Helper, Comment administrators, rollback
577
edits
Windows XP Horror Edition: Difference between revisions
no edit summary
Nemesis6051 (talk | contribs) mNo edit summary |
Nemesis6051 (talk | contribs) No edit summary |
||
| Line 13: | Line 13: | ||
'''Windows XP Horror Edition''' (also known as '''WinXP.Horror.Destructive''') is a [[screamer]] [[application]] created by [https://github.com/WobbyChip WobbyChip]. It was first distributed to [[YouTube]] user [https://www.youtube.com/channel/UCviSYAcwdnDX1UoRzAHYgNg Siam Alam] to showcase on his channel. | '''Windows XP Horror Edition''' (also known as '''WinXP.Horror.Destructive''') is a [[screamer]] [[application]] created by [https://github.com/WobbyChip WobbyChip]. It was first distributed to [[YouTube]] user [https://www.youtube.com/channel/UCviSYAcwdnDX1UoRzAHYgNg Siam Alam] to showcase on his channel. | ||
== Payload== | |||
Windows XP Horror Edition is a program that disguises itself as a [[wikipedia:Windows XP|Windows XP]] update, but instead installs malware onto the user's computer. Once launched, the program presents a fake update for Windows XP accompanied by [https://youtu.be/5xk-CUTwg1Q title.wma], which is better known as Velkommen or the Windows Welcome Music. The update progresses to 66% completion before issuing an error message that reads:<pre> | Windows XP Horror Edition is a program that disguises itself as a [[wikipedia:Windows XP|Windows XP]] update, but instead installs malware onto the user's computer. Once launched, the program presents a fake update for Windows XP accompanied by [https://youtu.be/5xk-CUTwg1Q title.wma], which is better known as Velkommen or the Windows Welcome Music. The update progresses to 66% completion before issuing an error message that reads:<pre> | ||
Setup cannot copy the file ntdll.dll | Setup cannot copy the file ntdll.dll | ||
Setup will use the file 666.sys | Setup will use the file 666.sys | ||
</pre>When the user clicks "OK", the background turns red, and the Windows XP logo changes to an monochromatic eye with the words <code>Don't Look Behind You</code> accompanied by [https://www.youtube.com/watch?v=_xABEpnkht8 Creepy Music Box] by [https://www.youtube.com/@ShaneKeenMusic/ Shane Keen]. At 100% completion, the screen switches to glitchy static before turning black, with the cursor still visible. After a brief pause, the screen displays a red Windows XP startup animation where the logo is replaced with a red skull with eyes. | </pre>When the user clicks "OK", the background turns red, and the Windows XP logo changes to an monochromatic eye with the words <code>Don't Look Behind You</code> accompanied by [https://www.youtube.com/watch?v=_xABEpnkht8 Creepy Music Box] by [https://www.youtube.com/@ShaneKeenMusic/ Shane Keen]. At 100% completion, the screen switches to glitchy static before turning black, with the cursor still visible. After a brief pause, the screen displays a red Windows XP startup animation where the logo is replaced with a red skull with eyes looking back towards the user. After the animation finishes, it proceeds to the Welcome screen which is now red and has a black, crying eye. | ||
Once the user | Once the user boots into Windows XP Horror Edition, they are greeted by a desktop wallpaper full of skulls, the Start button replaced with text reading <code>''DEAD''</code> and a bloody white hand, and four icons labeled <code>My Computer</code>, <code>NOTHING</code>, <code>DON'T OPEN ME.txt</code>, and <code>Recycle Bin</code>. The desktop background changes to various creepy pictures and glitchy effects, accompanied by [https://youtu.be/6WyH5E8Xs0c Thresh's Theme] from ''[[wikipedia:League of Legends|League of Legends]]''. The malware also changes the default cursor to a bloody cursor, and when hovering over certain assets, it changes to an eyeball cursor. | ||
Clicking the <code>''DEAD''</code> button opens the Start menu, which appears in red and shows that the username has been changed to <code>666</code>. There are two lines of gibberish text with blood splatters, and clicking on them causes them to disappear. Clicking the user icon greets the user with a wooden door, which opens after a few moments with a loud squeak sound. The user is then [[jumpscare|jumpscared]] by Lisa from the ''[[wikipedia:Silent Hills|Silent Hills]]'' demo, [[wikipedia:P.T._(video_game)|''P.T.'']], and then is greeted with<code>GO TO SLEEP</code> written in blood on the screen. | Clicking the <code>''DEAD''</code> button opens the Start menu, which appears in red and shows that the username has been changed to <code>666</code> and the user icon has been changed. There are two lines of gibberish text with blood splatters, and clicking on them causes them to disappear. Clicking the user icon greets the user with a wooden door, which opens after a few moments with a loud squeak sound. The user is then [[jumpscare|jumpscared]] by Lisa from the ''[[wikipedia:Silent Hills|Silent Hills]]'' demo, [[wikipedia:P.T._(video_game)|''P.T.'']], and then is greeted with<code>GO TO SLEEP</code> written in blood on the screen. From this point forward, the user icon appears to twitch in a glitchy manner whenever the Start menu is opened. | ||
Opening the <code>DON'T OPEN ME.txt</code> file opens a Notepad window with bloody text that reads:<pre> | Opening the <code>DON'T OPEN ME.txt</code> file opens a Notepad window with bloody text that reads:<pre> | ||
| Line 38: | Line 36: | ||
When the user clicks the <code>My Computer</code> icon, a message will appear reading: | When the user clicks the <code>My Computer</code> icon, a message will appear reading: | ||
DO YOU SERIOUSLY WANT TRASH YOUR COMPUTER FOREVER? | DO YOU SERIOUSLY WANT TRASH YOUR COMPUTER FOREVER? | ||
Selecting "Yes" will result in the <code>My Computer</code> icon moving to the Recycle Bin, and the screen will then turn black and present a Phantom Balloon Boy jumpscare from ''[[wikipedia:Five Nights at Freddy's 3|Five Nights at Freddy's 3]]'' accompanied by the scream from [[wikipedia:Five_Nights_at_Freddy's_(video_game)|Five Night's at Freddy's]]. Then, a fake Red Screen of Death (RSoD) will appear with the message:<pre> | Selecting "Yes" will result in the <code>My Computer</code> icon moving to the Recycle Bin, and the screen will then turn black and present a Phantom Balloon Boy jumpscare from ''[[wikipedia:Five Nights at Freddy's 3|Five Nights at Freddy's 3]]'' accompanied by the scream from [[wikipedia:Five_Nights_at_Freddy's_(video_game)|Five Night's at Freddy's]]. Then, a fake Red [[wikipedia:Screen_of_death|Screen of Death]] (RSoD) will appear with the message:<pre> | ||
A problem has been detected and windows has been shut down to prevent damage | A problem has been detected and windows has been shut down to prevent damage | ||
to your computer. | to your computer. | ||
| Line 63: | Line 61: | ||
***STOP 0x666666666 (0x6666666666,0x66666666,0x66666666,0x66666666)</pre> | ***STOP 0x666666666 (0x6666666666,0x66666666,0x66666666,0x66666666)</pre> | ||
This message will repeat several times in a line-by-line fashion. Finally, the computer will display a real Blue Screen of Death (BSoD) and reboot. Upon rebooting, the program's final payload overwrites the Master Boot Record (MBR) with an image displaying a monochromatic eye along with the message:<div style="text-align: center;"> | This message will repeat several times in a line-by-line fashion. Finally, the computer will display a real [[wikipedia:Blue_screen_of_death|Blue Screen of Death]] (BSoD) and reboot. Upon rebooting, the program's final payload overwrites the [[wikipedia:Master_boot_record|Master Boot Record]] (MBR) with an image displaying a monochromatic eye along with the message:<div style="text-align: center;"> | ||
I'M WATCHING YOU | I'M WATCHING YOU | ||
Created by WobbyChip | Created by WobbyChip | ||
</div> | </div> | ||
== Restore Solution== | ==Restore Solution== | ||
The program disables Task Manager upon launch, making it impossible to end the process using this tool. To fix the overwritten MBR, the user may use the Windows Setup loader on the installation media, access the Command Prompt through Repair Your Computer, and enter the commands <code>bootrec /fixboot</code> and <code>bootrec /fixmbr</code>. Alternatively, the MBR can be repaired using [https://neosmart.net/EasyRE/ NeoSmart's Easy Recovery Essentials], a recovery and diagnostic tool designed to restore non-functioning Windows computers. | The program disables Task Manager upon launch, making it impossible to end the process using this tool. To fix the overwritten MBR, the user may use the Windows Setup loader on the installation media, access the Command Prompt through Repair Your Computer, and enter the commands <code>bootrec /fixboot</code> and <code>bootrec /fixmbr</code>. Alternatively, the MBR can be repaired using [https://neosmart.net/EasyRE/ NeoSmart's Easy Recovery Essentials], a recovery and diagnostic tool designed to restore non-functioning Windows computers. | ||
==Peaceful Version == | ==Peaceful Version== | ||
The Peaceful version of the software differs from the Destructive version in that after the Phantom Balloon Boy jumpscare and fake RSoD, the application simply closes instead of triggering a BSoD and overwriting the MBR. | The Peaceful version of the software differs from the Destructive version in that after the Phantom Balloon Boy jumpscare and fake RSoD, the application simply closes instead of triggering a BSoD and overwriting the MBR. | ||
==Gallery== | ==Gallery == | ||
<gallery widths="200" position="center" captionsize="small" captionalign="center" spacing="small"> | <gallery widths="200" position="center" captionsize="small" captionalign="center" spacing="small"> | ||
File:WinXPHorror cursor.png|The bloody cursor. | File:WinXPHorror cursor.png|The bloody cursor. | ||
File:WinXP 32761.png|The eyeball cursor. | File:WinXP 32761.png|The eyeball cursor. | ||
File:WinXPHorror Update.png|The update screen payload. | |||
File:WinXPHorror Login.png|The Welcome screen. | |||
File:WinXPHorror Desktop.png|The desktop change payload. | |||
File:WinXPHorror GoToSleep.jpg|The GO TO SLEEP text after the Lisa jumpscare. | |||
File:WinXPHorror StartMenu.png|The Start menu. | File:WinXPHorror StartMenu.png|The Start menu. | ||
File:WinXPHorror Door.jpg|The wooden door. | File:WinXPHorror Door.jpg|The wooden door. | ||
