Hello, I have encountered the differentia.ru/order.php and disorderstatus.ru/diff.php malware. My ESET NOD32 Antivirus continually pop up notifications saying it has blocked the current URL but I don't know where it is located. After the initial scan, I reboot my system and the notifications stopped. But I just want to be sure that it is completely removed from my system so I did the FRST scan log. Currently awaiting the next step for this process.