Versions

7.0.302.0	10.29%
6.0.316.0	11.27%
6.0.314.0	0.49%
6.0.308.0	11.27%
6.0.306.0	7.35%
6.0.115.0 RC	2.45%
5.2.7.0	16.67%
5.2.15.0	4.41%
5.0.94.0	4.41%
5.0.93.7	1.47%
5.0.93.0	2.45%
4.2.71.2	4.41%
4.2.67.10	0.49%
4.2.64.12	4.41%
4.2.58.3	0.49%
4.2.42.7	0.49%
4.2.42.0	0.49%
4.0.474.10	0.49%
4.0.474.0	1.47%
4.0.468.0	0.49%
4.0.467.0	0.49%
4.0.437.0	0.49%
4.0.417	6.86%
4.0.314	1.47%
3.0.710	0.49%
3.0.695	1.47%
3.0.669	0.49%
3.0.667	0.49%
3.0.657	0.49%
3.0.645	0.49%
3.0.642	0.49%
3.0.621	0.49%

Warning 4 antivirus scanners has detected malware in various versions of ekrn.exe.

ekrn.exe has 32 known versions, the most recent one is 7.0.302.0 . It is started as a Windows Service called 'ESET Service' with the name 'ekrn'. In addition, it is run under the context of the SYSTEM account with extensive privileges (the administrator accounts have the same privileges). The average file size is about 808.02 KB. It is an authenticode code-signed executable issued to ESET by the certification authority VeriSign. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 93.3 MB with the maximum memory reaching around 104.46 MB. Addionally, typically read and write I/O disk operations is about 8.85 MB per minute for reads and 776.4 KB per minute for writes.

ESET NOD32 Antivirus, commonly known as NOD32, is an antivirus software package from ESET. ESET's use of assembly language in its products contributes to their low system requirements and disk space utilization. ESET calls its scanning engine ThreatSense, and makes extensive use of generic signatures and heuristics.

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.