Windows XP Horror Edition: Difference between revisions
Nemesis6051 (talk | contribs) mNo edit summary |
Nemesis6051 (talk | contribs) No edit summary |
||
| Line 5: | Line 5: | ||
{{Infobox | {{Infobox | ||
|title = Windows XP Horror Edition | |title = Windows XP Horror Edition | ||
|image = | |image = WinXPHorror Icon.png | ||
|maker = WobbyChip | |maker = WobbyChip | ||
|type = Application | |type = Application | ||
|date = 2018 | |date = 2018 | ||
|imagecaption = The | |imagecaption = The .exe icon. | ||
}} | }} | ||
'''Windows XP Horror Edition''' (also known as '''WinXP.Horror.Destructive''') is a [[screamer]] application created by [https://github.com/WobbyChip WobbyChip]. It was first distributed to [[YouTube]] user [https://www.youtube.com/channel/UCviSYAcwdnDX1UoRzAHYgNg Siam Alam] to showcase on his channel. | '''Windows XP Horror Edition''' (also known as '''WinXP.Horror.Destructive''') is a [[screamer]] application created by [https://github.com/WobbyChip WobbyChip]. It was first distributed to [[YouTube]] user [https://www.youtube.com/channel/UCviSYAcwdnDX1UoRzAHYgNg Siam Alam] to showcase on his channel. | ||
==Gameplay== | == Gameplay== | ||
===Payload=== | ===Payload=== | ||
[[File: | [[File:WinXPHorror Update.png|thumb|The update screen payload. |250x250px]] | ||
Windows XP Horror Edition is a program that disguises itself as a [[wikipedia:Windows XP|Windows XP]] update, but instead installs malware onto the user's computer. Once launched, the program presents a fake update for Windows XP accompanied by [https://youtu.be/5xk-CUTwg1Q title.wma], which is better known as Velkommen or the Windows Welcome Music. The update progresses to 66% completion before issuing an error message that reads:<pre> | Windows XP Horror Edition is a program that disguises itself as a [[wikipedia:Windows XP|Windows XP]] update, but instead installs malware onto the user's computer. Once launched, the program presents a fake update for Windows XP accompanied by [https://youtu.be/5xk-CUTwg1Q title.wma], which is better known as Velkommen or the Windows Welcome Music. The update progresses to 66% completion before issuing an error message that reads:<pre> | ||
Setup cannot copy the file ntdll.dll | Setup cannot copy the file ntdll.dll | ||
| Line 20: | Line 21: | ||
</pre> | </pre> | ||
When the user clicks "OK", the background turns red, and the Windows XP logo changes to an eye with the words <code>Don't Look Behind You</code> accompanied by a creepy chime soundtrack. | When the user clicks "OK", the background turns red, and the Windows XP logo changes to an eye with the words <code>Don't Look Behind You</code> accompanied by a creepy chime soundtrack. At 100% completion, the screen switches to glitchy static before turning black, with the cursor still visible. After a brief pause, the screen displays a red Windows XP startup animation where the logo is replaced with a red skull with eyes. | ||
[[File:WinXPHorror Desktop.png|left|thumb|The desktop change payload.|250x250px]]Once the user logs into Windows XP Horror Edition, they are greeted by a desktop wallpaper full of skulls, the Start button replaced with text reading <code>''DEAD''</code> and a bloody white hand, and four icons labeled <code>My Computer</code>, <code>NOTHING</code>, <code>DON'T OPEN ME.txt</code>, and <code>Recycle Bin</code>. The desktop background changes to various creepy pictures and glitchy effects, accompanied by [https://youtu.be/6WyH5E8Xs0c Thresh's Theme] from ''[[wikipedia:League of Legends|League of Legends]]''. | |||
At 100% completion, the screen switches to glitchy static before turning black, with the cursor still visible. After a brief pause, the screen displays a red Windows XP startup animation where the logo is replaced with a red skull with eyes. Once the user logs into Windows XP Horror Edition, they are greeted by a desktop wallpaper full of skulls, the Start button replaced with text reading <code>''DEAD''</code> and a bloody white hand, and four icons labeled <code>My Computer</code>, <code>NOTHING</code>, <code>DON'T OPEN ME.txt</code>, and <code>Recycle Bin</code>. | |||
Clicking the <code>''DEAD''</code> button opens the Start menu, which appears in red and shows that the username has been changed to <code>666</code>. Clicking on any programs within the Start menu causes them to disappear. Clicking the icon on the top bar greets the user with a wooden door, which opens after a few moments with a loud squeak sound. The user is then [[jumpscare|jumpscared]] by Lisa from the ''[[wikipedia:Silent Hills|Silent Hills]]'' demo, [[wikipedia:P.T._(video_game)|''P.T.'']], and then is greeted with<code>GO TO SLEEP</code> written in blood on the screen. [[File:WinXPHorror GoToSleep.jpg|thumb|250x250px|The GO TO SLEEP text after the Lisa jumpscare.]] | |||
Opening the <code>DON'T OPEN ME.txt</code> file opens a Notepad window with the message:<pre> | Opening the <code>DON'T OPEN ME.txt</code> file opens a Notepad window with the message:<pre> | ||
| Line 33: | Line 33: | ||
The file labeled <code>NOTHING</code> displays a video called [https://www.youtube.com/watch?v=KqXbz4kIWGE The Sad Man] created by the animator [https://www.youtube.com/channel/UChoxc58JVjk_HVVWdtYxsjg Jake Lava]upon launching. Similar to <code>DON'T OPEN ME.txt</code>, after the animation finishes, the icon then twitches in a glitchy fashion and cannot be opened again. | The file labeled <code>NOTHING</code> displays a video called [https://www.youtube.com/watch?v=KqXbz4kIWGE The Sad Man] created by the animator [https://www.youtube.com/channel/UChoxc58JVjk_HVVWdtYxsjg Jake Lava]upon launching. Similar to <code>DON'T OPEN ME.txt</code>, after the animation finishes, the icon then twitches in a glitchy fashion and cannot be opened again. | ||
At certain points during use, the screen may change to a ''[[wikipedia:Half-Life 3|Half-Life 3]]'' image with a [[wikipedia:Trollface|trollface]] version of [[wikipedia:Gabe_Newell|Gabe Newell]] accompanied by the [https://www.youtube.com/watch?v=DdcdeS9kzFo Valve Theme], or to other screamers. Additionally, after displaying several error messages that read <code>Task Manager has been disabled by your administrator.</code> the program will emit the [https://www.youtube.com/watch?v=gvdf5n-zI14 nope.avi] soundbite before returning to the desktop. | At certain points during use, the screen may change to a ''[[wikipedia:Half-Life 3|Half-Life 3]]'' image with a [[wikipedia:Trollface|trollface]] version of [[wikipedia:Gabe_Newell|Gabe Newell]] accompanied by the [https://www.youtube.com/watch?v=DdcdeS9kzFo Valve Theme], or to other screamers. Additionally, after displaying several error messages that read <code>Task Manager has been disabled by your administrator.</code> the program will emit the [https://www.youtube.com/watch?v=gvdf5n-zI14 nope.avi] soundbite before returning to the desktop. Upon clicking the <code>My Computer</code> icon, a message will appear reading: | ||
Upon clicking the <code>My Computer</code> icon, a message will appear reading: | |||
DO YOU SERIOUSLY WANT TRASH YOUR COMPUTER FOREVER? | DO YOU SERIOUSLY WANT TRASH YOUR COMPUTER FOREVER? | ||
Selecting "Yes" will result in the <code>My Computer</code> icon moving to the Recycle Bin, and the screen will then turn black and present a Phantom Balloon Boy jumpscare from ''[[wikipedia:Five Nights at Freddy's 3|Five Nights at Freddy's 3]]'' accompanied by the scream from [[wikipedia:Five_Nights_at_Freddy's_(video_game)|Five Night's at Freddy's]]. Then, a fake Red Screen of Death (RSoD) will appear with the message:<pre> | Selecting "Yes" will result in the <code>My Computer</code> icon moving to the Recycle Bin, and the screen will then turn black and present a Phantom Balloon Boy jumpscare from ''[[wikipedia:Five Nights at Freddy's 3|Five Nights at Freddy's 3]]'' accompanied by the scream from [[wikipedia:Five_Nights_at_Freddy's_(video_game)|Five Night's at Freddy's]]. Then, a fake Red Screen of Death (RSoD) will appear with the message:<pre> | ||
| Line 66: | Line 64: | ||
Created by WobbyChip | Created by WobbyChip | ||
</div> | </div> | ||
===Restore solution === | ===Restore solution=== | ||
The program disables Task Manager upon launch, making it impossible to end the process using this tool. To fix the overwritten MBR, the user may use the Windows Setup loader on the installation media, access the Command Prompt through Repair Your Computer, and enter the commands <code>bootrec /fixboot</code> and <code>bootrec /fixmbr</code>. Alternatively, the MBR can be repaired using [https://neosmart.net/EasyRE/ NeoSmart's Easy Recovery Essentials], a recovery and diagnostic tool designed to restore non-functioning Windows computers. | The program disables Task Manager upon launch, making it impossible to end the process using this tool. To fix the overwritten MBR, the user may use the Windows Setup loader on the installation media, access the Command Prompt through Repair Your Computer, and enter the commands <code>bootrec /fixboot</code> and <code>bootrec /fixmbr</code>. Alternatively, the MBR can be repaired using [https://neosmart.net/EasyRE/ NeoSmart's Easy Recovery Essentials], a recovery and diagnostic tool designed to restore non-functioning Windows computers. | ||
=== Peaceful Version === | ===Peaceful Version=== | ||
The Peaceful version of the software differs from the Destructive version in two ways. First, after the Phantom Balloon Boy jumpscare and fake RSoD, the application simply closes instead of triggering a BSoD and overwriting the MBR. Second, the user may close the application by pressing either <code>ALT + F4</code> or <code>CTRL + ALT + DEL</code>. | The Peaceful version of the software differs from the Destructive version in two ways. First, after the Phantom Balloon Boy jumpscare and fake RSoD, the application simply closes instead of triggering a BSoD and overwriting the MBR. Second, the user may close the application by pressing either <code>ALT + F4</code> or <code>CTRL + ALT + DEL</code>. | ||
==Links== | ==Links== | ||
Revision as of 18:21, 8 June 2023
 |
This article contains spoilers! |
|---|
Windows XP Horror Edition (also known as WinXP.Horror.Destructive) is a screamer application created by WobbyChip. It was first distributed to YouTube user Siam Alam to showcase on his channel.
Gameplay
Payload
Windows XP Horror Edition is a program that disguises itself as a Windows XP update, but instead installs malware onto the user's computer. Once launched, the program presents a fake update for Windows XP accompanied by title.wma, which is better known as Velkommen or the Windows Welcome Music. The update progresses to 66% completion before issuing an error message that reads:
Setup cannot copy the file ntdll.dll Setup will use the file 666.sys
When the user clicks "OK", the background turns red, and the Windows XP logo changes to an eye with the words Don't Look Behind You accompanied by a creepy chime soundtrack. At 100% completion, the screen switches to glitchy static before turning black, with the cursor still visible. After a brief pause, the screen displays a red Windows XP startup animation where the logo is replaced with a red skull with eyes.
Once the user logs into Windows XP Horror Edition, they are greeted by a desktop wallpaper full of skulls, the Start button replaced with text reading DEAD and a bloody white hand, and four icons labeled My Computer, NOTHING, DON'T OPEN ME.txt, and Recycle Bin. The desktop background changes to various creepy pictures and glitchy effects, accompanied by Thresh's Theme from League of Legends.
Clicking the DEAD button opens the Start menu, which appears in red and shows that the username has been changed to 666. Clicking on any programs within the Start menu causes them to disappear. Clicking the icon on the top bar greets the user with a wooden door, which opens after a few moments with a loud squeak sound. The user is then jumpscared by Lisa from the Silent Hills demo, P.T., and then is greeted withGO TO SLEEP written in blood on the screen.
Opening the DON'T OPEN ME.txt file opens a Notepad window with the message:
CONGRATULATION YOU OPENED ME DO YOU WANNA PLAY A GAME OKEY THEN LOOK BEHIND YOU
The screen then switches to a jumpscare from the video game Granny with a very loud screech, followed by text that reads Game Over.The Notepad icon then twitches in a glitchy fashion and cannot be opened again.
The file labeled NOTHING displays a video called The Sad Man created by the animator Jake Lavaupon launching. Similar to DON'T OPEN ME.txt, after the animation finishes, the icon then twitches in a glitchy fashion and cannot be opened again.
At certain points during use, the screen may change to a Half-Life 3 image with a trollface version of Gabe Newell accompanied by the Valve Theme, or to other screamers. Additionally, after displaying several error messages that read Task Manager has been disabled by your administrator. the program will emit the nope.avi soundbite before returning to the desktop. Upon clicking the My Computer icon, a message will appear reading:
DO YOU SERIOUSLY WANT TRASH YOUR COMPUTER FOREVER?
Selecting "Yes" will result in the My Computer icon moving to the Recycle Bin, and the screen will then turn black and present a Phantom Balloon Boy jumpscare from Five Nights at Freddy's 3 accompanied by the scream from Five Night's at Freddy's. Then, a fake Red Screen of Death (RSoD) will appear with the message:
A problem has been detected and windows has been shut down to prevent damage to your computer. The problem seems to be caused by the following file: 666.SYS PAGE_FAULT_IN_NONPAGED_AREA If this is the first time you've seen this stop error screen, restart your computer. If this screen appears again, follow these steps: Check to make sure any new hardware or software is properly installed. If this is a new installation, ask your hardware or software maufacturer for any windows Updates you might need. If problems continue, disable or remove any newly installed hardware or software. Disable BIOS memory options such as caching or shadowing. If you need to use Safe Mode to remove or disable components, restart your computer, press F6 to select Advanced Startup Options, and then select Safe Mode. Technical information: ***STOP 0x666666666 (0x6666666666,0x66666666,0x66666666,0x66666666)
This message will repeat several times in a line-by-line fashion. Finally, the computer will display a real Blue Screen of Death (BSoD) and reboot. Upon rebooting, the program's final payload overwrites the Master Boot Record (MBR) with an image displaying an eye along with the message:
I'M WATCHING YOU Created by WobbyChip
Restore solution
The program disables Task Manager upon launch, making it impossible to end the process using this tool. To fix the overwritten MBR, the user may use the Windows Setup loader on the installation media, access the Command Prompt through Repair Your Computer, and enter the commands bootrec /fixboot and bootrec /fixmbr. Alternatively, the MBR can be repaired using NeoSmart's Easy Recovery Essentials, a recovery and diagnostic tool designed to restore non-functioning Windows computers.
Peaceful Version
The Peaceful version of the software differs from the Destructive version in two ways. First, after the Phantom Balloon Boy jumpscare and fake RSoD, the application simply closes instead of triggering a BSoD and overwriting the MBR. Second, the user may close the application by pressing either ALT + F4 or CTRL + ALT + DEL.
Links
NOTE: The following applications contain multiple screamers, as well as a malicious script that will harm your computer!
- Destructive Version: archive.org/details/WinXP.Horror.DestructiveCreatedByWobbyChip_201903
- Destructive & Peaceful Versions: archive.org/details/winxp.horror.destructive
Showcases
