In my Windows (10) desktop, Windows Security/Virus & Threat Protection tells me :- This program is used to create viruses, worms or other malware.
ExcludeProc.D shows me Affected items:-
CmdLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand PAAjAGgAagBjAHoAIwA+ACAAQQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgADwAIwB4AGMAbgB0ACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAG4AaQAjAD4AIAAtAEYAbwByAGMAZQAgADwAIwBmAHgAIwA+AA==

and ExcludeProc.A shows me Affected items:-
behavior: pid:2556:23860413273102
process: pid:2556,ProcessStart:133055481474362929

I tick "remove" which it does, BUT, every time I turn on my PC or reboot the same 2 are flagged & I have to manually "remove" them each time!

I can't find a real solution via Microsoft support or anywhere else and cannot actually find or see where these are lurking so I could permanently remove/delete/block them.

[Login or Register to remove this advertisement]

It's just a nuisance as I have to remove them every bloody time!

Any proven & successful suggestions would be appreciated (remembering that I'm no expert in programming or the real workings of software etc), thanks

biggerdave Reviewed by biggerdave on 21st August 2022. How to permanently remove ExcludeProc.A and ExcludeProc.D In my Windows (10) desktop, Windows Security/Virus & Threat Protection tells me :- This program is used to create viruses, worms or other malware. ExcludeProc.D shows me Affected items:- CmdLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand Rating: 5

Did you search the internet for “remove ExcludeProc.A” and “remove ExcudeProc.D”?
I use Revo Uninstall a lot, but that is more more for clean uninstall programs.

Peter

Thanks imlost, I may try these although many (if not all) cleaners/AV etc often scan for free but then want you to buy before they'll actually clean/remove stuff.
I already run IObit Malware Fighter which didn't see this ExcludeProc bug/virus/trojan/malware whatever it is

I did try that FRST (Farbar) tool and ran it to create the logs but when I went to delete/clear whatever it said I was told something like the log needs to be in the same folder as the prog but I couldn't even find a folder after running FRST64.exe as it seems to be "portable"!
All the other progs seem to be trial versions which "may" detect something but then ask you to buy/register the premium version to actually remove/delete stuff. Aaaaah!

Couldn't even get UnHackMe to work for me.

The most likely is to search for someone with the same problem on Google.
You will certainly come across offers that seem to help you with your problem, but only through a registration and/or purchase of a tool that you just have to wait and see if it will work.
You will have the most success with the user groups.


I'll have a look at the computer bible

P.S.
Unfortunately nothing to be found about those problems