Strimage.exe - Revision history

Intel586 at 22:52, 1 November 2025

2025-11-01T22:52:45Z

← Older revision		Revision as of 15:52, 1 November 2025
Line 3:		Line 3:
	\|title = Strimage.exe		\|title = Strimage.exe
	\|image = ScreamerWarning.png		\|image = ScreamerWarning.png
	\|maker = ~~Unknown~~		\|maker =
	\|type = Application		\|type = [[Application]]
	\|date = 2001		\|date = 2001
	}}		}}
	'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a Chinese [[screamer]] [[program]] ~~that was~~ created by an unknown ~~user~~ in 2001 ~~and~~ gained popularity during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)\|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x\|Win9X]]-style folder, likely to disguise itself as a regular directory.		'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a Chinese [[Screamer#Malicious scripts\|malicious]] [[screamer]] [[program]] created by an unknown person in 2001, which gained popularity during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)\|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x\|Win9X]]-style folder, likely to disguise itself as a regular directory.

	== Payload ==		== Payload ==
Line 17:		Line 17:

	== Links ==		== Links ==
	<u>NOTE</u>: The following download link contains a [[screamer]] application ~~and~~ a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>		<u>NOTE</u>: The following download link contains a [[screamer]] application, as well as a well-known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
	* files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)		* files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
	* '''Showcase:''' bilibili.com/video/BV1mt41177jP		* '''Showcase video:''' bilibili.com/video/BV1mt41177jP
	<br>		<br>
	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}
	[[Category:~~Malware~~]]		[[Category:2001]]
	[[Category:Applications]]		[[Category:Applications]]
	~~[[Category:Other scary images]]~~
	~~[[Category:Other makers]]~~
	~~[[Category:2001]]~~
	[[Category:China]]		[[Category:China]]
	[[Category:Malicious scripts]]		[[Category:Malicious scripts]]
			[[Category:Malware]]
			[[Category:Other scary images]]
			[[Category:Unknown maker]]

Joaovictorsilva: strimage.exe was created in 2001 in the source code files.

2024-10-06T21:06:53Z

strimage.exe was created in 2001 in the source code files.

← Older revision		Revision as of 14:06, 6 October 2024
Line 5:		Line 5:
	\|maker = Unknown		\|maker = Unknown
	\|type = Application		\|type = Application
	\|date = ~~2005~~		\|date = 2001
	}}		}}
	'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a [[screamer]] [[program]] that gained popularity ~~in China~~ during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)\|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x\|Win9X]]-style folder, likely to disguise itself as a regular directory.		'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a Chinese [[screamer]] [[program]] that was created by an unknown user in 2001 and gained popularity during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)\|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x\|Win9X]]-style folder, likely to disguise itself as a regular directory.

	== Payload ==		== Payload ==
Line 27:		Line 27:
	[[Category:Other scary images]]		[[Category:Other scary images]]
	[[Category:Other makers]]		[[Category:Other makers]]
	[[Category:~~2005~~]]		[[Category:2001]]
	[[Category:China]]		[[Category:China]]
	[[Category:Malicious scripts]]		[[Category:Malicious scripts]]

Nemesis6051 at 21:18, 9 April 2024

2024-04-09T21:18:21Z

← Older revision		Revision as of 14:18, 9 April 2024
Line 1:		Line 1:
	{{Deleted}}		{{Deleted}}
	'''Strimage.exe''' is a [[screamer]] [[program]] that gained popularity in China during the year 2005. ~~Developed~~ using the ~~VB6~~ programming language~~, the program featured an~~ icon ~~resembling~~ a Win9X-style folder, ~~disguising~~ itself as a regular directory.		{{Infobox
			\|title = Strimage.exe
			\|image = ScreamerWarning.png
			\|maker = Unknown
			\|type = Application
			\|date = 2005
			}}
			'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a [[screamer]] [[program]] that gained popularity in China during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)\|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x\|Win9X]]-style folder, likely to disguise itself as a regular directory.

	When launched, ~~the program~~ self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. ~~Consequently, whenever a user attempted to open~~ a JPEG file, the ~~program would be executed. To ensure its operation~~, ~~Strimage~~.~~exe checked~~ the ~~local computer~~'s ~~date~~. If the ~~day was not Friday~~, ~~Saturday~~, ~~or Sunday~~, ~~the program would terminate itself. However~~, ~~on one of these specified days~~, ~~the screamer initiated a countdown period lasting between 5~~ and ~~15 minutes~~, which ~~runs in~~ the ~~background~~.		== Payload ==
			When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening [[wikipedia:JPEG\|JPEG]] files. The malware was executed every time a JPEG file was double-clicked.

			The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen.

			The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.

	Once the countdown concluded, the program's main payload was unveiled: a haunting image of a girl with half of her face a skeleton. The remaining eyeball on the other side could move, accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen. Additionally, within the program's source code, its initial project name "StarField" can be found; the screamer window's caption also shares the same name. The code includes a "Type" class named "Star," featuring properties such as "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or a similar visual program.
	== Links ==		== Links ==
	<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>		<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
	* files.screamer.wiki/other/Strimage.zip ~~'''~~(Including the cleaner program and VB6 source code)~~'''~~		* files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
	* '''Showcase:''' bilibili.com/video/BV1mt41177jP/		* '''Showcase:''' bilibili.com/video/BV1mt41177jP
	<br>		<br>
	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}
	[[Category:Malware]][[Category:Applications]]		[[Category:Malware]]
			[[Category:Applications]]
	[[Category:Other scary images]]		[[Category:Other scary images]]
	[[Category:Other makers]]		[[Category:Other makers]]

Nemesis6051: added showcase link

2024-04-09T02:21:07Z

added showcase link

← Older revision		Revision as of 19:21, 8 April 2024
Line 8:		Line 8:
	<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>		<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
	* files.screamer.wiki/other/Strimage.zip '''(Including the cleaner program and VB6 source code)'''		* files.screamer.wiki/other/Strimage.zip '''(Including the cleaner program and VB6 source code)'''
			* '''Showcase:''' bilibili.com/video/BV1mt41177jP/
	<br>		<br>
	{{Maliciousnav}}		{{Maliciousnav}}

SkyTheWanderer at 05:25, 18 December 2023

2023-12-18T05:25:35Z

← Older revision		Revision as of 22:25, 17 December 2023
Line 11:		Line 11:
	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}
	[[Category:~~Malicious softwares~~]]		[[Category:Malware]][[Category:Applications]]
	[[Category:Applications]]
	[[Category:Other scary images]]		[[Category:Other scary images]]
	[[Category:Other makers]]		[[Category:Other makers]]

SkyTheWanderer: major rewrite (from old drafts)

2023-05-20T11:59:37Z

major rewrite (from old drafts)

← Older revision		Revision as of 04:59, 20 May 2023
Line 1:		Line 1:
	{{Deleted}}		{{Deleted}}
	'''Strimage.exe''' ~~was~~ a screamer program that ~~became popular~~ in China ~~around~~ 2005. ~~The~~ program ~~is written in VB6 and has~~ an icon ~~that looks like~~ a ~~folder in the~~ Win9X style~~, which tricks the user into thinking that it is a normal~~ folder~~. When executed, the program copies itself to several system directories, deletes the original file~~, ~~and sets~~ itself ~~to be the default application for opening JPEG files. Therefore, each time~~ a user double-clicks on a JPEG file, the program will be called to run. The program checks the date on the local computer, and if it is not Friday, Saturday, or Sunday, the program will terminate itself. However, if the date is one of these days, the screamer will begin a countdown for a random amount of time between 5 and 15 minutes in the background.		'''Strimage.exe''' is a [[screamer]] [[program]] that gained popularity in China during the year 2005. Developed using the VB6 programming language, the program featured an icon resembling a Win9X-style folder, disguising itself as a regular directory.

	~~After~~ the ~~countdown~~, the ~~main payload of~~ the ~~program is displayed~~, ~~which is~~ a ~~ghostly girl with half of her face being~~ a ~~skeleton~~. ~~The eyeball on the other half can move~~, ~~and a crying sound effect is played~~. ~~Clicking anywhere will exit~~ the ~~screamer~~. In the ~~source code~~, ~~it can be found that~~ the ~~project was initially named "StarField~~,~~" and the caption~~ of the screamer ~~window is also the same. The code contains~~ a ~~"Type" class named "Star~~," which ~~features "X, Y, Speed, Size," and "Color." It appears that~~ the ~~author was initially planning to write a screensaver or some sort of visual program~~.		When launched, the program self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. Consequently, whenever a user attempted to open a JPEG file, the program would be executed. To ensure its operation, Strimage.exe checked the local computer's date. If the day was not Friday, Saturday, or Sunday, the program would terminate itself. However, on one of these specified days, the screamer initiated a countdown period lasting between 5 and 15 minutes, which runs in the background.

			Once the countdown concluded, the program's main payload was unveiled: a haunting image of a girl with half of her face a skeleton. The remaining eyeball on the other side could move, accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen. Additionally, within the program's source code, its initial project name "StarField" can be found; the screamer window's caption also shares the same name. The code includes a "Type" class named "Star," featuring properties such as "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or a similar visual program.
	== Links ==		== Links ==
	<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>		<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>

SkyTheWanderer at 08:24, 14 May 2023

2023-05-14T08:24:23Z

← Older revision		Revision as of 01:24, 14 May 2023
Line 10:		Line 10:
	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}
			[[Category:Malicious softwares]]
	[[Category:Applications]]		[[Category:Applications]]
	[[Category:Other scary images]]		[[Category:Other scary images]]

TWMO: Rewritten

2023-05-04T18:29:07Z

Rewritten

← Older revision		Revision as of 11:29, 4 May 2023
Line 1:		Line 1:
	{{Deleted}}		{{Deleted}}
	'''Strimage.exe''' was a [[screamer]] program that became popular in China around 2005. The program is written in VB6 and has an icon that looks like a folder in the Win9X style, which tricks the user into thinking that it is a normal folder. When executed, the program copies itself to several system directories, deletes the original file, and sets itself to be the default application for opening JPEG files. ~~Thus~~, each time a user double-clicks on a JPEG file, the program will be called to run. The program checks the date on the local computer and if it is not Friday, Saturday or Sunday, the program will terminate itself. However, if the date is one of these days, the screamer will begin a countdown for a random amount of time between 5 and 15 minutes in the background.		'''Strimage.exe''' was a screamer program that became popular in China around 2005. The program is written in VB6 and has an icon that looks like a folder in the Win9X style, which tricks the user into thinking that it is a normal folder. When executed, the program copies itself to several system directories, deletes the original file, and sets itself to be the default application for opening JPEG files. Therefore, each time a user double-clicks on a JPEG file, the program will be called to run. The program checks the date on the local computer, and if it is not Friday, Saturday, or Sunday, the program will terminate itself. However, if the date is one of these days, the screamer will begin a countdown for a random amount of time between 5 and 15 minutes in the background.

			After the countdown, the main payload of the program is displayed, which is a ghostly girl with half of her face being a skeleton. The eyeball on the other half can move, and a crying sound effect is played. Clicking anywhere will exit the screamer. In the source code, it can be found that the project was initially named "StarField," and the caption of the screamer window is also the same. The code contains a "Type" class named "Star," which features "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or some sort of visual program.

	After the countdown, the main payload of the program is displayed, which is a ghostly girl with half of her face being a skeleton. The eyeball on the other half can move and a crying sound effect is played. Clicking anywhere will exit the screamer. It can be found in the source code that the project was initially named "StarField" and the caption of the screamer window is also the same. The code contains a "Type" class named "Star" that features "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or some sort of visual program.
	== Links ==		== Links ==
	<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>		<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>

Likeicare at 12:34, 29 March 2023

2023-03-29T12:34:32Z

← Older revision		Revision as of 05:34, 29 March 2023
Line 4:		Line 4:
	After the countdown, the main payload of the program is displayed, which is a ghostly girl with half of her face being a skeleton. The eyeball on the other half can move and a crying sound effect is played. Clicking anywhere will exit the screamer. It can be found in the source code that the project was initially named "StarField" and the caption of the screamer window is also the same. The code contains a "Type" class named "Star" that features "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or some sort of visual program.		After the countdown, the main payload of the program is displayed, which is a ghostly girl with half of her face being a skeleton. The eyeball on the other half can move and a crying sound effect is played. Clicking anywhere will exit the screamer. It can be found in the source code that the project was initially named "StarField" and the caption of the screamer window is also the same. The code contains a "Type" class named "Star" that features "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or some sort of visual program.
	== Links ==		== Links ==
	<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">malicious script</span> that could potentially harm your computer!</span>		<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
	* files.screamer.wiki/other/Strimage.zip '''(Including the cleaner program and VB6 source code)'''		* files.screamer.wiki/other/Strimage.zip '''(Including the cleaner program and VB6 source code)'''
	<br>		<br>

Likeicare at 12:38, 25 March 2023

2023-03-25T12:38:27Z

← Older revision		Revision as of 05:38, 25 March 2023
Line 1:		Line 1:
	'''Strimage.exe''' is a [[screamer]] program written in VB6 which ~~spread across China~~ in ~~around 2005~~.		{{Deleted}}
			'''Strimage.exe''' was a [[screamer]] program that became popular in China around 2005. The program is written in VB6 and has an icon that looks like a folder in the Win9X style, which tricks the user into thinking that it is a normal folder. When executed, the program copies itself to several system directories, deletes the original file, and sets itself to be the default application for opening JPEG files. Thus, each time a user double-clicks on a JPEG file, the program will be called to run. The program checks the date on the local computer and if it is not Friday, Saturday or Sunday, the program will terminate itself. However, if the date is one of these days, the screamer will begin a countdown for a random amount of time between 5 and 15 minutes in the background.

	~~It has an icon of~~ the ~~folder in Win9X style~~, ~~attempts to make~~ the ~~user think it's a normal folder and run it. When executed, it seems that nothing happened. However,~~ the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run, Then, the program will check the date on the local computer. If the date is ~~not Friday, Saturday or Sunday, the program will terminate itself. Otherwise, the screamer will begin the countdown for a random amount of time between 5 minutes and 15 minutes in the background.~~		After the countdown, the main payload of the program is displayed, which is a ghostly girl with half of her face being a skeleton. The eyeball on the other half can move and a crying sound effect is played. Clicking anywhere will exit the screamer. It can be found in the source code that the project was initially named "StarField" and the caption of the screamer window is also the same. The code contains a "Type" class named "Star" that features "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or some sort of visual program.

	~~After finished counting, the program will show its main payload~~, which is a ghostly girl ~~and~~ half of her face is a skeleton. The eyeball on the other half can move and a crying sound effect ~~will be~~ played. Clicking anywhere will exit the screamer.
	~~===Source code===~~
	It can be found in the source code that the project was ~~firstly~~ named ''StarField'' and the caption of the screamer window is also the same. ~~There is~~ a ~~'''~~Type~~''''' ''~~class ~~in the code-~~named ''Star ~~''which featured ''~~X, Y, Speed, Size ''and'' Color. ''It ~~seems like~~ that the author was initially ~~wanted~~ to write a screensaver or some visual program.
	== Links ==		== Links ==
	<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">malicious script</span> that could potentially harm your computer!</span>		<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">malicious script</span> that could potentially harm your computer!</span>