I’d add MBAM to your comments … like avast, MBAM has a self-protect module which blocks outside attempts to remove it, I don’t know how successfully.