Should I block it?

16%
16% of PCs block this file from running.

VersionsAdditional versions

3, 2, 122, 123 22.99%
3, 2, 122, 123 5.75%
3, 2, 121, 124 1.15%
3, 2, 115, 115 1.15%
3, 2, 115, 115 1.15%
3, 2, 114, 113 14.94%
3, 2, 114, 113 2.30%
3, 2, 107, 97 37.93%
3, 2, 107, 97 2.30%
3, 2, 101, 84 5.75%
3, 2, 101, 84 1.15%
3, 1, 83, 47 1.15%
3, 1, 83, 47 1.15%
3, 0, 77, 30 1.15%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
LsaNtStatusToWinError, AllocateAndInitializeSid, EqualSid, FreeSid, RegEnumValueW, OpenThreadToken, OpenProcessToken, GetTokenInformation, RegQueryInfoKeyW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyExW, RegEnumKeyW, RegOpenKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey
kernel32.dll
GetCurrentProcess, CreateMailslotW, GetOverlappedResult, WaitForMultipleObjects, ResetEvent, CreateEventW, DisableThreadLibraryCalls, Sleep, GetCurrentThread, CopyFileW, SetFileAttributesW, GetFileAttributesW, MoveFileExW, SetEvent, GetVersionExW, DeviceIoControl, GetCurrentThreadId, InterlockedExchange, CreateThread, TlsAlloc, VirtualFree, TlsSetValue, TlsGetValue, VirtualAlloc, GetThreadLocale, SetThreadLocale, GetModuleHandleW, LoadLibraryExW, MultiByteToWideChar, GetSystemDirectoryW, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameW, GetSystemWow64DirectoryW, WaitForSingleObject, lstrcmpiW, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, WideCharToMultiByte, DeleteFileW, CreateFileW, GetTempPathW, GetTempFileNameW, ReadFile, WriteFile, CloseHandle, GetSystemWindowsDirectoryW, SetLastError, GetLastError, LoadLibraryW, SizeofResource, GetProcAddress, FreeLibrary, lstrlenW, FindResourceExW, FindResourceW, LoadResource, LockResource, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetStringTypeW, GetStringTypeA, LoadLibraryA, GetConsoleMode, GetConsoleCP, SetFilePointer, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, SetHandleCount, LCMapStringW, LCMapStringA, TlsFree, IsValidCodePage, GetOEMCP, GetCPInfo, GetModuleFileNameA, GetStdHandle, ExitProcess, GetModuleHandleA, HeapCreate, GetCommandLineA, ExitThread, RtlUnwind, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetLocaleInfoA, GetACP, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, GetVersionExA, HeapDestroy, HeapAlloc
ole32.dll
StringFromCLSID, CoCreateGuid, CoTaskMemAlloc, CoTaskMemRealloc, CoCreateInstance, CoTaskMemFree, StringFromGUID2
shell32.dll
SHGetIconOverlayIndexW
shlwapi.dll
StrStrIW, SHDeleteKeyW, SHDeleteEmptyKeyW
user32.dll
CharNextW, UnregisterClassA
version.dll
GetFileVersionInfoW, GetFileVersionInfoSizeW, VerQueryValueW
wtsapi32.dll
WTSWaitSystemEvent
Export table
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
InstallIcon
ResetIcon
SetIcon
UninstallIcon

CbFsMntNtf3.dll

Callback File System by EldoS Corporation (Signed)

Remove CbFsMntNtf3.dll
Version:   3, 2, 121, 124
MD5:   bce81540172dbd99fbffd6656b69ff7b
SHA1:   8cf7223012cb1cba26fa8841b679d17f757a68c3
SHA256:   65019dd68f81372bafdfbb57049e77f33061cddc009c9110ad314b10802e3464

Overview

cbfsmntntf3.dll is loaded as dynamic link library that runs in the context of Internet Explorer. It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. The file is digitally signed by EldoS Corporation which was issued by the GlobalSign nv-sa certificate authority (CA).

DetailsDetails

File name:cbfsmntntf3.dll
Publisher:EldoS Corporation
Product name:Callback File System
Description:CbFs Mount Notifier
Typical file path:C:\windows\syswow64\cbfsmntntf3.dll
File version:3, 2, 121, 124
Product version:3, 2, 121, 1
Size:154.35 KB (158,056 bytes)
Build date:12/4/2012 4:49 AM
Certificate
Issued to:EldoS Corporation
Authority (CA):GlobalSign nv-sa
Effective date:Monday, November 1, 2010
Expiration date:Friday, November 1, 2013
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Internet Explorer Browser Helper Object
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'
  • BHO CLSID: {5FF49FE8-B332-4CB9-B102-FB6951629E55}
Shell service object delay loads
  • EldosMountNotificator
Shared task scheduler
  • {5FF49FE8-B332-4CB9-B102-FB6951629E55}
Approved shell extensions
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
  • 'Virtual Storage Mount Notification' with CLSID {5FF49FE8-B332-4CB9-B102-FB6951629E55}

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 62.07%
Windows 8 9.20%
Windows 7 Ultimate 8.05%
Windows 8.1 8.05%
Microsoft Windows XP 6.90%
Windows Vista Home Premium 4.60%
Windows 8 Pro 1.15%

Distribution by countryDistribution by country

United States installs about 60.92% of Callback File System.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 30.23%
Acer 22.09%
Samsung 15.12%
Dell 13.95%
ASUS 11.63%
Toshiba 4.65%
American Megatrends 2.33%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE