Why are DLL's present in the system32 folder for VCREDIST when only the x86 version is installed on a computer?

Using Nessus to scan for vulnerabilities.  It is reporting that Visual Studio C++ is not patched, although the KB has been applied.
The following Visual C++ Redistributable Package has not
been patched :

  Product           : Visual C++ 2010 SP1 Redistributable Package
  Installed version : 10.0.40219.1
  Fixed version     : 10.0.40219.325

After further investigation, the machine in question only has the x86 version installed (and the DLL's in SysWo64 are the correct version) but there is also a set of DLL's in the System32 folder that are the older version.  If x86 is installed, does anyone know why there are files in the System32 folder?
Chris ForemanIT ManagerAsked:
Who is Participating?
 
Chris ForemanConnect With a Mentor IT ManagerAuthor Commented:
I'd like to provide an update.  The x86 installer installs the files in the SysWow64 folder and the x64 installer installs the files in the System32 folder on a 64-bit OS.  Programs and Features showed only the x86 version of 2010 SP1 installed so I installed the x64 version and then installed the security patch.  The subsequent Nessus scan shows the vulnerability is no longer present.  I still cannot determine how those DDL's got to the System32 folder without the x64 version being installed.
0
 
Dr. KlahnPrincipal Software EngineerCommented:
The Visual C redistributable DLLs can end up all over the place in a system.  Most installation packages do not trust the system to have the VC package installed, so they bring in their own copies.  Those copies can end up just about anywhere in addition to the ones installed by actually installing the redistributable package.  (see image below)

Since the system in question has the x86 package installed, I'd expect the corresponding DLLs to be found in the /system32 folder, as this is a location commonly searched by default when a file is not found in an application's Program Files directory.  Again, see the image below; this system has the full redistributable package installed, and copies of the files are found in /system32.

Visual C DLLs
0
 
Chris ForemanIT ManagerAuthor Commented:
The resolution was the response I provided in the question.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.