What is Storm Codec?

Storm Codec is software application developed by lain. It is most commonly found on computers running Windows 7 with nearly 57.06% of installations running this operating system. Storm Codec's installer is typically 41.00 MB in size and installs around 49 files. The most common release is 6.10.00 with 32.35% of all installations currently using this version.

Storm Codec is most popular in Egypt with 18.03% of installations residing in this country.

Storm Codec adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Storm Codec is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

Multiple virus scanners have detected malware in Storm Codec.

QuickTimePlayer.exe (MD5: 81d2a6253a4711856f6ac68904a0cb51) has been flagged by 2 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.6379	W32.HfsAdware.4E85
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

StormSet.exe (MD5: 9b8091469a909cc9ace1519f5eefb8c7) has been flagged by 15 scanners:

Scanner Software	Version	Result
Agnitum Outpost	7.1.1	Adware.Adware
Avira AntiVir	7.11.114.120	DR/Agent.NHT.205831
avast!	2014.9-131123	NSIS:Downloader-GJ [Trj]
AVG	2014.0.3646	Win32/DH
Bkav FE	1.3.0.4562	W32.SysDropper
Comodo Security	17298	UnclassifiedMalware
Dr.Web	9.0.0.0327	Adware.Yassist
G Data	13.11.22	Win32.Trojan.Agent.0M1RPC
IKARUS anti.virus	t3scan.2.2.29	AdWare
McAfee	5600.7268	Artemis!9A420AE23494
Norman	10.20131123	Suspicious_Gen4.PGJH
Sophos	4.94	Generic PUA MN
Symantec	11/23/2013 rev. 7	WS.Reputation
VIPRE Antivirus	23518	Trojan.Win32.Generic!BT
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

Software Behaviors

Firewall:

QuickTimePlayer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\QuickTimePlayer.exe'.
QTTask.exe is added as a firewall exception for 'C:\Program Files\QuickTime\qttask.exe'.
PictureViewer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\PictureViewer.exe'.

Scheduled tasks:

PictureViewer.exe is scheduled as a task with the class '{59B81E13-9FE0-4FDB-838B-883F7568B0EF}' (runs on registration).
QuickTimePlayer.exe is scheduled as a task with the class '{643A96A2-5B9A-4248-9806-936994C581B9}' (runs on registration).
GSpot.exe is scheduled as a task with the class '{CF136FA3-4730-4F6F-A011-026DEC497FEB}' (runs on registration).
AviC.exe is scheduled as a task with the class '{E172B339-6E92-4CA6-9785-247D31A03CD7}' (runs on registration).

Startup Entries

Startup tasks:

QTTask.exe is automatically launched at startup through a scheduled task named QuickTime Task_Reg_HKLMWow6432Run.

Registry entries:

QTTask.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Task' and executes as "C:\Program Files\QuickTime\QTTask.exe" -atboottime.
QuickTimePlayer.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Player' and executes as C:\Program Files\QuickTime\QuickTimePlayer.exe.

Software Details

URL:

https://ringz.doggiehome.com

Support:

–

Installation path:

C:\Program Files\Ringz Studio\Storm Codec

Uninstaller:

C:\Program Files\Ringz Studio\Storm Codec\uninst.exe

Size:

41.00 MB

Language:

English

Storm Codec Executable Details

Primary executable:

uninst6.10.00.exe

Name:

Storm Codec

Path:

C:\Program Files\Ringz Studio\Storm Codec\uninst6.10.00.exe

MD5:

–

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

DUNZIP32.dll

91127ccff7798803784b19b6f40c14dc

EXE

fixrjb.exe

f81c337477591d1dd62a61a9164dd78a

DLL

ierjplug.dll

2bbec6e9aa2fbe20d1112751f99d42a4

EXE

uninst6.10.00.exe

1dcc8c38fb3a4495fc034161596e7d79

EXE

AviC.exe

eb6686ed23c97e240fb3386fbe87217a

EXE

uninst6.08.13.exe

503935b07603ccdf91669ae5dae7bd3d

DLL

rpwa3260.dll

0412c5322b16a8829c62c3c60df2d7c8

DLL

tnetdtct.dll

c75bfe5234cacfae4c0a7e62565938b5

DLL

rpshell.dll

f3ab57a7cc5198d917c7ff70d30dba56

DLL

rpplugprot.dll

c21a534aa9ceb43be39feb84ec37fc1b