How can I find to what process a certain DLL belong, there is one DLL in the
TEMP directory, I can not delete it because it is in use but I do not know
what prcess is using it

--
Thank You in Advance
Merci a l'avance

Martin

The following command will tell you the processes that have a particular DLL
loaded:

tasklist /fi "modules eq apphelp.dll"

Replace apphelp.dll with the DLL name in your TEMP folder to find out the
applications that are using the DLL.

- Chirag

PowerShow - View multiple PowerPoint slide shows simultaneously
http://officeone.mvps.org/powershow/powershow.html

"Martin Racette" <(E-Mail Removed)> wrote in message
news:3A5E484E-847C-4688-9D2E-(E-Mail Removed)...
> How can I find to what process a certain DLL belong, there is one DLL in
> the TEMP directory, I can not delete it because it is in use but I do not
> know what prcess is using it
>
> --
> Thank You in Advance
> Merci a l'avance
>
> Martin

Hi,

Process Explorer:
http://technet.microsoft.com/en-us/s.../bb896653.aspx

In addition, the fact that it is running from a temp directory is highly
suspicious. I would recommend that you restart in Safe mode and do some
malware scanning.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP
http://mvp.support.microsoft.com/
Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

"Martin Racette" <(E-Mail Removed)> wrote in message
news:3A5E484E-847C-4688-9D2E-(E-Mail Removed)...
> How can I find to what process a certain DLL belong, there is one DLL in
> the TEMP directory, I can not delete it because it is in use but I do not
> know what prcess is using it
>
> --
> Thank You in Advance
> Merci a l'avance
>
> Martin

On Thu, 18 Dec 2008 23:29:53 -0500, "Martin Racette"
<(E-Mail Removed)> wrote:

> How can I find to what process a certain DLL belong, there is one DLL in the
> TEMP directory, I can not delete it because it is in use but I do not know
> what prcess is using it


What's the name of this DLL? DLL's don't normally run from the temp
folder, and if you have one that's doing so, it is likely a sign of a
malware infection.

--
Ken Blake, Microsoft MVP - Windows Desktop Experience
Please Reply to the Newsgroup

"Martin Racette" <(E-Mail Removed)> wrote in message
news:3A5E484E-847C-4688-9D2E-(E-Mail Removed)...
> How can I find to what process a certain DLL belong, there is one DLL in
> the TEMP directory, I can not delete it because it is in use

That's a bad sign. Legitmate applications don't run from DLLs left behind
in the temp folders.

> but I do not know what prcess is using it

It's likely to be malware, and it's likely that your system is infected.

Try renaming the DLL - change the extention to .BAD, for example, and
reboot. Look for error messages on restart to help you identify the
infection.

HTH
-pk



>
> --
> Thank You in Advance
> Merci a l'avance
>
> Martin