List all DLLs Loaded on a System

By | 2007-04-14

For computer management, software error diagnosis, or spyware or virus diagnosis, it may prove useful to display the list, size, and version of all DLLs currently loaded on a particular Windows XP machine. This can be done on the command prompt with the listdlls command, available from the SysInternals site, part of Microsoft Technet.

Simply download the zip file, unzip the executable inside listdlls.zip to your main Windows directory, and you can display the list of loaded DLLs at the command prompt:

listdlls

You should either pipe the results to more or to a text file as the list is rather lengthy.

A few command line arguments are supported:

process name or PID

Displays the list of DLLs associated with the process name or PID (partial process names are accepted).

For example, the following command displays all DLL files associated with Windows Notepad:

listdlls notepad

-d DLLNAME

Displays the processes that have loaded the DLL file DLLNAME.

For example, do you need to determine if your machine is still vulnerable to the GDI+ vulnerability involving buffer overruns when processing JPEG files (refer to Microsoft Security Bulletin MS04-028)? The following command displays which currently-loaded processes load gdiplus.dll and which versions are loaded:

listdlls -d gdiplus

-r

Flags relocated DLLs that did not load at the base address.

Author: dwirch

Derek Wirch is a seasoned IT professional with an impressive career dating back to 1986. He brings a wealth of knowledge and hands-on experience that is invaluable to those embarking on their journey in the tech industry.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.