Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
Microsoft
And, this specific program:
Microsoft Visual C++ 2005 Redistributable Package (x86)

This thread has been marked as locked.
anbaum Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 18th Dec, 2010 22:24
Ranking: 2
Posts: 3
User Since: 19th Aug, 2010
System Score: N/A
Location: N/A
Program Name:
Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)

Security State:
Insecure

Download Link:
http://www.microsoft.com/downloads/details.aspx?fa...

Instances Found:
C:\Program Files\Common Files\Microsoft Shared\VC\msdia80.dll, version: 8.0.50727.762

Last System Scan (localtime):
18. Dec 2010, 22:22

Operating System:
Microsoft Windows 7,

ddmarshall RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Dedicated Contributor 18th Dec, 2010 22:50
Score: 1211
Posts: 965
User Since: 8th Nov 2008
System Score: 98%
Location: UK
What is your question?

It looks like you need to download vcredist_x64 from the above link.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
anbaum RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 18th Dec, 2010 23:01
Score: 2
Posts: 3
User Since: 19th Aug 2010
System Score: N/A
Location: N/A
on 18th Dec, 2010 22:50, ddmarshall wrote:
What is your question?

It looks like you need to download vcredist_x64 from the above link.


I downloaded and installed vcredist_x64 but no effect.
Was this reply relevant?
+2
-0
ddmarshall RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Dedicated Contributor 18th Dec, 2010 23:12
Score: 1211
Posts: 965
User Since: 8th Nov 2008
System Score: 98%
Location: UK
Have you done a full scan since installing it? Maybe you need a reboot if the file was in use.

--
This answer is provided “as-is.” You bear the risk of using it.
Was this reply relevant?
+0
-0
trigger2009 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 19th Dec, 2010 17:38
Score: 0
Posts: 3
User Since: 19th Dec 2010
System Score: N/A
Location: US
I am having the same problem. Installed the update and still get the alert showing in my scan. Tried multiple reboots and reinstalls and rescans.
Was this reply relevant?
+2
-2
Mcd73165 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 19th Dec, 2010 23:49
Score: 7
Posts: 70
User Since: 13th May 2009
System Score: N/A
Location: US
Last edited on 20th Dec, 2010 00:04
The files in the download link in anabaum's thread (http://www.microsoft.com/downloads/details.aspx?fa...) do not seem to be for the file that is being flagged. I installed the vcredist_x86.exe and it replaced Microsoft Visual C++ 2005 Redistributible version 8.0.56336 with version 8.0.59193. Then I installed the vcredist_x64.exe and it added "Microsoft Visual C++ 2005 Redistributible (x64) version 8.0.59192. The whole thing was getting very confusing to me so for the time being I'm leaving it alone for now.

The one that is being flagged is Microsoft Visual C++ 2005 ATL Update KB973923 - x86 (64 Bit) and version 8.0.50727.4053 is installed but the installation path shown is C:\Program Files\Common Files\Microsoft Shared\VC brings me to msdia80.dll which is shows version 8.0.50727.762. This is where the problem is.
Mark
Was this reply relevant?
+0
-0
Maurice Joyce RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Handling Contributor 20th Dec, 2010 00:40
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
@anbaun

I assume U are running Windows 7 64Bit & not 32Bit?

Have U installed the important update for Silverlight offered by Microsoft after "Patch Tuesday"?

Worth checking via Action Centre>Open Windows Update>Check For Updates

Fixed a PC today & that action cleared the same problem that U have.


@trigger

If your problem is the same as stated then U are running Windows 7 & it will hopefully fix your PC. If U are not running Windows 7 64Bit what OS are U using plus SP?



--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+3
-0

hedi01

RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
[+]
This reply has been minimised due to a negative Relevancy Score.
thom0522 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 21st Dec, 2010 22:48
Score: 1
Posts: 2
User Since: 29th Dec 2007
System Score: N/A
Location: US
I have Windows 7 64 bit installed. I updated Silverlight via Microsoft updates. It says no other updates available for my system, but I went ahead and download vcredist x64 manually. I have installed it three times, rebooted and rescanned with secunia and it still says that I have an older insecure version. Don't know what else to do. Can anyone help
Was this reply relevant?
+0
-0
Anthony Wells RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Expert Contributor 21st Dec, 2010 23:01
Score: 2445
Posts: 3,336
User Since: 19th Dec 2007
System Score: N/A
Location: N/A

Hi ,

An uninstall/reinstall of the patch was helpful in this instance :-

http://secunia.com/community/forum/thread/show/676...

Perhaps it may help .

Anthony

--


It always seems impossible until its done.
Nelson Mandela
Was this reply relevant?
+0
-0
Maurice Joyce RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Handling Contributor 21st Dec, 2010 23:04
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Using Windows Explorer navigate to:

C:\>Program Files>Common Files>MS Shared>VC - click VC - in the right pane there should be two entries:

MSDIA80.DLL

MSDIA90.DLL

Right click MSDIA80.DLL & rename it MSDIA80.DLL_OLD

Carry out a full PSI rescan & it should be OK.

I am currently deleting this entry on all the PC's in am fixing but advise the rename option so that in the (highly)unlikely event of the file being required in the future U can rename it back to the original.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+8
-0
thom0522 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 02:16
Score: 1
Posts: 2
User Since: 29th Dec 2007
System Score: N/A
Location: US
I renamed MSDIA80.DLL as MSDIA80.DLL_OLD and Secunia immediately said that all programs were secure. I didn't even have to rescan. Thanks for your help.
Was this reply relevant?
+1
-0
Maurice Joyce RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Handling Contributor 22nd Dec, 2010 02:17
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Pleased it worked - Happy Christmas.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
Bothvania RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 03:51
Score: 0
Posts: 1
User Since: 13th Aug 2010
System Score: N/A
Location: N/A
This solution worked for me as well. Many thanks.
Was this reply relevant?
+0
-0
trigger2009 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 04:16
Score: 0
Posts: 3
User Since: 19th Dec 2010
System Score: N/A
Location: US
I ran windows update and it stated I had all my files up to date. I did the rename of the dll file to old and reran the scan and it worked so I am now at 100%. Running Win 7 64 bit and thanks for your help.
Was this reply relevant?
+0
-0
trigger2009 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 04:18
Score: 0
Posts: 3
User Since: 19th Dec 2010
System Score: N/A
Location: US
Thanks - this fixed it for me - though I don't have the second '90' dll in that folder but it fixed the scan problem.
Was this reply relevant?
+0
-0
SMStallings RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 05:14
Score: 1
Posts: 17
User Since: 12th Jun 2008
System Score: 100%
Location: US
Renaming the file with a _OLD suffix is not a fix, it's simply a cover-up that removes the file from being scanned by PSI.

I think this is a false positive. There seems to be a 32-bit version of the file and a 64-bit version and PSI doesn't accept the 64-bit version.
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 16:20
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
I seem to have the same problem. ive tried uninstalling it and reinstalling etc but doesnt seem to work. In fact when I ininstall and do a scan PSI still detects the .762 version. Beats me.

Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)

Security State:
Insecure

Download Link:
http://download.microsoft.com/download/6/B/B/6BB66...

Instances Found:
C:\Program Files\Common Files\Microsoft Shared\VC\msdia80.dll, version: 8.0.50727.762

Last System Scan (localtime):
22. Dec 2010, 15:01

Operating System:
Microsoft Windows 7,


--
Lindzog
Was this reply relevant?
+0
-0
rbhall5219 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 17:18
Score: 0
Posts: 2
User Since: 22nd Dec 2010
System Score: N/A
Location: US
Is the PSI program supposed to be able to find the link that was given in the beginning of this thread to the downloadable update? I had to do some searching to find that link. Microsoft update did not mention the Microsoft Visual C++ 2005 Redistributable Package (x86) in it's list of either needed or available updates.

--
rbhall5219
Was this reply relevant?
+0
-0
This user no longer exists RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 19:03
Hi,

This issue (or a variant of it) is caused by Microsoft Update not flagging this product properly unless a service pack for it has been installed.

Try applying the solution offered by the PSI, and then rebooting.
Run a full rescan with the PSI. Are you still shown as Insecure? If so, try this procedure:

1) Check Microsoft Update, install all critical updates
2) Reboot
3) Repeat step 1, go to step 2 if anything was installed this time
4) Run a full rescan with the PSI.

has this resolved the issue?
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 20:27
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
Emil

I tried that but to no avail. I uninstalled the C ++2005 thing. Checked Windows update. It offered it has a Windows Update. I installed it. I scanned PSI. Still detetcted as a security vulnerability. I installed the Update offered in the Solution. I scanned. Still a vulnerability. I rebooted. I scanned. Still there as a vulnerability. For whatever reason the latest version of C++ does not get recognised by PSI. Ive no idea why. I think ill just ignore it, but that 99 percent score irrirates me.

--
Lindzog
Was this reply relevant?
+0
-0
This user no longer exists RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 20:29
Hi,

After installing the patch offered by the PSI, did you check Microsoft Update again? The patches only become available after the service pack has been installed.
Was this reply relevant?
+0
-0
rbhall5219 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 21:42
Score: 0
Posts: 2
User Since: 22nd Dec 2010
System Score: N/A
Location: US
Once I found the link I needed at the microsoft website, I was able to install the update with no trouble, and PSI picked up on the update.

--
rbhall5219
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 22:18
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
emil

i just checked the Microsoft Update again and nothing else is offered.

--
Lindzog
Was this reply relevant?
+0
-0
davech RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 22nd Dec, 2010 23:44
Score: 0
Posts: 6
User Since: 29th Jul 2009
System Score: N/A
Location: N/A
I am confused with this.

First of all I thought (x86) referred to 32 bit software, but the title shows (x86) (64-bit) ??

When I search Microsoft Downloads for version 8.0.50727.762 it returns with the packages for "Microsoft Visual C++ 2005 SP1 Redistributable Package (x64)" or "The Microsoft Visual C++ 2005 SP1 Redistributable Package (x86)"

When I search for 8.0.50727.4053, which Secunia show as the latest version, nothing is returned.

Anyway, I have not been able to get rid of that "insecure" message. Tried the Secunia fix, restart, check program updates etc.
Was this reply relevant?
+0
-0
Gibacht RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 00:37
Score: 0
Posts: 1
User Since: 23rd Dec 2010
System Score: N/A
Location: CH
Last edited on 23rd Dec, 2010 00:39
@ Maurice Joyce Thanks a lot it worked, will there be any problems with the security updates from m$?

<it's always good to find people who can help :-)
Was this reply relevant?
+0
-0
Maurice Joyce RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Handling Contributor 23rd Dec, 2010 01:08
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
There should be no problems. If there are, my solution firstly closes the vulnerability & just as importantly is reversable if U detect issues U did not have before making the change.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
Mcd73165 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 02:01
Score: 7
Posts: 70
User Since: 13th May 2009
System Score: N/A
Location: US
Last edited on 23rd Dec, 2010 04:50
Hi everyone. I noticed that there were no replies or references to my post earlier in this thread and I'm still totally confused. The files in the download link provided by PSI (http://www.microsoft.com/downloads/en/details.aspx...) do not seem to be for the file that is being flagged. I installed the vcredist_x86.exe and it replaced Microsoft Visual C++ 2005 Redistributible version 8.0.56336 with version 8.0.59193. Then I installed the vcredist_x64.exe and it added Microsoft Visual C++ 2005 Redistributible (x64) version 8.0.59192 to the list. I uninstalled the latter and left everything else alone and created an ignore rule for the file that's being flagged for the time being. If anyone has any insight to the situation that I experienced I'd like some input. Thanks.
Mark
Was this reply relevant?
+0
-0
This user no longer exists RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 08:43
Hi,

x86 is a computer architecture, and x86_64 is the 64-bit version of that architecture. Saying that x86 is '32-bit software' is a bit of an oversimplification.

For those still unable to patch Microsoft Visual C++ 2005 SP1 Redistributable Package (x64), start by installing Service Pack 1 for this product, here: https://www.microsoft.com/downloads/en/details.asp...

Reboot your machine, and check Microsoft update. Has this resolved the issue?
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 11:07
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
Emil

Ive just installed the Service Pack 1 from the link you helpfully provided.
I then scanned PSI. Problem still there. I then downloaded the Solution Patch. Scanned. Problem still there. I then checked Windows Update. No available Updates. I then rebooted. Scanned. Problem still there.
I then tried installing the Solution again (ie the Microsoft Update patch.) Problem still there. ive finally scanned again. Problem still there.
Its stubborn issue to fix. Im stuck at 99 percent secure. Bah Humbug

--
Lindzog
Was this reply relevant?
+0
-0
This user no longer exists RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 12:27
Hi,

Did you check Microsoft Update after rebooting? This is the key to getting the updates.

The problem in this case is that Microsoft Update will not deliver the patches until Service Pack 1 is properly installed - and that is what the link is for.

hope this helps.
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 12:35
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
Yes I checked after rebooting. Makes no difference. No updates offered by Microsoft Update.

--
Lindzog
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 13:20
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
I have now completely uninstalled the Solution Patch, and the Service pack 1, so that when I run windows Update it offers me the important update of Service pack 1. I downloaded the important update. Rebooted. Ran Secunia scan. Still finds a problem. Downloaded the Microsoft update "solution." PSI still finds problem. Rebooted. It still detects a vulnerability.
I guess im stuck with it. Sometimes one just has to live with 99 percent?

--
Lindzog
Was this reply relevant?
+0
-0
Wmcburris RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 16:52
Score: 0
Posts: 1
User Since: 27th May 2010
System Score: N/A
Location: N/A
Error Code Received. Microsoft Visual C ++ 2005 Redistributable cannot be removed. Contact Technical support group .

Need Help.
Was this reply relevant?
+0
-0
SMStallings RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 19:16
Score: 1
Posts: 17
User Since: 12th Jun 2008
System Score: 100%
Location: US
Last edited on 23rd Dec, 2010 19:19
This is what worked for me. I have a 64-bit computer running Windows 7.

At Programs and Features.
1. Uninstalled "Microsoft Visual C++ 2005 Redistributable".
(Empties C:\Program Files (x86)\Common Files\microsoft shared\VC).
2. Uninstalled "Microsoft Visual C++ 2005 Redistributable (x64)".
(Empties C:\Program Files\Common Files\Microsoft Shared\VC).

At http://www.microsoft.com/downloads/en/details.aspx...
3. Installed "vcredist_x86.exe".
(Installs to C:\Program Files (x86)\Common Files\microsoft shared\VC).
4. Installed "vcredist_x64.exe".
(Installs to C:\Program Files\Common Files\Microsoft Shared\VC).

There were no subsequent Windows Updates.
Secunia PSI is happy.
Was this reply relevant?
+1
-0
davech RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 20:22
Score: 0
Posts: 6
User Since: 29th Jul 2009
System Score: N/A
Location: N/A
Tried the suggestions from SMStallings - still no good ?? Still 99%
(I also have Win7 64-bit)

Strange thing - I ran the uninstall for C++ 2005 (x64) and I still had 2 files in C:\Program Files\Common Files\Microsoft Shared\VC
I named them both "old", and right away Secunia said 100%
I then ran the installer vcredist_x64.exe expecting new files to appear, but nothing was written to that directory ??

My brain hurts !!



Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 23rd Dec, 2010 20:52
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
I tried SMStallings suggestion too. tks for providing it. But Im afraid it didnt work for me either. couple of interesting things to report.
Even when ive installed the (x86)version it doesnt show up in my Add Remove programs as such. Im not sure why
Also, when ive uninstalled my (x64) version im still left with two earlier versions of C++2005 which have install dates for much earlier in the year.
Im wondering what would happen if I just uninstalled them all. Im a bit of out my depth.
Ive also noticed for the first time that further down my progs list there is an Visual C++2008 Runtime set up package (x64).
Does any of this prompt any brainwaves?

--
Lindzog
Was this reply relevant?
+0
-0
throkr RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 24th Dec, 2010 01:50
Score: 0
Posts: 16
User Since: 1st May 2010
System Score: N/A
Location: BE
Hello,

Having also Win 7 x64 installed, I followed SMStallings's suggestion and it worked with a correction :

after the 2 re-installations, the correct msdia80.dll (8.0.50727.4053) is located twice under "Program Files (x86)\Common Files\microsoft shared\ VC !!! (one time as msdia80.dll which is correct and one time in a folder "AMD 64" which should be located under "Program Files\Common Files\Microsoft Shared\VC).

So, you just need to replace the wrong (old) msdia80.dll (under "Program Files") by moving it there and PSI will directly detect the correction and give you a 100 % score.

I hope this helps.


I wish you all a merry Xmas !
Was this reply relevant?
+1
-0
Lyndy23 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 24th Dec, 2010 02:33
Score: 0
Posts: 7
User Since: 2nd Sep 2008
System Score: N/A
Location: N/A
Thanks for mentioning both places to look and execute the fix. It worked fine for me. I didn't move anything, but just re-named "OLD" both of the ones with the 80.DLL.

Am a happy teddy now.
Was this reply relevant?
+0
-0
SMStallings RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 24th Dec, 2010 03:29
Score: 1
Posts: 17
User Since: 12th Jun 2008
System Score: 100%
Location: US
OK, sorry, I got it wrong. I gave the wrong links in my earlier post. When I went back to recreate and document for this forum what I had done, I grabbed the wrong link (from an earlier post). Also, I got confused when working with one 32-bit computer and another 64-bit computer. I apologize (darn, I was so close to making it through the year without making a mistake).

Here's the correct info; I repeated the whole procedure to be sure (the folders don't get emptied as stated before).

At Programs and Features.
1. Uninstalled "Microsoft Visual C++ 2005 Redistributable".
2. Uninstalled "Microsoft Visual C++ 2005 Redistributable (x64)".

https://www.microsoft.com/downloads/en/details.asp...
3. Installed "vcredist_x86.exe".

https://www.microsoft.com/downloads/en/details.asp...
4. Installed "vcredist_x64.exe".

There were no subsequent Windows Updates.
Secunia PSI is happy.
Was this reply relevant?
+0
-0
jjmcavoy RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 24th Dec, 2010 05:10
Score: 0
Posts: 1
User Since: 7th Jan 2010
System Score: N/A
Location: N/A
Worked for me too....didn't even have to re-scan. Thanks!
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 24th Dec, 2010 11:22
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
Still didnt work for me sadly. Boohoo. But I havnet yet uninstalled either of the earlier versions of C++2005. i dont know whether its safe to do so. I might risk one.

--
Lindzog
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 24th Dec, 2010 11:59
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
well i grasped the nettle and uninstalled the whole lot, ie everything C+2005.
I tried various uninstalls and reinstalls. Microsoft Update identified the missing bits and recommended them as important updates which I did. At one point I even had two versions of (x86) in my Add/Remove progs after I installed x86 from the link above before doing the Update from Microsoft. Worryingly although they have indentical names, they were not identically sized files. (about 10kb adrift). How weird. Anyway, ive uninstalled one so I just have the one now. Have done as many updates and PSI scans as possible - all to no avail - to the point that Im now pretty much Scanned Out. I officially Give Up. (at least for now)

--
Lindzog
Was this reply relevant?
+0
-0
davech RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 27th Dec, 2010 17:38
Score: 0
Posts: 6
User Since: 29th Jul 2009
System Score: N/A
Location: N/A
I have Win7 64-bit, and have tried over and over the suggestions here with no success.

The error shows as:
C:\Program Files\Common Files\Microsoft Shared\VC\msdia80.dll, version: 8.0.50727.762

The problem as I see it is that msdia80.dll is not removed by an uninstall, or replaced with a new install of C++ 2005 (x64).

Of course I can rename the offending file as "old", and Secunia immediately gives me 100%, but I do not think that is the correct way to fix the problem.

There can also be some confusion in this thread between 32-bit and 64-bit systems. On a 64-bit Win7 the path shown is for the 64-bit programs (32bit are in C:\Program Files (x86)\ .......)
The C++ 2005 (x86) is not giving me any error on PSI.

Any more suggestions ??
Was this reply relevant?
+0
-0
sthornto RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 31st Dec, 2010 14:12
Score: 0
Posts: 1
User Since: 24th Jan 2009
System Score: 100%
Location: BE
Last edited on 31st Dec, 2010 14:15
I see several issues here:

a) The presence of the two DLLs, msdia80.dll (vulnerable) and msdia90.dll (not vulnerable) confuses PSI; the correct remediation where both exist is simply to delete the msdia80.dll version. Even if you update your system, without removing the old DLL it will still be vulnerable.

b) Microsoft has released many updates to the 2005 VCREDIST.EXE, the one that secunia is linking too is not the most recent version. Confusingly all the versions have the same name.

The most recent version appears to be SP1[1] which has a file version of 6.0.3790, the only patch on this is the ATL update.

[1] https://www.microsoft.com/downloads/en/details.asp...
Was this reply relevant?
+0
-0
davech RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 1st Jan, 2011 19:15
Score: 0
Posts: 6
User Since: 29th Jul 2009
System Score: N/A
Location: N/A
Well I finally (after many hours!) fixed it.
Please be aware that I am only talking about a Win 7 64-bit system.

I read this on the Microsoft site concerning C++ versions:
“Microsoft does not recommend customers redistribute any version other than the full versions that can be downloaded from the Microsoft Download Center (KB973544, KB973551, and KB973552).”

I uninstalled all instances of C++ 2005 and C++ 2008, and then for good measure deleted the VC folder (in C:\program files\common files\microsoft shared\). These are the 64bit program files.

Then went to Microsoft Download Center and searched for the each of the above KB. Each one has a x86 and x64 version, and I downloaded and installed all of them, so that was a total of 6 installs.

Secunia now gives me 100%, but guess what – there is no msdia80.dll file in the C:\program files\common files\microsoft shared\VC folder !!! (Only msdia90.dll).
Msdia80.dll was the file that PSI was flagging as not secure, but my conclusion now is that it should never have been there. For some reason no amount of uninstalls or installs would get rid of it on my system.
(Don't forget I am just talking about the 64bit files - the 32bit (in program files x86) still has both msdia80 and msdia90)
Was this reply relevant?
+0
-0
Lkydebtan RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 2nd Jan, 2011 12:01
Score: 0
Posts: 2
User Since: 10th Dec 2010
System Score: N/A
Location: N/A
I have downloaded & it still not right. What is up with this update?
Was this reply relevant?
+0
-0
Lkydebtan RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 2nd Jan, 2011 12:19
Score: 0
Posts: 2
User Since: 10th Dec 2010
System Score: N/A
Location: N/A
Thank u so much. Renaming the file worked. U r a Godsend.
thank u thank u thank u.
Was this reply relevant?
+0
-0
AnnM RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 2nd Jan, 2011 14:54
Score: 0
Posts: 3
User Since: 3rd Feb 2009
System Score: N/A
Location: N/A
I also renamed MSDIA80.DLL as MSDIA80.DLL_OLD and immediately rescanned using Secunia after doing this the problem went away as your solution worked.

Your's is the only solution that cleared this problem....A BIG THANKS for your help....well done genius!
Was this reply relevant?
+0
-0
Maurice Joyce RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Handling Contributor 2nd Jan, 2011 16:52
Score: 11785
Posts: 9,035
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Please note that my solution is based on the fact that U are running 64Bit systems & both files were present when U renamed.

Once U have confidence just go back in there right click on the file U have RENAMED & select delete.

It is a minor clean up job therefore NOT IMPORTANT if U prefer to leave things as they are. U are secure.

--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 2nd Jan, 2011 23:53
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
well done Davech. I didnt have the nerve to uninstall C+2008 as well as the C+2005s. Perhaps that makes the difference? My installation seems to be the same as yours. I note you did the downloads from the Microsoft Centre. I wonder if it it would also have fixed it if you had just done the downloads via Windows Update (Microsoft Update) after uninstalling everything. Anyway, Im still stuck with my 99 percent. Ive noted all the stuff people write in this thread about renaming the problem dll file but I just dont think anyone should have to do this. I'd rather live with the problem than have to mess about renaming files. It has to be noted too that if we didnt have Secunia we would never have been aware of this issue and would have carried on in blissful ignorance and would not have to waste so much time on the issue. There's is good and bad in the discovery of this supposed vulnerablity. Hopefully someone at Microsoft - and thats probably too big a hope - has read these musings and will do something about making sure their c+ updates do what they should do. Perhaps too those good guys at Secunia will give them a friendly but firm New Year boot up the Download Centre. Until then lilfe, for me, remains 99 percent. It'll do.

--
Lindzog
Was this reply relevant?
+0
-0
PapaNovember.1.0 RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 3rd Jan, 2011 18:03
Score: 0
Posts: 1
User Since: 25th Aug 2009
System Score: N/A
Location: N/A
HEUREKA!!!! Davech's tip worked - am finally at 100 % after scan! Thx, Dave,
cheers, PapaNovember.1.0
Was this reply relevant?
+0
-0
Bundaburra RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 5th Jan, 2011 02:08
Score: 0
Posts: 21
User Since: 18th Feb 2008
System Score: 100%
Location: AU
For what it's worth, the problem seems to be confined to either Win7 or 64 bits, or both. I have XP with SP3, 32 bit, fully patched via Microsoft Update, and in a directory called \Program Files\Common Files\Microsoft Shared\VC I have msdia80.dll at version 8.0.50727.4053, AND msdia90.dll at version 9.0.30729.4148. The PSI finds no problem with this, and I have a 100% score. No need to rename of uninstall anything.
Was this reply relevant?
+0
-0
lindzog RE: Microsoft Visual C++ 2005 Redistributable Package (x86) (64-bit)
Member 12th Jan, 2011 13:01
Score: 0
Posts: 53
User Since: 2nd Jan 2009
System Score: N/A
Location: UK
for information, Microsoft just offered me a load of updates for various things, so ive done them all. And guess what? Yes it has not made a jot of difference to the C+ problem. :-(

--
Lindzog
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability - Disclaimer