What is gbieh.dll?

Gbieh.dll is a browser extension for Internet Explorer. This add-on enables several additional functions for Internet Explorer. You can disable it through the Extras menu (key combination Alt + X) under Manage Add-ons. The following paragraph provides more information about Gbieh Module.

Click to Run a Free Scan for gbieh.dll related errors

Gbieh.dll file information

The process known as Gbieh Module or DLL cliente da API BASE do Windows NT belongs to software Banco do Brasil Gbieh or Sistema operacional Microsoft Windows or by Banco do Brasil ( or Microsoft (

Description: Gbieh.dll is not essential for Windows and will often cause problems. Gbieh.dll is located in a subfolder of "C:\Program Files" (typically C:\WINDOWS\Downloaded Program Files\). Known file sizes on Windows 10/8/7/XP are 1,864,576 bytes (13% of all occurrences), 1,896,320 bytes and 45 more variants. 
This .dll file is a Browser Helper Object (BHO) that runs automatically every time you start your web browser. BHOs are not stopped by personal firewalls, because they are identified by the firewall as part of the browser itself. BHOs are often used by adware and spyware. IDs used by this BHO include C41A1C0E-EA6C-11D4-B1B8-444553540000. The program is not visible. The gbieh.dll file is not a Windows system file. The gbieh.dll file is certified by a trustworthy company. It is a Verisign signed file. It is able to monitor web browsers. Gbieh.dll is able to record keyboard and mouse inputs, manipulate other programs and monitor applications. Therefore the technical security rating is 44% dangerous, however you should also read the user reviews.

Uninstalling this variant: You can uninstall Banco do Brasil S/A or, or ask Support team for help. Go to Banco do Brasil S/A or in the Windows Control Panel (Software or Programs section) to uninstall it, or go to for Customer Support.

Recommended: Identify gbieh.dll related errors

If gbieh.dll is located in a subfolder of C:\Windows, the security rating is 44% dangerous. The file size is 228,392 bytes (28% of all occurrences), 226,344 bytes and 19 more variants. The program is not visible. The file is not a Windows core file. It is able to change the behavior of, or monitor Internet Explorer. Gbieh.dll is a Verisign signed file. The file has a digital signature. Gbieh.dll is able to record keyboard and mouse inputs and manipulate other programs.

External information from Tony Klein:

Important: Some malware camouflages itself as gbieh.dll. Therefore, you should check the gbieh.dll process on your PC to see if it is a threat. If Gbieh Module has changed your browser's search engine and start page, you can recover your browser's default settings as follows:

Reset default browser settings for Internet-Explorer ▾
  1. In Internet Explorer, press the key combination Alt + X to open the Tools menu.
  2. Click Internet options.
  3. Click the Advanced tab.
  4. Click the Reset... button.
  5. Enable the Delete personal settings option.
This will reset your Internet Explorer to its default settings. Your browser will start with the familiar start page and search engine—without popups, ads, cookies, but all browser add-ons are deleted too [1]. Make cleaning up your browser and your computer simpler and safer with Security Task Manager.


User Comments

nothing - virus? spyware?
Needed to access some internet banking services
Local Brazilliam Bank file
This file is used in Brazil to access the internet banking of "banco do brasil", it not a spyware, it ONLY is actived in that website. You can delete now because this file is always re-installed (with your permission) when you have to use this Bank
Gbieh.dll is a browser shield defense for internet banking more secure. This G-Buster defenser mechanism is in use of the main largest Brazil bank. the "bank of Brazil", Banco do Brasil. So, if the "infected" machine needs to internet bank with this corporation, so let it be, otherwise, uninstall this activex java control. Located on C:\windows\downloaded program files\gbieh.dll; gbieh.inf
  Andre Carioni  
Só uma porcaria de banco força a instalação de uma porcaria de software que toma posse da máquina mesmo quando o cliente não quer acesso à sua porcaria de site! Se não é perigoso, é no mínimo inconveniente.
DLL required by the Brazilian Bank - Banco do Brasil
  losfer   (further information)
When i open the site, this dll install automatically, and my windows 2000 professional start shutdown in one minute. I think that are virus, i scan my machine 3 days with all programs to detect and destroy malware. When i access this site in the iten who is are a link to bb, when i click, the shutdown windows appear. I discovery the problem. "To stop shutdown processo, type shutdown /A". I have all image that show it. When this site open, the services COM+ System Service, stop immediatelly.
  Denilson Rapelli  
It can be infected by banpaes.h trojan hijacker keylogger
  Rodrigo Veiga   (further information)
Brazilian Bank
  Lucio Antoniolo   (further information)
If you want (need) access '' you need gbieh.dll.
Mine is from www14.bancobrasil and it can't be removed. If I try to remove the active-x control, it says it's in use. If I disable it in my startup, it adds a new copy of itself. My system is extremely slow to start up and shut down now.
This plugin ask for your bank account passwords and send to others.. (out of the bank). Be careful
  Dario kk  
Several different versions, one is legitimate, several are not, standard autorun proggies wouldn't remove, had to kill explorer.exe, regsvr /u, then remove using hijackthis
80% of the time it is a trojan that will not uninstall. My clients did not visit Bank of Brazil. It installs a listing in your Hosts file and will get your money if you do go to Banco do Brazil or Bradesco!
  Howard Rubin The Computer Doctor, Fortaleza  
Totaly safe file, needed to security reasons for access to Bank of Brazil (Banco do Brasil)
Só uma merda de Banco como o Banco do Brasil força a barra instalando essa maldita DLL
  Murilo Rodrigues  
It bothers my computer sometimes, but my virus scan takes it away. I believe it is necessary to access Banco do Brasil if you have an account in this Brazilian Bank. At the same time, you never know when another "nice" Brazilian is gonna try to take your money and information by using face or cloned softwares during internet banking...
  Juliana Sa  
I tried the default removing on %windir%\Downloaded Program Files and don't get working i receved a messagem that is not to possible remove from computer and maybe i have to install windows??! I tryed some others modes, starting on ms-dos and entering in %windir% cd\downlo~1 %windir%\downlo~1\erase *.* or the files that you know(dependency files) and searching in the regedit from gbieh.txt from gbieh.dll but i can't remove it, when i see it on processes, was internal or Kernel32.dll as GBIEH.DLL gbieh Module Banco do Brasil version 2.09.0000.0005(by ProcExp), After all yet persists.
This file is used by the brazilian bank "Banco do Brasil" for secure access. It is NOT a spyware.
  Cedric   (further information)
For internet banking use in Brazil
  Lucio Antoniolo   (further information)
This is called 'G-Bosta'. It's a security (and spyware) program used by Banco do Brasil S/A. To access BB website, i recommend you to use VMWare, always. It's better than let G-Bosta rape your machine and your privacy.
  Marcio Wesley Borges   (further information)
It's a plugin required to access the internet banking in If you don't use this site, you can delete it. The next time you access the site (especifically the internet banking part), the ActiveX plugin will be installed again.
  bazem   (further information)
It's also used for IE helping security access on CAIXA's Internet Banking (
  Alexandre dos Reis Corrêa   (further information)
More: CAIXA uses "gbiehCEF.dll" as it's own BHO file. Refer to my early comment for more information. It has no effect when using Firefox :-/, because it's for IE.
  Alexandre dos Reis Corrêa  
A software developed by a brazilian group that is used by 6 brazilian banks that hooks the system, get user information, usualy crash the IE, EXPLORER, and others processes, and keep using the process even when it is not needed. is installed now in program files/gbplugin directory , and at install doesn't require any acceptance terms from the user.
The location where this was located was c:\Program Files\GBPLUGIN and the security at NTFS level prevented deletion (very unusual) and the registry keys kept recreating themselves.
  Geoffrey Brown, NZ  
refuses to be deleted, went in in Safe mood and removed the exe file from C:/Windows/downloaded program files but it still keeps hijacking my the web IE connection on my friends PC. so i have advised him to use Firefox until I can sort it out.
  David Taylor  
Brazilian Fraud-Protection software, used by some Brazilian Banks
  M.B.   (further information)
I've installed G-Buster Browser Defense version to assure connection to the Banco do Brasil, but since this software is installed I have problems with few software which hangs. It was difficult to find the reason of the problem, but if I checked the threads of the programs where I have hte problems and I encountered always one thread with the name gbieh.dll (from the G-Busta package). This security software works not only during the access to the bank, but always and influence some programs like: pageant.exe (from putty), PortableApps.exe, winlogon.exe, explorer.exe
  Marcos   (further information)
In my computer it was gbiehAbn.dll (for Banco Real/ABN-AMRO - Santander). It was consuming and literally "burning" a lot of CPU (under explorer.exe process), plus using HUGE amount of "I/O Others". Due to the high heat, the CPU fan was turned on all the time. So, I used process explorer (Sysinternals) and suspended/killed gbiehAbn.dll and it seems that solved the problem.
Can only remove by making Linux boot disk, removing files and driver.
  Roger   (further information)

Rating chart

Summary: Average user rating of gbieh.dll: based on 40 votes with 32 user comments. 14 users think gbieh.dll is essential for Windows or an installed application. 6 users think it's probably harmless. 5 users think it's neither essential nor dangerous. One user suspects danger. 14 users think gbieh.dll is dangerous and recommend removing it. 3 users don't grade gbieh.dll ("not sure about it").

Do you have additional information?
What do you know about gbieh.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving gbieh issues

The following programs have also been shown useful for a deeper analysis: Security Task Manager examines the active gbieh process on your computer and clearly tells you what it is doing. Malwarebytes' well-known anti-malware tool tells you if the gbieh.dll on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.

A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

Other processes

gbieh.dll [all]