Computer failure dll file is behind the scenes

When using a computer, we will find that there is a fault. Sometimes, similar software will not work properly. What is the cause of this kind of fault? In Windows, almost all applications will Use DLL (Dynamic Link Library) file, its normality is related to whether the software can run normally. Many software failures are also directly related to it. But the application often calls dozens of DLL programs, how to determine who is "the culprit"?

Case playback: After an illegal operation, windows xp<quo;search assistant” becomes a “Whiteboard", not only that, <;Control Panel>;<quo;User Account” items also appear to be "no expression". Click “Start →Help and Support”, the mouse flashes but never sees <;Help & Support” program interface traces.

Case Study: By feeling, I believe that a DLL file in the system has been logged out, lost or damaged. But almost every program in Windows has to call up to hundreds of DLL files. If you look for analysis one by one in the usual way, it is tantamount to finding a needle in a haystack. Considering that the three programs are "destroyed" at the same time, they should be affected by the same (or several) DLL files. To do this, you must find the DLL file that is used together by the above three programs, and then find out from the behind-the-scenes murderer.

Finding and Comparing

Step 1: Start with “Search Assistant> first, and get rid of it <;history of the world”. Open “Search Assistant> in another machine with windows xp, and press Ctrl+Alt+Del to bring up the “Task Manager”, in the “Applications” tab, select “&ldquo ; Search Assistant & rdquo; and right click, select & ldquo; go to the process & nbsp;, huh, it turned out to be part of Explorer.exe (resource manager).

Step 2: Use a similar method to know that “Help and Support” belongs to the process Helpctr.exe, but in the “User Account”, you can only use the method of observation and comparison to find out the attribution process. Mshta.exe.

Tips

You can determine the process to which you belong by comparing the changes in the "Task Manager" by turning the "User Account" on or off; you can also open &ldquo When searching for the assistant, enter "<quo;tasklist /fo table>C:\\acc1.txt” in the "command prompt"", after closing the program, enter “ at “command prompt” Tasklist /fo table>C:\\acc2.txt”, then use the fc command to compare “fc C:\\acc1.txt C:\\acc2.txt>C:\\acc.txt”, compare the extra items Is the process to which the program belongs.

Step 3: Restart the computer. Please check the software LISTDLLS. Download the software here, then move listdlls.exe to C:\\Windows, press Ctrl+R to open the "Run" box, type "ldd;cmd", and type in the "Command Prompt":

listdlls -r explorer.exe>C:\\explorer1.txt.

Then open “search assistant”, again at the "command prompt>; enter:listdlls -r explorer.exe>C:\\explorer2.txt

Finally use the fc command Compare:

fc C:\\explorer1.txt C:\\explorer2.txt>C:\\explorer.txt.

This opens the C:\\explorer.txt file, and the extra file after comparison is the DLL file called by the Search Assistant.

Tips

The usage of ListDlls is: listdlls [-r] [processname pid] or listdlls [-r] [-d dllname]

Step 4: Restart Computer, use the command “listdlls -r helpctr.exe>C:\\helpctr.txt” to get the DLL file used by “Help and Support”. The restart here is to unload the DLL files that have not been used from the memory.

Step 5: Restart again, use the command “listdlls -r mshta.exe>C:\\mshta.txt” to get the DLL file used by “user account”.