Results 1 to 10 of 21
-
21st August 2022, 04:02 PM #1
How to permanently remove ExcludeProc.A and ExcludeProc.D
In my Windows (10) desktop, Windows Security/Virus & Threat Protection tells me :- This program is used to create viruses, worms or other malware.
ExcludeProc.D shows me Affected items:-
CmdLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand PAAjAGgAagBjAHoAIwA+ACAAQQBkAGQALQBNAHAAUAByAGUAZgBlAHIAZQBuAGMAZQAgADwAIwB4AGMAbgB0ACMAPgAgAC0ARQB4AGMAbAB1AHMAaQBvAG4AUABhAHQAaAAgAEAAKAAkAGUAbgB2ADoAVQBzAGUAcgBQAHIAbwBmAGkAbABlACwAJABlAG4AdgA6AFMAeQBzAHQAZQBtAEQAcgBpAHYAZQApACAAPAAjAG4AaQAjAD4AIAAtAEYAbwByAGMAZQAgADwAIwBmAHgAIwA+AA==
and ExcludeProc.A shows me Affected items:-
behavior: pid:2556:23860413273102
process: pid:2556,ProcessStart:133055481474362929
I tick "remove" which it does, BUT, every time I turn on my PC or reboot the same 2 are flagged & I have to manually "remove" them each time!
I can't find a real solution via Microsoft support or anywhere else and cannot actually find or see where these are lurking so I could permanently remove/delete/block them.
It's just a nuisance as I have to remove them every bloody time!
Any proven & successful suggestions would be appreciated (remembering that I'm no expert in programming or the real workings of software etc), thanksbiggerdave Reviewed by biggerdave on . How to permanently remove ExcludeProc.A and ExcludeProc.D In my Windows (10) desktop, Windows Security/Virus & Threat Protection tells me :- This program is used to create viruses, worms or other malware. ExcludeProc.D shows me Affected items:- CmdLine: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -EncodedCommand Rating: 5
SPAM HUNTER/KILLER
Please do not just post "thanks" but use the "thanks" button bottom/right or the reputation star "*" bottom/leftS i m p l e s
-
21st August 2022, 04:41 PM #2
Did you search the internet for “remove ExcludeProc.A” and “remove ExcudeProc.D”?
I use Revo Uninstall a lot, but that is more more for clean uninstall programs.
PeterCollection; NAV2: GO 300 (M1); ONE XL (L1); GO XXL (GQ); GO XL (RS); GO 910 (V7); GO 950 LIVE (W1)
NAV3: GO 820 LIVE (FU) NAV5: GO 5200 (ZB)
-
The Following 1 Users Say Thank You to PeterHimself For This Useful Post:
- [ Click To Expand ]
-
biggerdave (21st August 2022)
-
21st August 2022, 04:53 PM #3
Best to boot into safe mode before removing as all services then stopped. Run adwcleaner from Malwarebytes and antivirus also in safe mode.
Before rebooting clean all temp files and check what programs are set to start with Windows.
See also
-
The Following 1 Users Say Thank You to imlost For This Useful Post:
- [ Click To Expand ]
-
biggerdave (21st August 2022)
-
21st August 2022, 04:57 PM #4
Have you ever considered reinstalling Windows 10 or better Windows 11.
I have the feeling that something is started in the background and that activates the Powershell with this message as a result
-
21st August 2022, 05:03 PM #5
Thanks imlost, I may try these although many (if not all) cleaners/AV etc often scan for free but then want you to buy before they'll actually clean/remove stuff.
I already run IObit Malware Fighter which didn't see this ExcludeProc bug/virus/trojan/malware whatever it is
SPAM HUNTER/KILLER
Please do not just post "thanks" but use the "thanks" button bottom/right or the reputation star "*" bottom/leftS i m p l e s
-
21st August 2022, 05:08 PM #6
-
The Following 1 Users Say Thank You to pe1agp For This Useful Post:
- [ Click To Expand ]
-
biggerdave (21st August 2022)
-
21st August 2022, 11:15 PM #7
I did try that FRST (Farbar) tool and ran it to create the logs but when I went to delete/clear whatever it said I was told something like the log needs to be in the same folder as the prog but I couldn't even find a folder after running FRST64.exe as it seems to be "portable"!
All the other progs seem to be trial versions which "may" detect something but then ask you to buy/register the premium version to actually remove/delete stuff. Aaaaah!
Couldn't even get UnHackMe to work for me.
SPAM HUNTER/KILLER
Please do not just post "thanks" but use the "thanks" button bottom/right or the reputation star "*" bottom/leftS i m p l e s
-
21st August 2022, 11:29 PM #8
The most likely is to search for someone with the same problem on Google.
You will certainly come across offers that seem to help you with your problem, but only through a registration and/or purchase of a tool that you just have to wait and see if it will work.
You will have the most success with the user groups.
I'll have a look at the computer bible
P.S.
Unfortunately nothing to be found about those problemsLast edited by pe1agp; 21st August 2022 at 11:44 PM.
-
21st August 2022, 11:51 PM #9
I can't find much else to say about it.
Is it a big problem to reinstall?
In that case I would switch to 11 or as I did a dual boot system where you can choose between windows 10 and 11
Your PC must be a bit suitable for 11
-
22nd August 2022, 12:59 AM #10
I had a similar case for a long time, I located the causative files and deleted, some put eliminated and others were in execution and cannot be deleted, I tried safe starting and did not work again, when again starting PC they go out again in clus . I had all the list of these files, my solution was; Download an ubuntu iso with Rufus I made this self -arrancable iso, start PC (F12) according to PC versions, I choose without installing in test mode, Linux if you see the Windows partitions, she opened Disco C: in searching I was looking for the causes causing my Discomfort, by precaution does not eliminate, in case it left PC broken, only the renown and aim where these files are X- at the beginning of the file name, restart it starts in Windows and without problems once sure that everything is fine from the same Windows Delete renowned files. The conclusion that this type of files (viruses) are loaded at the beginning and being in execution does not let elininar, when renowing the chain is broken and do not run, when starting with the Live of Ubuntu Windows "sleeps" and it is the occasion.
regards
-
The Following 2 Users Say Thank You to simba For This Useful Post:
- [ Click To Expand ]
-
biggerdave (22nd August 2022), pe1agp (22nd August 2022)
UM - Trucker POI Professional...
hello could someone share the ttokg - Trucker...