Persistent "Unknown Publisher" DLL Error with Zoom on Windows 11

[asaf]

Hello,

I'm running into a persistent issue on my Windows 11 PC with the latest version of the Zoom desktop client.

Every few minutes, I receive an error notification that says: "zoom.exe is using VCRUNTIME140_1.dll from unknown publisher"

I get the same message for other related DLLs, such as MSVCP140.dll.

To troubleshoot this, I have already tried the following steps without success:

1. Completely uninstalled and reinstalled the Zoom application.

2. Uninstalled and reinstalled the latest Microsoft Visual C++ Redistributable packages (both x86 and x64).

Despite these actions, the error messages continue to appear.

Could anyone provide some assistance or suggest other solutions I might try?

Thank you.

[storyhub]

VCRUNTIME140_1.dll

itself is a legitimate and essential Microsoft system file, but malicious versions of it can be used for malware attacks. The file is part of the Microsoft Visual C++ Redistributable package, which is required for many applications and games to run properly. 

If this works please click accept as a solution.

How malware uses VCRUNTIME140_1.dll

Malicious actors exploit the dependency of legitimate programs on this file in a technique called DLL sideloading. The process works like this: 

• A legitimate application is used to load a malicious version of VCRUNTIME140_1.dll.
• By placing a compromised DLL file in a specific location (e.g., the application's directory), the malware can trick the application into loading its code instead of the real system file.
• Once loaded, the malicious DLL can execute unauthorized code, steal sensitive data, or take over the system. 

Signs that a file might be malicious

If you encounter VCRUNTIME140_1.dll errors, it is most likely due to a corrupted or missing file, which can be fixed by reinstalling the Visual C++ Redistributable package. However, you should investigate further if you notice any of these signs: 

• Suspicious location: The genuine Microsoft file is located in the C:\Windows\System32 folder. If you find VCRUNTIME140_1.dll in a different directory, it could be a malicious file.
• Unusual network activity: The malicious "MidgeDropper" variant of the DLL was observed reaching out to external IP addresses to download more malware.
• Corruption errors after malware scan: If an error continues to appear even after reinstalling the legitimate file, and especially if antivirus software has recently found malware on your system, the file may be repeatedly corrupted by a persistent infection.
• Errors after downloading from untrusted sources: Never download this file individually from a third-party website, as it is a common method for distributing malware disguised as a legitimate DLL file.

How to protect yourself

• Install from the official source. Always download and install the Microsoft Visual C++ Redistributable package directly from the official Microsoft website.
• Run a full system scan. If you are concerned about a possible infection, run a full system scan with reputable antivirus software, such as Windows Defender.
• Update your software. Keep your operating system and all software, especially those that use Visual C++, up to date to prevent compatibility issues and patch security vulnerabilities.