An exploit in Microsoft Windows Update is allowing malicious hackers to use it to download additional viruses and trojan components on a computer that has already been infected.

The service being used bypasses firewalls and other security checks allowing the hacker to download and possibly even install rootkits and keyloggers without detection.

It has been reported that there is no way to prevent malicious hackers from using this service in its present form. Microsoft has been notified of the issue but hasn’t yet announced a fix or confirmed that it’s working on one.

[tags]windows update, antivirus, antivirus software[/tags]