Reference: https://bbs.kafan.cn/thread-2284992-1-1.html, https://blog.csdn.net/qq_40827990/article/details/148997201

Same techniques are widely used by Silverfox Group to terminate AV processes

BYOVD

Usage: NSecSoftBYOVD.exe PID The driver from Shandong Anzai must be under the same directory of the exe.