The malware has to exist outside the OP area to be able to infect the host, otherwise it would never run. Antimalware can just look for that bit. All this really does is let you increase the amount of storage malware can potentially use; it doesn't hide the core, which has to live in the normal area.