How can a rootkit bypass Windows 7 operating system's kernel mode, code signing policy?

Question

Options

• ADefeating the scanner from detecting any code change at the kernel
• BReplacing patch system calls with its own version that hides the rootkit (attacker's) actions
• CPerforming common services for the application process and replacing real applications with fake
• DAttaching itself to the master boot record in a hard drive and changing the machine's boot

• A
  6% (2)
• B
  14% (5)
• C
  8% (3)
• D
  72% (26)

No community discussion yet for this question.