October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
VGSources
Blog

ci.dll Errors at Boot or Login: A Safe Windows Repair Plan

Length12 min Posted Quest giverVGSources Team

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

ci.dll is the Microsoft Windows Code Integrity Module, not a Visual C++ runtime or a general-purpose application DLL. If Windows reports that ci.dll is missing, corrupt, or could not be loaded, do not download a replacement from a random DLL site.

The correct repair depends on where the message appears:

  • Windows will not boot: use Windows Recovery Environment, Startup Repair, System Restore, and official Windows repair tools.
  • Windows starts but an application shows the error: identify the program or Setup.exe displaying it, then repair or reinstall that program.
  • A blue screen or crash dump names ci.dll: investigate recently changed drivers, storage, memory, or security software instead of assuming ci.dll itself is the cause.

What ci.dll does and where it belongs

ci.dll is part of the Microsoft Windows operating system. Its description is Code Integrity Module. Windows uses Code Integrity to help validate kernel-mode code, drivers, and other boot components. Microsoft documents Code Integrity as a Windows security function and identifies ci.dll as the Code Integrity cryptographic module in its validated Windows modules documentation.

On a normal installation, the file is located at:

C:WindowsSystem32ci.dll

System32 does not mean that the file is only for 32-bit Windows. On 64-bit Windows, System32 normally contains 64-bit system components. Windows also has 32-bit builds with their own system files. The correct file is determined by the Windows build and architecture, not by a file-size label or a download site’s “32-bit” or “64-bit” category.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Microsoft Windows 11 PRO (Ingles) FPP 64-BIT ENG INTL USB Flash Drive
  • MICROSOFT WINDOWS 11 PRO (INGLES) FPP 64-BIT ENG INTL USB FLASH DRIVE

Versions of ci.dll vary between Windows releases and builds. Historical version and size listings should not be treated as current download targets. A file with the right name from another computer can still be the wrong binary.

ci.dll is not supplied by:

  • Visual C++ Redistributable
  • DirectX
  • .NET
  • A game or ordinary desktop application

The Visual C++ package is appropriate when an error names files such as VCRUNTIME140.dll or MSVCP140.dll, not when Windows has a genuine Code Integrity problem. See Microsoft’s latest supported Visual C++ Redistributable downloads for the files that package actually provides.

Start with these two questions

Before changing anything, answer:

  1. Does Windows boot to the desktop?
  2. Which executable displays the message?

Those answers separate two problems that often get mixed together.

If the computer stops before sign-in and shows WindowsSystem32CI.dll, treat it as a Windows boot, component, installation-media, storage, or driver problem.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If Windows reaches the desktop and a popup appears at login, the popup may belong to a broken application launcher called Setup.exe. In that case, Windows can be healthy while the application is trying to load a dependency from its own folder.

Fix 1: Install Windows updates and repair system components

Time needed: 15 to 45 minutes, depending on pending updates and disk speed.

This is the safest first repair when Windows still starts. Microsoft recommends repairing the component store with DISM before running SFC.

Install pending updates

  1. Open Start.
  2. Select Settings.
  3. Select Windows Update.
  4. Click Check for updates.
  5. Install all available updates.
  6. Restart the computer, even if Windows does not immediately require it.
  7. Return to Windows Update and check again.

Do not interrupt the computer while updates are installing. If the ci.dll message began after an interrupted update or failed upgrade, allow Windows Update to complete before testing other repairs.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Run DISM and SFC

  1. Open Start.
  2. Type Command Prompt.
  3. Right-click Command Prompt.
  4. Select Run as administrator.
  5. Approve the User Account Control prompt.
  6. Run this command:
DISM.exe /Online /Cleanup-Image /RestoreHealth

Wait for DISM to finish. It may appear to pause for a while. Do not close the window simply because the percentage does not move immediately.

Rank #2
Microsoft OEM System Builder | Windоws 11 Pro | Intended use for new systems | Authorized by Microsoft
  • STREAMLIMED AND INTUITIVE UI | Intelligent desktop | Personalize your experience for simpler efficiency | Powerful security built-in and enabled.
  • JOIN YOUR BUSINESS OR SCHOOL DOMAIN for easy access to network files, servers, and printers.
  • OEM IS TO BE INSTALLED ON A NEW PC WITH NO PRIOR VERSION of Windows installed and cannot be transferred to another machine.
  • OEM DOES NOT PROVIDE PRODUCT SUPPORT | To acquire product with Microsoft support, obtain the full packaged “Retail” version.

Then run:

sfc /scannow

Restart Windows after both commands complete.

Microsoft’s System File Checker and DISM guidance explains this sequence. DISM repairs the Windows component store that SFC uses, while SFC checks protected system files such as ci.dll.

Read the result

SFC commonly reports one of these outcomes:

  • Did not find any integrity violations: Windows did not detect protected-file corruption. Investigate the application, driver, storage, or boot configuration instead.
  • Found corrupt files and successfully repaired them: restart and test the original error.
  • Found corrupt files but was unable to fix some of them: run Windows Update again, repeat DISM followed by SFC, or continue with WinRE and repair installation options.
  • Windows Resource Protection could not start the repair service: the installation may need offline repair from WinRE.

For a hands-on repair, hunting through Windows builds and repeating SFC and DISM without knowing what changed can be tedious. Outbyte PC Repair offers a free scan that shows what it finds, while repair actions are performed by the full version; it is optional, and Microsoft’s built-in DISM and SFC commands remain the primary repair path.

This process does not guarantee a fix for every boot failure. A successful SFC scan does not rule out damaged installation media, a failing disk, an incompatible driver, or a broken boot configuration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Fix 2: Repair or reinstall the application showing the popup

Time needed: 10 to 30 minutes.

If Windows starts normally and the message appears only when launching a particular program, the application may be looking for a dependency in its own installation directory. The presence of ci.dll in C:WindowsSystem32 does not prove that the application is loading that copy.

Common messages include:

The code execution cannot proceed because CI.dll was not found.
Reinstalling the program may fix this problem.
The program can't start because ci.dll is missing from your computer.
Try reinstalling the program to fix this problem.
ci.dll is either not designed to run on Windows or it contains an error.
Try installing the program again using the original installation media.

Identify the program

Look at the title bar of the popup. It may name the application or Setup.exe.

If the popup appears at login:

  1. Press Ctrl + Shift + Esc to open Task Manager.
  2. Select Startup apps.
  3. Look for the program associated with the message.
  4. Right-click it and choose Disable.
  5. Restart Windows.

Disabling the startup entry is a diagnostic step. If the popup disappears, you have identified the launching program, but the underlying installation still needs attention.

For more detail:

  1. In Task Manager, right-click the relevant startup item.
  2. Select Open file location, if available.
  3. Note the full folder and executable name.
  4. In Windows Search, open Task Scheduler.
  5. Review Task Scheduler Library for a task that launches the same program.
  6. Also check Settings → Apps → Installed apps for the matching application.

Do not delete a startup entry if you have not confirmed which program owns it. A leftover Setup.exe can be an orphaned installer, but the name alone is not enough to identify it.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Repair the application

  1. Open Settings.
  2. Select Apps.
  3. Select Installed apps.
  4. Find the application named in the popup.
  5. Select the three-dot menu beside it.
  6. Choose Advanced options, if available.
  7. Select Repair.
  8. Restart and test the program.

If there is no Repair option, uninstall the application from the same menu. Restart Windows, then reinstall it using the program’s original installer or its official vendor source.

If the popup names Setup.exe but you cannot identify a legitimate application, scan the executable and the computer with Windows Security before reinstalling anything.

Fix 3: Check Microsoft Defender quarantine

Time needed: 10 to 20 minutes.

If ci.dll disappeared after a security alert, a suspicious installer, or an antivirus action, check Protection history.

Rank #3
Microsoft Windows 11 (USB)
  • Less chaos, more calm. The refreshed design of Windows 11 enables you to do what you want effortlessly.
  • Biometric logins. Encrypted authentication. And, of course, advanced antivirus defenses. Everything you need, plus more, to protect you against the latest cyberthreats.
  • Make the most of your screen space with snap layouts, desktops, and seamless redocking.
  • Widgets makes staying up-to-date with the content you love and the news you care about, simple.
  • Stay in touch with friends and family with Microsoft Teams, which can be seamlessly integrated into your taskbar. (1)
  1. Open Start.
  2. Type Windows Security.
  3. Open the app.
  4. Select Virus & threat protection.
  5. Select Protection history.
  6. Review recent detections involving ci.dll, an installer, or the program that displays the popup.
  7. Expand a detection to see its path and status.

Do not restore a quarantined file merely because its name is ci.dll. Restore it only if you have verified that it is a genuine Microsoft-signed system file and the detection is a false positive. Microsoft warns that restoring an unsafe file can cause Defender to detect it again.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If the detection involves malware or an untrusted installer:

  1. Leave the threat quarantined or remove it as Windows Security recommends.
  2. Run a full scan from Virus & threat protection.
  3. Restart Windows.
  4. Run DISM and SFC.
  5. Reinstall the affected application from its official source.

Microsoft’s Protection history instructions explain the available quarantine actions.

Fix 4: Use Startup Repair when Windows will not boot

Time needed: 15 to 60 minutes.

A typical boot message looks like this:

Windows failed to start.
File: WindowsSystem32CI.dll
Status: 0xc0000098
The operating system couldn't be loaded because a required file is missing or contains errors.

This does not prove that the file is physically missing. The message can reflect a damaged component, failed upgrade, boot configuration problem, storage issue, or faulty installation media.

Enter Windows Recovery Environment

If Windows fails several starts, it may open WinRE automatically. You can also reach it by interrupting startup several times, or by starting from official Windows installation media and selecting the repair option.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In WinRE:

  1. Select Troubleshoot.
  2. Select Advanced options.
  3. Select Startup Repair.
  4. Choose the Windows installation if prompted.
  5. Enter the account password if requested.
  6. Wait for the repair to complete.
  7. Restart the computer.

Microsoft’s Startup Repair guidance covers this recovery path.

If Startup Repair reports that it cannot repair the computer, return to Troubleshoot → Advanced options and try System Restore.

Use System Restore

  1. Open Troubleshoot → Advanced options.
  2. Select System Restore.
  3. Choose a restore point from before the error began.
  4. Review the affected programs and drivers.
  5. Confirm the restore.
  6. Allow Windows to restart.

System Restore changes system files, drivers, settings, and installed applications after the selected restore point. It is intended not to remove personal files, but review the summary carefully before proceeding. Microsoft explains the process in its System Restore documentation.

If you run repair commands from WinRE, Windows may not be assigned drive letter C:. Use the correct Windows volume letter rather than assuming it. Offline DISM and SFC commands require the right Windows directory and should be used carefully.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Microsoft System Builder | Windоws 11 Home | Intended use for new systems | Install on a new PC | Branded by Microsoft
  • STREAMLINED & INTUITIVE UI, DVD FORMAT | Intelligent desktop | Personalize your experience for simpler efficiency | Powerful security built-in and enabled.
  • OEM IS TO BE INSTALLED ON A NEW PC with no prior version of Windows installed and cannot be transferred to another machine.
  • OEM DOES NOT PROVIDE SUPPORT | To acquire product with Microsoft support, obtain the full packaged “Retail” version.
  • PRODUCT SHIPS IN PLAIN ENVELOPE | Activation key is located under scratch-off area on label.
  • GENUINE WINDOWS SOFTWARE IS BRANDED BY MIRCOSOFT ONLY.

Fix 5: Recreate damaged installation media

Time needed: 30 to 90 minutes.

If the error appeared while installing Windows, immediately after a failed upgrade, or only when booting from a USB installer, suspect damaged installation media or an incomplete installation.

The status 0xc0000098 has been reported in connection with failed Windows installation attempts and faulty media. Recreate the USB using Microsoft’s official Windows download page.

The general process is:

  1. Use another working Windows computer if necessary.
  2. Open Microsoft’s Windows download page.
  3. Download the official media creation tool or installation image offered for your Windows edition.
  4. Use a blank USB drive with sufficient capacity.
  5. Create the installation media again.
  6. Start the affected computer from that USB.
  7. Select Repair my PC instead of immediately installing Windows.
  8. Try Startup Repair, System Restore, or Command Prompt.
  9. If the installed system is damaged beyond repair, consider an in-place repair or clean installation after securing personal files.

Also test another USB port and confirm that the computer is booting from the newly created drive. If installation media behaves inconsistently, investigate the USB drive, disk, RAM, and firmware settings rather than replacing ci.dll manually.

Fix 6: Investigate drivers after a blue screen

Time needed: 20 to 60 minutes.

A crash dump naming ci.dll does not automatically mean that ci.dll caused the crash. Code Integrity may be where Windows detected a problem involving an incompatible, unsigned, or corrupted driver.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Think back to what changed immediately before the blue screen:

  • graphics, storage, chipset, network, or other driver installation
  • antivirus or security software update
  • hardware replacement
  • Windows update
  • disk cloning or migration

Roll back or reinstall a recent driver

  1. Right-click Start.
  2. Select Device Manager.
  3. Expand the device category associated with the recent change.
  4. Right-click the device.
  5. Select Properties.
  6. Open the Driver tab.
  7. Choose Roll Back Driver if it is available.
  8. If rollback is unavailable, choose Uninstall Device.
  9. Restart Windows.
  10. Install the correct driver from the hardware manufacturer or through Windows Update.

Do not use a driver intended for a different Windows architecture or hardware model. If Windows will not start normally, use Safe Mode from WinRE → Troubleshoot → Advanced options → Startup Settings.

When several devices have changed, finding the stale or incompatible driver manually can mean checking versions one by one. Outbyte Driver Updater provides a free scan showing which drivers it identifies, while driver installation is performed by the full version; it is optional, and the hardware manufacturer remains the safest source for a specific driver.

Advanced users can use Driver Verifier to isolate problematic drivers, but Microsoft warns that it can itself cause crashes and is primarily intended for testing and debugging. Do not enable it casually on a computer that is already unstable.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Why regsvr32 does not repair ci.dll

regsvr32 is designed for DLLs that expose registration entry points such as DllRegisterServer or DllUnregisterServer. It registers ordinary COM or ActiveX components in the Windows registry.

ci.dll is a protected Windows Code Integrity module, not a normal self-registering application component. Running:

Best Value
regsvr32 ci.dll

does not restore a missing system file, repair the Windows component store, or fix boot validation. It can produce an error because the module does not provide the registration function that regsvr32 expects.

Microsoft documents how regsvr32 works and the DllRegisterServer requirement. Use regsvr32 only when the software vendor specifically documents it for a DLL that supports registration.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why manual DLL downloads are unsafe

Do not download ci.dll from a DLL archive, copy it from another computer, or place it in a game folder or System32.

That approach can introduce:

  • malware or a tampered binary
  • a file from the wrong Windows build
  • a 32-bit file on a 64-bit installation, or the reverse
  • a file with incompatible signatures or dependencies
  • a replacement that hides the real storage, driver, or boot problem

Windows system components should come from Windows Update, DISM, SFC, WinRE repair, official installation media, or an official repair installation. If an application truly requires a private copy of a dependency, repair or reinstall that application from its official installer instead.

Do not delete ci.dll, disable Secure Boot, or disable Code Integrity protections simply to suppress the message.

Likely causes and the matching repair

Situation Most likely direction
Boot fails and names WindowsSystem32CI.dll Startup Repair, System Restore, DISM/SFC, storage and boot checks
Error began during Windows installation Recreate official installation media
Windows boots and Setup.exe appears at login Identify and repair the orphaned or broken startup program
File disappeared after a security alert Check Defender Protection history and scan for threats
Blue screen began after a driver change Roll back, uninstall, or replace the driver
Error follows cloning or hardware replacement Check disk health, boot configuration, and drivers
SFC and DISM succeed but boot still fails Investigate media, disk, RAM, drivers, or use an in-place repair

Frequently asked questions

Is ci.dll a Windows file?

Yes. It is Microsoft’s Code Integrity Module and is part of the Windows operating system.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Is ci.dll a Visual C++ file?

No. Installing or repairing Visual C++ does not normally repair ci.dll. Use the Visual C++ package only when the complete error names a Visual C++ runtime file.

Why does an application say ci.dll is missing when the file exists?

The application may be using its own dependency-loading path, a broken installation, or a different Setup.exe. Check the executable’s full path and repair or reinstall the owning application.

Is the same ci.dll used on 32-bit and 64-bit Windows?

No. Windows architecture and build matter. Do not substitute files based only on the filename. On ordinary installations, the system copy is under C:WindowsSystem32.

Should I copy ci.dll from another PC?

No. The other computer may have a different Windows build, architecture, signature, or system state.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Should I run SFC before DISM?

Run DISM first, then SFC:

DISM.exe /Online /Cleanup-Image /RestoreHealth
sfc /scannow

What information is useful when asking for help?

Provide the Windows version, the exact error text, any status code, whether Windows boots, whether the message appears at login or while launching a program, and the program or executable named in the popup.

What if every repair succeeds but the error remains?

Stop replacing files and broaden the diagnosis. Test the installation media, disk, RAM, and recently changed drivers. From WinRE, try System Restore or an official repair installation. A ci.dll reference can be the visible symptom of a larger boot or hardware problem.

Quick Recap

Bestseller No. 1
Microsoft Windows 11 PRO (Ingles) FPP 64-BIT ENG INTL USB Flash Drive
Microsoft Windows 11 PRO (Ingles) FPP 64-BIT ENG INTL USB Flash Drive
MICROSOFT WINDOWS 11 PRO (INGLES) FPP 64-BIT ENG INTL USB FLASH DRIVE
Bestseller No. 3
Microsoft Windows 11 (USB)
Microsoft Windows 11 (USB)
Make the most of your screen space with snap layouts, desktops, and seamless redocking.; FPP is boxed product that ships with USB for installation
Bestseller No. 4
SaleBestseller No. 5

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More quests from Patch Notes

  1. How To Create Custom Stickers & Shoutouts In Monster Hunter WildsMonster Hunter WildsBlog20min
  2. How to Get XL Gogoat in Pokemon Legends Z-A (An Extra-Large Gogoat)Pokemon Legends Z-ABlog20min
  3. How to Get Rotting Lightbringer in Diablo 4Diablo 4Blog17min
Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.