KHOBE (Kernel Hook Bypassing Engine)

Archive
1

Since this could be a problem I suggest looking into this.. Making harder to disable Anitvirus programs should be a MUST!

 

Thanks Ryan

 

http://www.matousec.com/info/articles/khobe-8.0-earthquake-for-windows-desktop-security-software.php

 

http://arstechnica.com/security/news/2010/05/multicore-cpus-move-attack-from-theoretical-to-practical.ars

 

 

2

I am also wondering about this same issue, Will the next version of Norton products have this issued solved??

3

According to ARS Technica it's rather trivial for any program to disable any AV software running on a multi-core CPU system.   I would hope that Symantec would have a fix for this for the next version.

 

http://arstechnica.com/security/news/2010/05/multicore-cpus-move-attack-from-theoretical-to-practical.ars

4

Since this could be a problem I suggest looking into this.. Making harder to disable Anitvirus programs should be a MUST!

 

Thanks Ryan

 

http://www.matousec.com/info/articles/khobe-8.0-earthquake-for-windows-desktop-security-software.php

 

http://arstechnica.com/security/news/2010/05/multicore-cpus-move-attack-from-theoretical-to-practical.ars