How to remove the IEHelper malware

Some anti-malware programs classify IEBHO.dll as a harmful extension to Internet Explorer: e.g. Trojan:W32/BHO.EVV or Trojan.Win32.BHO.ufd (detected by F-Secure), and TROJ_FAKEALE.K (detected by TrendMicro). Add-ons like this can display ads, slow down your computer and cause various other errors. If you can't remember installing the associated IEHelper software, it's no surprise. In most cases, this kind of adware is installed on the side when you install a freeware product like a Youtube Downloader or a PDF Converter. In the following selection, you can read more about IEHelper and how to get rid of it.

Click here to automatically remove the IEHelper malware

IEBHO.dll file information

The process known as IEHelper or File Sanitizer for HP ProtectTools or Website Log On or iMeshIEHelper Module or BearShareIEHelper Module or TrueSuite Website Log On or IEQuickFill Module

belongs to software IEHelper Module or File Sanitizer For HP Protect Tools or Windows iLivid Toolbar or HP SimplePass (version 2011, 2012, PE 2011) or Windows jZip Toolbar or MediaBar or Windows Savevid Toolbar or Windows ilivid Toolbar

by Discordia, LTD ( or MusicLab ( or Hewlett-Packard ( or iMesh ( or Bandoo Media, inc ( or HP ( or Bandoo Media ( or AuthenTec ( or Musiclab (

Description: IEBHO.dll is not essential for Windows and will often cause problems. The IEBHO.dll file is located in a subfolder of "C:\Program Files". Known file sizes on Windows 10/8/7/XP are 1,236,376 bytes (12% of all occurrences), 117,248 bytes and 42 more variants. 
This .dll file is a Browser Helper Object (BHO) that runs automatically every time you start your web browser. BHOs are not stopped by personal firewalls, because they are identified by the firewall as part of the browser itself. BHOs are often used by adware and spyware. IDs used by this BHO include 6EF05952-B48D-4944-AA91-57A6A1A48EF8 or FCAFFC14-BD46-408A-9842-CDBE1C6D37FF or 14 more variants. The program is not visible. The IEBHO.dll file is able to change the behavior of, or monitor Internet Explorer. IEBHO.dll is not a Windows core file. The service has no detailed description. It is digitally signed. IEBHO.dll is able to record keyboard and mouse inputs. Therefore the technical security rating is 56% dangerous, however you should also read the user reviews.

Uninstalling this variant: The software publisher Hewlett-Packard provides an uninstall program (Control Panel->Software->File Sanitizer For HP ProtectTools or Windows iLivid Toolbar).

Recommended: Identify IEBHO.dll related errors

Important: Some malware also uses the file name IEBHO.dll, for example Trojan:W32/BHO.EVV or Trojan.Win32.BHO.ufd (detected by F-Secure), and TROJ_FAKEALE.K (detected by TrendMicro). Therefore, you should check the IEBHO.dll process on your PC to see if it is a threat. If IEHelper has changed your browser's search engine and start page, you can recover your browser's default settings as follows:

Reset default browser settings for Internet-Explorer ▾
  1. In Internet Explorer, press the key combination Alt + X to open the Tools menu.
  2. Click Internet options.
  3. Click the Advanced tab.
  4. Click the Reset... button.
  5. Enable the Delete personal settings option.
This will reset your Internet Explorer to its default settings. Your browser will start with the familiar start page and search engine—without popups, ads, cookies, but all browser add-ons are deleted too [1]. Make cleaning up your browser and your computer simpler and safer with Security Task Manager.


User Comments

É um gerenciador de downloads
  Marcelo Eyer   (further information)
Trojaner ist das
  Larry   (further information)
Mine was stored in C:\Program files (x86)\BEARSH~1 & was giving me an error every time i opened a folder, rar or text file. I just deleted the folder and the problem was solved
Mine was stored in C:\Program files (x86)\HP Simple Pass 2011. I went to Uninstall a Program and removed Authen Tech TrueSuite. Passwords stopped autocompleting. problem solved!

Rating chart

Summary: Average user rating of IEBHO.dll: based on 8 votes with 5 user comments. 2 users think IEBHO.dll is essential for Windows or an installed application. 2 users suspect danger. 4 users think IEBHO.dll is dangerous and recommend removing it.

Do you have additional information? Help other users!
What do you know about IEBHO.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving IEBHO issues

The following programs have also been shown useful for a deeper analysis: Security Task Manager examines the active IEBHO process on your computer and clearly tells you what it is doing. Malwarebytes' well-known anti-malware tool tells you if the IEBHO.dll on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.

A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using cleanmgr and sfc /scannow, uninstalling programs that you no longer need, checking for Autostart programs (using msconfig) and enabling Windows' Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

Other processes

IEBHO.dll [all]