I finally found the cause of my memory leak (well, at least the major one)!
Many video streaming sites use Flash Player and VideoJS, creating a temporary video file (usually fla*.tmp) in the %temp% folder.
I observed ekrn.exe memory usage growing while the video was downloaded.
The tmp file remains open the entire time, until you close the video.
After closing the web page containing the video, the old fla*.tmp file is deleted, but ekrn.exe does not release the memory it had used.
If I reload the same video, a new fla*.tmp file is created, and ekrn.exe memory grows again.
If you want to test this, try this page:
hxxp://www.wimp.com/tourfrance/
I am using Windows XP sp3, Firefox v42.0, SmartSecurity v9.0.318.0