Сегодня решил проверить хвалёный 360 TS, см. предыдущую запись.

Случайно ткнул на скачку браузера "Орбитум".

Этот подлец позагадил весь реестр.

-- Поиск в HKEY_LOCAL_MACHINE --
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.htm\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.html\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.shtml\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.webp\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xht\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\.xhtml\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU\shell\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU\ = Orbitum HTML Document
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\FileAssociations\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\FileAssociations\.htm = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\FileAssociations\.html = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\FileAssociations\.shtml = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\FileAssociations\.xht = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\FileAssociations\.xhtml = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\FileAssociations\.webp = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\Startmenu\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\Startmenu\StartMenuInternet = Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\ftp = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\http = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\https = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\irc = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\mailto = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\mms = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\news = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\nntp = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\sms = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\smsto = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\tel = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\urn = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\URLAssociations\webcal = OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\ApplicationDescription = Orbitum – браузер, который открывает веб-страницы и приложения за секунды. Он быстр, стабилен в работе и прост в использовании. Встроенная в Orbitum защита от мошенничества и вредоносного ПО обеспечивает максимально безопасную работу в Интернете.
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\ApplicationIcon = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe,0
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities\ApplicationName = Orbitum
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\DefaultIcon\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\DefaultIcon\ = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe,0
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\InstallInfo\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\InstallInfo\ReinstallCommand = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe" --make-default-browser
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\InstallInfo\HideIconsCommand = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe" --hide-icons
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\InstallInfo\ShowIconsCommand = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe" --show-icons
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\shell\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\shell\open\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\shell\open\command\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\shell\open\command\ = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\ = Orbitum
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\OrbitumUpdater\ =
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\ESENT\Process\OrbitumUpdater\DEBUG\ =
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_LOCAL_MACHINE\SOFTWARE\RegisteredApplications\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU = Software\Clients\StartMenuInternet\Orbitum.LGFACYUMBBN7PBAPY7F7S24HXU\Capabilities
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe =
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe:*:Enabled:Orbitum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe =
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet003\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe:*:Enabled:Orbitum P2P Updater
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe =
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe:*:Enabled:Orbitum
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe =
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet005\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe:*:Enabled:Orbitum P2P Updater
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe =
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe:*:Enabled:Orbitum
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe =
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe:*:Enabled:Orbitum P2P Updater
-- Поиск в HKEY_CURRENT_USER --
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F7CF8E2-27D9-4641-845D-3BFEDECE0325}\AppPath = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77E6BE0B-059D-4FF6-A534-4AA0970A7465}\AppPath = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\ =
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\DisplayName = Orbitum
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\UninstallString = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\48.0.2564.97\Installer\setup.exe" --uninstall
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\InstallLocation = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\DisplayIcon = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe,0
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\Publisher = Orbitum
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\ =
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\MimeTypes\ =
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\MimeTypes\application/x-vnd.orbitum.update3webcontrol.3\ =
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\Path = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\npGoogleUpdate3.dll
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\Description = Orbitum Update
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\ProductName = Orbitum Update
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\ =
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\MimeTypes\ =
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\MimeTypes\application/x-vnd.orbitum.oneclickctrl.9\ =
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\Path = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\npGoogleUpdate3.dll
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\Description = Orbitum Update
HKEY_CURRENT_USER\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\ProductName = Orbitum Update
HKEY_CURRENT_USER\Software\Orbitum\ =
HKEY_CURRENT_USER\Software\Orbitum\BLBeacon\ =
HKEY_CURRENT_USER\Software\Orbitum\BLFinchList\ =
HKEY_CURRENT_USER\Software\Orbitum\StabilityMetrics\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}\name = Orbitum Update
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\CommandLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\48.0.2564.97\Installer\setup.exe" --on-os-upgrade --verbose-logging
HKEY_CURRENT_USER\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\name = Orbitum
HKEY_CURRENT_USER\Software\Orbitum\Update\ClientState\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\CurrentState\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\UninstallString = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\48.0.2564.97\Installer\setup.exe
HKEY_CURRENT_USER\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastInstallerSuccessLaunchCmdLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe"
HKEY_CURRENT_USER\Software\Orbitum\Update\proxy\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\UsageStats\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\UsageStats\Daily\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\UsageStats\Daily\Counts\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\UsageStats\Daily\Integers\ =
HKEY_CURRENT_USER\Software\Orbitum\Update\path = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\GoogleUpdate.exe
HKEY_CURRENT_USER\Software\Orbitum\Update\UninstallCmdLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\GoogleUpdate.exe" /uninstall
HKEY_CURRENT_USER\Software\Orbitum\Update\omaha_task_name_c = OrbitumUpdateTaskUserS-1-5-21-1123561945-1035525444-1417001333-500Core1d224b31755bbea
HKEY_CURRENT_USER\Software\Orbitum\Update\LastInstallerSuccessLaunchCmdLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe"
HKEY_CURRENT_USER\Software\Classes\CLSID\{FF8D61CB-C38D-41C7-BFB0-35B8F55AB4FC}\InprocHandler32\ = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\psuser.dll
HKEY_CURRENT_USER\Software\Classes\Mime\Database\Content Type\application/x-vnd.orbitum.oneclickctrl.9\ =
HKEY_CURRENT_USER\Software\Classes\Mime\Database\Content Type\application/x-vnd.orbitum.update3webcontrol.3\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickCtrl.9\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickCtrl.9\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickCtrl.9\ = Orbitum Update Plugin
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser\CurVer\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser\CurVer\ = Orbitum.OneClickProcessLauncherUser.1.0
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser\ = Orbitum.OneClickProcessLauncher
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser.1.0\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser.1.0\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.OneClickProcessLauncherUser.1.0\ = Orbitum.OneClickProcessLauncher
HKEY_CURRENT_USER\Software\Classes\Orbitum.Update3WebControl.3\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.Update3WebControl.3\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\Orbitum.Update3WebControl.3\ = Orbitum Update Plugin
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.CredentialDialogUser\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.CredentialDialogUser\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.CredentialDialogUser\CurVer\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.CredentialDialogUser\CurVer\ = OrbitumUpdate.CredentialDialogUser.1.0
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.CredentialDialogUser.1.0\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.CredentialDialogUser.1.0\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ = OrbitumUpdate.OnDemandCOMClassUser.1.0
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser.1.0\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser.1.0\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3COMClassUser\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3COMClassUser\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3COMClassUser\CurVer\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3COMClassUser\CurVer\ = OrbitumUpdate.Update3COMClassUser.1.0
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3COMClassUser.1.0\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3COMClassUser.1.0\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3WebUser\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3WebUser\CLSID\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3WebUser\CurVer\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3WebUser\CurVer\ = OrbitumUpdate.Update3WebUser.1.0
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3WebUser.1.0\ =
HKEY_CURRENT_USER\Software\Classes\OrbitumUpdate.Update3WebUser.1.0\CLSID\ =
-- Поиск в HKEY_CLASSES_ROOT --
HKEY_CLASSES_ROOT\.htm\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_CLASSES_ROOT\.html\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_CLASSES_ROOT\.shtml\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_CLASSES_ROOT\.webp\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_CLASSES_ROOT\.xht\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_CLASSES_ROOT\.xhtml\OpenWithProgids\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU =
HKEY_CLASSES_ROOT\CLSID\{FF8D61CB-C38D-41C7-BFB0-35B8F55AB4FC}\InprocHandler32\ = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\psuser.dll
HKEY_CLASSES_ROOT\Mime\Database\Content Type\application/x-vnd.orbitum.oneclickctrl.9\ =
HKEY_CLASSES_ROOT\Mime\Database\Content Type\application/x-vnd.orbitum.update3webcontrol.3\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickCtrl.9\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickCtrl.9\CLSID\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickCtrl.9\ = Orbitum Update Plugin
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser\CLSID\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser\CurVer\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser\CurVer\ = Orbitum.OneClickProcessLauncherUser.1.0
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser\ = Orbitum.OneClickProcessLauncher
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser.1.0\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser.1.0\CLSID\ =
HKEY_CLASSES_ROOT\Orbitum.OneClickProcessLauncherUser.1.0\ = Orbitum.OneClickProcessLauncher
HKEY_CLASSES_ROOT\Orbitum.Update3WebControl.3\ =
HKEY_CLASSES_ROOT\Orbitum.Update3WebControl.3\CLSID\ =
HKEY_CLASSES_ROOT\Orbitum.Update3WebControl.3\ = Orbitum Update Plugin
HKEY_CLASSES_ROOT\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU\ =
HKEY_CLASSES_ROOT\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU\shell\ =
HKEY_CLASSES_ROOT\OrbitumHTM.LGFACYUMBBN7PBAPY7F7S24HXU\ = Orbitum HTML Document
HKEY_CLASSES_ROOT\OrbitumUpdate.CredentialDialogUser\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.CredentialDialogUser\CLSID\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.CredentialDialogUser\CurVer\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.CredentialDialogUser\CurVer\ = OrbitumUpdate.CredentialDialogUser.1.0
HKEY_CLASSES_ROOT\OrbitumUpdate.CredentialDialogUser.1.0\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.CredentialDialogUser.1.0\CLSID\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.OnDemandCOMClassUser\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.OnDemandCOMClassUser\CLSID\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ = OrbitumUpdate.OnDemandCOMClassUser.1.0
HKEY_CLASSES_ROOT\OrbitumUpdate.OnDemandCOMClassUser.1.0\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.OnDemandCOMClassUser.1.0\CLSID\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3COMClassUser\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3COMClassUser\CLSID\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3COMClassUser\CurVer\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3COMClassUser\CurVer\ = OrbitumUpdate.Update3COMClassUser.1.0
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3COMClassUser.1.0\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3COMClassUser.1.0\CLSID\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3WebUser\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3WebUser\CLSID\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3WebUser\CurVer\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3WebUser\CurVer\ = OrbitumUpdate.Update3WebUser.1.0
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3WebUser.1.0\ =
HKEY_CLASSES_ROOT\OrbitumUpdate.Update3WebUser.1.0\CLSID\ =
-- Поиск в HKEY_USERS --
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe =
HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe = Orbitum P2P Updater
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2F7CF8E2-27D9-4641-845D-3BFEDECE0325}\AppPath = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{77E6BE0B-059D-4FF6-A534-4AA0970A7465}\AppPath = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\DisplayName = Orbitum
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\UninstallString = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\48.0.2564.97\Installer\setup.exe" --uninstall
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\InstallLocation = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\DisplayIcon = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe,0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Microsoft\Windows\CurrentVersion\Uninstall\Orbitum\Publisher = Orbitum
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\MimeTypes\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\MimeTypes\application/x-vnd.orbitum.update3webcontrol.3\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\Path = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\npGoogleUpdate3.dll
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\Description = Orbitum Update
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=3\ProductName = Orbitum Update
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\MimeTypes\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\MimeTypes\application/x-vnd.orbitum.oneclickctrl.9\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\Path = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\npGoogleUpdate3.dll
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\Description = Orbitum Update
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\MozillaPlugins\@tools.orbitum.com/Orbitum Update;version=9\ProductName = Orbitum Update
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\BLBeacon\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\BLFinchList\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\StabilityMetrics\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\{430FD4D0-B729-4F61-AA34-91526481799D}\name = Orbitum Update
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Commands\on-os-upgrade\CommandLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\48.0.2564.97\Installer\setup.exe" --on-os-upgrade --verbose-logging
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\Clients\{8A69D345-D564-463c-AFF1-A69D9E530F96}\name = Orbitum
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ClientState\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ClientState\{430FD4D0-B729-4F61-AA34-91526481799D}\CurrentState\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\CurrentState\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\UninstallString = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\48.0.2564.97\Installer\setup.exe
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\ClientState\{8A69D345-D564-463C-AFF1-A69D9E530F96}\LastInstallerSuccessLaunchCmdLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe"
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\proxy\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\UsageStats\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\UsageStats\Daily\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\UsageStats\Daily\Counts\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\UsageStats\Daily\Integers\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\path = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\GoogleUpdate.exe
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\UninstallCmdLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\GoogleUpdate.exe" /uninstall
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\omaha_task_name_c = OrbitumUpdateTaskUserS-1-5-21-1123561945-1035525444-1417001333-500Core1d224b31755bbea
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Orbitum\Update\LastInstallerSuccessLaunchCmdLine = "C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\orbitum.exe"
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\CLSID\{FF8D61CB-C38D-41C7-BFB0-35B8F55AB4FC}\InprocHandler32\ = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\psuser.dll
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Mime\Database\Content Type\application/x-vnd.orbitum.oneclickctrl.9\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Mime\Database\Content Type\application/x-vnd.orbitum.update3webcontrol.3\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickCtrl.9\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickCtrl.9\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickCtrl.9\ = Orbitum Update Plugin
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser\CurVer\ = Orbitum.OneClickProcessLauncherUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser\ = Orbitum.OneClickProcessLauncher
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.OneClickProcessLauncherUser.1.0\ = Orbitum.OneClickProcessLauncher
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.Update3WebControl.3\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.Update3WebControl.3\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\Orbitum.Update3WebControl.3\ = Orbitum Update Plugin
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.CredentialDialogUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.CredentialDialogUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.CredentialDialogUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.CredentialDialogUser\CurVer\ = OrbitumUpdate.CredentialDialogUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.CredentialDialogUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.CredentialDialogUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ = OrbitumUpdate.OnDemandCOMClassUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.OnDemandCOMClassUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3COMClassUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3COMClassUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3COMClassUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3COMClassUser\CurVer\ = OrbitumUpdate.Update3COMClassUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3COMClassUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3COMClassUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3WebUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3WebUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3WebUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3WebUser\CurVer\ = OrbitumUpdate.Update3WebUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3WebUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500\Software\Classes\OrbitumUpdate.Update3WebUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\CLSID\{FF8D61CB-C38D-41C7-BFB0-35B8F55AB4FC}\InprocHandler32\ = C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Update\1.3.99.0\psuser.dll
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Mime\Database\Content Type\application/x-vnd.orbitum.oneclickctrl.9\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Mime\Database\Content Type\application/x-vnd.orbitum.update3webcontrol.3\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickCtrl.9\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickCtrl.9\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickCtrl.9\ = Orbitum Update Plugin
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser\CurVer\ = Orbitum.OneClickProcessLauncherUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser\ = Orbitum.OneClickProcessLauncher
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.OneClickProcessLauncherUser.1.0\ = Orbitum.OneClickProcessLauncher
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.Update3WebControl.3\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.Update3WebControl.3\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\Orbitum.Update3WebControl.3\ = Orbitum Update Plugin
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.CredentialDialogUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.CredentialDialogUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.CredentialDialogUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.CredentialDialogUser\CurVer\ = OrbitumUpdate.CredentialDialogUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.CredentialDialogUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.CredentialDialogUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.OnDemandCOMClassUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.OnDemandCOMClassUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.OnDemandCOMClassUser\CurVer\ = OrbitumUpdate.OnDemandCOMClassUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.OnDemandCOMClassUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.OnDemandCOMClassUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3COMClassUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3COMClassUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3COMClassUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3COMClassUser\CurVer\ = OrbitumUpdate.Update3COMClassUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3COMClassUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3COMClassUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3WebUser\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3WebUser\CLSID\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3WebUser\CurVer\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3WebUser\CurVer\ = OrbitumUpdate.Update3WebUser.1.0
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3WebUser.1.0\ =
HKEY_USERS\S-1-5-21-1123561945-1035525444-1417001333-500_Classes\OrbitumUpdate.Update3WebUser.1.0\CLSID\ =
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe =
HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\Documents and Settings\Admin\Local Settings\Application Data\Orbitum\Application\OrbitumUpdater\OrbitumUpdater.exe = Orbitum P2P Updater


Мало того, его невозможно удалить средствами винды, так в установленных программах этой твари не оказалось.

Попытка просто удалить папку, провалилась.

Пришлось запускать unlocker1.9.0-portable.

Короче, полное дерьмо!