By subverting kernel memory settings in Windows 7, Windows 8 and Windows 10, the RobbinHood ransomware can now delete cyber security defences from target systems
https://www.computerweekly.com/news/252478079/RobbinHood-ransomware-tricks-Windows-into-deleting-defences