Strimage.exe: Difference between revisions
From Screamer Wiki
imported>Uj4w No edit summary |
m (7 revisions imported) |
||
| Line 2: | Line 2: | ||
{{Malicious Scripts}} | {{Malicious Scripts}} | ||
== '''Strimage.exe (a.k.a. GirlGhost2 ~ Immortal Spirit)''' == | == '''Strimage.exe (a.k.a. GirlGhost2 ~ Immortal Spirit)''' == | ||
Strimage.exe is a [[screamer]] program written in VB6 which spread across China in around 2005. It has an icon of | Strimage.exe is a [[screamer]] program written in VB6 which spread across China in around 2005. It has an icon of folder in Win9X style, attempt to make the user think it's a normal folder and run it. | ||
When executed, it seems that nothing happened. However | When executed, it seems that nothing happened. However the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise the [[screamer]] will begin countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the [[screamer]]. | ||
=== '''Trivia''' === | === '''Trivia''' === | ||
* It can be found in source code that the project was firstly named '' | * It can be found in source code that the project was firstly named ''StarField'' and the caption of the [[screamer]] window is also the same. There is a '''Type''''' ''class in the code named ''Star ''which featured ''X, Y, Speed, Size ''and'' Color. ''It seems like that the author was initially wanted to write a screensaver or some visual program. | ||
== Links == | == Links == | ||
=== '''Download''' === | === '''Download''' === | ||
<u>NOTE</u>: The following download link contains a [[screamer]] application, <span style="color:red">as a well-known <span style="color:yellow">malicious script</span> that may potentially harm your computer!</span> | <u>NOTE</u>: The following download link contains a [[screamer]] application, <span style="color:red">as a well-known <span style="color:yellow">malicious script</span> that may could potentially harm your computer!</span> | ||
* '''Main Program:''' mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ | * '''Main Program:''' mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ | ||
* '''Killer Program (Written by the author in order to remove it):''' mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA | * '''Killer Program (Written by the author in order to remove it):''' mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA | ||
| Line 21: | Line 21: | ||
[[Category:China]] | [[Category:China]] | ||
[[Category:Malicious scripts]] | [[Category:Malicious scripts]] | ||
{{Comments}} | |||
Revision as of 11:02, 24 November 2019
Strimage.exe (a.k.a. GirlGhost2 ~ Immortal Spirit)
Strimage.exe is a screamer program written in VB6 which spread across China in around 2005. It has an icon of folder in Win9X style, attempt to make the user think it's a normal folder and run it.
When executed, it seems that nothing happened. However the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise the screamer will begin countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the screamer.
Trivia
- It can be found in source code that the project was firstly named StarField and the caption of the screamer window is also the same. There is a Type class in the code named Star which featured X, Y, Speed, Size and Color. It seems like that the author was initially wanted to write a screensaver or some visual program.
Links
Download
NOTE: The following download link contains a screamer application, as a well-known malicious script that may could potentially harm your computer!
- Main Program: mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ
- Killer Program (Written by the author in order to remove it): mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA
- Source Code: mega.nz/#!gOpmxaJR!8M5VfluH3HEMLBnZpyyxv_ZfyVmtCXC0YUpPlSH8-Xg
Comments
Comments
Loading comments...
