text: Integrity checking can be used to identify a type of these things that operate at Ring 0.
full_question: Integrity checking can be used to identify a type of these things that operate at Ring 0. Some of these things use a polymorphic engine to obscure their signature. A recent example of these things called Cryptolocker encrypted file contents. They're often used to create large numbers of zombies and particularly hard to detect examples of these entities are called (*) rootkits. Melissa was one of many of these things that took advantage of macros, but more modern examples of them often use zero-day exploits reported to the Common Vulnerabilities and Exposures index. These programs are studied by Kapersky Lab and one of them called Stuxnet was used against the Iranian nuclear program. For 10 points, name these types of malware.
first_sentence: Integrity checking can be used to identify a type of these things that operate at Ring 0.
raw_answer: computer virus [or worm; or trojan horse; or backdoor; or adware; or scareware; or ransomware; or spyware; or keystroker; or malware or rootkit until they are read; prompt on exploits]