It then tweaks the Registry further to disable Windows security updates.Īfter all that, the malware will be ready to deploy the XMRig miner to hijack your cycles and generate Monero - and your computer will be exposed to the full force of internet malware like a naked child in a cold winter. It disables Microsoft/Defender, and deletes Avast, Bitdefender, F-Secure, Kaspersky, McAfee, Norton or Panda antivirus software if it's present.