Gfg.exe: Difference between revisions
gfg.exe was made in visual basic according to vsantivirus about this screamer. |
Screamer image & virus info still exist. |
||
(5 intermediate revisions by 3 users not shown) | |||
Line 1: | Line 1: | ||
{{Infobox | {{PLS}}{{Infobox | ||
|title = gfg.exe | |title = gfg.exe | ||
|image = Ghostgirl2.jpg | |image = Ghostgirl2.jpg | ||
Line 11: | Line 11: | ||
The icon is a low-resolution image of a yellow smiley face. When the user launches the application, it runs in the background, so it seems that nothing happened. However, after a short period of time, the application will suddenly display a full-screened picture of [[Crazy Ghost]] along with a loud scream. | The icon is a low-resolution image of a yellow smiley face. When the user launches the application, it runs in the background, so it seems that nothing happened. However, after a short period of time, the application will suddenly display a full-screened picture of [[Crazy Ghost]] along with a loud scream. | ||
The application will then begin to show the screamer at random intervals and repeatedly open and close the disk tray to annoy the user | The application will then begin to show the screamer at random intervals and repeatedly open and close the disk tray to annoy the user, and will also run everytime the computer finishes its startup process by creating entries in the '''"HKLM\Software\Microsoft\Windows\CurrentVersion\Run"''' and '''"HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices"''' registry keys. The application will even turn the computer on automatically at midnight hours while it is turned off so that the screamer can appear while the user is most likely sleeping so that they can get scared either way. | ||
== Links == | == Links == | ||
<u>NOTE</u>: The following | <u>NOTE</u>: The following links contains a picture of the [[screamer]] | ||
*'''Virus info | *'''Virus info:''' hybrid-analysis.com/sample/82d26220eeb8b13d253de579f604e7d7ac8abd03a2b98a924c5b14cfa4040cea/5723068caac2ed112bfd9d9d | ||
*'''Removal (contains the screamer image):''' vsantivirus.com/ghostgirl.htm | *'''Removal (contains the screamer image):''' vsantivirus.com/ghostgirl.htm | ||
{{Maliciousnav}} | {{Maliciousnav}} |