Orbit Downloader

Orbit Downloader
Developer(s)Innoshock
Initial release8 November 2006; 18 years ago (2006-11-08)
Final release
4.1.1.19[1] Edit this on Wikidata / 17 January 2014
Operating systemMicrosoft Windows
PlatformIA-32
TypeMalware (originally download manager)
LicenseMalware (originally adware)
Websiteorbitdownloader.com (Offline)

Orbit Downloader is a freeware, proprietary and graphical download manager with a hidden function of performing DDoS attacks carried out without the user's consent and knowledge[2], available for Windows family operating systems. One of the main lures to install the program is the ability to download video files from sites such as YouTube, Dailymotion and Metacafe. Since version 4.1.1.5, Orbit Downloader has included an orbitdm.exe component, which connects to the program's website, from where it gets two addresses. From one it downloads the location of the malicious DLL file, while from the other it gets more addresses.

The DLL takes a veiled configuration and performs DDoS attacks on targets provided within it[3]. Eset classifies it as a Trojan Win32/DDoS Orbiter.A[4].

Officially, the program supports protocols:

  • HTTP
  • HTTPS
  • FTP
  • Metalink
  • RTSP (Real Time Streaming Protocol)
  • PNM
  • MMS (Microsoft Media Services)
  • RTMP (Real Time Messaging Protocol)

Orbit Downloader works with many browsers, including: Opera, Mozilla Firefox, Microsoft Internet Explorer, Maxthon, Netscape and Google Chrome.

References

[change | change source]
  1. ↑ "Orbit Rich Media Downloader Changelog". Archived from the original on 27 July 2018.
  2. ↑ http://www.welivesecurity.com/2013/08/21/orbital-decay-the-dark-side-of-a-popular-file-downloading-tool/ Orbital Decay: the darkweb of a infamous file downloading tool
  3. ↑ http://www.dobreprogramy.pl/Popularny-Orbit-Downloader-DDoSowal-na-zamowienie,News,45945.html Popular Orbit downloader DDoS-ed to order
  4. ↑ "Win32/DDoS.Orbiter.A". ESET Virusradar.

Other websites

[change | change source]