disorderstatus.ru/order.php and differentia.ru/diff.php threat

Viruses and worms
1

Help me plss! This always popups.

1st.
URL: http://disorderstatus.ru/order.php
Infection: URL:Mal
Process: C:\Windows\SysWOW64\msiexec.exe

2nd.
URL: http://differentia.ru/diff.php
Infection: URL:Mal
Process: C:\Windows\SysWOW64\msiexec.exe

Thank you.

2

follow instructions here https://forum.avast.com/index.php?topic=53253.0
attach Malwarebytes and Farbar Recovery Scan Tool logs … 3 logs total

see below the box you write in … Attachments and other options

3

Monitoring; I will assist you when you post the requested logs. There is not much else that can be done until then.