Strimage.exe: Difference between revisions

Latest revision as of 15:52, 1 November 2025

		This page is about a screamer or shock site, whose original copy has been deleted. This screamer's original copy is deleted, but the article links to an archive on the Wayback Machine or another saved copy.

Strimage.exe (Chinese: 女鬼2阴魂不散) is a Chinese malicious screamer program created by an unknown person in 2001, which gained popularity during the year 2005. It was developed using the Visual Basic 6.0 programming language and its icon resembled a Win9X-style folder, likely to disguise itself as a regular directory.

Payload

When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening JPEG files. The malware was executed every time a JPEG file was double-clicked.

The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect. Users could exit the screamer by clicking anywhere on the screen.

The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.

Links

NOTE: The following download link contains a screamer application, as well as a well-known malicious script that could potentially harm your computer!

files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
Showcase video: bilibili.com/video/BV1mt41177jP

Comments

Loading comments...

@@ Line 1: / Line 1: @@
 {{Deleted}}
-'''Strimage.exe''' was a screamer program that became popular in China around 2005. The program is written in VB6 and has an icon that looks like a folder in the Win9X style, which tricks the user into thinking that it is a normal folder. When executed, the program copies itself to several system directories, deletes the original file, and sets itself to be the default application for opening JPEG files. Therefore, each time a user double-clicks on a JPEG file, the program will be called to run. The program checks the date on the local computer, and if it is not Friday, Saturday, or Sunday, the program will terminate itself. However, if the date is one of these days, the screamer will begin a countdown for a random amount of time between 5 and 15 minutes in the background.
+{{Infobox
+|title = Strimage.exe
+|image = ScreamerWarning.png
+|maker =
+|type = [[Application]]
+|date = 2001
+}}
+'''Strimage.exe''' (Chinese: 女鬼2阴魂不散) is a Chinese [[Screamer#Malicious scripts|malicious]] [[screamer]] [[program]] created by an unknown person in 2001, which gained popularity during the year 2005. It was developed using the [[wikipedia:Visual_Basic_(classic)|Visual Basic]] 6.0 programming language and its icon resembled a [[wikipedia:Windows_9x|Win9X]]-style folder, likely to disguise itself as a regular directory.
-After the countdown, the main payload of the program is displayed, which is a ghostly girl with half of her face being a skeleton. The eyeball on the other half can move, and a crying sound effect is played. Clicking anywhere will exit the screamer. In the source code, it can be found that the project was initially named "StarField," and the caption of the screamer window is also the same. The code contains a "Type" class named "Star," which features "X, Y, Speed, Size," and "Color." It appears that the author was initially planning to write a screensaver or some sort of visual program.
+== Payload ==
+When launched, Strimage.exe self-replicated across various system directories, removed the original file, and assigned itself as the default application for opening [[wikipedia:JPEG|JPEG]] files. The malware was executed every time a JPEG file was double-clicked.
+The screamer payload only activated on Friday, Saturday, and Sunday. The program waited a minimum of 5 minutes and a maximum of 15 minutes before displaying the screamer, which displayed an full-screen image of a girl with half of her face a skull accompanied by a somber crying sound effect.  Users could exit the screamer by clicking anywhere on the screen.
+The program's source code reveals the initial project name "StarField". The screamer window's caption also shares the same name. The code includes a "Type" class named "Star", featuring properties such as "X", "Y", "Speed", "Size", and "Color", which may suggest that the author was initially planning to write a screensaver or a similar visual program.
 == Links ==
-<u>NOTE</u>: The following download link contains a [[screamer]] application and a well known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
+<u>NOTE</u>: The following download link contains a [[screamer]] application, as well as a well-known <span style="color:red"><span style="color:yellow">[[malicious script]]</span> that could potentially harm your computer!</span>
-* files.screamer.wiki/other/Strimage.zip '''(Including the cleaner program and VB6 source code)'''
+* files.screamer.wiki/other/Strimage.zip (Including the cleaner program and VB6 source code)
+* '''Showcase video:''' bilibili.com/video/BV1mt41177jP
 <br>
 {{Maliciousnav}}
 {{Comments}}
+[[Category:2001]]
 [[Category:Applications]]
-[[Category:Other scary images]]
-[[Category:Other makers]]
-[[Category:2005]]
 [[Category:China]]
 [[Category:Malicious scripts]]
+[[Category:Malware]]
+[[Category:Other scary images]]
+[[Category:Unknown maker]]

Strimage.exe: Difference between revisions

Latest revision as of 15:52, 1 November 2025

Payload

Links

Comments

Comments

Navigation menu

Search