Strimage.exe: Difference between revisions
Jerhan2010 (talk | contribs) (Undo revision 99821 by Lawiki1534 (talk)) Tag: Undo |
No edit summary |
||
| Line 1: | Line 1: | ||
{{ | {{Malicious}} | ||
'''Strimage.exe''' is a [[screamer]] program written in VB6 which spread across China in around 2005. | '''Strimage.exe''' is a [[screamer]] program written in VB6 which spread across China in around 2005. | ||
| Line 8: | Line 8: | ||
It can be found in the source code that the project was firstly named ''StarField'' and the caption of the [[screamer]] window is also the same. There is a '''Type''''' ''class in the code-named ''Star ''which featured ''X, Y, Speed, Size ''and'' Color. ''It seems like that the author was initially wanted to write a screensaver or some visual program. | It can be found in the source code that the project was firstly named ''StarField'' and the caption of the [[screamer]] window is also the same. There is a '''Type''''' ''class in the code-named ''Star ''which featured ''X, Y, Speed, Size ''and'' Color. ''It seems like that the author was initially wanted to write a screensaver or some visual program. | ||
== Links == | == Links == | ||
<u>NOTE</u>: The following download link contains a [[screamer]] application | <u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">malicious script</span> that could potentially harm your computer!</span> | ||
* mega.nz/#!ckAn3QRB!FeBfTj5fZz5ADBuprpSpeWp1DqF2zYi5z--F9he4zUQ | * mega.nz/#!ckAn3QRB!FeBfTj5fZz5ADBuprpSpeWp1DqF2zYi5z--F9he4zUQ | ||
* '''Killer Program (Written by the author in order to remove it)''': mega.nz/#!EGAhDbRK!Whb4oCftezhguhuiwceBc4mcH004a6LuxL-nH7qA | * '''Killer Program (Written by the author in order to remove it)''': mega.nz/#!EGAhDbRK!Whb4oCftezhguhuiwceBc4mcH004a6LuxL-nH7qA | ||
* '''Source Code''': mega.nz/#!gOpmxaJR!8FYRaJUH3HeMLBnZpyyxv_ZfyVmtCXC0YUpPlSH8-Xg | * '''Source Code''': mega.nz/#!gOpmxaJR!8FYRaJUH3HeMLBnZpyyxv_ZfyVmtCXC0YUpPlSH8-Xg | ||
<br> | |||
{{Maliciousnav}} | |||
{{Comments}} | {{Comments}} | ||
[[Category:Applications]] | [[Category:Applications]] | ||
Revision as of 13:08, 14 January 2022
Template:Malicious Strimage.exe is a screamer program written in VB6 which spread across China in around 2005.
It has an icon of the folder in Win9X style, attempts to make the user think it's a normal folder and run it. When executed, it seems that nothing happened. However, the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run, Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise, the screamer will begin the countdown for a random amount of time between 5 minutes and 15 minutes in the background.
After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is a skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the screamer.
Source code
It can be found in the source code that the project was firstly named StarField and the caption of the screamer window is also the same. There is a Type class in the code-named Star which featured X, Y, Speed, Size and Color. It seems like that the author was initially wanted to write a screensaver or some visual program.
Links
NOTE: The following download link contains a screamer application and a well known malicious script that could potentially harm your computer!
- mega.nz/#!ckAn3QRB!FeBfTj5fZz5ADBuprpSpeWp1DqF2zYi5z--F9he4zUQ
- Killer Program (Written by the author in order to remove it): mega.nz/#!EGAhDbRK!Whb4oCftezhguhuiwceBc4mcH004a6LuxL-nH7qA
- Source Code: mega.nz/#!gOpmxaJR!8FYRaJUH3HeMLBnZpyyxv_ZfyVmtCXC0YUpPlSH8-Xg
