HBKRNL.DLL - Dangerous

What you should do about HBKRNL.DLL:

Check Your PC Now
Your PC is infected. The file called HBKRNL.DLL is considered unsafe and there may be other infections on your PC.


You should urgently check your PC and remove any malicious software including HBKRNL.DLL as soon as possible. The free version of Prevx CSI will scan your PC for millions of spyware and malware infections in less than 2 minutes. Don't take the risk, check your PC now by clicking the green button.

Download Prevx CSI Now

Who Uses Prevx CSI?

Prevx has been detecting the threats that others miss since 2004.

More than 2,061,619 people have scanned with Prevx CSI and between them have checked 29.7 billion files. 66% of the PCs scanned had malware present.

What we know about HBKRNL.DLL:

The filename HBKRNL.DLL was first seen on Apr 10 2008 in HONG KONG. It has also been seen in the following geographical regions of the Prevx community:

  • CHINA on Apr 10 2008
  • SPAIN on Apr 14 2008
  • GERMANY on May 9 2008
The filename HBKRNL.DLL refers to many versions of a dynamic link library. They share a common file size of 20,480 bytes.

The filename is associated with the malware group Trojan.Vundo.Some files using the name HBKRNL.DLL are also associated with the malware group:
  • Rootkit.Gen
 These files have no vendor, product or version information specified in the file header.

HBKRNL.DLL has been seen to perform the following behavior(s):

  • The Process is packed and/or encrypted using a software packing process
  • Adds a Registry Key (RUN) to auto start Programs on system start up

HBKRNL.DLL has been the subject of the following behavior(s):

  • Added as a Registry auto start to load Program on Boot up
  • Created as a process on disk
  • Registered as a Dynamic Link Library File

HBKRNL.DLL can also use the following file names:

  • 91643063.DAT
  • 2.TMP
  • 33.TMP
  • 15089098.SVD
  • 25.TMP
  • 35.TMP
  • 01033586.SVD
  • 94658587.SVD
  • 79159291.DAT