Strimage.exe
 |
This page is about a screamer or shock site, whose original copy has been deleted. |
|---|
Strimage.exe (Chinese: 女鬼2阴魂不散) is a screamer program that gained popularity in China during the year 2005. It was developed using the Visual Basic 6.0 programming language and its icon resembled a Win9X-style folder, likely to disguise itself as a regular directory.
Payload
When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. The malware was executed every time a JPEG file was double-clicked.
The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen.
The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.
Links
NOTE: The following download link contains a screamer application and a well known malicious script that could potentially harm your computer!
- files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
- Showcase: bilibili.com/video/BV1mt41177jP
