory (peak):42.05 MB
169.69 MB
Working set:108 KB
18.61 MB
Working set (peak):4.84 MB
37.95 MB
Resource allocations
Threads:4
12
Handles:101
600
GUI GDI count:8
103
GUI USER count:1
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\Program Files\bandoo\bndcore.exe" -embedding
Owner:User
Parent process:svchost.exe (Generic Host Process for Win32 Services by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 50.00%
Windows 7 Ultimate N 50.00%

Distribution by countryDistribution by country

United States installs about 66.67% of Bandoo.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Toshiba 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE