Krnlmod.exe is a Spyware.WindowsKey. Krnlmod.exe monitors user Internet activity and private information. It sends stolen data to a hacker site. Related files: %SystemDrive%\Programs\Keylogger5\Krnlmod.exe %SystemDrive%\Programs\Keylogger5\Ntpsapi.dll %SystemDrive%\Programs\Keylogger5\Watchdll.dll Adds the value: "Krnlmod" = "%SystemDrive%\Programs\Keylogger5\Krnlmod.exe" to the Windows startup registry keys. More info: http://securityresponse.symantec.com/avc... Removal: Kill Krnlmod.exe process and remove Krnlmod.exe from Windows startup using antivirus (also check How To Remove section)Startup Optimizer.