By dropping a vulnerable driver, the malware is able to install the encryptor.
Originally appeared here:
This devious malware uses Bond-inspired driver to kill security suites — then proceeds to systematically encrypt your data and drops a $2 million ransom request