What is Fun4IM?

Fun4IM is software application developed by Bandoo Media Inc. It is most commonly found on computers running Windows 7 with nearly 40.00% of installations running this operating system. Fun4IM's installer is typically 14.00 MB in size and installs around 15 files.

Fun4IM is most popular in the United States with 33.33% of installations residing in this country.

Fun4IM adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Fun4IM is known to create 1 firewall exception to allow inbound and outbound connectivity.

Multiple virus scanners have detected malware in Fun4IM.

FFSettings.exe (MD5: d1bb2ca95ed61ca158fee42c4714a47a) has been flagged by 6 scanners:

Scanner Software	Version	Result
Panda Antivirus	10.0.3.5	Adware/Fun4IM
Symantec	20101.3.0.103	WS.Reputation.1
The Hacker	6.7.0.1.147	Trojan/Swisyn.aryv
Avira AntiVir	7.11.50.62	Adware/Bandoo.AA.128
ESET-NOD32	7698	a variant of Win32/Adware.Bandoo.AA
ESET NOD32	6258	a variant of Win32/Adware.Bandoo.AA

ExtensionsManager.exe (MD5: 823bea11a41ebc5874534c4d2ead58af) has been flagged by 6 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.43.110	Adware/Bandoo.AA.132
ESET-NOD32	7490	a variant of Win32/Adware.Bandoo.AA
Panda Antivirus	10.0.3.5	Adware/Fun4IM
Symantec	20101.3.0.103	WS.Reputation.1
The Hacker	6.7.0.1.147	Trojan/Swisyn.aryv
ESET NOD32	6258	a variant of Win32/Adware.Bandoo.AA

BndCore.exe (MD5: 3dc8dfe611053a3d862c549f6e4b052a) has been flagged by 2 scanners:

Scanner Software	Version	Result
ESET NOD32	6258	a variant of Win32/Adware.Bandoo.AA
Panda Antivirus	10.0.3.5	Adware/Fun4IM

BandooUI.exe (MD5: 9cccdfccb7f2a6d61c509f60e928c177) has been flagged by 6 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.50.62	Adware/Bandoo.AA.20
ESET-NOD32	7.7698	a variant of Win32/Adware.Bandoo.AB
Panda Antivirus	13.05.23.04	Adware/Fun4IM
Symantec	20101.3.0.103	WS.Reputation.1
The Hacker	6.7.0.1.147	Trojan/Swisyn.aryv
ESET NOD32	6258	a variant of Win32/Adware.Bandoo.AA

BandooGo.exe (MD5: 6122b5784fb3322af1ca7ed5563f9f88) has been flagged by 6 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.50.62	Adware/Bandoo.AA.15
ESET-NOD32	7698	a variant of Win32/Adware.Bandoo.AA
Panda Antivirus	10.0.3.5	Adware/Fun4IM
Symantec	20101.3.0.103	WS.Reputation.1
The Hacker	6.7.0.1.147	Trojan/Swisyn.aryv
ESET NOD32	6258	a variant of Win32/Adware.Bandoo.AA

Software Behaviors

Services:

UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Bandoo.exe runs as a service named 'Fun4IM Coordinator' (Fun4IM Coordinator) "Coordinates Fun4IM plugins work".

Firewall:

UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.

Scheduled tasks:

UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).

Software Details

URL:

https://www.bandoo.com

Support:

–

Installation path:

C:\Program Files\Fun4IM

Uninstaller:

C:\Program Files\Fun4IM\PreUninstall.exe

Size:

14.00 MB

Language:

English

Fun4IM Executable Details

Primary executable:

BandooUI.exe

Name:

Fun4IM

Path:

C:\Program Files\Fun4IM\BandooUI.exe

MD5:

9cccdfccb7f2a6d61c509f60e928c177

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

CrashRpt.dll

48796c97029b662bf8f8cbc1990324fd

EXE

UNWISE.EXE

973567b98cdfc147df4e60471d9df072

DLL

InstallerHelper.dll

a4acc1ddc7716f8e45b352e7efbfdec3

DLL

libungif4.dll

5395d8552b99dacf6f4cc4610dc317fe

DLL

GIFAnimator.dll

dbef230ea5ebd1f6fbe5be5e4cef1d1b

DLL

FlashAnimator.dll

5893f6ca8c62621bd3b7fd194d74a286

EXE

FFSettings.exe

Adware

d1bb2ca95ed61ca158fee42c4714a47a

DLL

BndHook.dll

83dbed8794c11c41b64708bb02b6b53d

EXE

PreUninstall.exe

2f545b97b9481af9900aac4577454b1d

EXE

ExtensionsManager.exe