Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

12.0.2.1 9.38%
6.2.2.100 3.13%
6.0.13.100 3.13%
5.6.11.100 3.13%
5.4.14.101 3.13%
4.0.1.102 3.13%
2, 10, 5, 1 6.25%
2, 7, 3, 2 3.13%
2, 7, 3, 1 15.63%
2, 7, 3, 0 3.13%
2, 7, 2, 0 12.50%
2, 6, 6, 0 6.25%
2, 2, 6, 0 6.25%
2, 2, 1, 1 3.13%
2, 0, 4, 3 3.13%
2, 0, 0, 5 6.25%
2, 0, 0, 0 6.25%
2, 0, 0, 0 3.13%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenKeyExW, RegDeleteKeyW, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegEnumKeyExW, RegQueryValueExW, InitializeSecurityDescriptor, RegOpenKeyW, RegEnumValueW, RegOpenCurrentUser, RegQueryValueW, InitializeAcl, AddAccessAllowedAce, SetSecurityDescriptorDacl, CloseEncryptedFileRaw, WriteEncryptedFileRaw, ReadEncryptedFileRaw, OpenEncryptedFileRawW, EncryptFileW, GetUserNameW, GetTokenInformation, AllocateAndInitializeSid, EqualSid, OpenProcessToken, LookupPrivilegeValueW, LookupAccountNameW, LsaClose, FreeSid, LsaRemoveAccountRights, LsaAddAccountRights, LsaNtStatusToWinError, LsaOpenPolicy, RegCreateKeyW, AdjustTokenPrivileges, GetLengthSid, GetSidIdentifierAuthority, GetSidSubAuthority, GetSidSubAuthorityCount
crypt32.dll
CryptMsgGetParam, CryptQueryObject, CertFindCertificateInStore, CertGetNameStringW, CryptDecodeObject
gdi32.dll
DeleteObject, GetTextExtentPoint32W, CreateFontW, GetTextFaceW, GetObjectW, TextOutW, SetTextJustification, GetTextExtentPointW, CreateSolidBrush, GetStockObject, SelectObject, CreateFontIndirectW, CreateCompatibleDC, CreateCompatibleBitmap
kernel32.dll
GetCurrentProcessId, GetCurrentThreadId, GetTickCount, QueryPerformanceCounter, ExitProcess, LocalAlloc, LocalFree, GlobalLock, GlobalUnlock, LoadLibraryW, lstrcpynA, WideCharToMultiByte, GetModuleHandleW, LoadLibraryExW, FindResourceW, LoadResource, SizeofResource, MultiByteToWideChar, FreeLibrary, lstrcatW, lstrcpynW, InterlockedDecrement, InterlockedIncrement, lstrcmpiW, GetLastError, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, lstrcpyW, lstrlenW, CreateFileMappingW, MapViewOfFile, CreateSemaphoreW, WaitForSingleObject, ReleaseSemaphore, UnmapViewOfFile, CloseHandle, GetModuleFileNameW, GetVersionExW, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetVersionExA, GetSystemTimeAsFileTime, GetComputerNameW, GetFileAttributesW, GetDriveTypeW, GetDiskFreeSpaceW, FormatMessageW, IsBadStringPtrA, IsBadStringPtrW, IsBadReadPtr, IsBadWritePtr, GetProcAddress, InitializeCriticalSectionAndSpinCount, SetLastError, TryEnterCriticalSection, CreateMutexW, ReleaseMutex, FreeResource, LockResource, IsProcessorFeaturePresent, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, InterlockedCompareExchange, DecodePointer, EncodePointer, WinExec, GetVersion, GetLongPathNameW, GetModuleFileNameA, OpenFileMappingW, GetUserDefaultUILanguage, GetSystemDefaultUILanguage, GetUserDefaultLangID, GetSystemDefaultLangID, lstrlenA, ResumeThread, GetEnvironmentVariableW, WaitForMultipleObjects, ResetEvent, SetEvent, CreateEventW, GetProcessHeap, HeapFree, BackupSeek, BackupWrite, BackupRead, Sleep, RemoveDirectoryW, SetEndOfFile, SetFilePointer, SetFilePointerEx, GetFileSize, SetFileTime, SetFileAttributesW, CreateDirectoryW, WriteFile, ReadFile, FindFirstFileW, FindClose, FindNextFileW, GetCompressedFileSizeW, CompareStringW, GetDateFormatW, GetSystemTime, GetLocalTime, SystemTimeToFileTime, FileTimeToSystemTime, LocalFileTimeToFileTime, FileTimeToLocalFileTime, GetLocaleInfoW, CreateThread, TerminateThread, GetTempFileNameW, DeleteFileW, GetTempPathW, GetUserGeoID, GetGeoInfoW, GetShortPathNameW, GetVolumeInformationW, GetWindowsDirectoryW, GetSystemDirectoryW, HeapCreate, HeapAlloc, HeapDestroy, SetThreadExecutionState, CreateFileW, DeviceIoControl, GetLogicalDriveStringsW, CopyFileW, ExpandEnvironmentStringsW, GetCurrentProcess, MoveFileW, lstrcmpA, ProcessIdToSessionId, GetDiskFreeSpaceExW, GetFullPathNameW, GetSystemInfo, SetCurrentDirectoryW, GetCurrentDirectoryW, GlobalMemoryStatus
mfc100u.dll
DllMain
mfc71u.dll
DllMain
mfc80u.dll
DllMain
msvcp100.dll
DllMain
msvcp71.dll
DllMain
msvcp80.dll
DllMain
msvcr100.dll
DllMain
msvcr71.dll
DllMain
msvcr80.dll
DllMain
netapi32.dll
NetWkstaUserGetInfo, NetApiBufferFree, NetUserGetLocalGroups, NetUserGetInfo
ole32.dll
StringFromGUID2, CoCreateInstance, CoTaskMemRealloc, CoTaskMemFree, CoTaskMemAlloc, ReleaseStgMedium, CoInitializeEx, CoUnmarshalInterface, CoMarshalInterface, CoUninitialize, CoInitialize, CoCreateGuid, StringFromCLSID, CLSIDFromString
shell32.dll
SHGetPathFromIDListW, ShellExecuteW, DragQueryFileW, SHGetFileInfoW, ShellExecuteExW, SHGetSpecialFolderLocation, SHGetDesktopFolder, SHFileOperationW, SHGetMalloc
shlwapi.dll
PathFindExtensionW, SHDeleteValueW, SHDeleteKeyW
solutionexplorer.dll
HelpPackageIDFromApplicationID, CreateSolutionExplorer
user32.dll
UnregisterClassA, LoadStringW, EnableWindow, SendMessageW, UnregisterClassW, RegisterClipboardFormatW, GetDesktopWindow, LoadBitmapW, CreatePopupMenu, InsertMenuW, SetMenuItemBitmaps, CharNextW, EnumWindows, GetClassNameW, SetWindowTextW, GetDlgCtrlID, GetWindowLongW, GetWindowTextW, IsWindowEnabled, IsDialogMessageW, GetKeyState, WinHelpW, GetParent, IsChild, ScreenToClient, MapDialogRect, GetWindowRect, InflateRect, GetWindow, KillTimer, GetCursorPos, SetCursor, SetWindowLongW, CopyIcon, GetFocus, SetTimer, RedrawWindow, DrawFocusRect, PtInRect, WaitForInputIdle, SystemParametersInfoW, AdjustWindowRect, ReleaseCapture, IsWindowVisible, GetSysColorBrush, LoadCursorW, DestroyWindow, SetCapture, InvalidateRect, ReleaseDC, GetDC, GetClientRect, OffsetRect, SetRect, MessageBoxW, PostMessageW, DestroyIcon, GetSystemMetrics, GetSysColor, DrawIconEx, LoadImageW, LoadIconW, RegisterWindowMessageW, GetWindowThreadProcessId, FindWindowW, IsWindow
version.dll
GetFileVersionInfoW, VerQueryValueW, GetFileVersionInfoSizeW
wininet.dll
InternetCanonicalizeUrlW
winmm.dll
PlaySoundW
wintrust.dll
WinVerifyTrust
wtsapi32.dll
WTSFreeMemory, WTSQuerySessionInformationW
Export table
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

NBShell.dll

Nero BackItUp by Nero AG (Signed)

Remove NBShell.dll
Version:   2, 6, 6, 0
MD5:   c96ecbfa2e7adaab6952f32799781ae1
SHA1:   3b879254534723edcf952757bb7fda9989b931cd

What is NBShell.dll?

Nero BackItUp is a Windows backup software application that provides both local and network based file backups. With Nero BackItUp & Burn you can create backup copies on demand by manually selecting the files and folders you want to include in them or set the program to do it automatically without user intervention.

Overview

nbshell.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Nero AG which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:nbshell.dll
Publisher:Nero AG
Product name:Nero BackItUp
Description:Nero BackItUp Application
Typical file path:C:\Program Files\nero\nero 7\nero backitup\nbshell.dll
File version:2, 6, 6, 0
Size:72 KB (73,728 bytes)
Certificate
Issued to:Nero AG
Authority (CA):VeriSign
Expiration date:Thursday, June 21, 2012
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 7.1
.NET CLR:No
More details

BehaviorsBehaviors

Context menu handlers
Located in '*\shellex\ContextMenuHandlers'
  • CLSID: {7759105C-E384-4a1f-9315-EB695369CA76}
  • CLSID: {A4FD8DDB-5800-4414-97F9-7457AC8EE4F0}
  • CLSID: {D2203704-49E1-476F-B118-CFE99115634F}
  • CLSID: {EB4D3CFE-E2AA-4C6E-B2FE-2A749F95D208}

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 43.75%
Windows 7 Ultimate 31.25%
Windows Vista Home Premium 12.50%
Windows 7 Professional 9.38%
Windows 7 Home Premium 3.13%

Distribution by countryDistribution by country

United States installs about 15.63% of Nero BackItUp.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 20.83%
ASUS 16.67%
Intel 16.67%
Acer 12.50%
Medion 8.33%
Toshiba 8.33%
Dell 8.33%
American Megatrends 4.17%
Sahara 4.17%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE