Showing All DLL Files Used by Each Process

This section provides a tutorial example on how to use command 'tasklist' to show all DLL module files used by each running process with the module option '/M'.

The "tasklist" command does also have another useful feature - Showing all DLL module files used by each running process. The DLL module file usage information is useful to answer some common administration questions like:

To get a list of DLL module files used by each process, you can run the "tasklist" command with the module option "/M". An example result is included below:

C:\herong>tasklist /M

Image Name                Modules
========================= ===========================================
System Idle Process       N/A
System                    N/A
smss.exe                  ntdll.dll
csrss.exe                 ntdll.dll, CSRSRV.dll, basesrv.dll,
                          winsrv.dll, GDI32.dll, KERNEL32.dll,
                          USER32.dll, LPK.DLL, USP10.dll, msvcrt.dll,
                          ADVAPI32.dll, RPCRT4.dll, sxs.dll,
                          Apphelp.dll, VERSION.dll
winlogon.exe              ntdll.dll, kernel32.dll, ADVAPI32.dll,
                          RPCRT4.dll, AUTHZ.dll, msvcrt.dll,
                          CRYPT32.dll, USER32.dll, GDI32.dll,
                          MSASN1.dll, NDdeApi.dll, PROFMAP.dll,
                          NETAPI32.dll, USERENV.dll, PSAPI.DLL,
                          REGAPI.dll, Secur32.dll, SETUPAPI.dll,
                          VERSION.dll, WINSTA.dll, WINTRUST.dll,
                          IMAGEHLP.dll, WS2_32.dll, WS2HELP.dll,
                          IMM32.DLL, LPK.DLL, USP10.dll, MSGINA.dll,
                          SHELL32.dll, SHLWAPI.dll, COMCTL32.dll,
                          ODBC32.dll, comdlg32.dll, comctl32.dll,
                          odbcint.dll, SHSVCS.dll, sfc.dll,
                          sfc_os.dll, ole32.dll, Apphelp.dll,
                          msctfime.ime, WINSCARD.DLL, WTSAPI32.dll,
                          sxs.dll, uxtheme.dll, WINMM.dll,
                          Ati2evxx.dll, cscdll.dll, WlNotify.dll,
                          WINSPOOL.DRV, MPR.dll, rsaenh.dll,
                          WgaLogon.dll, OLEAUT32.dll, NTMARTA.DLL,
                          WLDAP32.dll, SAMLIB.dll, CLBCATQ.DLL,
                          COMRes.dll, msv1_0.dll, iphlpapi.dll,
                          cscui.dll, xpsp2res.dll, wdmaud.drv,
                          msacm32.drv, MSACM32.dll, midimap.dll,
                          wbemprox.dll, wbemcomn.dll, wbemsvc.dll,
                          fastprox.dll, MSVCP60.dll, NTDSAPI.dll,
                          DNSAPI.dll, msxml3.dll, wsock32.dll,
                          icmp.dll, MPRAPI.dll, ACTIVEDS.dll,
                          adsldpc.dll, ATL.DLL, rtutils.dll,
                          mswsock.dll, hnetcfg.dll, wshtcpip.dll,
                          kerberos.dll, cryptdll.dll, Cabinet.dll
services.exe              ntdll.dll, kernel32.dll, msvcrt.dll,
                          ADVAPI32.dll, RPCRT4.dll, USER32.dll,
                          GDI32.dll, USERENV.dll, SCESRV.dll,
                          AUTHZ.dll, umpnpmgr.dll, WINSTA.dll,
                          NETAPI32.dll, NCObjAPI.DLL, MSVCP60.dll,
                          ShimEng.dll, AcGenral.DLL, WINMM.dll,
                          ole32.dll, OLEAUT32.dll, MSACM32.dll,
                          VERSION.dll, SHELL32.dll, SHLWAPI.dll,
                          UxTheme.dll, IMM32.DLL, LPK.DLL, USP10.dll,
                          comctl32.dll, comctl32.dll, secur32.dll,
                          Apphelp.dll, eventlog.dll, WS2_32.dll,
                          WS2HELP.dll, PSAPI.DLL, wtsapi32.dll,
                          ESENT.dll, SETUPAPI.dll, Cabinet.dll,
                          SAMLIB.dll
...

The result is a surprise for me. Look at how many DLL files are used by "winlogon.exe", 88 of them!.

Table of Contents

 About This Book

 Introduction to Microsoft Windows

 Introduction to Windows Explorer

 Introduction to Internet Explorer

 "Paint" Program and Computer Graphics

 GIMP - GNU Image Manipulation Program

 JPEG Image File Format Quality and Size

 GIF Image File Format and Transparent Background

 "WinZip" - ZIP File Compression Tool

 "WinRAR" - RAR and ZIP File Compression Tool

 FTP Server, Client and Commands

 "FileZilla" - Free FTP Client and Server

 Web Server Log Files and Analysis Tool - "Analog"

 Spyware Adware Detection and Removal

 IE Addon Program Listing and Removal

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 Spybot - Spyware Blocker, Detection and Removal

 Setting Up and Using Crossover Cable Network

 Home Network Gateway - DSL Modem/Wireless Router

 Windows Task Manager - The System Performance Tool

"tasklist" Command Line Tool to List Process Information

 What Is "tasklist"?

 Listing All Running Processes

 Showing Detailed Information on Processes

 Showing Services under Each Process

Showing All DLL Files Used by Each Process

 Finding All Processes Using NETAPI32.DLL

 "msconfig" - System Configuration Tool

 Configuring and Managing System Services

 Windows Registry Key and Value Management Tools

 Startup Programs Removal for Better System Performance

 Winsock - Windows Sockets API

 Java on Windows

 Glossary of Terms

 Outdated Tutorials

 References

 PDF Printing Version