Differentia.ru and disorderstatus.ru

[Evie]

Hello, I have encountered the differentia.ru/order.php and disorderstatus.ru/diff.php malware. My ESET NOD32 Antivirus continually pop up notifications saying it has blocked the current URL but I don't know where it is located. After the initial scan, I reboot my system and the notifications stopped. But I just want to be sure that it is completely removed from my system so I did the FRST scan log. Currently awaiting the next step for this process.

 

[TwinHeadedEagle]

Hello,


Please download Zemana AntiMalware and save it to your Desktop.

• Install the program and once the installation is complete it will start automatically.
• Without changing any options, press Scan to begin.
• After the short scan is finished, if threats are detected press Next to remove them.

Note: If restart is required to finish the cleaning process, you should click Reboot. If reboot isn't required, please restart your computer manually.​

• Open Zemana AntiMalware again.
• Click on
  
  icon and double click the latest report.
• Now click File > Save As and choose your Desktop before pressing Save.
• The only left thing is to attach saved report in your next message.