Why does Easy Anti-Cheat say "Untrusted system file (dxgi.dll)"?

dxgi.dll is commonly placed into game directories by graphics mods like ReShade, SweetFX, or Special K. Anti-cheat engines prohibit unsigned DLLs in the game folder to prevent memory tampering. Deleting dxgi.dll and ReShade.ini from the game executable directory resolves this instantly.

Why is nahimic.dll flagged as an untrusted file?

Nahimic is an audio suite bundled with MSI, ASUS (Sonic Studio), and Dell motherboards. It injects an on-screen audio radar overlay hook into DirectX game loops. Because this hook alters memory address spaces, Easy Anti-Cheat flags it. Disabling the NahimicService in Windows Services stops the error permanently.

How do I fix a corrupted Windows system DLL flagged by anti-cheat?

Open Command Prompt as Administrator and run sfc /scanfile="C:\Windows\System32\[FileName].dll". This verifies the digital cryptographic signature of the file against the Windows Component Store and restores the authentic Microsoft WHQL binary.

Anti-Cheat Integrity & DLL Diagnostics

Anti-Cheat "Untrusted System File" DLL Diagnostic

Instantly look up any DLL blocked by Easy Anti-Cheat or BattlEye (e.g. dxgi.dll, nahimic.dll, RTSSHooks64.dll) and unblock your game without reinstalling Windows.

dxgi.dllSafe to Remove

Graphics & ReShade

Old ReShade, SweetFX, or Special K mod installed in the game directory

Resolution: ReShade uses dxgi.dll to hook graphics rendering. Anti-cheats block foreign dxgi.dll files inside the game folder. Delete dxgi.dll from the game exe folder.

CMD (Run as Admin)

del "dxgi.dll"
del "ReShade.ini"

nahimic.dll / NahimicOSD.dllMedium

Audio Software

SteelSeries Nahimic, MSI Dragon Center, or ASUS Sonic Studio 3

Resolution: Nahimic injects an audio visualizer OSD hook into all 3D game engines, triggering anti-cheat integrity violations. Stop and disable the Nahimic service in services.msc.

CMD (Run as Admin)

sc stop "NahimicService"
sc config "NahimicService" start= disabled

RTSSHooks64.dllSafe to Remove

Overlays & Tuning

Outdated RivaTuner Statistics Server (RTSS) / MSI Afterburner

Resolution: Old RTSS versions use outdated hooking methods flagged by EAC/BattlEye. Update RTSS to v7.3.6+ or open RTSS and set "Application detection level" to "Low" or "None".

CMD (Run as Admin)

taskkill /F /IM "RTSS.exe"

vulkan-1.dllHigh

System Binary

Corrupted Khronos Vulkan Runtime in C:\Windows\System32

Resolution: Anti-cheat flagged an unsigned or modified Vulkan runtime DLL. Reinstall your GPU driver using Clean Install option to restore the officially signed WHQL vulkan-1.dll.

CMD (Run as Admin)

sfc /scanfile="C:\Windows\System32\vulkan-1.dll"

nvspcap64.dllMedium

Overlays & Tuning

NVIDIA GeForce Experience / NVIDIA App ShadowPlay overlay hook

Resolution: If ShadowPlay hooks become corrupted after a Windows update, EAC flags nvspcap64.dll. Open NVIDIA App or GeForce Experience → Settings → turn In-Game Overlay OFF and ON.

CMD (Run as Admin)

taskkill /F /IM "NVIDIA Share.exe"

atidxx64.dllHigh

Graphics & ReShade

AMD Radeon Software display driver binary

Resolution: Typically caused by partial AMD GPU driver upgrades leaving mismatched DLL hashes in System32. Boot into Safe Mode and run Display Driver Uninstaller (DDU), then reinstall the latest AMD Adrenalin WHQL.

CMD (Run as Admin)

sfc /scannow

bdhkm64.dll / avghookx.dllMedium

Antivirus & Security

Bitdefender / AVG / Avast active memory injection shield

Resolution: Third-party antivirus monitors inject hooks into memory addresses that EAC considers suspicious. Add your game directory to your antivirus Exclusion List, or rely on native Windows Defender.

uxtheme.dllHigh

System Binary

Modified Windows theme patcher (UltraUXThemePatcher)

Resolution: Custom Windows desktop themes modify system uxtheme.dll. Kernel anti-cheats immediately block games if core OS theme binaries fail cryptographic hash verification. Run SFC /scannow to restore original Windows binary.

CMD (Run as Admin)

sfc /scanfile="C:\Windows\System32\uxtheme.dll"

Pro Tip: Repair a Single Corrupted DLL in 5 Seconds

Instead of waiting 20 minutes for a full system sfc /scannow, you can repair the exact flagged DLL instantly using the targeted command:

sfc /scanfile="C:\Windows\System32\[REPLACE_WITH_DLL_NAME].dll"