I’ve used a program call Pview3 to see the PID of the program that can contain viruses
c:\windows\system32\svchost.exe
c:\program files\sygate\SPF\smc.exe
The alerts don’t appear at system startup.