Suppose a zero-access malware like TDSS/Blue pill Kernel rootkit invades. If it opens any of my logged-in sites (2FA enabled, so that they can't just go incognito or open in any other browsers or steal passwords) in my Chrome & my Google account is synced, would it be recorded? As well in Google Cloud history which I'd require the culprit to actually to go to my account cloud to delete, or low-level access can conceal or not record any remote access browsing history or any other malicious activity?
Would I see only my history/files if my PC is running virtually+TDSS, augmented "matrix" like?
Also, can login cookies be stolen & log-in from a different PC or would it stop working if used in VM or different browser version, hardware. GUID?