Which of the following is solely designed to avoid detection by an antivirus program by using the underlying operating system to its advantage?

The correct answer is A. Rootkit. A rootkit is specifically engineered to hide itself and other malware by hooking deeply into the operating system - intercepting system calls, manipulating kernel data structures, or patching OS functions - so that file listings, process lists, and network connections appear…

Networking

Question

Options

ARootkit
BVirus
CTrojan
DWorm

How the community answered

(34 responses)

A
88% (30)
B
3% (1)
C
3% (1)
D
6% (2)

Explanation

A rootkit is specifically engineered to hide itself and other malware by hooking deeply into the operating system - intercepting system calls, manipulating kernel data structures, or patching OS functions - so that file listings, process lists, and network connections appear clean to antivirus tools. 'Using the underlying OS to its advantage' is the defining characteristic of a rootkit. Viruses, Trojans, and worms can evade detection through other means (encryption, packing), but evading detection via OS-level manipulation is the rootkit's primary purpose.

Topics

#rootkit#malware#antivirus evasion#OS-level threat

Community Discussion

No community discussion yet for this question.

Full 220-802 Practice