Windows XP Horror Edition

From Screamer Wiki
Revision as of 12:39, 8 June 2023 by Nemesis6051 (talk | contribs)
Jump to: navigation, search

This article contains spoilers!
Please be advised that the following article contains spoilers for the screamer mentioned in the title or description. If you have not yet experienced the material and wish to avoid spoilers, we recommend that you proceed with caution or refrain from reading until you have done so.

Windows XP Horror Edition is a screamer application created by WobbyChip, and was first distributed to YouTube user Siam Alam to showcase on his channel.

Gameplay

Payload

The wallpaper and the changes from the program's payload.

Windows XP Horror Edition is a program that disguises itself as a Windows XP update, but instead installs malware onto the user's computer. Once launched, the program presents a fake update for Windows XP, accompanied by the installation music for Windows XP. The update progresses to 66% completion before issuing an error message that reads:

Setup cannot copy the file ntdll.dll  
Setup will use the file 666.sys 

When the user clicks "OK", the background turns red, and the Windows XP logo changes to an eye with the words Don't Look Behind You accompanied by a creepy chime soundtrack.

The "GO TO SLEEP" text after the first jumpscare

At 100% completion, the screen switches to glitchy static before turning black, with the cursor still visible. After a brief pause, the screen displays a red Windows XP startup animation where the logo is replaced with a red skull with eyes. Once the user logs into Windows XP Horror Edition, they are greeted by a desktop wallpaper full of skulls, the Start button replaced with text reading DEAD and a bloody white hand, and four icons labeled My Computer, NOTHING, DON'T OPEN ME.txt, and Recycle Bin.

The desktop background changes to various creepy pictures and glitchy effects, accompanied by Thresh's Theme from League of Legends. Clicking the DEAD button opens the Start menu, which appears in red and shows that the username has been changed to 666. Clicking on any programs within the Start menu causes them to disappear. Clicking the icon on the top bar greets the user with a wooden door, which opens after a few moments with a loud squeak sound. The user is then jumpscared by Lisa from the Silent Hills demo, P.T., and then is greeted withGO TO SLEEP written in blood on the screen.

Opening the DON'T OPEN ME.txt file opens a Notepad window with the message:

CONGRATULATION YOU OPENED ME
DO YOU WANNA PLAY A GAME
OKEY THEN LOOK BEHIND YOU

The screen then switches to a jumpscare from the video game Granny with a very loud screech, followed by text that reads Game Over.The Notepad icon then twitches in a glitchy fashion and cannot be opened again.

The file labeled NOTHING displays a video called The Sad Man created by the animator Jake Lavaupon launching. Similar to DON'T OPEN ME.txt, after the animation finishes, the icon then twitches in a glitchy fashion and cannot be opened again.

At certain points during use, the screen may change to a Half-Life 3 image with a trollface version of Bill Gates' head or to other horror images. Additionally, after displaying several error messages that read Task Manager has been disabled by your administrator. the program will emit the nope.avi soundbite before returning to the desktop.

Upon opening the My Computer icon, a message will appear asking the user if they truly wish to "trash" their computer permanently. Selecting "Yes" will result in the My Computer icon moving to the Recycle Bin icon, and the screen will then turn black before presenting a Phantom BB jumpscare from Five Nights at Freddy's 3. Following this, the FNaF 1 scream will play, a false BSOD will appear with the message "The problem seems to be caused by the following file 666.sys," and this message will repeat several times in a line-by-line fashion. Finally, the computer will display a real BSOD and reboot. Upon the next boot, the program's final payload overwrites the Master Boot Record (MBR) and displays an eye along with the message "I'M WATCHING YOU" at the bottom of the screen.

Restore solution

The program disables Task Manager upon launch, making it impossible to stop using this tool. To fix the overwritten MBR, the user may use the Windows setup loader on the installation media, access the Command Prompt through "Repair Your Computer," and enter the commands "bootrec /fixboot" and "bootrec /fixmbr." Alternatively, the MBR can be repaired using NeoSmart's Easy Recovery Essentials, a recovery/diagnostic tool designed to restore non-functioning computers. A "Peaceful" version of the software differs from the standard version in two ways. First, after the Phantom BB jumpscare from FNaF 3 and false BSOD, the application simply closes instead of causing the computer to crash with a real BSOD. Second, the user may close the application by pressing either ALT + F4 or CTRL + ALT + DEL.

Links

NOTE: The following applications contain multiple screamers, as well as a malicious script that will harm your computer!

  • Destructive Version: archive.org/details/WinXP.Horror.DestructiveCreatedByWobbyChip_201811
  • Destructive & Peaceful Versions: archive.org/details/winxp.horror.destructive

Showcases


Comments

Comments

Loading comments...