What is KBHook.dll?

The genuine KBHook.dll file is a software component of Keyboard Hook Dynamic Link Library by Wistron.
"KBHook.dll" is a dynamic link library file known as the Keyboard Hook Dynamic Link Library, which is used by Wistron Corp. The file handles hooking for specific keyboard responses/functions and calls the proper procedure as a result. This can include volume adjustments through volume keys, sleep procedures for sleep buttons, display options through function button and keyboard combinations, etc. The file can be used in custom designed keyboard software for a branded company that Wistron manufactures products for. Wistron Corp. is a global, electronic manufacturer that provides custom branded products to commercial companies like Microsoft in the form of tablets, mobile phones, laptops, keyboards, servers, flat screen TVs, etc. This allows companies to sell the products as their own brand and have them customized to fit their needs. In addition to Wistron, the file has a generic name so it is also used by Atheros Communications for their Bluetooth software, Lenovo for their screen reading optimizer, and even used for dangerous key loggers.

KbHook stands for Keyboard Hook

KBHook.dll is a Windows DLL file. DLL is the abbreviation for Dynamic Link Library. DLL files are needed by programs or web browser extensions, because they contain program code, data, and resources. The following information can help you determine if KBHook.dll is a Windows system file or if it belongs to an application that you can trust.

Click to Run a Free Scan for KBHook.dll related errors

KBHook.dll file information

The process known as Keyboard Hook Dynamic Link Library belongs to software ErgoMedia or KYE KBHook or Navigator (version 805) or Second Display Control by KYE ( or Wistron (

Description: KBHook.dll is not essential for the Windows OS and causes relatively few problems. The KBHook.dll file is located in a subfolder of "C:\Program Files" or sometimes in the C:\Windows\System32 folder or in a subfolder of C:\ or in a subfolder of C:\Windows. Known file sizes on Windows 10/8/7/XP are 49,152 bytes (50% of all occurrences), 61,440 bytes and 4 more variants. 
A .dll file (Dynamic Link Library) is a special type of Windows program containing functions that other programs can call. This .dll file can be injected to all running processes and can change or manipulate their behavior. The program is not visible. The service has no detailed description. It is not a Windows system file. It is able to record keyboard inputs. The software has no file description. KBHook.dll is able to record keyboard and mouse inputs. Therefore the technical security rating is 94% dangerous, however you should also read the user reviews.

Uninstalling this variant: If you are having problems with KBHook.dll, you can also completely remove ErgoMedia or SlimStar R610 (Control Panel ⇒ Uninstall a Program).

Recommended: Identify KBHook.dll related errors

Important: Some malware also uses the file name KBHook.dll, for example Spyware.GoldenEye (detected by Symantec), and Win32:GoldenEye [Tool] (detected by Avast). Therefore, you should check the KBHook.dll process on your PC to see if it is a threat. We recommend Security Task Manager for verifying your computer's security. This was one of the Top Download Picks of The Washington Post and PC World.


User Comments

Loaded with new labtec keyboard. I suspect the key capture is to enable the programmable soft keys supported by the keyboard
  goldgraham   (further information)
kbhook.dll is a file installed if using a wireless keyboard!
It seems that it loaded when i install de drivers for my wireless multimedia keyboard and mouse from genius
it also loaded when I installed my new Genius mouse NetScroll+ Superior with cord. When I run anti Spyware they tell me it is dangerous. When I remove it my Mouse cannot do its special features. I don't know what to do.
Will not cause any harm. As said abvoe, it is used for the 'Genius Wireless Keyboard'.
It is used by Genius Wireless Optical Office devices.
  Gsantiago   (further information)
Right. It is used e.g. by Genius Wireless Keyboard Drivers for the Hotbuttons. MS AntiSpyware false detection, XoftSpy false detection. BUT NETSPY ALSO USES A KBHOOK.DLL! anyway it differs from the one distributed with keyboard driver package
  Nils Evert [Germany]  
Assuming you have installed a wirleess keyboard or mouse, Dont worry.
Correction kbhook.dll is a malware form. kbdhook.dll is associated to likes of logitech for wireless or express button functions
It is absolutely needed for the Genius Wireless Optical Mouse, without it just doesn't work properly. It would be nice if someone at Genius could verify its authenticity, or even get it digitally signed.
There are many programs that use it, but for me, it is the keylogger part of "GoldenEye", a program i installed on my own pc to check if my sister had been on it or not... it works.
    (further information)
I don't have a wireless keyboard (I do think it came with my new keyboard though, a Genious)
This is an essential part of my labtec keyboard software, and is not dangerous
genius Maustreiber
suspicious about it because it's not labeled, has no name to it
It was installed with my Genius ErgoMedia 700 keyboard (USB). It is used to map the various additional function keys on the keyboard.
  Marvin   (further information)
suddenly after a while my virusprogram (trend micro) find the "TROJ Generic" Virus in it.. It should be dangerous
It is also used by goldeneye (keylogger program)
Is an aditional .dll für Genius wireless Keyboard and Mouse
It installed in c:\windows\system32\ at the date i added labtec wired keyboard
"My" kbhook.dll placed in c:\windows\system32 is nothing more than file created after installing drivers for Genius (not wireless) keyboard.
I also have genius keyboard, but not wireless. I found two files with the same name. One in system32 directory, second in mediakey directory. The first one was marked as keylogger by antivirus. Deleted it, pc still works.

Rating chart

Summary: Average user rating of KBHook.dll: based on 25 votes with 22 user comments. 12 users think KBHook.dll is essential for Windows or an installed application. 3 users think it's probably harmless. 5 users think it's neither essential nor dangerous. 2 users suspect danger. 3 users think KBHook.dll is dangerous and recommend removing it. 5 users don't grade KBHook.dll ("not sure about it").

Do you have additional information?
What do you know about KBHook.dll:
How would you rate it:
Link for more info:
Your Name:

Best practices for resolving KBHook issues

A clean and tidy computer is the key requirement for avoiding problems with KBHook. This means running a scan for malware, cleaning your hard drive using 1cleanmgr and 2sfc /scannow, 3uninstalling programs that you no longer need, checking for Autostart programs (using 4msconfig) and enabling Windows' 5Automatic Update. Always remember to perform periodic backups, or at least to set restore points.

Should you experience an actual problem, try to recall the last thing you did, or the last thing you installed before the problem appeared for the first time. Use the 6resmon command to identify the processes that are causing your problem. Even for serious problems, rather than reinstalling Windows, you are better off repairing of your installation or, for Windows 8 and later versions, executing the 7DISM.exe /Online /Cleanup-image /Restorehealth command. This allows you to repair the operating system without losing data.

To help you analyze the KBHook.dll process on your computer, the following programs have proven to be helpful: ASecurity Task Manager displays all running Windows tasks, including embedded hidden processes, such as keyboard and browser monitoring or Autostart entries. A unique security risk rating indicates the likelihood of the process being potential spyware, malware or a Trojan. BMalwarebytes Anti-Malware detects and removes sleeping spyware, adware, Trojans, keyloggers, malware and trackers from your hard drive.

Other processes

KBHook.dll [all]