Virus on my computer (i have tryed every single software) VirTool:Win32/ExcludeProc.C

Question

Virus on my computer (i have tryed every single software) VirTool:Win32/ExcludeProc.C

Anonym

Hello people i am in dire need of help i have had this virus poping up every time i start my computer and no software seems to be able to remove this virus....

Date: 2022-10-11 14:53:44
Description:
Microsoft Defender Antivirus has detected malware or unwanted software.
More information is available here:
https://go.microsoft.com/fwlink/?linkid=37020&name=VirTool:Win32/ExcludeProc.C&threatid=2147797730&enterprise=0
Name: VirTool:Win32/ExcludeProc.C
Severity: Severe
Category: Tools
Path: CmdLine:_C:\Windows\System32\cmd.exe cmd /c powershell -Command Add-MpPreference -ExclusionPath @(($pwd).path, $env:UserProfile,$env:AppData,$env:Temp,$ env:SystemRoot,$env:HomeDrive,$env:SystemDrive) -Force & powershell -Command Add-MpPreference -ExclusionExtension @('exe','dll') -Force & exit
Origin of the identification: Unknown
Identification Type: Concrete
Identification source: System
User: NT AUTHORITY\SYSTEM
Process Name: Unknown

plz help me fix this !

Låst fråga. Den här frågan har migrerats från Microsoft Support Community. Du kan rösta på om det är till hjälp, men du kan inte lägga till kommentarer eller svar eller följa frågan.

0 kommentarer

8 svar

Answer 1

Det här svaret har översatts automatiskt. Det kan därför finnas grammatiska fel eller underliga formuleringar.

Hej Vitrix Gaming, om du kunde skanna med Farbar Recovery Scan Tool (FRST) och dela loggarna som den skapar, hjälper jag dig att helt ta bort all skadlig kod som finns.

https://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

Kör FRST som administratör, använd standardinställningarna och tryck på Scan. Två loggar skapas i mappen från vilken FRST körs, FRST.txt och Addition.txt. Zippa loggarna och dela på OneDrive, Google Drive eller någon fildelningstjänst och lägg sedan upp delningslänken.

*Not: Om du laddar ner FRST med Edge kommer smartscreen initialt att blockera det.

Klicka på de 3 punkterna bredvid varningen och välj Behåll -> Visa mer -> Behåll ändå.

Answer 2

I highly doubt that this is a false positive... the command line under the virus mentions an exclution path?
if im not misstaken that is a path to exclude the virus from being found or am i wrong here?

CmdLine:_C:\Windows\System32\cmd.exe cmd /c powershell -Command Add-MpPreference -ExclusionPath @(($pwd).path, $env:UserProfile,$env:AppData,$env:Temp,$ env:SystemRoot,$env:HomeDrive,$env:SystemDrive) -Force & powershell -Command Add-MpPreference -ExclusionExtension @('exe','dll') -Force & exit

so somthing is running this CMD command everytime i start up my pc...

Answer 3

Hi Vitrix,

Thanks for updating me.

Since the Malwarebytes and DISM command did not find anything on your computer, most probably it is false positive. However, try to Start your computer in Safe Mode with Networking and then scan for the file to see if it would be deleted or not:

https://support.microsoft.com/en-us/windows/sta...

You can also find more troubleshooting steps from the link below, follow the answer by AW:

https://answers.microsoft.com/en-us/protect/for...

Feel free to ask if you need further assistance.

Answer 4

Anonym

Hello there... thanks for your quick respond sadly malewarebytes cant find the virus as i stated above i have tryed every single software out there..
sadly this did not work either it seem like....

0 kommentarer

Answer 5

Hi Vitrix,

I'm Dyari. Thanks for reaching out. I will be happy to assist you in this regard.

Windows Security provides adequate real-time security. If you think it does not remove/quarantine the virus, kindly uninstall any third-party security software and scan for viruses & malware with the free Malwarebytes:

https://www.malwarebytes.com/mwb-download

Then, use system file checker:

https://support.microsoft.com/en-us/windows/usi...

Please do not hesitate to ask if you need further assistance.

Stay safe

____________________________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.