Thank you, I've already reported to support.
I've tested this on Windows 10 Pro 64 bits, version 1903. How to reproduce:
- Run EEK (accept the licence, there's no need to update the definitions);
- Close EEK;
- Try to delete C:\EEK, even after a restart.
In my computer, and also inside a VM running Windows 10, it was not possible to delete the epp.sys.
Tried to disable Windows Defender and to disable fast start-up. The result was the same.
What makes me think that this may be a more general problem, is the fact that I'm having the same results inside a VM running a clean and updated image of Windows 10 (version 1903).
Hopefully it's only on my computer.