Technical Information
- %WINDIR%\tasks\orangedefender.job
- <SYSTEM32>\tasks\orangedefender
- <SYSTEM32>\tasks\orangedefenderupdate
- %LOCALAPPDATA%\innovative solutions\orange defender\cstscn.txt
- http://www.or####-defender.com/promo8///_v1.xml
- DNS ASK or####-defender.com
- ClassName: 'TfrmUpdateAntivirus' WindowName: '4c4076eb097b101607a557826abf6bb3'