Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Orbit.lnk
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\Orbitdownloader\orbitnet.exe' = '%ProgramFiles%\Orbitdo...
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%ProgramFiles%\Orbitdownloader\orbitdm.exe' = '%ProgramFiles%\Orbitdow...
- firefox.exe
- iexplore.exe
- %ProgramFiles%\Orbitdownloader\language\is-L1NSJ.tmp
- %ProgramFiles%\Orbitdownloader\language\is-BS704.tmp
- %ProgramFiles%\Orbitdownloader\language\is-VQODS.tmp
- %ProgramFiles%\Orbitdownloader\language\is-QEFR4.tmp
- %ProgramFiles%\Orbitdownloader\language\is-U7SV2.tmp
- %ProgramFiles%\Orbitdownloader\language\is-NGNR0.tmp
- %ProgramFiles%\Orbitdownloader\language\is-E4S4E.tmp
- %ProgramFiles%\Orbitdownloader\language\is-6S6RV.tmp
- %ProgramFiles%\Orbitdownloader\language\is-KDCNO.tmp
- %ProgramFiles%\Orbitdownloader\language\is-COG5G.tmp
- %ProgramFiles%\Orbitdownloader\language\is-9B7IF.tmp
- %ProgramFiles%\Orbitdownloader\language\is-0OIMB.tmp
- %ProgramFiles%\Orbitdownloader\language\is-O4HH5.tmp
- %ProgramFiles%\Orbitdownloader\language\is-T2RNI.tmp
- %ProgramFiles%\Orbitdownloader\language\is-N3BDO.tmp
- %ProgramFiles%\Orbitdownloader\language\is-18QIS.tmp
- %ProgramFiles%\Orbitdownloader\language\is-V7466.tmp
- %ProgramFiles%\Orbitdownloader\language\is-K08PI.tmp
- %ProgramFiles%\Orbitdownloader\is-F5D58.tmp
- %ProgramFiles%\Orbitdownloader\is-52A6V.tmp
- %ProgramFiles%\Orbitdownloader\is-5KMMO.tmp
- %ProgramFiles%\Orbitdownloader\is-AGIEV.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\Orbit\Orbit.lnk
- %HOMEPATH%\Desktop\Orbit.lnk
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Orbit.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Orbit\Uninstall Orbit.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Orbit\Homepage.url
- %ProgramFiles%\Orbitdownloader\language\is-RR138.tmp
- %ProgramFiles%\Orbitdownloader\language\is-LGHSO.tmp
- %ProgramFiles%\Orbitdownloader\language\is-SRPHQ.tmp
- %ProgramFiles%\Orbitdownloader\language\is-4FSC0.tmp
- %ProgramFiles%\Orbitdownloader\language\is-0UBME.tmp
- %ProgramFiles%\Orbitdownloader\addons\orbitff\is-FQ1QP.tmp
- %ProgramFiles%\Orbitdownloader\addons\orbitff\chrome\is-UQ77I.tmp
- %ProgramFiles%\Orbitdownloader\language\is-LGHQ3.tmp
- %ProgramFiles%\Orbitdownloader\addons\orbitff\is-1OHSL.tmp
- %ProgramFiles%\Orbitdownloader\language\is-6EP61.tmp
- %ProgramFiles%\Orbitdownloader\is-OEV8I.tmp
- %ProgramFiles%\Orbitdownloader\is-3040P.tmp
- %ProgramFiles%\Orbitdownloader\is-0AG6S.tmp
- %ProgramFiles%\Orbitdownloader\is-8ASQP.tmp
- %ProgramFiles%\Orbitdownloader\is-P0UQ3.tmp
- %ProgramFiles%\Orbitdownloader\is-EUKO0.tmp
- %ProgramFiles%\Orbitdownloader\is-S9CH6.tmp
- %ProgramFiles%\Orbitdownloader\is-L4RPS.tmp
- %ProgramFiles%\Orbitdownloader\is-K07V0.tmp
- %TEMP%\is-1KVSF.tmp\is-VM2J7.tmp
- %TEMP%\is-CGS8C.tmp\_isetup\_RegDLL.tmp
- %TEMP%\RarSFX0\SetupOrbit.exe
- %TEMP%\RarSFX0\Orbit_Install.exe
- %TEMP%\is-CGS8C.tmp\_isetup\_shfoldr.dll
- %ProgramFiles%\Orbitdownloader\is-88L1K.tmp
- %ProgramFiles%\Orbitdownloader\is-M0C74.tmp
- %TEMP%\is-CGS8C.tmp\saction.dll
- %APPDATA%\Orbit\Conf.dat
- %ProgramFiles%\Orbitdownloader\language\is-UVANC.tmp
- %ProgramFiles%\Orbitdownloader\language\is-0GS88.tmp
- %ProgramFiles%\Orbitdownloader\language\is-9IV4U.tmp
- %ProgramFiles%\Orbitdownloader\language\is-AQBAK.tmp
- %ProgramFiles%\Orbitdownloader\language\is-HT2IU.tmp
- %ProgramFiles%\Orbitdownloader\language\is-TQNC3.tmp
- %ProgramFiles%\Orbitdownloader\language\is-D30H7.tmp
- %ProgramFiles%\Orbitdownloader\language\is-1UJNL.tmp
- %ProgramFiles%\Orbitdownloader\language\is-4K8RH.tmp
- %ProgramFiles%\Orbitdownloader\is-D915I.tmp
- %ProgramFiles%\Orbitdownloader\is-ILV7U.tmp
- %ProgramFiles%\Orbitdownloader\is-O12SD.tmp
- %ProgramFiles%\Orbitdownloader\is-0MNMN.tmp
- %ProgramFiles%\Orbitdownloader\language\is-PE7D5.tmp
- %ProgramFiles%\Orbitdownloader\language\is-FU9U3.tmp
- %ProgramFiles%\Orbitdownloader\language\is-AQ0AR.tmp
- %ProgramFiles%\Orbitdownloader\language\is-KUH5E.tmp
- %ProgramFiles%\Orbitdownloader\language\is-29EM6.tmp
- from %ProgramFiles%\Orbitdownloader\language\is-L1NSJ.tmp to %ProgramFiles%\Orbitdownloader\language\obplk.ini
- from %ProgramFiles%\Orbitdownloader\language\is-QEFR4.tmp to %ProgramFiles%\Orbitdownloader\language\obnor.ini
- from %ProgramFiles%\Orbitdownloader\language\is-VQODS.tmp to %ProgramFiles%\Orbitdownloader\language\obnld.ini
- from %ProgramFiles%\Orbitdownloader\language\is-BS704.tmp to %ProgramFiles%\Orbitdownloader\language\obptb.ini
- from %ProgramFiles%\Orbitdownloader\language\is-KDCNO.tmp to %ProgramFiles%\Orbitdownloader\language\obrus.ini
- from %ProgramFiles%\Orbitdownloader\language\is-6S6RV.tmp to %ProgramFiles%\Orbitdownloader\language\obrom.ini
- from %ProgramFiles%\Orbitdownloader\language\is-U7SV2.tmp to %ProgramFiles%\Orbitdownloader\language\obptg.ini
- from %ProgramFiles%\Orbitdownloader\language\is-18QIS.tmp to %ProgramFiles%\Orbitdownloader\language\obmki.ini
- from %ProgramFiles%\Orbitdownloader\language\is-9B7IF.tmp to %ProgramFiles%\Orbitdownloader\language\obhun.ini
- from %ProgramFiles%\Orbitdownloader\language\is-COG5G.tmp to %ProgramFiles%\Orbitdownloader\language\obhrv.ini
- from %ProgramFiles%\Orbitdownloader\language\is-O4HH5.tmp to %ProgramFiles%\Orbitdownloader\language\obheb.ini
- from %ProgramFiles%\Orbitdownloader\language\is-T2RNI.tmp to %ProgramFiles%\Orbitdownloader\language\obind.ini
- from %ProgramFiles%\Orbitdownloader\language\is-N3BDO.tmp to %ProgramFiles%\Orbitdownloader\language\obkor.ini
- from %ProgramFiles%\Orbitdownloader\language\is-K08PI.tmp to %ProgramFiles%\Orbitdownloader\language\objpn.ini
- from %ProgramFiles%\Orbitdownloader\language\is-V7466.tmp to %ProgramFiles%\Orbitdownloader\language\obita.ini
- from %ProgramFiles%\Orbitdownloader\addons\orbitff\chrome\is-UQ77I.tmp to %ProgramFiles%\Orbitdownloader\addons\orbitff\chrome\orbit.jar
- from %ProgramFiles%\Orbitdownloader\addons\orbitff\is-FQ1QP.tmp to %ProgramFiles%\Orbitdownloader\addons\orbitff\install.rdf
- from %ProgramFiles%\Orbitdownloader\addons\orbitff\is-1OHSL.tmp to %ProgramFiles%\Orbitdownloader\addons\orbitff\chrome.manifest
- from %ProgramFiles%\Orbitdownloader\is-5KMMO.tmp to %ProgramFiles%\Orbitdownloader\saction.dll
- from %ProgramFiles%\Orbitdownloader\is-52A6V.tmp to %ProgramFiles%\Orbitdownloader\Grab.exe
- from %ProgramFiles%\Orbitdownloader\is-F5D58.tmp to %ProgramFiles%\Orbitdownloader\GrabDll.dll
- from %ProgramFiles%\Orbitdownloader\is-AGIEV.tmp to %ProgramFiles%\Orbitdownloader\winfile.dll
- from %ProgramFiles%\Orbitdownloader\language\is-LGHQ3.tmp to %ProgramFiles%\Orbitdownloader\language\obvit.ini
- from %ProgramFiles%\Orbitdownloader\language\is-SRPHQ.tmp to %ProgramFiles%\Orbitdownloader\language\obsrb.ini
- from %ProgramFiles%\Orbitdownloader\language\is-E4S4E.tmp to %ProgramFiles%\Orbitdownloader\language\obsqi.ini
- from %ProgramFiles%\Orbitdownloader\language\is-NGNR0.tmp to %ProgramFiles%\Orbitdownloader\language\obsky.ini
- from %ProgramFiles%\Orbitdownloader\language\is-4FSC0.tmp to %ProgramFiles%\Orbitdownloader\language\obswe.ini
- from %ProgramFiles%\Orbitdownloader\language\is-0UBME.tmp to %ProgramFiles%\Orbitdownloader\language\obukr.ini
- from %ProgramFiles%\Orbitdownloader\language\is-LGHSO.tmp to %ProgramFiles%\Orbitdownloader\language\obtrk.ini
- from %ProgramFiles%\Orbitdownloader\language\is-RR138.tmp to %ProgramFiles%\Orbitdownloader\language\obtha.ini
- from %ProgramFiles%\Orbitdownloader\language\is-0OIMB.tmp to %ProgramFiles%\Orbitdownloader\language\obfra.ini
- from %ProgramFiles%\Orbitdownloader\is-S9CH6.tmp to %ProgramFiles%\Orbitdownloader\GrabKernel.dll
- from %ProgramFiles%\Orbitdownloader\is-EUKO0.tmp to %ProgramFiles%\Orbitdownloader\GrabPro.dll
- from %ProgramFiles%\Orbitdownloader\is-K07V0.tmp to %ProgramFiles%\Orbitdownloader\orbitcth.dll
- from %ProgramFiles%\Orbitdownloader\is-O12SD.tmp to %ProgramFiles%\Orbitdownloader\Lang.ini
- from %ProgramFiles%\Orbitdownloader\is-ILV7U.tmp to %ProgramFiles%\Orbitdownloader\siteinfo.ini
- from %ProgramFiles%\Orbitdownloader\is-D915I.tmp to %ProgramFiles%\Orbitdownloader\banurl.ini
- from %ProgramFiles%\Orbitdownloader\is-0MNMN.tmp to %ProgramFiles%\Orbitdownloader\changelog.txt
- from %ProgramFiles%\Orbitdownloader\is-L4RPS.tmp to %ProgramFiles%\Orbitdownloader\orbitmxt.dll
- from %ProgramFiles%\Orbitdownloader\is-0AG6S.tmp to %ProgramFiles%\Orbitdownloader\ssleay32.dll
- from %ProgramFiles%\Orbitdownloader\is-M0C74.tmp to %ProgramFiles%\Orbitdownloader\libeay32.dll
- from %ProgramFiles%\Orbitdownloader\is-88L1K.tmp to %ProgramFiles%\Orbitdownloader\unins000.exe
- from %ProgramFiles%\Orbitdownloader\is-8ASQP.tmp to %ProgramFiles%\Orbitdownloader\orbitdm.exe
- from %ProgramFiles%\Orbitdownloader\is-P0UQ3.tmp to %ProgramFiles%\Orbitdownloader\orbitnet.exe
- from %ProgramFiles%\Orbitdownloader\is-3040P.tmp to %ProgramFiles%\Orbitdownloader\idht.dll
- from %ProgramFiles%\Orbitdownloader\is-OEV8I.tmp to %ProgramFiles%\Orbitdownloader\download.dll
- from %ProgramFiles%\Orbitdownloader\language\is-1UJNL.tmp to %ProgramFiles%\Orbitdownloader\language\obesn.ini
- from %ProgramFiles%\Orbitdownloader\language\is-HT2IU.tmp to %ProgramFiles%\Orbitdownloader\language\obeng.ini
- from %ProgramFiles%\Orbitdownloader\language\is-0GS88.tmp to %ProgramFiles%\Orbitdownloader\language\obell.ini
- from %ProgramFiles%\Orbitdownloader\language\is-4K8RH.tmp to %ProgramFiles%\Orbitdownloader\language\obeso.ini
- from %ProgramFiles%\Orbitdownloader\language\is-6EP61.tmp to %ProgramFiles%\Orbitdownloader\language\obfin.ini
- from %ProgramFiles%\Orbitdownloader\language\is-D30H7.tmp to %ProgramFiles%\Orbitdownloader\language\obfar.ini
- from %ProgramFiles%\Orbitdownloader\language\is-TQNC3.tmp to %ProgramFiles%\Orbitdownloader\language\obesv.ini
- from %ProgramFiles%\Orbitdownloader\language\is-UVANC.tmp to %ProgramFiles%\Orbitdownloader\language\obdeu.ini
- from %ProgramFiles%\Orbitdownloader\language\is-29EM6.tmp to %ProgramFiles%\Orbitdownloader\language\obbgr.ini
- from %ProgramFiles%\Orbitdownloader\language\is-KUH5E.tmp to %ProgramFiles%\Orbitdownloader\language\obara.ini
- from %ProgramFiles%\Orbitdownloader\language\is-PE7D5.tmp to %ProgramFiles%\Orbitdownloader\language\obafr.ini
- from %ProgramFiles%\Orbitdownloader\language\is-FU9U3.tmp to %ProgramFiles%\Orbitdownloader\language\obcat.ini
- from %ProgramFiles%\Orbitdownloader\language\is-AQBAK.tmp to %ProgramFiles%\Orbitdownloader\language\obcsy.ini
- from %ProgramFiles%\Orbitdownloader\language\is-9IV4U.tmp to %ProgramFiles%\Orbitdownloader\language\obcht.ini
- from %ProgramFiles%\Orbitdownloader\language\is-AQ0AR.tmp to %ProgramFiles%\Orbitdownloader\language\obchs.ini
- ClassName: 'orbitdm_app' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\is-1KVSF.tmp\is-VM2J7.tmp' /SL4 $2010A "%TEMP%\RarSFX0\SetupOrbit.exe" 2017048 52736 /VERYSILENT
- '%TEMP%\RarSFX0\SetupOrbit.exe' /VERYSILENT
- '%TEMP%\RarSFX0\Orbit_Install.exe'
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\Orbitdownloader\orbitcth.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\Orbitdownloader\orbitmxt.dll"