Should I block it?

No, this file is 100% safe to run.

Additional versions

2.0.0.68	29.63%
2.0.0.60	18.52%
2.0.0.55	3.70%
2.0.0.39	3.70%
2.0.0.29	25.93%
2.0.0.22	3.70%
2.0.0.19	3.70%
1.1.0.66	3.70%
1.0.0.37	3.70%
1.0.0.26	3.70%

Relationships

PE file structure

Show functions

Import table

advapi32.dll

ReportEventW, DeregisterEventSource, RegisterEventSourceW

kernel32.dll

GetPrivateProfileStringW, OutputDebugStringW, CreateMutexW, CloseHandle, GetTickCount, Sleep, SetLastError, CreateFileW, GetFileSize, ReadFile, WriteFile, WaitForSingleObject, ReleaseMutex, GetCurrentProcess, GetFileAttributesW, CreateDirectoryW, WideCharToMultiByte, MultiByteToWideChar, lstrlenW, FileTimeToSystemTime, FindFirstFileW, FindClose, RemoveDirectoryW, DeleteFileW, HeapAlloc, HeapFree, FindResourceExW, FindResourceW, LoadResource, HeapReAlloc, HeapSize, GetProcessHeap, RaiseException, EnterCriticalSection, LeaveCriticalSection, InitializeCriticalSection, DeleteCriticalSection, QueryPerformanceCounter, HeapDestroy, InterlockedExchange, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, GetCurrentThreadId, GetCurrentProcessId, GetSystemTimeAsFileTime, LockResource, FindNextFileW, SizeofResource

msvcp90.dll

DllMain

msvcr90.dll

DllMain

ole32.dll

CoCreateGuid, CoUninitialize, CoInitializeEx, CoInitializeSecurity

psapi.dll

GetModuleFileNameExW

wininet.dll

HttpQueryInfoW, HttpSendRequestW, InternetWriteFile, HttpSendRequestExW, InternetReadFile, HttpOpenRequestW, InternetConnectW, InternetSetOptionW, InternetOpenW, InternetCloseHandle, HttpEndRequestW, HttpAddRequestHeadersW

Export table

CreateS3FileManagerObject

CreateS3FileObject

DeleteS3File

DestroyS3FileManagerObject

DestroyS3FileObject

GetDirList

GetUsedSpace

IShadowS3.dll

By NewTech Infosystems (Signed)

Remove IShadowS3.dll

Version:	1.0.0.37
MD5:	ee35fe0fa464fb8c738f4dcc5c3b01cb
SHA1:	bcf2809e9ce04f6050da47892143719162bde216

Overview

ishadows3.dll is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Packard Bell MyBackup published by NewTech Infosystems and Gateway MyBackup published by NewTech Infosystems. The file is digitally signed by NewTech Infosystems which was issued by the VeriSign certificate authority (CA).

Details

File name:	ishadows3.dll
Publisher:	NewTech Infosystems, Inc.
Description:	Backup Manager Module
Typical file path:	C:\Program Files\newtech infosystems\packard bell mybackup\ishadows3.dll
File version:	1.0.0.37
Size:	321 KB (328,704 bytes)
Certificate
Issued to:	NewTech Infosystems
Authority (CA):	VeriSign
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
Code language:	Microsoft Visual C++ 9.0
.NET CLR:	No

More details

Programs

The following programs will install this file

Packard Bell MyBackup

NewTech Infosystems

21% remove

Packard Bell MyBackup is the PB OEM branded version of NTI Backup NOW! which is preinstalled on various Packard Bell computers.

Gateway MyBackup

NewTech Infosystems

4% remove

“This option moves all hard disk contents to the "c:\My Backup" directory and installs a new copy of Windows®. This option preserves your existing data files, however all applications and settings will need to be reinstalled. This option requires a minimum 4 GB of free hard disk space for the new installation of Windows.”