Strimage.exe: Difference between revisions

From Screamer Wiki
Jump to: navigation, search
VisualWikitext
(Initial commit)
 
No edit summary
 
(40 intermediate revisions by 20 users not shown)
Line 1: Line 1:
== Strimage.exe (a.k.a. GirlGhost2 ~ Immortal Spirit) ==
{{Deleted}}
Strimage.exe is a screamer program written in VB6 which spread across China in around 2005. It has a icon of folder in Win9X style, attempt to make the user think it's a normal folder and run it.
{{Infobox
|title = Strimage.exe
|image = ScreamerWarning.png
|maker = Unknown
|type = Application
|date = 2005
}}
'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a [[screamer]] [[program]] that gained popularity in China during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x|Win9X]]-style folder, likely to disguise itself as a regular directory.  


When executed, it seems that nothing happened. However the program has already copied itself to several system directories, deleted the original file, and set itself to the default application for opening JPEG files. So each time the user double click on a JPEG file, the program will be called to run., Then, the program will check the date on the local computer. If the date it's not Friday, Saturday or Sunday, the program will terminate itself. Otherwise the screamer will begin countdown for a random amount of time between 5 minutes and 15 minutes in the background. After finished counting, the program will show its main payload, which is a ghostly girl and half of her face is skeleton. The eyeball on the other half can move and a crying sound effect will be played. Click anywhere will exit the screamer.
== Payload ==
When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening [[wikipedia:JPEG|JPEG]] files. The malware was executed every time a JPEG file was double-clicked.


== Trivia ==
The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect.  Users could exit the screamer by clicking anywhere on the screen.
It can be found in source code that the project was firstly named ''StarField'' and the caption of the screamer window is also the same. There is a '''Type''''' ''class in the code named ''Star ''which featured ''X, Y, Speed, Size ''and'' Color. ''It seems like that the author was initially wanted to write a screensaver or some visual program.
 
The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.


== Links ==
== Links ==
 
<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
=== '''Download''' ===
* files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
<u>NOTE</u>: This program could potentially harm your computer.
* '''Showcase:''' bilibili.com/video/BV1mt41177jP
*
<br>
 
{{Maliciousnav}}
* Main Program: mega.nz/#!cKAn3QRB!FeBfTj6g4S8NDBuprpSpeWp1DpF2zYi5z--F9he4zUQ
{{Comments}}
* Killer Program (Written by the author to remove it): mega.nz/#!EGAhDbRK!Whb4oC6QfOWMzmuE1eiwceBc4mcH004a6LuxL-nH7qA
[[Category:Malware]]
* Source Code: mega.nz/#!gOpmxaJR!8M5VfluH3HEMLBnZpyyxv_ZfyVmtCXC0YUpPlSH8-Xg
[[Category:Applications]]
[[Category:Applications]]
[[Category:Other scary images]]
[[Category:Other scary images]]
Line 21: Line 29:
[[Category:2005]]
[[Category:2005]]
[[Category:China]]
[[Category:China]]
[[Category:Malicious scripts]]

Latest revision as of 14:18, 9 April 2024

This page is about a screamer or shock site, whose original copy has been deleted.
This screamer's original copy is deleted, but the article links to an archive on the Wayback Machine or another saved copy.

Strimage.exe (Chinese: 女鬼2阴魂不散) is a screamer program that gained popularity in China during the year 2005. It was developed using the Visual Basic 6.0 programming language and its icon resembled a Win9X-style folder, likely to disguise itself as a regular directory.

Payload

When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. The malware was executed every time a JPEG file was double-clicked.

The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen.

The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.

Links

NOTE: The following download link contains a screamer application and a well known malicious script that could potentially harm your computer!

  • files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
  • Showcase: bilibili.com/video/BV1mt41177jP


Comments

Comments

Loading comments...
Retrieved from "https://screamer.wiki/index.php?title=Strimage.exe&oldid=148376"