     Figure 10. Creating a new account with admin rights      Figure 11. Checking for antivirus processes running     During the scan, we observed an attempt to terminate security products initiated via TaskKill.