Strimage.exe: Difference between revisions

From Screamer Wiki
Jump to: navigation, search
No edit summary
(strimage.exe was created in 2001 in the source code files.)
 
(6 intermediate revisions by 3 users not shown)
Line 1: Line 1:
{{Deleted}}
{{Deleted}}
'''Strimage.exe''' was a [[screamer]] program that became popular in China around 2005. The program is written in VB6 and has an icon that looks like a folder in the Win9X style, which tricks the user into thinking that it is a normal folder. When executed, the program copies itself to several system directories, deletes the original file, and sets itself to be the default application for opening JPEG files. Thus, each time a user double-clicks on a JPEG file, the program will be called to run. The program checks the date on the local computer and if it is not Friday, Saturday or Sunday, the program will terminate itself. However, if the date is one of these days, the screamer will begin a countdown for a random amount of time between 5 and 15 minutes in the background.
{{Infobox
|title = Strimage.exe
|image = ScreamerWarning.png
|maker = Unknown
|type = Application
|date = 2001
}}
'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a Chinese [[screamer]] [[program]] that was created by an unknown user in 2001 and gained popularity during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x|Win9X]]-style folder, likely to disguise itself as a regular directory.  
 
== Payload ==
When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening [[wikipedia:JPEG|JPEG]] files. The malware was executed every time a JPEG file was double-clicked.
 
The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect.  Users could exit the screamer by clicking anywhere on the screen.  
 
The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.


After the countdown, the main payload of the program is displayed, which is a ghostly girl with half of her face being a skeleton. The eyeball on the other half can move and a crying sound effect is played. Clicking anywhere will exit the screamer. It can be found in the source code that the project was initially named "StarField" and the caption of the screamer window is also the same. The code contains a "Type" class named "Star" that features "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or some sort of visual program.
== Links ==
== Links ==
<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
* files.screamer.wiki/other/Strimage.zip '''(Including the cleaner program and VB6 source code)'''
* files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
* '''Showcase:''' bilibili.com/video/BV1mt41177jP
<br>
<br>
{{Maliciousnav}}
{{Maliciousnav}}
{{Comments}}
{{Comments}}
[[Category:Malware]]
[[Category:Applications]]
[[Category:Applications]]
[[Category:Other scary images]]
[[Category:Other scary images]]
[[Category:Other makers]]
[[Category:Other makers]]
[[Category:2005]]
[[Category:2001]]
[[Category:China]]
[[Category:China]]
[[Category:Malicious scripts]]
[[Category:Malicious scripts]]

Latest revision as of 14:06, 6 October 2024

This page is about a screamer or shock site, whose original copy has been deleted.
This screamer's original copy is deleted, but the article links to an archive on the Wayback Machine or another saved copy.

Strimage.exe (Chinese: 女鬼2阴魂不散) is a Chinese screamer program that was created by an unknown user in 2001 and gained popularity during the year 2005. It was developed using the Visual Basic 6.0 programming language and its icon resembled a Win9X-style folder, likely to disguise itself as a regular directory.

Payload

When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. The malware was executed every time a JPEG file was double-clicked.

The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen.

The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.

Links

NOTE: The following download link contains a screamer application and a well known malicious script that could potentially harm your computer!

  • files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
  • Showcase: bilibili.com/video/BV1mt41177jP


Comments

Comments

Loading comments...