What is Storm Codec?

Storm Codec is software application developed by lain. It is most commonly found on computers running Windows 7 with nearly 57.06% of installations running this operating system. Storm Codec's installer is typically 41.00 MB in size and installs around 49 files. The most common release is 6.10.00 with 32.35% of all installations currently using this version.

Storm Codec is most popular in Egypt with 18.03% of installations residing in this country.

Storm Codec adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Storm Codec is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

Multiple virus scanners have detected malware in Storm Codec.

QuickTimePlayer.exe (MD5: 81d2a6253a4711856f6ac68904a0cb51) has been flagged by 2 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.6379	W32.HfsAdware.4E85
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

StormSet.exe (MD5: 9b8091469a909cc9ace1519f5eefb8c7) has been flagged by 15 scanners:

Scanner Software	Version	Result
Agnitum Outpost	7.1.1	Adware.Adware
Avira AntiVir	7.11.114.120	DR/Agent.NHT.205831
avast!	2014.9-131123	NSIS:Downloader-GJ [Trj]
AVG	2014.0.3646	Win32/DH
Bkav FE	1.3.0.4562	W32.SysDropper
Comodo Security	17298	UnclassifiedMalware
Dr.Web	9.0.0.0327	Adware.Yassist
G Data	13.11.22	Win32.Trojan.Agent.0M1RPC
IKARUS anti.virus	t3scan.2.2.29	AdWare
McAfee	5600.7268	Artemis!9A420AE23494
Norman	10.20131123	Suspicious_Gen4.PGJH
Sophos	4.94	Generic PUA MN
Symantec	11/23/2013 rev. 7	WS.Reputation
VIPRE Antivirus	23518	Trojan.Win32.Generic!BT
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

Software Behaviors

Firewall:

QuickTimePlayer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\QuickTimePlayer.exe'.
QTTask.exe is added as a firewall exception for 'C:\Program Files\QuickTime\qttask.exe'.
PictureViewer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\PictureViewer.exe'.

Scheduled tasks:

PictureViewer.exe is scheduled as a task with the class '{59B81E13-9FE0-4FDB-838B-883F7568B0EF}' (runs on registration).
QuickTimePlayer.exe is scheduled as a task with the class '{643A96A2-5B9A-4248-9806-936994C581B9}' (runs on registration).
GSpot.exe is scheduled as a task with the class '{CF136FA3-4730-4F6F-A011-026DEC497FEB}' (runs on registration).
AviC.exe is scheduled as a task with the class '{E172B339-6E92-4CA6-9785-247D31A03CD7}' (runs on registration).

Startup Entries

Startup tasks:

QTTask.exe is automatically launched at startup through a scheduled task named QuickTime Task_Reg_HKLMWow6432Run.

Registry entries:

QTTask.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Task' and executes as "C:\Program Files\QuickTime\QTTask.exe" -atboottime.
QuickTimePlayer.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Player' and executes as C:\Program Files\QuickTime\QuickTimePlayer.exe.

Software Details

URL:

https://ringz.doggiehome.com

Support:

–

Installation path:

C:\Program Files\Ringz Studio\Storm Codec

Uninstaller:

C:\Program Files\Ringz Studio\Storm Codec\uninst.exe

Size:

41.00 MB

Language:

English

Storm Codec Executable Details

Primary executable:

uninst6.10.00.exe

Name:

Storm Codec

Path:

C:\Program Files\Ringz Studio\Storm Codec\uninst6.10.00.exe

MD5:

–

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

rpau3260.dll

a798c27e4dd2f3d90a8f4738b9e85f5a

DLL

rjwmapln.dll

d61979eb789940b680a24a3cf503f773

DLL

rjprog.dll

8046e31136089291b49c60f6e3500e4f

DLL

rjdlg.dll

69c063f6b0ab1269a3c936eb07a4c427

DLL

rjbres.dll

fc5993b5286dcab2a8d1c7ce3be16226

EXE

realjbox.exe

0b86fa33c3fbf2675ba7a80a82ff607e

DLL

rdsf3260.dll

ba6d4d6ab573d54e3cd4d9941b7e99d6

DLL

mmcdda32.dll

25a59a3d99d41de185d3bba877638371

DLL

rpshellsearch.dll

a3003b82b1272fc8bfc4b037daa272bf

EXE

rphelperapp.exe

50863a5c5fd8d5b62df1d48348f6b23b