Why are DLL's present in the system32 folder for VCREDIST when only the x86 version is installed on a computer?

Using Nessus to scan for vulnerabilities.  It is reporting that Visual Studio C++ is not patched, although the KB has been applied.
The following Visual C++ Redistributable Package has not
been patched :

  Product           : Visual C++ 2010 SP1 Redistributable Package
  Installed version : 10.0.40219.1
  Fixed version     : 10.0.40219.325

After further investigation, the machine in question only has the x86 version installed (and the DLL's in SysWo64 are the correct version) but there is also a set of DLL's in the System32 folder that are the older version.  If x86 is installed, does anyone know why there are files in the System32 folder?
Chris ForemanIT ManagerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dr. KlahnPrincipal Software EngineerCommented:
The Visual C redistributable DLLs can end up all over the place in a system.  Most installation packages do not trust the system to have the VC package installed, so they bring in their own copies.  Those copies can end up just about anywhere in addition to the ones installed by actually installing the redistributable package.  (see image below)

Since the system in question has the x86 package installed, I'd expect the corresponding DLLs to be found in the /system32 folder, as this is a location commonly searched by default when a file is not found in an application's Program Files directory.  Again, see the image below; this system has the full redistributable package installed, and copies of the files are found in /system32.

Visual C DLLs
0
Chris ForemanIT ManagerAuthor Commented:
I'd like to provide an update.  The x86 installer installs the files in the SysWow64 folder and the x64 installer installs the files in the System32 folder on a 64-bit OS.  Programs and Features showed only the x86 version of 2010 SP1 installed so I installed the x64 version and then installed the security patch.  The subsequent Nessus scan shows the vulnerability is no longer present.  I still cannot determine how those DDL's got to the System32 folder without the x64 version being installed.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Chris ForemanIT ManagerAuthor Commented:
The resolution was the response I provided in the question.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Vulnerabilities

From novice to tech pro — start learning today.