nerdexam
EC-Council

312-50V7 · Question #35

Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file - emos.sys. Which step would you perform to detect this type of Trojan?

The correct answer is C. Scan for suspicious device drivers in c:\windows\system32\drivers. See the full explanation below for the reasoning.

Question

Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file - emos.sys. Which step would you perform to detect this type of Trojan?

Exhibit

312-50V7 question #35 exhibit

Options

  • AScan for suspicious startup programs using msconfig
  • BScan for suspicious network activities using Wireshark
  • CScan for suspicious device drivers in c:\windows\system32\drivers
  • DScan for suspicious open ports using netstat

How the community answered

(33 responses)
  • A
    6% (2)
  • B
    3% (1)
  • C
    76% (25)
  • D
    15% (5)

Community Discussion

No community discussion yet for this question.

Full 312-50V7 Practice