In vulnerability assessment and reverse engineering, Trojan mainly refers to:

A. a trojan is always open-source security software B. a trojan cannot deceive users C. a trojan disguises itself as legitimate software while performing unwanted actions D. a trojan is only a database index