NSecSoftBYOVD

Update 2026.1.13: The vulnerbility has been assigned the number CVE-2025-68947

Reference: https://bbs.kafan.cn/thread-2284992-1-1.html, https://blog.csdn.net/qq_40827990/article/details/148997201

Same techniques are widely used by Silverfox Group to terminate AV processes

BYOVD

Usage: NSecSoftBYOVD.exe PID

The driver from Shandong Anzai must be under the same directory of the exe.