Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Missing dll


  • Please log in to reply
9 replies to this topic

#1 malcom_s_greece

malcom_s_greece

  •  Avatar image
  • Members
  • 240 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:48 AM

Posted 02 December 2023 - 11:37 AM

Hi,

Win OS running : 7 x64

From https://www.dlldownloader.com/gdiplus-dll/ indicates that :

 

NOTE!

On Windows operating systems with 64 Bit architecture, the dll file must be in both the "sysWOW64" folder as well as the "System32" folder. In other words, you must copy the "Gdiplus.dll" file into both folders.

 

So my question is :

If I couldn't file dll like : gdiplus.dll under System32 :

1-Should this DLL be copied to System32 ?(It already exist under folder SysWOW64)

2- Why some DLL is missing from SysWOW64 or System32 in X64 ? would it be harmful or due to any kinds of infection ?

 

 

From https://www.processlibrary.com/:

 

Is gdiplus.dll harmful?

This process is considered safe. It is unlikely to pose any harm to your system. The gdiplus.dll file should be located in the folderC:\Windows\System32.

Otherwise it could be a Trojan.

 

 

 

thanks



BC AdBot (Login to Remove)

 


#2 Allan

Allan

  •  Avatar image
  • BC Advisor
  • 9,324 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:48 AM

Posted 02 December 2023 - 02:13 PM

Are you having some issue with your system?



#3 malcom_s_greece

malcom_s_greece
  • Topic Starter

  •  Avatar image
  • Members
  • 240 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:48 AM

Posted 02 December 2023 - 02:52 PM

Are you having some issue with your system?

Hi and I appreciate your quick response.

I do not have any problem.

My purpose was to understand why some of them were missed and seek any possibility of misusing them!



#4 Allan

Allan

  •  Avatar image
  • BC Advisor
  • 9,324 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:48 AM

Posted 02 December 2023 - 03:52 PM

If your system is running as expected, don't worry about it. Best not to look for problems that don't exist.



#5 malcom_s_greece

malcom_s_greece
  • Topic Starter

  •  Avatar image
  • Members
  • 240 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:05:48 AM

Posted 03 December 2023 - 05:57 AM

If your system is running as expected, don't worry about it. Best not to look for problems that don't exist.

Thank you .

I don't make a rod for my back.

Just out of curiosity, some of my references such as file.net or processlibrary express that if this DLL is located in a different location, it could be considered malware. Do you agree with that?



#6 xBlueRobot

xBlueRobot

  •  Avatar image
  • BSOD Kernel Dump Expert
  • 408 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:%systemroot%
  • Local time:05:48 AM

Posted 05 December 2023 - 09:06 AM

I would be suspicious of it, yes, however, I wouldn't use websites like file.net as reliable sources of information since most of them are just content mills for Google ad sense.



#7 FiredUpIce

FiredUpIce

  •  Avatar image
  • Members
  • 204 posts
  • OFFLINE
  •  

Posted 15 December 2023 - 05:18 PM

If you are worried about that specific DLL being malware, then upload it to virustotal.com
 
You can put gdiplus.dll into the everything search to obtain all file paths for the .dll on your system


Basically Water.


#8 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:04:48 AM

Posted 16 December 2023 - 12:13 PM

Download and install Speccy - https://www.ccleaner.com/speccy

Run it, and then go to File and Publish Snapshot. Post the resulting link in your next reply

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#9 ranchhand_

ranchhand_

  •  Avatar image
  • Members
  • 5,223 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Midwest
  • Local time:10:48 PM

Posted 20 December 2023 - 09:59 AM

Before you do anything, make an image backup of your entire system and keep it off-system. I have seen many over the years that "try something" and trash their entire system irrecoverably.


If there are no responses to my post for 3 days I remove it from my answer list. If you wish to continue the thread after 3 days please PM me.


#10 Allan

Allan

  •  Avatar image
  • BC Advisor
  • 9,324 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:48 AM

Posted 20 December 2023 - 11:02 AM

 

If your system is running as expected, don't worry about it. Best not to look for problems that don't exist.

Thank you .

I don't make a rod for my back.

Just out of curiosity, some of my references such as file.net or processlibrary express that if this DLL is located in a different location, it could be considered malware. Do you agree with that?

 

Sure, files in in unexpected locations MAY be malicious - but that should not be the primary determining factor. For example, I just checked and I have at least 20 entries for gdiplus.dll all over the place - mostly in servicing roll-up packages. Again, you can run a scan on any questionable file or folder with your installed AV and / or with MBAM. But in this case, I'd leave the zebras alone and move on :wink:


Edited by Allan, 20 December 2023 - 11:03 AM.





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users