What is Storm Codec?

Storm Codec is software application developed by lain. It is most commonly found on computers running Windows 7 with nearly 57.06% of installations running this operating system. Storm Codec's installer is typically 41.00 MB in size and installs around 49 files. The most common release is 6.10.00 with 32.35% of all installations currently using this version.

Storm Codec is most popular in Egypt with 18.03% of installations residing in this country.

Storm Codec adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Storm Codec is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

Multiple virus scanners have detected malware in Storm Codec.

QuickTimePlayer.exe (MD5: 81d2a6253a4711856f6ac68904a0cb51) has been flagged by 2 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.6379	W32.HfsAdware.4E85
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

StormSet.exe (MD5: 9b8091469a909cc9ace1519f5eefb8c7) has been flagged by 15 scanners:

Scanner Software	Version	Result
Agnitum Outpost	7.1.1	Adware.Adware
Avira AntiVir	7.11.114.120	DR/Agent.NHT.205831
avast!	2014.9-131123	NSIS:Downloader-GJ [Trj]
AVG	2014.0.3646	Win32/DH
Bkav FE	1.3.0.4562	W32.SysDropper
Comodo Security	17298	UnclassifiedMalware
Dr.Web	9.0.0.0327	Adware.Yassist
G Data	13.11.22	Win32.Trojan.Agent.0M1RPC
IKARUS anti.virus	t3scan.2.2.29	AdWare
McAfee	5600.7268	Artemis!9A420AE23494
Norman	10.20131123	Suspicious_Gen4.PGJH
Sophos	4.94	Generic PUA MN
Symantec	11/23/2013 rev. 7	WS.Reputation
VIPRE Antivirus	23518	Trojan.Win32.Generic!BT
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

Software Behaviors

Firewall:

QuickTimePlayer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\QuickTimePlayer.exe'.
QTTask.exe is added as a firewall exception for 'C:\Program Files\QuickTime\qttask.exe'.
PictureViewer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\PictureViewer.exe'.

Scheduled tasks:

PictureViewer.exe is scheduled as a task with the class '{59B81E13-9FE0-4FDB-838B-883F7568B0EF}' (runs on registration).
QuickTimePlayer.exe is scheduled as a task with the class '{643A96A2-5B9A-4248-9806-936994C581B9}' (runs on registration).
GSpot.exe is scheduled as a task with the class '{CF136FA3-4730-4F6F-A011-026DEC497FEB}' (runs on registration).
AviC.exe is scheduled as a task with the class '{E172B339-6E92-4CA6-9785-247D31A03CD7}' (runs on registration).

Startup Entries

Startup tasks:

QTTask.exe is automatically launched at startup through a scheduled task named QuickTime Task_Reg_HKLMWow6432Run.

Registry entries:

QTTask.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Task' and executes as "C:\Program Files\QuickTime\QTTask.exe" -atboottime.
QuickTimePlayer.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Player' and executes as C:\Program Files\QuickTime\QuickTimePlayer.exe.

Software Details

URL:

https://ringz.doggiehome.com

Support:

–

Installation path:

C:\Program Files\Ringz Studio\Storm Codec

Uninstaller:

C:\Program Files\Ringz Studio\Storm Codec\uninst.exe

Size:

41.00 MB

Language:

English

Storm Codec Executable Details

Primary executable:

uninst6.10.00.exe

Name:

Storm Codec

Path:

C:\Program Files\Ringz Studio\Storm Codec\uninst6.10.00.exe

MD5:

–

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

QuickTimePlayer.exe

Malware

81d2a6253a4711856f6ac68904a0cb51

DLL

QuickTimePlayer.dll

0775401aa51aa893d7a45b2a28ea9efa

DLL

QTUIPanelControl.dll

04335644668945c885129096975af688

EXE

qttask.exe

9accbc5891ba51b5b29c1a88f80d4ce3

DLL

QTOLibrary.dll

5befa128a6414a321bd0300eef1e39de

DLL

QTOControl.dll

988a8689ba2d436b31f5dbcb11cd104b

EXE

QTInfo.exe

fc4b6f2b46e889b7e84a5f1027bdb08b

EXE

PictureViewer.exe

f949c7855b9e7a2a604c8747cf893aec

OCX

QTPlugin.ocx

050f9c98eede361356245bff2889df67

EXE

uninst.exe

26a5dfc5821c1bc7c9a5842e22e3dc65

File Type	Filename	MD5
EXE	QuickTimePlayer.exe Malware	81d2a6253a4711856f6ac68904a0cb51
DLL	QuickTimePlayer.dll	0775401aa51aa893d7a45b2a28ea9efa
DLL	QTUIPanelControl.dll	04335644668945c885129096975af688
EXE	qttask.exe	9accbc5891ba51b5b29c1a88f80d4ce3
DLL	QTOLibrary.dll	5befa128a6414a321bd0300eef1e39de
DLL	QTOControl.dll	988a8689ba2d436b31f5dbcb11cd104b
EXE	QTInfo.exe	fc4b6f2b46e889b7e84a5f1027bdb08b
EXE	PictureViewer.exe	f949c7855b9e7a2a604c8747cf893aec
OCX	QTPlugin.ocx	050f9c98eede361356245bff2889df67
EXE	uninst.exe	26a5dfc5821c1bc7c9a5842e22e3dc65