UPDATE - New attack bypasses EVERY Windows security product | ZDNet

Many viruses find their way on to your system through nefarious means. This new malware attack dubbed KHOBE (Kernel HOok Bypassing Engine), bypasses your security by having two snippets of code. One is used as the code to be scanned, and the second is swapped for the initial code once it has been given the green light by your anti-virus software. What is being passed is malicious code that has been programmed to take advantage of multi-core systems lack of tracking threads that are running simultaneously. The attack doesn’t require Admin rights to your computer to do its evil, so running as a standard user doesn’t protect you.

Currently it appears as though this is only a Microsoft XP problem which means that it could only causes problems in 60% of PCs currently being used! If the KHOBE code is passing malicious code that your antivirus software is already aware of by its signature, then you probably won’t be affected. However, and new code that comes along that is being passed into your system by the KHOBE malware will definitely be a problem.

Adrian Kingsley-Hughes writes:

•  
  • Are you a Windows user?
  • Do you make sure that your antivirus program is updated regularly?
  • Do you feel safe?
  • You shouldn’t! Read on to find out why …

UPDATE - New attack bypasses EVERY Windows security product | ZDNet