Previous Posts


VMWare 2.0 Beta 2 Release

Restrict User Logon Hours

Vista Service Pack 1 is coming your way

Use auditing to track who deleted your files

IntelliAdmin Remote Control - Status Update

Try out the IE 8 Beta

Forward email in Exchange

Keep track of your email in Exchange

Vista SP1 now available on Technet

Australia 2008 DST Updates



Archives

May 2005

January 2006

April 2006

May 2006

June 2006

July 2006

September 2006

October 2006

November 2006

December 2006

January 2007

February 2007

March 2007

April 2007

May 2007

June 2007

July 2007

August 2007

September 2007

October 2007

November 2007

December 2007

January 2008

February 2008

March 2008

April 2008

May 2008



Subscribe to our Feed:






Find out where a DLL, EXE, or SYS file came from

There have been many times while working on a problem that I have found files that look suspicious, or are not part of the standard windows install. Microsoft has provided an excellent resource for researching executable files within windows.

It is called the DLL Help Database Search

Microsoft Help and Support

So for example...you are working on your server, trying to diagnose a problem...and you see a process running called MAD.EXE

On the surface this really looks like a nefarious program. What legitimate application could be called MAD.exe?

If we do a search on the DLL help database we find that it is part of Microsoft Exchange:

Microsoft Help and Support MAD exe

Even better, you can see the version history of the file, what product it belongs to, and even the path of the file on the original install disk by clicking on the "More Info" link:

Microsoft Help and Support Detailed Info

If that was not enough information for you, each file has a link to more details. Click on it, and there is even more:

Microsoft Help and Support Details

This is an invaluable tool for IT Administrators, I suggest adding it to your list of bookmarks:

http://support.microsoft.com/dllhelp/


Posted By: Steve Wiseman on Tuesday, April 15, 2008

Check out our utilities for windows

 



Copyright © IntelliAdmin, LLC, 2008. All Rights Reserved