Yes, i am seeing this module i mean cdd.dll file under CC.exe which is a nefsis application process. As you said, if it is a windows process or module then why am i seeing under CC.exe...if you say it is strictly windows process then it should be related to direct show because Nefsis totally uses direct show concept