Virus located in C:\Windows\explorer.exe

Viruses and worms
1

Hi There

I am running both Avast and Malwarebytes on the terminal server at work.

After logging in, I have Malwarebytes tell me that there it has blocked multiple random websites and that the process that is trying to access them is
C:\Windows\explorer.exe

However when I scan the system with Malwarebytes or Avast, I am being told that it is clean

HELP!

2

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0

3
I have Malwarebytes tell me that there it has blocked multiple random websites
Consider this [b]Oh, the Sites You Will Never See[/b] https://blog.malwarebytes.org/online-security/2013/05/oh-the-sites-you-will-never-see/

attach logs from guide Asyn gave you

4

For me the strange thing is:

the process that is trying to access them is C:\Windows\explorer.exe

This is usually an underlying process misusing explorer.exe, as that should almost always not require an internet connection.

So the advice by Asyn is very valid.