Today's viruses, trojans and many other malicious software are much smarter and more shrewd than ever before. In other words, the traditional methods of identifying suspicious processes such like by checking the startup items have been far from enough. For example, they have been used to embed themselves into system processes, inject into driver files, disguise as system services, and so on, so as to implement autorun and bypass the scanning and killing of most anti-virus software. As a consequence, we could see that more and more antivirus software AIDS came into popular.