Which of the following viruses tries to hide from anti-virus programs by actively altering and corrupting the chosen service call interruptions when they are being run?

Stealth viruses hook low-level OS interrupt calls (such as INT 13h for disk I/O) and alter the data returned during those calls so that antivirus programs receive a clean, uninfected view of files or boot sectors, actively corrupting the interrupt response while the system is running.

A tunneling virus installs itself beneath the OS to intercept interrupt calls at a hardware or BIOS level before AV hooks can monitor them, which is a different evasion approach than altering in-progress runtime call responses.

A cavity virus hides by inserting its code into unused gaps within an executable file without increasing file size, not by manipulating system call interrupts.

A polymorphic virus evades signature-based detection by mutating its own code and encryption routine with each replication cycle, rather than intercepting or altering OS service calls.