finding a registered dll?

Posted on 2005-04-07
Last Modified: 2008-01-09

in windows 2000 if i use the following command

regsvr32.exe "some.dll"

how do i see where it is in the registryy?

Question by:narmi2
    LVL 12

    Assisted Solution


    Open "Regedit" and do a search - might be listed in numerous places.
    Hi-Lite "My Computer" -
    Click on "Edit" - click on "Find" - type in the name - click on "Find Next" until you find all entries.

    LVL 1

    Author Comment

    sorry, i should have made the title more clear. what i mean is, how do i find it in the registry and delete all instances of it completely from the registry?

    LVL 5

    Assisted Solution


    If you want to "unregister"  just run:

    regsvr32 -u "some.dll"

    LVL 12

    Assisted Solution

    No, it's not this:
    regsvr32 -u "some.dll"

    It's this:
    regsvr32 /u "some.dll"

    LVL 12

    Accepted Solution

    Unregister it first  - see above -
    then search the "Registry" (see above) "Find" it in the Registry
    and delete ALL references to it.

    LVL 5

    Expert Comment

    Actually both -u and /u work.

    The thing is some of the entries that are added to the registry when you run regsvr32 are by CLSID and not by name, so you would need to know the CLSID and search for that too.  To make things worse, some dlls have more than one CLSID.

    Here's an example of what happened when I ran regsvr32 adsiedit.dll:  

    SetValue      HKCR\CLSID\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\InprocServer32\(Default)      SUCCESS      "C:\adsiedit.dll"      
    SetValue      HKCR\CLSID\{E6F27C2A-16BA-11D2-81D0-0000F87A7AA3}\InprocServer32\(Default)      SUCCESS      "C:\adsiedit.dll"      
    SetValue      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NameString      SUCCESS      "ADSI Edit"      
    SetValue      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\About      SUCCESS      "{E6F27C2A-16BA-11D2-81D0-0000F87A7AA3}"      
    SetValue      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NodeType      SUCCESS      "{D4F3374F-052F-11D2-97B0-00A0C9A06D2D}"      
    SetValue      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\Provider      SUCCESS      "Microsoft Corporation"      
    SetValue      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\Version      SUCCESS      "5.00.2139.1"      
    SetValue      HKLM\Software\Microsoft\MMC\NodeTypes\{D4F3374F-052F-11D2-97B0-00A0C9A06D2D}\(Default)      SUCCESS      "Root ADSI Edit Subtree"      
    SetValue      HKLM\Software\Microsoft\MMC\NodeTypes\{5C225203-CFF7-11D2-8801-00C04F72ED31}\(Default)      SUCCESS      "ADSI Edit Connection Node"      
    SetValue      HKLM\Software\Microsoft\MMC\NodeTypes\{8690ABBB-CFF7-11D2-8801-00C04F72ED31}\(Default)      SUCCESS      "ADSI Edit Container Node"      
    SetValue      HKLM\Software\Microsoft\MMC\NodeTypes\{70B9C151-CFF7-11D2-8801-00C04F72ED31}\(Default)      SUCCESS      "ADSI Edit Leaf Node"      
    SetValue      HKLM\Software\Microsoft\MMC\NodeTypes\{072B64B7-CFF7-11D2-8801-00C04F72ED31}\(Default)      SUCCESS      "ADSI Edit Query Node"      

    And here's what happened when I ran regsvr32 -u adsiedit.dll:

    DeleteKey      HKCR\CLSID\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\InprocServer32      SUCCESS      Key: 0xE20F4130      
    DeleteKey      HKCR\CLSID\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}      SUCCESS      Key: 0xE3127530      
    DeleteKey      HKCR\CLSID\{E6F27C2A-16BA-11D2-81D0-0000F87A7AA3}\InprocServer32      SUCCESS      Key: 0xE20F4130      
    DeleteKey      HKCR\CLSID\{E6F27C2A-16BA-11D2-81D0-0000F87A7AA3}      SUCCESS      Key: 0xE377A588      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NodeTypes\{072B64B7-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE23621A8      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NodeTypes\{5C225203-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE23621A8      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NodeTypes\{70B9C151-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE23621A8      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NodeTypes\{8690ABBB-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE23621A8      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NodeTypes\{D4F3374F-052F-11D2-97B0-00A0C9A06D2D}      SUCCESS      Key: 0xE23621A8      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\NodeTypes      SUCCESS      Key: 0xE20F4130      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}\Standalone      SUCCESS      Key: 0xE20F4130      
    DeleteKey      HKLM\Software\Microsoft\MMC\SnapIns\{1C5DACFA-16BA-11D2-81D0-0000F87A7AA3}      SUCCESS      Key: 0xE377A588      
    DeleteKey      HKLM\Software\Microsoft\MMC\NodeTypes\{D4F3374F-052F-11D2-97B0-00A0C9A06D2D}      SUCCESS      Key: 0xE377A588      
    DeleteKey      HKLM\Software\Microsoft\MMC\NodeTypes\{5C225203-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE377A588      
    DeleteKey      HKLM\Software\Microsoft\MMC\NodeTypes\{8690ABBB-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE377A588      
    DeleteKey      HKLM\Software\Microsoft\MMC\NodeTypes\{70B9C151-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE377A588      
    DeleteKey      HKLM\Software\Microsoft\MMC\NodeTypes\{072B64B7-CFF7-11D2-8801-00C04F72ED31}      SUCCESS      Key: 0xE377A588      

    If you look close, everything that was created during registration was deleted during "unregistration"

    The point is if regsvr32 /u succeeds, you have nothing else to worry about.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    This post first appeared at Oracleinaction  ( Anju Garg (Myself). I  will demonstrate that undo for DML’s is stored both in undo tablespace and online redo logs. Then, we will analyze the reaso…
    NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    729 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now