Which three commands are often replaced by root kits?

You decide that it may be a good idea to prevent Trojan horse and backdoor attacks. Which three commands are often replaced by root kits? (Choose three.)

A.
ps(1)

B.
bc(1)

C.
ls(1)

D.
login(1)