How Can an Attacker Execute Malware Through a Script

Multiple Choice

How can an attacker execute malware through a script?

A) An attacker can steal a cookie and impersonate you in a script,thereby infecting someone else's computer.
B) An attacker can attach to a plug-in and when you allow the plug-in to run,it infects the website you were visiting.
C) An attacker can impersonate a pop-up and when you click on it create a script to spread a Trojan.
D) An attacker can attach a script to a program that you download which then infects your computer.