Strimage.exe: Difference between revisions
From Screamer Wiki
(→'''Download''': Beep Boop Removing a Category and adding comments) |
imported>Uj4w No edit summary |
||
| Line 2: | Line 2: | ||
{{Malicious Scripts}} | {{Malicious Scripts}} | ||
== '''Strimage.exe (a.k.a. GirlGhost2 ~ Immortal Spirit)''' == | == '''Strimage.exe (a.k.a. GirlGhost2 ~ Immortal Spirit)''' == | ||
Strimage.exe is a [[screamer]] program written in VB6 which spread across China in around 2005. It has an icon of folder in Win9X style, | Strimage.exe is a [[screamer]] program written in VB6 which spread across China in around 2005. It has an icon of the folder in Win9X style, attempts to make the user think it's a normal folder and run it. | ||
When executed, it seems that nothing happened. However the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise the [[screamer]] will begin countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the [[screamer]]. | When executed, it seems that nothing happened. However, the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise, the [[screamer]] will begin the countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is a skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the [[screamer]]. | ||
=== '''Trivia''' === | === '''Trivia''' === | ||
* It can be found in source code that the project was firstly named '' | * It can be found in source code that the project was firstly named ''Starfield'' and the caption of the [[screamer]] window is also the same. There is a '''Type''''' ''class in the code-named ''Star ''which featured ''X, Y, Speed, Size, ''and'' Color. ''It seems that the author was initially wanted to write a screensaver or some visual program. | ||
== Links == | == Links == | ||
=== '''Download''' === | === '''Download''' === | ||
<u>NOTE</u>: The following download link contains a [[screamer]] application, <span style="color:red">as a well-known <span style="color:yellow">malicious script</span> that may | <u>NOTE</u>: The following download link contains a [[screamer]] application, <span style="color:red">as a well-known <span style="color:yellow">malicious script</span> that may potentially harm your computer!</span> | ||
* '''Main Program:''' mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ | * '''Main Program:''' mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ | ||
* '''Killer Program (Written by the author in order to remove it):''' mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA | * '''Killer Program (Written by the author in order to remove it):''' mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA | ||
| Line 21: | Line 21: | ||
[[Category:China]] | [[Category:China]] | ||
[[Category:Malicious scripts]] | [[Category:Malicious scripts]] | ||
Revision as of 12:47, 10 October 2019
Strimage.exe (a.k.a. GirlGhost2 ~ Immortal Spirit)
Strimage.exe is a screamer program written in VB6 which spread across China in around 2005. It has an icon of the folder in Win9X style, attempts to make the user think it's a normal folder and run it.
When executed, it seems that nothing happened. However, the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise, the screamer will begin the countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is a skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the screamer.
Trivia
- It can be found in source code that the project was firstly named Starfield and the caption of the screamer window is also the same. There is a Type class in the code-named Star which featured X, Y, Speed, Size, and Color. It seems that the author was initially wanted to write a screensaver or some visual program.
Links
Download
NOTE: The following download link contains a screamer application, as a well-known malicious script that may potentially harm your computer!
- Main Program: mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ
- Killer Program (Written by the author in order to remove it): mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA
- Source Code: mega.nz/#!gOpmxaJR!8M5VfluH3HEMLBnZpyyxv_ZfyVmtCXC0YUpPlSH8-Xg
