How to remove the IEHelper Module malware

Some anti-malware programs classify IEHelper.dll as a harmful extension to Internet Explorer: for example SpywareProtect2009 (detected by Symantec), and Rogue:Win32/FakeSpypro or Trojan:Win32/FakeSpypro (detected by Microsoft). Add-ons like this can display ads, slow down your computer and cause various other errors. If you can't remember installing the associated IEHelper Module software, it's no surprise. In most cases, this kind of adware is installed on the side when you install a freeware product like a Youtube Downloader or a PDF Converter. In the following selection, you can read more about IEHelper Module and how to get rid of it.

Click here to automatically remove the IEHelper Module malware

IEHelper.dll file information

The process known as IEHelper Module or Systweak Ad and Popup Blocker - Helper Module or Browser Configuration Utility IE BHO for Upgrade Checking or iehelper Module or IEHelper BHO module

belongs to software Systweak Advanced System Optimizer or Browser Configuration Utility or IBM Lotus Organizer (version 6 - English) or Lotus Organizer or or QIYI SOFTWARE or or FileStream Web Boomerang or Actuate LRX for Microsoft or Instant Help Application or Uninstall DLExpert

by Systweak ( or DeviceVM ( or or Actuate Software or PPStream ( or Actuate or VK Soft.

Description: IEHelper.dll is not essential for Windows and will often cause problems. IEHelper.dll is located in a subfolder of "C:\Program Files" or sometimes in a subfolder of the user's profile folder. Known file sizes on Windows 10/8/7/XP are 65,536 bytes (32% of all occurrences), 83,456 bytes and 19 more variants. 
This .dll file is a Browser Helper Object (BHO) that runs automatically every time you start your web browser. BHOs are not stopped by personal firewalls, because they are identified by the firewall as part of the browser itself. BHOs are often used by adware and spyware. IDs used by this BHO include CF7C3CF0-4B15-11D1-ABED-709549C10000 or A6927151-F5B4-11D4-AE7A-00D00925CF52 or 32 more variants. The program is not visible. It is able to change the behavior of, or monitor Internet Explorer. It is not a Windows core file. The service has no detailed description. The software has no file description. Therefore the technical security rating is 60% dangerous; however you should also read the user reviews.

Uninstalling this variant: In case you experience problems using IEHelper.dll, you can search the support area on the Systweak website, make sure that you have installed the latest version or uninstall Advanced System Optimizer or Lotus Organizer software via Windows Control Panel/Add or Remove Programs (Windows XP) or Programs and Features (Windows 10/8/7).

Recommended: Identify IEHelper.dll related errors

External information from Tony Klein:

Important: Some malware also uses the file name IEHelper.dll, for example SpywareProtect2009 (detected by Symantec), and Rogue:Win32/FakeSpypro or Trojan:Win32/FakeSpypro (detected by Microsoft). Therefore, you should check the IEHelper.dll process on your PC to see if it is a threat. If IEHelper Module has changed your browser's search engine and start page, you can recover your browser's default settings as follows:

Reset default browser settings for Internet-Explorer ▾
  1. In Internet Explorer, press the key combination Alt + X to open the Tools menu.
  2. Click Internet options.
  3. Click the Advanced tab.
  4. Click the Reset... button.
  5. Enable the Delete personal settings option.
This will reset your Internet Explorer to its default settings. Your browser will start with the familiar start page and search engine—without popups, ads, cookies, but all browser add-ons are deleted too [1]. Make cleaning up your browser and your computer simpler and safer with Security Task Manager.


User Comments

Just a IE toolbar plugin for DLExpert
DLExpert is a multi-thread resuming downloading software. It makes full use of the resources of the client and the server to download files from Internet at the fastest rate available. DLExpert's powerful multi-thread function makes it download different parts of the same file simultaneously. Namely it can divide the file into parts. Each part will be downloaded by one thread, so different parts can be downloaded simultaneously. DLExpert supports HTTP and FTP, also HTTP and FTP proxy. Its function of auto-dial, auto-hang up, schedule downloading and auto-shutdown make it convenient and quick
  The Knitter  
All in one system performance and optimizer suite
  Bart Billiet   (further information)
It will block installation of Macromedia Flash on comcast net when XP Home is upgraded to XP Pro.
it was a spyware. Must delete it before you loss your data.
Virus software indicated it's a Trojan; it's time stamp (in System32 dir.) is identical to the time my computer began acting infected. It loaded a new 'badge' on my task bar, giving me a "Windows Security" error and lots of bogus warnings. It tried to have me load something called "System Protect"
It added an entry to hosts file, changed my DNS, and edited my prosy settings.
it is a spyware used by spyware protect and other things like it, it is used to make you think you have a virus put there by things like spyware protect 2009 to get you to buy it and spyware protect is a scam to get you to buy their 50 dollar program
It was autoremoved by AVG after attempting to load a banner add proclaiming itself as a malware-detector and remover. Forcing the program to quit and restoring the antiviral and anti-spyware suite as part of AVG Free detected and removed it before it could reload itself. IDd by AVG as 'Trojan Horse Downloader.Zlob_r.EX
  Aaron Nichols  
this file is a VERY harmful trojan and it is essential that you try to remove it but it's very difficult to do so. Most often found when pc is infected with sysguard.exe
its spyware. remove it ASAP. run malware bytes.
It is scareware. It gives constant pop-ups that legitimate files are infected
Is used by the Browser Configuration Utility bundled with Gigabyte Motherboards. The utility is preinstalled and is an addon to your browser as a BHO. It's purpose is simply that when you type in a web search into your address bar it automatically uses Google search engine, and you cannot choose any other search engine. Very tricky, Gigabyte, users do like to be asked first. This is bloatware and should be uninstalled through Add or Remove Programs in your Control Panel. I was having problems with a faulting iehelper.dll in IE8 windows 7 64-bit and fixed this by uninstalling this utility.
  Glenn McKenna   (further information)

Rating chart

Summary: Average user rating of IEHelper.dll: based on 16 votes with 13 user comments. 3 users think IEHelper.dll is essential for Windows or an installed application. One user thinks it's probably harmless. 2 users think it's neither essential nor dangerous. 2 users suspect danger. 8 users think IEHelper.dll is dangerous and recommend removing it.

Do you have additional information?
What do you know about IEHelper.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving IEHelper issues

The following programs have also been shown useful for a deeper analysis: ASecurity Task Manager examines the active IEHelper process on your computer and clearly tells you what it is doing. Malwarebytes' well-known Banti-malware tool tells you if the IEHelper.dll on your computer displays annoying ads, slowing it down. This type of unwanted adware program is not considered by some antivirus software to be a virus and is therefore not marked for cleanup.

A clean and tidy computer is the key requirement for avoiding PC trouble. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

Other processes

IEHelper.dll [all]