If the virus has got a specific name like blaster.worm or 32heur and thus., you will find processes followed by such name extensions routinely checked weird identities.
For example, what are you enthusiastic about? https://Goelancer.com/question/what-online-gifts-have-fallen-to-mean-to-the-shopper-39/