Should I block it?

No, this file is 100% safe to run.

VersionsAdditional versions

7.0.302.0 8.93%
6.0.316.0 9.82%
6.0.314.0 0.89%
6.0.308.0 10.71%
6.0.306.0 7.14%
6.0.115.0 RC 2.68%
5.2.8.0 14.29%
5.2.15.0 3.57%
5.0.95.0 3.57%
5.0.94.0 0.89%
5.0.93.7 1.79%
5.0.93.0 2.68%
4.2.71.2 4.46%
4.2.67.10 0.89%
4.2.64.12 4.46%
4.2.58.3 0.89%
4.2.42.7 0.89%
4.2.42.0 0.89%
4.0.474.10 0.89%
4.0.474.0 0.89%
4.0.468.0 0.89%
4.0.467.0 0.89%
4.0.437.0 0.89%
4.0.417 6.25%
4.0.314 1.79%
View more

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
RegDeleteValueW, DuplicateTokenEx, InitializeSid, GetSidLengthRequired, AdjustTokenPrivileges, LookupPrivilegeValueW, GetSidSubAuthority, RegEnumKeyExW, RegEnumKeyW, GetSecurityDescriptorOwner, GetSecurityDescriptorGroup, GetSecurityDescriptorDacl, AccessCheck, SetSecurityDescriptorGroup, SetSecurityDescriptorOwner, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, CopySid, GetLengthSid, GetTokenInformation, OpenProcessToken, FreeSid, EqualSid, AllocateAndInitializeSid, RegDeleteKeyW, SetThreadToken, RevertToSelf, DuplicateToken, OpenThreadToken, QueryServiceConfigW, ControlService, StartServiceW, OpenSCManagerW, RegSetValueExW, RegQueryValueExW, RegCreateKeyExW, RegDeleteKeyA, RegCloseKey, RegOpenKeyExW, OpenServiceW, CloseServiceHandle, ChangeServiceConfigW
kernel32.dll
WriteFile, SetEndOfFile, SetFilePointer, GetSystemTimeAsFileTime, VirtualAlloc, VirtualFree, GetVolumeInformationW, DuplicateHandle, SetThreadPriority, ResetEvent, GetModuleFileNameW, LoadLibraryExW, LoadLibraryW, GetProcAddress, FreeLibrary, GetCurrentThreadId, QueryPerformanceCounter, UnhandledExceptionFilter, TerminateProcess, GetThreadLocale, GetLocaleInfoA, GetACP, InterlockedExchange, GetProcessHeap, HeapSize, HeapReAlloc, HeapFree, lstrcpynW, lstrlenW, GetFullPathNameW, GetFileAttributesW, SetLastError, MultiByteToWideChar, WideCharToMultiByte, ReleaseSemaphore, CreateSemaphoreW, WaitForMultipleObjects, InterlockedDecrement, InterlockedIncrement, GetCurrentThread, GetTickCount, InterlockedCompareExchange, VirtualProtect, VirtualQuery, SetUnhandledExceptionFilter, SuspendThread, Sleep, SetEvent, DisableThreadLibraryCalls, GetCurrentProcess, GetVersionExW, DeleteCriticalSection, InitializeCriticalSection, LoadResource, LeaveCriticalSection, GetLastError, EnterCriticalSection, WaitForSingleObject, LocalFree, QueryDosDeviceW, LocalAlloc, GetDriveTypeW, GetLogicalDriveStringsW, TerminateThread, FindResourceExW, FindResourceW, GetCurrentProcessId, SizeofResource, LockResource, HeapAlloc, HeapDestroy, GetVersionExA, RaiseException, GetFullPathNameA, AreFileApisANSI, lstrlenA, lstrcpynA, GetFileAttributesA, CreateThread, DeviceIoControl, CreateEventW, CreateFileW, CloseHandle, ResumeThread, OpenProcess, IsProcessorFeaturePresent
msvcp110.dll
DllMain
msvcp80.dll
DllMain
msvcr110.dll
DllMain
msvcr80.dll
DllMain
ole32.dll
CoCreateGuid
setupapi.dll
SetupDiGetDeviceInstanceIdW, CM_Get_Device_IDW, CM_Get_Sibling, CM_Get_Child, CM_Get_DevNode_Registry_PropertyW, CM_Locate_DevNodeW, CM_Get_Parent, SetupDiDestroyDeviceInfoList, SetupDiGetDeviceInterfaceDetailW, SetupDiGetClassDevsW, SetupDiEnumDeviceInterfaces
shell32.dll
SHGetMalloc, SHGetDesktopFolder, SHGetPathFromIDListA, SHGetPathFromIDListW
user32.dll
UnregisterClassA, wsprintfW, LoadStringW
Export table
NODIoctl

ekrnAmon.dll

ESET Smart Security by ESET (Signed)

Remove ekrnAmon.dll
Version:   4.0.474.0
MD5:   cde1bc7f2ff5d120a497f73c22bce6c5
SHA1:   a47e362c4f2bf22c58d44f41ac75edf87da2a9d8
SHA256:   8f45585da331f166916d21cd779b0d1226bda5e19e7acf2883e9ba74e83dc8b9

What is ekrnAmon.dll?

ESET Amon Service is part of ESET NOD32 Antivirus, commonly known as NOD32, an antivirus software program from ESET. ESET's use of assembly language in its products contributes to their low system requirements and disk space utilization. ESET calls its scanning engine ThreatSense, and makes extensive use of generic signatures and heuristics.

About ekrnAmon.dll (from ESET)

Protect your family with ESET’s complete Internet security suite, built on the award-winning ThreatSense antivirus and antispyware engine. Our proactive heuristic technology intercepts and eliminates

DetailsDetails

File name:ekrnamon.dll
Publisher:ESET
Product name:ESET Smart Security
Description:ESET Amon Service
Typical file path:C:\Program Files\eset\eset nod32 antivirus\ekrnamon.dll
File version:4.0.474.0
Size:171.52 KB (175,640 bytes)
Build date:11/16/2009 3:51 PM
Certificate
Issued to:ESET
Authority (CA):VeriSign
Expiration date:Wednesday, June 12, 2013
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 8.0
.NET CLR:No
More details

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate 39.29%
Microsoft Windows XP 25.00%
Windows 7 Home Premium 10.71%
Windows 8 Pro 8.04%
Windows 7 Professional 4.46%
Windows 7 Ultimate N 2.68%
Windows 7 Home Basic 1.79%
Windows Vista Home Premium 1.79%
Windows 8.1 N 0.89%
Windows 8.1 Single Language 0.89%
Windows 8.1 0.89%
Windows 8 Enterprise 0.89%
Windows 8 0.89%
Windows 8 Consumer Preview 0.89%
Windows 8 Pro with Media Center 0.89%

Distribution by countryDistribution by country

United States installs about 12.50% of ESET Smart Security.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 18.87%
Hewlett-Packard 15.09%
Intel 11.32%
Acer 10.38%
Lenovo 9.43%
Dell 9.43%
Toshiba 7.55%
Sony 7.55%
GIGABYTE 7.55%
Sahara 0.94%
Samsung 0.94%
American Megatrends 0.94%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE