Microsoft
The bug is in the SPNEGO Extended Negotiation Security Mechanism – which essentially allows a client and server to negotiate the choice of security mechanism that they use.
Currently antivirus firms use a range of Windows kernel drivers to do things like intercept network and file process activity