Certified Incident Handler (ECIH v3) — Question 2

A malware code that infects computer files, corrupts or deletes the data in them and requires a host file to propagate is called:

Answer options

• A. Trojan
• B. Worm
• C. Virus
• D. RootKit

Correct answer: C

Explanation

The correct answer is C, Virus, as it specifically refers to malware that attaches to other files and can corrupt or delete their data. A Trojan (A) is designed to deceive users and does not replicate itself, while a Worm (B) can spread independently without needing a host. A RootKit (D) is used to gain unauthorized access and control over a system but does not directly infect files in the same manner.