What is gbieh.dll?

Gbieh.dll is a Windows DLL file. DLL is the abbreviation for Dynamic Link Library. DLL files are needed by programs or web browser extensions, because they contain program code, data, and resources. The following information can help you determine if gbieh.dll is a Windows system file or if it belongs to an application that you can trust.

Click to Run a Free Scan for gbieh.dll related errors

Gbieh.dll file information

The process known as Gbieh Module or DLL cliente da API BASE do Windows NT belongs to software Banco do Brasil Gbieh or Sistema operacional Microsoft Windows or by Banco do Brasil ( or Microsoft (

Description: Gbieh.dll is not essential for Windows and will often cause problems. Gbieh.dll is located in a subfolder of C:\Windows (typically C:\WINDOWS\Downloaded Program Files\). Known file sizes on Windows 8/7/XP are 228,392 bytes (17% of all occurrences), 209,448 bytes and 26 more variants. 
This .dll file is a Browser Helper Object (BHO) that runs automatically every time you start your web browser. BHOs are not stopped by personal firewalls, because they are identified by the firewall as part of the browser itself. BHOs are often used by adware and spyware. IDs used by this BHO include C41A1C0E-EA6C-11D4-B1B8-444553540000. The program is not visible. The gbieh.dll file is not a Windows system file. The gbieh.dll file is able to monitor web browsers. It is a Verisign signed file. It is certified by a trustworthy company. Gbieh.dll is able to record keyboard and mouse inputs and manipulate other programs. Therefore the technical security rating is 44% dangerous, however you should also read the user reviews.

Recommended: Identify gbieh.dll related errors

If gbieh.dll is located in a subfolder of "C:\Program Files", the security rating is 39% dangerous. The file size is 1,487,912 bytes (7% of all occurrences), 378,696 bytes and 37 more variants. The program has no visible window. The gbieh.dll file is not a Windows system file. The file has a digital signature. It is a Verisign signed file. Gbieh.dll is able to change the behavior of, or monitor Internet Explorer. Gbieh.dll is able to record keyboard and mouse inputs, manipulate other programs and monitor applications.
If you want to remove the program completely, go to Control Panel ⇒ Software ⇒

External information from Tony Klein:

Important: Some malware camouflages itself as gbieh.dll. Therefore, you should check the gbieh.dll process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

nothing - virus? spyware?
Needed to access some internet banking services
Local Brazilliam Bank file
This file is used in Brazil to access the internet banking of "banco do brasil", it not a spyware, it ONLY is actived in that website. You can delete now because this file is always re-installed (with your permission) when you have to use this Bank
Gbieh.dll is a browser shield defense for internet banking more secure. This G-Buster defenser mechanism is in use of the main largest Brazil bank. the "bank of Brazil", Banco do Brasil. So, if the "infected" machine needs to internet bank with this corporation, so let it be, otherwise, uninstall this activex java control. Located on C:\windows\downloaded program files\gbieh.dll; gbieh.inf
  Andre Carioni  
Só uma porcaria de banco força a instalação de uma porcaria de software que toma posse da máquina mesmo quando o cliente não quer acesso à sua porcaria de site! Se não é perigoso, é no mínimo inconveniente.
DLL required by the Brazilian Bank - Banco do Brasil
  losfer   (further information)
When i open the site, this dll install automatically, and my windows 2000 professional start shutdown in one minute. I think that are virus, i scan my machine 3 days with all programs to detect and destroy malware. When i access this site in the iten who is are a link to bb, when i click, the shutdown windows appear. I discovery the problem. "To stop shutdown processo, type shutdown /A". I have all image that show it. When this site open, the services COM+ System Service, stop immediatelly.
  Denilson Rapelli  
It can be infected by banpaes.h trojan hijacker keylogger
  Rodrigo Veiga   (further information)
Brazilian Bank
  Lucio Antoniolo   (further information)
If you want (need) access '' you need gbieh.dll.
Mine is from www14.bancobrasil and it can't be removed. If I try to remove the active-x control, it says it's in use. If I disable it in my startup, it adds a new copy of itself. My system is extremely slow to start up and shut down now.
This plugin ask for your bank account passwords and send to others.. (out of the bank). Be careful
  Dario kk  
Several different versions, one is legitimate, several are not, standard autorun proggies wouldn't remove, had to kill explorer.exe, regsvr /u, then remove using hijackthis
80% of the time it is a trojan that will not uninstall. My clients did not visit Bank of Brazil. It installs a listing in your Hosts file and will get your money if you do go to Banco do Brazil or Bradesco!
  Howard Rubin The Computer Doctor, Fortaleza  
Totaly safe file, needed to security reasons for access to Bank of Brazil (Banco do Brasil)
Só uma merda de Banco como o Banco do Brasil força a barra instalando essa maldita DLL
  Murilo Rodrigues  
It bothers my computer sometimes, but my virus scan takes it away. I believe it is necessary to access Banco do Brasil if you have an account in this Brazilian Bank. At the same time, you never know when another "nice" Brazilian is gonna try to take your money and information by using face or cloned softwares during internet banking...
  Juliana Sa  
I tried the default removing on %windir%\Downloaded Program Files and don't get working i receved a messagem that is not to possible remove from computer and maybe i have to install windows??! I tryed some others modes, starting on ms-dos and entering in %windir% cd\downlo~1 %windir%\downlo~1\erase *.* or the files that you know(dependency files) and searching in the regedit from gbieh.txt from gbieh.dll but i can't remove it, when i see it on processes, was internal or Kernel32.dll as GBIEH.DLL gbieh Module Banco do Brasil version 2.09.0000.0005(by ProcExp), After all yet persists.
This file is used by the brazilian bank "Banco do Brasil" for secure access. It is NOT a spyware.
  Cedric   (further information)
For internet banking use in Brazil
  Lucio Antoniolo   (further information)
This is called 'G-Bosta'. It's a security (and spyware) program used by Banco do Brasil S/A. To access BB website, i recommend you to use VMWare, always. It's better than let G-Bosta rape your machine and your privacy.
  Marcio Wesley Borges   (further information)
It's a plugin required to access the internet banking in If you don't use this site, you can delete it. The next time you access the site (especifically the internet banking part), the ActiveX plugin will be installed again.
  bazem   (further information)
It's also used for IE helping security access on CAIXA's Internet Banking (
  Alexandre dos Reis Corrêa   (further information)
More: CAIXA uses "gbiehCEF.dll" as it's own BHO file. Refer to my early comment for more information. It has no effect when using Firefox :-/, because it's for IE.
  Alexandre dos Reis Corrêa  
A software developed by a brazilian group that is used by 6 brazilian banks that hooks the system, get user information, usualy crash the IE, EXPLORER, and others processes, and keep using the process even when it is not needed. is installed now in program files/gbplugin directory , and at install doesn't require any acceptance terms from the user.
The location where this was located was c:\Program Files\GBPLUGIN and the security at NTFS level prevented deletion (very unusual) and the registry keys kept recreating themselves.
  Geoffrey Brown, NZ  
refuses to be deleted, went in in Safe mood and removed the exe file from C:/Windows/downloaded program files but it still keeps hijacking my the web IE connection on my friends PC. so i have advised him to use Firefox until I can sort it out.
  David Taylor  
Brazilian Fraud-Protection software, used by some Brazilian Banks
  M.B.   (further information)
I've installed G-Buster Browser Defense version to assure connection to the Banco do Brasil, but since this software is installed I have problems with few software which hangs. It was difficult to find the reason of the problem, but if I checked the threads of the programs where I have hte problems and I encountered always one thread with the name gbieh.dll (from the G-Busta package). This security software works not only during the access to the bank, but always and influence some programs like: pageant.exe (from putty), PortableApps.exe, winlogon.exe, explorer.exe
  Marcos   (further information)
In my computer it was gbiehAbn.dll (for Banco Real/ABN-AMRO - Santander). It was consuming and literally "burning" a lot of CPU (under explorer.exe process), plus using HUGE amount of "I/O Others". Due to the high heat, the CPU fan was turned on all the time. So, I used process explorer (Sysinternals) and suspended/killed gbiehAbn.dll and it seems that solved the problem.
Can only remove by making Linux boot disk, removing files and driver.
  Roger   (further information)

Rating chart

Summary: Average user rating of gbieh.dll: based on 39 votes with 32 user comments. 14 users think gbieh.dll is essential for Windows or an installed application. 5 users think it's probably harmless. 5 users think it's neither essential nor dangerous. One user suspects danger. 14 users think gbieh.dll is dangerous and recommend removing it. 3 users don't grade gbieh.dll ("not sure about it").

Do you have additional information?
What do you know about gbieh.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving gbieh issues

A clean and tidy computer is the key requirement for avoiding problems with gbieh. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off doing a repair of your installation, or in the case of Windows 8, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the gbieh.dll process on your computer, the following programs have proven to be helpful: Security Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. Malwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

gbieh.dll [all]