VirTool:Win32/ExcludeProc.D pop up from Windows Defender

[Praveen Samota]

The issue started a few days ago. Every 5 minutes I see a pop-up by Windows Defender that a threat is detected, when I clean it, nothing happens, it comes back every time. Checked the name today and it says VirTool:Win32/ExcludeProc.D Read a few threads here saying it's a bitcoin miner and Farbar Recovery Scan Tool (FRST) will help, I've downloaded it and ran the scan, I need someone to look into the log files to detect the issue. Thanks.

Continue reading...