Which step would you perform to detect this type of Trojan?

Your computer is infected by E-mail tracking and spying Trojan. This Trojan infects the computer with a single file – emos.sys

Which step would you perform to detect this type of Trojan?

A.
Scan for suspicious startup programs using msconfig

B.
Scan for suspicious network activities using Wireshark

C.
Scan for suspicious device drivers in c:windowssystem32drivers

D.
Scan for suspicious open ports using netstat