How to remove an gbieh error

The free file information forum can help you determine if gbieh.dll is a virus, trojan, spyware, or adware that you can remove, or a file belonging to a Windows system or an application you can trust.

Click to Run a Free Scan for gbieh.dll related errors

Gbieh.dll file information

The process known as Gbieh Module or DLL cliente da API BASE do Windows NT belongs to software Banco do Brasil Gbieh or Sistema operacional Microsoft Windows or BrOffice.org by Banco do Brasil (www.bb.com.br) or Microsoft (www.microsoft.com).

Description: gbieh.dll is located in a subfolder of C:\Windows (typically C:\WINDOWS\Downloaded Program Files\). Known file sizes on Windows 7/XP are 228,392 bytes (17% of all occurrences), 209,448 bytes and 26 more variants.
This .dll file is a Browser Helper Object (BHO) that runs automatically every time you start your Internet browser. BHOs are not stopped by personal firewalls, because they are identified by the firewall as your browser itself. BHOs are often used by adware and spyware. The unique ID of this BHO is C41A1C0E-EA6C-11D4-B1B8-444553540000. The program is not visible. File gbieh.dll is not a Windows system file. File gbieh.dll is able to monitor Internet browser. It is a Verisign signed file. It is certified by a trustworthy company. gbieh.dll is able to record inputs and manipulate other programs. Therefore the technical security rating is 44% dangerous, however also read the users reviews.

Recommended: Identify gbieh.dll related errors

If gbieh.dll is located in a subfolder of "C:\Program Files", the security rating is 39% dangerous. The file size is 378,696 bytes (9% of all occurrences), 347,464 bytes and 30 more variants. The program has no visible window. File gbieh.dll is not a Windows system file. File gbieh.dll is a Verisign signed file. File gbieh.dll is certified by a trustworthy company. The file is able to monitor Internet browser. gbieh.dll is able to record inputs and manipulate other programs.
If you want to remove the program completely, go to Control Panel ⇒ Software ⇒ BrOffice.org.

External information from Tony Klein:

This spyware BHO (rundll32.dll) is related to Troj/Bamer-B
This legitimate BHO (gbieh.dll) is related to G-Buster Browser Defense

Important: Some malware camouflages itself as gbieh.dll, particularly when located in the c:\windows or c:\windows\system32 folder. Therefore, you should check the gbieh.dll process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.

Score

User Comments

nothing - virus? spyware?
Anderson

Needed to access some internet banking services
Rafael

Local Brazilliam Bank file
Robson

This file is used in Brazil to access the internet banking of "banco do brasil", it not a spyware, it ONLY is actived in that website. You can delete now because this file is always re-installed (with your permission) when you have to use this Bank
Raphael

Gbieh.dll is a browser shield defense for internet banking more secure. This G-Buster defenser mechanism is in use of the main largest Brazil bank. the "bank of Brazil", Banco do Brasil. So, if the "infected" machine needs to internet bank with this corporation, so let it be, otherwise, uninstall this activex java control. Located on C:\windows\downloaded program files\gbieh.dll; gbieh.inf
Andre Carioni

Só uma porcaria de banco força a instalação de uma porcaria de software que toma posse da máquina mesmo quando o cliente não quer acesso à sua porcaria de site! Se não é perigoso, é no mínimo inconveniente.
Edivaldo-PP

DLL required by the Brazilian Bank - Banco do Brasil
losfer (further information)

When i open the site www.bb.com.br, this dll install automatically, and my windows 2000 professional start shutdown in one minute. I think that are virus, i scan my machine 3 days with all programs to detect and destroy malware. When i access this site in the iten who is are a link to bb, when i click, the shutdown windows appear. I discovery the problem. "To stop shutdown processo, type shutdown /A". I have all image that show it. When this site open, the services COM+ System Service, stop immediatelly.
Denilson Rapelli

It can be infected by banpaes.h trojan hijacker keylogger
Rodrigo Veiga (further information)

Brazilian Bank
Lucio Antoniolo (further information)

If you want (need) access 'www.bb.com.br' you need gbieh.dll.
Cesar

Mine is from www14.bancobrasil and it can't be removed. If I try to remove the active-x control, it says it's in use. If I disable it in my startup, it adds a new copy of itself. My system is extremely slow to start up and shut down now.
John

This plugin ask for your bank account passwords and send to others.. (out of the bank). Be careful
Dario kk

Several different versions, one is legitimate, several are not, standard autorun proggies wouldn't remove, had to kill explorer.exe, regsvr /u, then remove using hijackthis
bah

80% of the time it is a trojan that will not uninstall. My clients did not visit Bank of Brazil. It installs a listing in your Hosts file and will get your money if you do go to Banco do Brazil or Bradesco!
Howard Rubin The Computer Doctor, Fortaleza

Totaly safe file, needed to security reasons for access to Bank of Brazil (Banco do Brasil)
Paulosta

Só uma merda de Banco como o Banco do Brasil força a barra instalando essa maldita DLL
Murilo Rodrigues

It bothers my computer sometimes, but my virus scan takes it away. I believe it is necessary to access Banco do Brasil if you have an account in this Brazilian Bank. At the same time, you never know when another "nice" Brazilian is gonna try to take your money and information by using face or cloned softwares during internet banking...
Juliana Sa

I tried the default removing on %windir%\Downloaded Program Files and don't get working i receved a messagem that is not to possible remove from computer and maybe i have to install windows??! I tryed some others modes, starting on ms-dos and entering in %windir% cd\downlo~1 %windir%\downlo~1\erase *.* or the files that you know(dependency files) and searching in the regedit from gbieh.txt from gbieh.dll but i can't remove it, when i see it on processes, was internal or Kernel32.dll as GBIEH.DLL gbieh Module Banco do Brasil version 2.09.0000.0005(by ProcExp), After all yet persists.
Wanderley

This file is used by the brazilian bank "Banco do Brasil" for secure access. It is NOT a spyware.
Cedric (further information)

For internet banking use in Brazil
Lucio Antoniolo (further information)

This is called 'G-Bosta'. It's a security (and spyware) program used by Banco do Brasil S/A. To access BB website, i recommend you to use VMWare, always. It's better than let G-Bosta rape your machine and your privacy.
Marcio Wesley Borges (further information)

It's a plugin required to access the internet banking in www.bb.com.br. If you don't use this site, you can delete it. The next time you access the site (especifically the internet banking part), the ActiveX plugin will be installed again.
bazem (further information)

It's also used for IE helping security access on CAIXA's Internet Banking (https://internetbanking.caixa.gov.br)
Alexandre dos Reis Corrêa (further information)

More: CAIXA uses "gbiehCEF.dll" as it's own BHO file. Refer to my early comment for more information. It has no effect when using Firefox :-/, because it's for IE.
Alexandre dos Reis Corrêa

A software developed by a brazilian group that is used by 6 brazilian banks that hooks the system, get user information, usualy crash the IE, EXPLORER, and others processes, and keep using the process even when it is not needed. is installed now in program files/gbplugin directory , and at install doesn't require any acceptance terms from the user.
Paulo

The location where this was located was c:\Program Files\GBPLUGIN and the security at NTFS level prevented deletion (very unusual) and the registry keys kept recreating themselves.
Geoffrey Brown, NZ

refuses to be deleted, went in in Safe mood and removed the exe file from C:/Windows/downloaded program files but it still keeps hijacking my the web IE connection on my friends PC. so i have advised him to use Firefox until I can sort it out.
David Taylor

Brazilian Fraud-Protection software, used by some Brazilian Banks
M.B. (further information)

I've installed G-Buster Browser Defense version 2.1.10.2 to assure connection to the Banco do Brasil, but since this software is installed I have problems with few software which hangs. It was difficult to find the reason of the problem, but if I checked the threads of the programs where I have hte problems and I encountered always one thread with the name gbieh.dll (from the G-Busta package). This security software works not only during the access to the bank, but always and influence some programs like: pageant.exe (from putty), PortableApps.exe, winlogon.exe, explorer.exe
Marcos (further information)

In my computer it was gbiehAbn.dll (for Banco Real/ABN-AMRO - Santander). It was consuming and literally "burning" a lot of CPU (under explorer.exe process), plus using HUGE amount of "I/O Others". Due to the high heat, the CPU fan was turned on all the time. So, I used process explorer (Sysinternals) and suspended/killed gbiehAbn.dll and it seems that solved the problem.
Ricardo

Can only remove by making Linux boot disk, removing files and driver.
Roger (further information)

Summary: Average user rating of gbieh.dll: based on 39 votes with 32 reviews.

14 users think gbieh.dll is essential for Windows or an installed application. 5 users think it's probably harmless. 5 users think it's neither essential nor dangerous. 1 user suspect danger. 14 users think gbieh.dll is dangerous and recommend removing it. 3 users doesn't grade gbieh.dll ("not sure about it").

Gbieh scanner

Security Task Manager shows all running Windows tasks including embedded hidden functions (e.g. keyboard or browser monitoring, autostart entry). A unique security risk rating indicates the likelihood of the process being potential spyware, malware, keylogger or a Trojan.

Spyware Doctor detects and removes sleeping spyware, adware, trojans, keyloggers, malware and tracking threats from your hard disk. Ideal supplement to Security Task Manager.

SpeedUpMyPC scans, cleans, repairs and optimizes your computer.

Other processes