Fun fact: Tritium, instead of overwriting the MBR immediately, actually waits a few seconds, so it has a much higher chance of appearing when executing multiple GDI malware at once I also tried making it terminate all non-system processes besides it (but failed)
