DLL

[Martin Racette]

How can I find to what process a certain DLL belong, there is one DLL in the
TEMP directory, I can not delete it because it is in use but I do not know
what prcess is using it

 

[Chirag]

The following command will tell you the processes that have a particular DLL
loaded:

tasklist /fi "modules eq apphelp.dll"

Replace apphelp.dll with the DLL name in your TEMP folder to find out the
applications that are using the DLL.

- Chirag

PowerShow - View multiple PowerPoint slide shows simultaneously
http://officeone.mvps.org/powershow/powershow.html

 

[Rick Rogers]

Hi,

Process Explorer:
http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx

In addition, the fact that it is running from a temp directory is highly
suspicious. I would recommend that you restart in Safe mode and do some
malware scanning.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Windows help - www.rickrogers.org
My thoughts http://rick-mvp.blogspot.com

 

[Ken Blake, MVP]

How can I find to what process a certain DLL belong, there is one DLL in the
TEMP directory, I can not delete it because it is in use but I do not know
what prcess is using it

What's the name of this DLL? DLL's don't normally run from the temp
folder, and if you have one that's doing so, it is likely a sign of a
malware infection.

 

[Patrick Keenan]

How can I find to what process a certain DLL belong, there is one DLL in
the TEMP directory, I can not delete it because it is in use

That's a bad sign. Legitmate applications don't run from DLLs left behind
in the temp folders.

but I do not know what prcess is using it

It's likely to be malware, and it's likely that your system is infected.

Try renaming the DLL - change the extention to .BAD, for example, and
reboot. Look for error messages on restart to help you identify the
infection.

HTH
-pk