Forum Thread: Microsoft GDI+5.x lists 20 entries under the "#" column.

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
Programs

Relating to this vendor:
And, this specific program:

This thread has been marked as resolved.
SilverCat Microsoft GDI+5.x lists 20 entries under the "#" column.
Member 16th Jun, 2011 07:56
Ranking: 0
Posts: 21
User Since: 19th Feb, 2009
System Score: N/A
Location: N/A
Last edited on 16th Jun, 2011 08:46

When I clicked on this program in Secunia, it listed 19 unique entries ending in .dll All but one of the entries were listed as "zombie installations." If the zombie installations are merely earlier leftover versions of the latest, patched version, can I right click and delete after I open the folder location?

Post "RE: Microsoft GDI+5.x lists 20 entries under the "#" column." has been selected as an answer.
Skeptia-9 RE: Microsoft GDI+5.x lists 20 entries under the "#" column.
Member 16th Jun, 2011 09:17
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
For SilverCat:

The short answer is No! Emphasize No! Do nothing until you see that a Secunia Official has investigated this situation.

For Everyone:

Background information: On June 13th, I was one of several forum readers, who posted data to the following thread initiated by joe shmoe.

http://secunia.com/community/forum/thread/show/964...

Mr. Hansen applied his magic wand to the issue and promptly fixed it. After a full rescan with the PSI, the 6 instances of QtCore4.dll disappeared from the table of Scan Results on my machine.

The only other change I observed was the debut of a different Dynamic Link Library file--namely, a single instance of python27.dll, located at the end of this path:

C:\Program Files\Calibre2\DLLs\python27.dll

(Calibre2 is e-book collection management software.)
_______

Fast-forward to Patch Tuesday. Microsoft Update informed me my XP box needed 15 patches. All patches installed very smoothly and without error. Following a reboot, I did a full scan with PSI. Python 2.7.x is listed as a Program in the table of Scan Results. The path is "C:\Program Files\Calibre2\DLLs\python27.dll" as noted above. So nothing changed there.

The PSI, however, is also now reporting 7 instances of Microsoft GDI+ 5.x. The executable in all 7 instances is gdiplus.dll. The Detected Version listed under Scan Results is version 5.1.3102.1360. (GDI is an acronym for Microsoft's Graphics Device Interface.) I have listed the 7 instances of gdiplus.dll identified by the PSI on my PC below. PSI data indicate 6 instances are actual installations; and there is one zombie--namely, version 5.1.3097.0 (xpclient.010817-1148).
_______
01
C:\Program Files\LibreOffice 3.4\program\gdiplus.dll
Version 5.1.3102.1360 (xpsp2.040109-1800)
1607 KB application extension last modified 03 February, 2011.
_______
02
C:\WINDOWS\system32\gdiplus.dll
Version 5.2.6002.22509 (vistasp2_ldr.101020-0435)
1736 KB application extension last modified 04 December, 2008.
_______
03
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.0.0_x-ww_8d353f13\GdiPlus.dll
Version 5.1.3097.0 (xpclient.010817-1148)
1661 KB application extension last modified 12 August, 2004.
PSI identifies this DLL as a zombie.
_______
04
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.5512_x-ww_dfb54e0c\GdiPlus .dll
Version 5.1.3102.5512 (xpsp.080413-2105)
1684 KB application extension last modified 13 April, 2008.
_______
05
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\GdiPlus .dll
Version 5.1.3102.2180 (xpsp_sp2_rtm.040803-2158)
1672 KB application extension last modified 12 August, 2004.
_______
06
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.6001.22319_x-ww_f0b4c2df\GdiPlu s.dll
Version 5.2.6001.22319 (vistasp1_ldr.081126-1506)
1708 KB application extension last modified 13 August, 2009.
_______
07
C:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.6002.22509_x-ww_c7dad023\GdiPlu s.dll
Version 5.2.6002.22509 (vistasp2_ldr.101020-0435)
1708 KB application extension last modified 22 October, 2010.
_______

I hope data from my computer will be useful to those with expertise, who are interested in unravelling the PSI's DLL fever.

Thank you for the opportunity to post.

Best regards,

Skeptia-9
WinXP Home SP3, 32-bit
Secunia PSI Tray Version 2.0.0.3003
Was this reply relevant?
+3
-0
This user no longer exists RE: Microsoft GDI+5.x lists 20 entries under the "#" column.
Member 16th Jun, 2011 09:52
Hi,

Try a rescan.

What is the result now? Debug report appriciated if you have any results not located in system32. :)

Hope this helps.
Was this reply relevant?
+0
-0
Skeptia-9 RE: Microsoft GDI+5.x lists 20 entries under the "#" column.
Member 16th Jun, 2011 11:13
Score: 42
Posts: 23
User Since: 15th Mar 2010
System Score: N/A
Location: US
Hello, Mr. Peterson:

A PSI rescan indicates your actions have removed all 7 instances of Microsoft's GDI+5.x from the table of Scan Results on my PC. So all is well here.

For the sake of clarity, "C:\WINDOWS\system32\gdiplus.dll" was among the vanquished.

Many thanks for giving the PSI's DLL fever your prompt attention.

Best regards,

Skeptia-9
WinXP Home SP3, 32-bit
Secunia PSI Tray Version 2.0.0.3003
Was this reply relevant?
+0
-1

This thread has been marked as locked.