That mitigation technique relies on the anti-malware executable starting before the malware does.