[DANmode]

Windows File Protection seems ineffective against malware signed by a Microsoft vendor.

and/or for malware that can disable WFP.