A method of cleverly identifying Trojan virus process and common virus process in Win7 64-bit Pure version system

　　In general, viruses are hidden in the following three ways:

1, steal a single character change

2, the replacement system in the corresponding process name

3, the virus to run the required DLL file into the normal system process

　　Second, how to identify the virus process

1, the common virus process name is the use of such a naming method: The system in the normal process name of the 0,l changed to I,i to J;

2, a small difference in the process name, the user is difficult to find anomalies, so we recommend the use of professional process detection tools;

　　Iii. common normal processes vs. virus processes

For example: The normal process in the system are: Svchost.exe, Explorer.exe, Iexplore.exe, Winlogon.exe, and so on, and viruses usually correspond to this name: Svch0st.exe, Explore.exe, Iexplorer.exe, Winlogin.exe.