Gfg.exe

		This screamer/shock site is lost. This page is about a screamer or shock site which doesn't appear to exist anymore. If you have any copies of this, please add them to the page or in the comments. You can also find a comprehensive list of Lost screamers here.

	This screamer/shock site is lost. This page is about a screamer or shock site which doesn't appear to exist anymore. If you have any copies of this, please add them to the page or in the comments.

Gfg.exe, also known as Troj/GhostGirl, or simply GhostGirl, is a Chinese screamer application created by an unknown user on September 11th, 2002 and it was written in Visual Basic 6.0 programming language.

The icon is a low-resolution image of a yellow smiley face. When the user launches the application, it runs in the background, so it seems that nothing happened. However, after a short period of time, the application will suddenly display a full-screened picture of Crazy Ghost along with a loud scream.

The application will then begin to show the screamer at random intervals and repeatedly open and close the disk tray to annoy the user, and will also run everytime the computer finishes its startup process by creating entries in the "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" and "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices" registry keys. The application will even turn the computer on automatically at midnight hours while it is turned off so that the screamer can appear while the user is most likely sleeping so that they can get scared either way.

Links

NOTE: The following links contains a picture of the screamer

Virus info: hybrid-analysis.com/sample/82d26220eeb8b13d253de579f604e7d7ac8abd03a2b98a924c5b14cfa4040cea/5723068caac2ed112bfd9d9d
Removal (contains the screamer image): vsantivirus.com/ghostgirl.htm

Comments

Enable comment auto-refresher

Gfg.exe

Links

Comments

Comments

Navigation menu

Personal tools

Namespaces

Variants

Views

More

Search

Navigation

Community

Screamer Library

Tools