In my Windows (10) desktop, Windows Security/Virus & Threat Protection tells me :- This program is used to create viruses, worms or other malware.
ExcludeProc.D shows me Affected items:-
CmdLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand PAAjAGgAagBjAHoAIwA+ACAAQQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgADwAIwB4AGMAbgB0ACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAG4AaQAjAD4AIAAtAEYAbwByAGMAZQAgADwAIwBmAHgAIwA+AA==

and ExcludeProc.A shows me Affected items:-
behavior: pid:2556:23860413273102
process: pid:2556,ProcessStart:133055481474362929

I tick "remove" which it does, BUT, every time I turn on my PC or reboot the same 2 are flagged & I have to manually "remove" them each time!

I can't find a real solution via Microsoft support or anywhere else and cannot actually find or see where these are lurking so I could permanently remove/delete/block them.

It's just a nuisance as I have to remove them every bloody time!

Any proven & successful suggestions would be appreciated (remembering that I'm no expert in programming or the real workings of software etc), thanks
biggerdave Reviewed by biggerdave on . How to permanently remove ExcludeProc.A and ExcludeProc.D In my Windows (10) desktop, Windows Security/Virus & Threat Protection tells me :- This program is used to create viruses, worms or other malware. ExcludeProc.D shows me Affected items:- CmdLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand Rating: 5