"...So far, it is unclear whether Orbit Downloader's were complicit in all this or the software and its website have long been compromised by outside attackers.
The latest vulnerable version of the software is still available for download from the official site, but has been removed from popular file download sites MajorGeeks and Softpedia. Hopefully other will follow their example.
In the meantime, ESET has decided to make its AV software detect all versions of Orbit Downloader with DoS functionality. Trend Micro, Kaspersky Land and Ikarus decided to follow suit, at least for the latest version of OD.
Users are advised to deinstall the software and choose another one for their needs."