problem closing a process... EKRN.EXE Running from System

[Jos07 0]

in most cases ProcessClose() works very well but it is not closing a System Process.

i have ESET NOD32 Antivirus installed and it got damaged due to some driver files missing.

now i am not able to install it or repair it because its process is not ending.

i tried

If ProcessExists(\"EKRN.exe\") Then
             ProcessClose(\"EKRN.exe\")
        EndIf

Please try to help me out... Thanks!

[d4rk 0]

try with

$killex = "EKRN.exe"
If ProcessExists($killex) Then RunWait("taskkill /F /IM " & $killex, "", @SW_HIDE)

[Jos07 0]

thanx for the help! i tried and it failed to close it.

any other solution ?

[Makalele 0]

It's that because this files are protected.

Use for example this program: Pocket KillBox

[monoceres 183]

You could also force it not to start next time you start your computer.

NOD most likely start from the registry or is a windows service.

To remove it from the registry run msconfig.exe

If it's a windows service right click on My Computer and choose Configure (or something) and disable it under services.

[Jos07 0]

i have deleted this key :

(\"HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\", \"egui\")

but it still starts in background....

is there no way to kill its process by AutoIt ?

[Jos 1,373]

Have you checked the services and disabled any NOD service and then restarted ?

Other option is to restart in SAFEMODE and remove the current version of NOD.

Jos