Solved msirhe32.dll - A Virus or a real Windows file?

[Ferdy]

I need your help. My Kaspersky Anti-Virus Software has detected a file named msirhe32.dll with a virus named HEUR:Trojan.Win32.Generic. Is this a real file that's infected or a malware? If possible, please tell me what this file does. If this is a real file, please send me a Windows 7 version of this file. I'll appreciate any help. File path is: C:\Windows\SysWOW64\msirhe32.dll
I can't find any information about this file on Google, even on Kaspersky's official website.

 

[marsmimar]

Hello Ferdy and welcome to Seven Forums.

Most legitimate .dll files have extensive information about them on the internet. Things like who the manufacturer is, what they do, where they're usually found (the file path) etc. If that info isn't readily available, I'm very suspicious of the file.

I'd let Kaspersky quarantine it. Then I'd use my computer as I normally would and make sure everything still works (that you didn't quarantine a legitimate file.) I'd also contact Kaspersky and ask them if they have any other info about the possible virus.

Request to Kaspersky Virus Lab

 

[Ferdy]

Thanks for your help marsmimar. I have quarantined it. I get messages during startup though about this file being missing, Windows 7 still works with no problems.

 

[Ferdy]

Hello Ferdy and welcome to Seven Forums.

Most legitimate .dll files have extensive information about them on the internet. Things like who the manufacturer is, what they do, where they're usually found (the file path) etc. If that info isn't readily available, I'm very suspicious of the file.

I'd let Kaspersky quarantine it. Then I'd use my computer as I normally would and make sure everything still works (that you didn't quarantine a legitimate file.) I'd also contact Kaspersky and ask them if they have any other info about the possible virus.

Request to Kaspersky Virus Lab

Thanks for your help marsmimar. I have quarantined it. I get messages during startup though about this file being missing, Windows 7 still works with no problems.

 

[marsmimar]

If it's malware (and at this point I think it is) the startup messages could be part of the malware trying to get you to reinstall the .dll file. If you haven't done so, I'd recommend you do two more scans with Malwarebytes and Hitman Pro. They're both free and they can provide a second layer of defense. Unfortunately, no antivirus or antispyware is 100% effective 100% of the time. If there was such a thing we'd all be using it. Every antimalware product available today will miss something at some point in time.

Malwarebytes

Hitman Pro

Something else to consider is some malware activates as soon as Windows starts to run. So traditional antivirus tools don't always catch the bad stuff. Windows Defender Offline can boot your computer and scan it before Windows 7 starts. Yet another tool you can try.

Windows Defender Offline

 

[Golden]

Hi,

You might also upload the file here for an online scan:

https://www.virustotal.com/#file

Regars,
Golden

 

[Ferdy]

Thank you very much marismar and Golden for your replies. The DLL file had no manufacturer so I deleted it. Windows 7 still runs normally. Marking this thread as solved..... Thanks once again

 

[marsmimar]

Thanks for posting back and letting us know.

 

[terynix]

Msiwmg32.dll
Hello i need help i installed a file in my laptop which i did after disableing my kapersky internet security wel after d installation i enabled my anti-virus nd started having this prompt "msiwmg32.dll ...the module is missing" when eva i turn on my laptop which is the 1st prompt dat displays on my desktop on resumptiom. Please help!!!

 

[marsmimar]

Msiwmg32.dll
Hello i need help i installed a file in my laptop which i did after disableing my kapersky internet security wel after d installation i enabled my anti-virus nd started having this prompt "msiwmg32.dll ...the module is missing" when eva i turn on my laptop which is the 1st prompt dat displays on my desktop on resumptiom. Please help!!!

Hello terynix.

Rather than add your problem to someone else's solved post, you might want to start your own thread in System Security. But the information given to Ferdy in previous posts by me and Golden would also apply to you.