Should I block it?

No, this file is 100% safe to run.

Additional versions

2.0.0.68	29.63%
2.0.0.60	18.52%
2.0.0.55	3.70%
2.0.0.39	3.70%
2.0.0.29	25.93%
2.0.0.22	3.70%
2.0.0.19	3.70%
1.1.0.66	3.70%
1.0.0.37	3.70%
1.0.0.26	3.70%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

ReportEventW, DeregisterEventSource, RegisterEventSourceW

kernel32.dll

GetPrivateProfileStringW, OutputDebugStringW, CreateMutexW, CloseHandle, GetTickCount, Sleep, SetLastError, CreateFileW, GetFileSize, ReadFile, WriteFile, WaitForSingleObject, ReleaseMutex, GetCurrentProcess, GetFileAttributesW, CreateDirectoryW, WideCharToMultiByte, MultiByteToWideChar, lstrlenW, FileTimeToSystemTime, FindFirstFileW, FindClose, RemoveDirectoryW, DeleteFileW, HeapAlloc, HeapFree, FindResourceExW, FindResourceW, LoadResource, HeapReAlloc, HeapSize, GetProcessHeap, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, QueryPerformanceCounter, HeapDestroy, InterlockedExchange, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, LockResource, FindNextFileW, SizeofResource

msvcp90.dll

DllMain

msvcr90.dll

DllMain

ole32.dll

CoCreateGuid, CoUninitialize, CoInitializeEx, CoInitializeSecurity

psapi.dll

GetModuleFileNameExW

wininet.dll

HttpQueryInfoW, HttpSendRequestW, InternetWriteFile, HttpSendRequestExW, InternetReadFile, HttpOpenRequestW, InternetConnectW, InternetSetOptionW, InternetOpenW, InternetCloseHandle, HttpEndRequestW, HttpAddRequestHeadersW

Export table

CreateS3FileManagerObject

CreateS3FileObject

DeleteS3File

DestroyS3FileManagerObject

DestroyS3FileObject

GetDirList

GetUsedSpace

IShadowS3.dll

By NewTech Infosystems (Signed)

Remove IShadowS3.dll

Version:	2.0.0.29
MD5:	14810d7e49716579d1edc8497cfb1971
SHA1:	2c16b0863931407507132b7ad8aeaee52d0725bf
SHA256:	22b0780e1fa820e3dc8ef18e4174a891afba53dfe7cde649e1158ff2c6080a40

Overview

ishadows3.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Gateway MyBackup published by NewTech Infosystems, Packard Bell MyBackup from NewTech Infosystems and Packard Bell MyBackup by NewTech Infosystems. The file is digitally signed by NewTech Infosystems which was issued by the VeriSign certificate authority (CA).

Details

File name:	ishadows3.dll
Publisher:	NewTech Infosystems, Inc.
Description:	Backup Manager Module
Typical file path:	C:\Program Files\newtech infosystems\packard bell mybackup\ishadows3.dll
File version:	2.0.0.29
Size:	321.5 KB (329,216 bytes)
Certificate
Issued to:	NewTech Infosystems
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following programs will install this file

Gateway MyBackup

NewTech Infosystems

4% remove

“This option moves all hard disk contents to the "c:\My Backup" directory and installs a new copy of Windows®. This option preserves your existing data files, however all applications and settings will need to be reinstalled. This option requires a minimum 4 GB of free hard disk space for the new installation of Windows.”

Packard Bell MyBackup

NewTech Infosystems

21% remove

Packard Bell MyBackup is the PB OEM branded version of NTI Backup NOW! which is preinstalled on various Packard Bell computers.

Acer Backup Manager

NewTech Infosystems

19% remove

Acer Backup Manager provides easy and fast backup of your data to external medium or another disk partition. It's often pre-installed on new Acer Aspire laptops. Acer's Backup Manager application gives you the ability to migrate files from your older computer to your new computer. To migrate your files to your new computer with Acer's Backup Manager application.