Yep, this should be a solution... stop the malware from working, and if the game doesn't work, the users can refund it (since the gameplay time will be 0 hours anyway).

Let the developers (well... managers) deal with the refunds then.