- Malware authors are using the vulnerabilties in the
zam64.sysandzamgaurd64.sysdriver to use them as killing the EDRs/AVs processes. - These drivers are part of the
ZemannaAntiMalware. - I have taken the driver from loldrivers.
- The compiled version of the binary of can be found here
- run the program as administrator, Don't forgot to copy the driver also.
- Give the pid of the process which you want to be terminated as argument.
Usage: process_terminator.exe <pid>2024-09-19.23-18-49.mp4
https://nu1lptr.blogspot.com/2024/09/zam64sys-byovd-process-terminator.html