I finally nuked ESET by uninstalling and then running that utility in Safe Mode twice.... second time it said it had nothing to remove, but both times it hung in the end for several minutes and then complained about a driver in oem35.inf that it could not remove.
I reinstalled ESET 14.x from scratch and imported my settings. Now ekrn.exe is hovering around 100mb (Private Working Set).