Strimage.exe: Difference between revisions

From Screamer Wiki
Jump to: navigation, search
No edit summary
(strimage.exe was created in 2001 in the source code files.)
 
(2 intermediate revisions by one other user not shown)
Line 1: Line 1:
{{Deleted}}
{{Deleted}}
'''Strimage.exe''' is a [[screamer]] [[program]] that gained popularity in China during the year 2005. Developed using the VB6 programming language, the program featured an icon resembling a Win9X-style folder, disguising itself as a regular directory.  
{{Infobox
|title = Strimage.exe
|image = ScreamerWarning.png
|maker = Unknown
|type = Application
|date = 2001
}}
'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a Chinese [[screamer]] [[program]] that was created by an unknown user in 2001 and gained popularity during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x|Win9X]]-style folder, likely to disguise itself as a regular directory.  


When launched, the program self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. Consequently, whenever a user attempted to open a JPEG file, the program would be executed. To ensure its operation, Strimage.exe checked the local computer's date. If the day was not Friday, Saturday, or Sunday, the program would terminate itself. However, on one of these specified days, the screamer initiated a countdown period lasting between 5 and 15 minutes, which runs in the background.
== Payload ==
When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening [[wikipedia:JPEG|JPEG]] files. The malware was executed every time a JPEG file was double-clicked.
 
The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen.
 
The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.


Once the countdown concluded, the program's main payload was unveiled: a haunting image of a girl with half of her face a skeleton. The remaining eyeball on the other side could move, accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen. Additionally, within the program's source code, its initial project name "StarField" can be found; the screamer window's caption also shares the same name. The code includes a "Type" class named "Star," featuring properties such as "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or a similar visual program.
== Links ==
== Links ==
<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
* files.screamer.wiki/other/Strimage.zip '''(Including the cleaner program and VB6 source code)'''
* files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
* '''Showcase:''' bilibili.com/video/BV1mt41177jP
<br>
<br>
{{Maliciousnav}}
{{Maliciousnav}}
{{Comments}}
{{Comments}}
[[Category:Malware]][[Category:Applications]]
[[Category:Malware]]
[[Category:Applications]]
[[Category:Other scary images]]
[[Category:Other scary images]]
[[Category:Other makers]]
[[Category:Other makers]]
[[Category:2005]]
[[Category:2001]]
[[Category:China]]
[[Category:China]]
[[Category:Malicious scripts]]
[[Category:Malicious scripts]]

Latest revision as of 14:06, 6 October 2024

This page is about a screamer or shock site, whose original copy has been deleted.
This screamer's original copy is deleted, but the article links to an archive on the Wayback Machine or another saved copy.

Strimage.exe (Chinese: 女鬼2阴魂不散) is a Chinese screamer program that was created by an unknown user in 2001 and gained popularity during the year 2005. It was developed using the Visual Basic 6.0 programming language and its icon resembled a Win9X-style folder, likely to disguise itself as a regular directory.

Payload

When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. The malware was executed every time a JPEG file was double-clicked.

The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen.

The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.

Links

NOTE: The following download link contains a screamer application and a well known malicious script that could potentially harm your computer!

  • files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
  • Showcase: bilibili.com/video/BV1mt41177jP


Comments

Comments

Loading comments...