What is Storm Codec?

Storm Codec is software application developed by lain. It is most commonly found on computers running Windows 7 with nearly 57.06% of installations running this operating system. Storm Codec's installer is typically 41.00 MB in size and installs around 49 files. The most common release is 6.10.00 with 32.35% of all installations currently using this version.

Storm Codec is most popular in Egypt with 18.03% of installations residing in this country.

Storm Codec adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Storm Codec is known to create 3 firewall exceptions to allow inbound and outbound connectivity.

Multiple virus scanners have detected malware in Storm Codec.

QuickTimePlayer.exe (MD5: 81d2a6253a4711856f6ac68904a0cb51) has been flagged by 2 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.6379	W32.HfsAdware.4E85
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

StormSet.exe (MD5: 9b8091469a909cc9ace1519f5eefb8c7) has been flagged by 15 scanners:

Scanner Software	Version	Result
Agnitum Outpost	7.1.1	Adware.Adware
Avira AntiVir	7.11.114.120	DR/Agent.NHT.205831
avast!	2014.9-131123	NSIS:Downloader-GJ [Trj]
AVG	2014.0.3646	Win32/DH
Bkav FE	1.3.0.4562	W32.SysDropper
Comodo Security	17298	UnclassifiedMalware
Dr.Web	9.0.0.0327	Adware.Yassist
G Data	13.11.22	Win32.Trojan.Agent.0M1RPC
IKARUS anti.virus	t3scan.2.2.29	AdWare
McAfee	5600.7268	Artemis!9A420AE23494
Norman	10.20131123	Suspicious_Gen4.PGJH
Sophos	4.94	Generic PUA MN
Symantec	11/23/2013 rev. 7	WS.Reputation
VIPRE Antivirus	23518	Trojan.Win32.Generic!BT
Emsisoft Anti-Malware	3.0.0.596	Trojan.Zlob.7.Gen (B)

Software Behaviors

Firewall:

QuickTimePlayer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\QuickTimePlayer.exe'.
QTTask.exe is added as a firewall exception for 'C:\Program Files\QuickTime\qttask.exe'.
PictureViewer.exe is added as a firewall exception for 'C:\Program Files\QuickTime\PictureViewer.exe'.

Scheduled tasks:

PictureViewer.exe is scheduled as a task with the class '{59B81E13-9FE0-4FDB-838B-883F7568B0EF}' (runs on registration).
QuickTimePlayer.exe is scheduled as a task with the class '{643A96A2-5B9A-4248-9806-936994C581B9}' (runs on registration).
GSpot.exe is scheduled as a task with the class '{CF136FA3-4730-4F6F-A011-026DEC497FEB}' (runs on registration).
AviC.exe is scheduled as a task with the class '{E172B339-6E92-4CA6-9785-247D31A03CD7}' (runs on registration).

Startup Entries

Startup tasks:

QTTask.exe is automatically launched at startup through a scheduled task named QuickTime Task_Reg_HKLMWow6432Run.

Registry entries:

QTTask.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Task' and executes as "C:\Program Files\QuickTime\QTTask.exe" -atboottime.
QuickTimePlayer.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'QuickTime Player' and executes as C:\Program Files\QuickTime\QuickTimePlayer.exe.

Software Details

URL:

https://ringz.doggiehome.com

Support:

–

Installation path:

C:\Program Files\Ringz Studio\Storm Codec

Uninstaller:

C:\Program Files\Ringz Studio\Storm Codec\uninst.exe

Size:

41.00 MB

Language:

English

Storm Codec Executable Details

Primary executable:

uninst6.10.00.exe

Name:

Storm Codec

Path:

C:\Program Files\Ringz Studio\Storm Codec\uninst6.10.00.exe

MD5:

–

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

realplay.exe

c41dc677bfd289dd9a309b4a9aef416d

DLL

CDDBRealControl.dll

f6a8e736f9b9cc1b8f287d7ee85933a8

DLL

vsfilter.dll

88f81f8326b61edd7d32a77081a7650a

DLL

TTL2Dec.dll

a4cd515e5bef0edf3a7cb12861a1f8f4

EXE

中文化.exe

8b30426d6cf40c169fa3d6cc82b73c43

DLL

Vid1Dec.dll

331fcce268bb9dbd55ae0d9abb8b1379

EXE

uninst6.12.27.exe

a05f7a1668322071926d65620b14721a

EXE

uninst6.09.13.exe

c26079deaa335434887731588f301262

EXE

uninst6.04.08.exe

81544ce8aa427d6930c2195878ec0003