Unable to reproduce this. I only see the string “virat” inside the expanded_url properties of some of the returned Tweets. Additionally, “virat” is a different string to “viratkohli”, so adding %20-virat to the end of the query successfully excludes those entries as well.
If you’re not seeing the results you expect then please carefully check the documentation on search syntax, where these rules are made clear.