What is Storm Codec?

Storm Codec is software application developed by lain. It is most commonly found on computers running Windows 7 with nearly 57.06% of installations running this operating system. Storm Codec's installer is typically 41.00 MB in size and installs around 49 files. The most common release is 6.10.00 with 32.35% of all installations currently using this version.

Storm Codec is most popular in Egypt with 18.03% of installations residing in this country.

Storm Codec adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Storm Codec is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

Multiple virus scanners have detected malware in Storm Codec.

QuickTimePlayer.exe (MD5: 81d2a6253a4711856f6ac68904a0cb51) has been flagged by 2 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.6379	W32.HfsAdware.4E85
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

StormSet.exe (MD5: 9b8091469a909cc9ace1519f5eefb8c7) has been flagged by 15 scanners:

Scanner Software	Version	Result
Agnitum Outpost	7.1.1	Adware.Adware
Avira AntiVir	7.11.114.120	DR/Agent.NHT.205831
avast!	2014.9-131123	NSIS:Downloader-GJ [Trj]
AVG	2014.0.3646	Win32/DH
Bkav FE	1.3.0.4562	W32.SysDropper
Comodo Security	17298	UnclassifiedMalware
Dr.Web	9.0.0.0327	Adware.Yassist
G Data	13.11.22	Win32.Trojan.Agent.0M1RPC
IKARUS anti.virus	t3scan.2.2.29	AdWare
McAfee	5600.7268	Artemis!9A420AE23494
Norman	10.20131123	Suspicious_Gen4.PGJH
Sophos	4.94	Generic PUA MN
Symantec	11/23/2013 rev. 7	WS.Reputation
VIPRE Antivirus	23518	Trojan.Win32.Generic!BT
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

Software Behaviors

Firewall:

QuickTimePlayer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\QuickTimePlayer.exe'.
QTTask.exe is added as a firewall exception for 'C:\Program Files\QuickTime\qttask.exe'.
PictureViewer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\PictureViewer.exe'.

Scheduled tasks:

PictureViewer.exe is scheduled as a task with the class '{59B81E13-9FE0-4FDB-838B-883F7568B0EF}' (runs on registration).
QuickTimePlayer.exe is scheduled as a task with the class '{643A96A2-5B9A-4248-9806-936994C581B9}' (runs on registration).
GSpot.exe is scheduled as a task with the class '{CF136FA3-4730-4F6F-A011-026DEC497FEB}' (runs on registration).
AviC.exe is scheduled as a task with the class '{E172B339-6E92-4CA6-9785-247D31A03CD7}' (runs on registration).

Startup Entries

Startup tasks:

QTTask.exe is automatically launched at startup through a scheduled task named QuickTime Task_Reg_HKLMWow6432Run.

Registry entries:

QTTask.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Task' and executes as "C:\Program Files\QuickTime\QTTask.exe" -atboottime.
QuickTimePlayer.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Player' and executes as C:\Program Files\QuickTime\QuickTimePlayer.exe.

Software Details

URL:

https://ringz.doggiehome.com

Support:

–

Installation path:

C:\Program Files\Ringz Studio\Storm Codec

Uninstaller:

C:\Program Files\Ringz Studio\Storm Codec\uninst.exe

Size:

41.00 MB

Language:

English

Storm Codec Executable Details

Primary executable:

uninst6.10.00.exe

Name:

Storm Codec

Path:

C:\Program Files\Ringz Studio\Storm Codec\uninst6.10.00.exe

MD5:

–

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

GSpot.exe

bb44e314f96581e75223d5801ac1e11e

EXE

mplayerc.exe

0b1fc52f2eb186e04c32e5beb5e1165a

DLL

stormicl.dll

edf1646933454ddf7682cbfabbc6737a

EXE

StormSet.exe

Malware

9b8091469a909cc9ace1519f5eefb8c7

DLL

stormupd.dll

9575695978d142362d162006015de0ce

EXE

uninst7.02.01.exe

d89bec5b5d8c5b63e120c121aea2149c

DLL

d3dx9_27.dll

2286635971face2a65300688a8d0209f

EXE

uninst7.01.19.exe

d6b4b125a75587b64a6c39e71fec5185

DLL

lpk.dll

3288f33be7634c85c251b01d2bab9ea8

DLL

dtdr3260.dll

4413a19e67bfcde6f6dde50324e38de2