Strimage.exe: Difference between revisions
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
{{Malicious Scripts}} | {{Malicious Scripts}} | ||
Strimage.exe is a [[screamer]] program written in VB6 which spread across China in around 2005 | Strimage.exe is a [[screamer]] program written in VB6 which spread across China in around 2005. | ||
When executed, it seems that nothing happened. However the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise the [[screamer]] will begin countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the [[screamer]]. | It has an icon of folder in Win9X style, attempt to make the user think it's a normal folder and run it. When executed, it seems that nothing happened. However the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise the [[screamer]] will begin countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the [[screamer]]. | ||
It can be found in source code that the project was firstly named ''StarField'' and the caption of the [[screamer]] window is also the same. There is a '''Type''''' ''class in the code named ''Star ''which featured ''X, Y, Speed, Size ''and'' Color. ''It seems like that the author was initially wanted to write a screensaver or some visual program. | |||
== Links == | == Links == | ||
Revision as of 00:09, 25 November 2019
Template:Malicious Scripts Strimage.exe is a screamer program written in VB6 which spread across China in around 2005.
It has an icon of folder in Win9X style, attempt to make the user think it's a normal folder and run it. When executed, it seems that nothing happened. However the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise the screamer will begin countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the screamer.
It can be found in source code that the project was firstly named StarField and the caption of the screamer window is also the same. There is a Type class in the code named Star which featured X, Y, Speed, Size and Color. It seems like that the author was initially wanted to write a screensaver or some visual program.
Links
Download
NOTE: The following download link contains a screamer application, as a well-known malicious script that may could potentially harm your computer!
- Main Program: mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ
- Killer Program (Written by the author in order to remove it): mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA
- Source Code: mega.nz/#!gOpmxaJR!8M5VfluH3HEMLBnZpyyxv_ZfyVmtCXC0YUpPlSH8-Xg
