>>718047574
>>718048127
A decent AV detects this with heuristics, even if it uses a signed driver as the attack vector. It would pick up the suspicious activity and block it immediately.
Kaspersky has never let me down