nerdexam
EC-Council

EC0-350 · Question #864

Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file - emos.sys. Which step would you perform to detect this type of Trojan?

The correct answer is C. Scan for suspicious device drivers in c:\windows\system32\drivers. See the full explanation below for the reasoning.

Question

Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file - emos.sys. Which step would you perform to detect this type of Trojan?

Exhibit

EC0-350 question #864 exhibit

Options

  • AScan for suspicious startup programs using msconfig
  • BScan for suspicious network activities using Wireshark
  • CScan for suspicious device drivers in c:\windows\system32\drivers
  • DScan for suspicious open ports using netstat

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    8% (2)
  • C
    77% (20)
  • D
    12% (3)

Community Discussion

No community discussion yet for this question.

Full EC0-350 Practice