Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

4, 0, 132, 224 53.85%
4, 0, 132, 224 7.69%
2, 5, 56, 207 30.77%
2, 5, 56, 207 7.69%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
LsaNtStatusToWinError, RegisterEventSourceW, ReportEventW, DeregisterEventSource, AllocateAndInitializeSid, EqualSid, FreeSid, RegEnumValueW, OpenThreadToken, OpenProcessToken, GetTokenInformation, RegQueryInfoKeyW, RegDeleteValueW, RegDeleteKeyW, RegEnumKeyExW, RegEnumKeyW, RegOpenKeyW, RegSetValueExW, RegQueryValueExW, RegOpenKeyExW, RegCreateKeyExW, RegCloseKey
kernel32.dll
WaitForMultipleObjects, ResetEvent, CreateEventW, DisableThreadLibraryCalls, GetSystemDirectoryW, GetWindowsDirectoryW, Sleep, GetCurrentThread, GetOverlappedResult, DeviceIoControl, GetCurrentThreadId, InterlockedExchange, CreateThread, TlsAlloc, VirtualFree, TlsSetValue, TlsGetValue, VirtualAlloc, CreateMailslotW, GetCurrentProcess, SetEvent, WideCharToMultiByte, GetThreadLocale, SetThreadLocale, GetModuleHandleW, LoadLibraryExW, MultiByteToWideChar, InterlockedDecrement, InterlockedIncrement, GetModuleFileNameW, GetSystemWow64DirectoryW, WaitForSingleObject, lstrcmpiW, DeleteCriticalSection, InitializeCriticalSection, LeaveCriticalSection, EnterCriticalSection, RaiseException, CreateFileW, GetTempPathW, GetTempFileNameW, ReadFile, WriteFile, CloseHandle, DeleteFileW, SetLastError, GetLastError, LoadLibraryW, GetProcAddress, SizeofResource, FreeLibrary, lstrlenW, FindResourceExW, FindResourceW, LoadResource, LockResource, GetVersionExW, FlushFileBuffers, CreateFileA, WriteConsoleW, GetConsoleOutputCP, WriteConsoleA, SetStdHandle, GetStringTypeW, GetStringTypeA, LoadLibraryA, GetConsoleMode, GetConsoleCP, SetFilePointer, GetSystemTimeAsFileTime, GetCurrentProcessId, GetTickCount, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetStartupInfoA, GetFileType, SetHandleCount, LCMapStringW, LCMapStringA, TlsFree, IsValidCodePage, GetOEMCP, GetCPInfo, GetModuleFileNameA, GetStdHandle, ExitProcess, GetModuleHandleA, HeapCreate, GetCommandLineA, ExitThread, RtlUnwind, IsDebuggerPresent, SetUnhandledExceptionFilter, UnhandledExceptionFilter, TerminateProcess, GetLocaleInfoA, GetACP, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, HeapAlloc, GetVersionExA, HeapDestroy
ole32.dll
StringFromCLSID, CoCreateGuid, CoTaskMemAlloc, CoTaskMemRealloc, CoCreateInstance, CoTaskMemFree, StringFromGUID2
shell32.dll
SHGetIconOverlayIndexW
shlwapi.dll
SHDeleteKeyW, SHDeleteEmptyKeyW
user32.dll
CharNextW, UnregisterClassA
wtsapi32.dll
WTSWaitSystemEvent
Export table
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
IconInstalled
InstallIcon
ResetIcon
SetIcon
UninstallIcon

CbFsMntNtf4.dll

Callback File System by EldoS Corporation (Signed)

Remove CbFsMntNtf4.dll
Version:   2, 5, 56, 207
MD5:   0b6bf084e13ffafe79472334004fd021
SHA1:   3c385e9cb730402d00e4929e56afd81084c55617
SHA256:   2674a2fb7dae2c5bef14d5c4025009fc6862c976b37ad79d8a1d5aba8acbca67

Overview

cbfsmntntf4.dll is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by EldoS Corporation which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:cbfsmntntf4.dll
Publisher:EldoS Corporation
Product name:Callback File System
Description:Mount Notifier
Typical file path:C:\windows\syswow64\cbfsmntntf4.dll
File version:2, 5, 56, 207
Product version:2, 5, 56, 14
Size:193.35 KB (197,992 bytes)
Certificate
Issued to:EldoS Corporation
Authority (CA):VeriSign
Effective date:Thursday, February 10, 2011
Expiration date:Monday, February 10, 2014
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Shell service object delay loads
  • EldosMountNotificator-cbfs4-0
  • EldosMountNotificator-cbfs4
Shared task scheduler
  • {C72272A3-0BD8-4DB7-B176-24375C3B50D4}
  • {47CAC723-EB00-4A45-B922-290E77EBDEC0}
Approved shell extensions
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved'
  • 'Virtual Storage Mount Notification' with CLSID {C72272A3-0BD8-4DB7-B176-24375C3B50D4}
  • 'Virtual Storage Mount Notification' with CLSID {47CAC723-EB00-4A45-B922-290E77EBDEC0}

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 8 Pro 46.15%
Windows 7 Home Premium 30.77%
Microsoft Windows XP 23.08%

Distribution by countryDistribution by country

United States installs about 61.54% of Callback File System.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 61.54%
Acer 38.46%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE