Gfg.exe: Difference between revisions

From Screamer Wiki
Jump to navigation Jump to search
XxTheGreat12 (talk | contribs)
No edit summary
Intel586 (talk | contribs)
mNo edit summary
 
(13 intermediate revisions by 7 users not shown)
Line 1: Line 1:
{{PLS}}
{{Infobox
{{Infobox
|title = gfg.exe
|title = gfg.exe
|image = Ghostgirl2.jpg
|image = Ghostgirl2.jpg
|imagecaption = The gfg.exe icon.
|imagecaption = The "gfg.exe" icon.
|maker =  
|maker =  
|type = [[Application]]
|type = [[Application]]
|date = September 11, 2002
|date = September 11th, 2002
}}
}}
'''Gfg.exe''', also known as '''Troj/GhostGirl''', or simply '''GhostGirl''', is a Chinese [[screamer]] application created by an unknown person on September 11, 2002.
'''Gfg.exe''', also known as '''Troj/GhostGirl''', or simply '''GhostGirl''', is a Chinese [[screamer]] application created by an unknown user on September 11th, 2002. It was written in the [[wikipedia:Visual_Basic_(classic)|Visual Basic]] 6.0 programming language for [[Wikipedia:Windows|Microsoft Windows]].


The icon is a low-resolution image of a yellow smiley face. When the user launches the application, it runs in the background, so it seems that nothing happened. However, after a short period of time, the application will suddenly display a full-screened picture of [[Crazy Ghost]] along with a loud scream.
The icon is a low-resolution image of a yellow smiley face. When the user starts up the application, it will begin to run in the background with no indication. After a short period of time, the application will suddenly display a full-screened picture of [[Crazy Ghost]], accompanied by a loud scream.


The application will then begin to show the screamer at random intervals and repeatedly open and close the disk tray to annoy the user. The application will also run everytime the computer finishes its startup process by creating entries in the HKLM\Software\Microsoft\Windows\CurrentVersion\Run and HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices registry keys.
The application will then begin to show the screamer at random intervals and repeatedly open and close the disk tray to annoy the user, and will also run every time the computer finishes its start-up process by creating entries in the '''"HKLM\Software\Microsoft\Windows\CurrentVersion\Run"''' and '''"HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices"''' registry keys. The application will even turn the computer on automatically at midnight hours while it is shut down, so that the screamer can appear while the user is most likely sleeping so that they can get scared either way.


== Links ==
== Links ==
<u>NOTE</u>: The following [[application]] contains a [[screamer]].
<u>NOTE</u>: The following links contain a [[screamer]] image!
*'''Virus Info with download links''': <nowiki>https://www.hybrid-analysis.com/sample/82d26220eeb8b13d253de579f604e7d7ac8abd03a2b98a924c5b14cfa4040cea/5723068caac2ed112bfd9d9d</nowiki>
*'''Virus info:''' hybrid-analysis.com/sample/82d26220eeb8b13d253de579f604e7d7ac8abd03a2b98a924c5b14cfa4040cea/5723068caac2ed112bfd9d9d
*'''Removal (contains the screamer image)''': <nowiki>http://www.vsantivirus.com/ghostgirl.htm</nowiki>
*'''Removal (contains the screamer image):''' vsantivirus.com/ghostgirl.htm
 
{{Maliciousnav}}


{{Comments}}
{{Comments}}
Line 27: Line 30:
[[Category:Malicious scripts]]
[[Category:Malicious scripts]]
[[Category:2002]]
[[Category:2002]]
[[Category:Non-indicative title]]

Latest revision as of 10:21, 27 November 2025

This page is about a screamer/shock site that is partially lost.
If you have more information about this screamer, please add it to the page or in the comments.

Gfg.exe, also known as Troj/GhostGirl, or simply GhostGirl, is a Chinese screamer application created by an unknown user on September 11th, 2002. It was written in the Visual Basic 6.0 programming language for Microsoft Windows.

The icon is a low-resolution image of a yellow smiley face. When the user starts up the application, it will begin to run in the background with no indication. After a short period of time, the application will suddenly display a full-screened picture of Crazy Ghost, accompanied by a loud scream.

The application will then begin to show the screamer at random intervals and repeatedly open and close the disk tray to annoy the user, and will also run every time the computer finishes its start-up process by creating entries in the "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" and "HKLM\Software\Microsoft\Windows\CurrentVersion\RunServices" registry keys. The application will even turn the computer on automatically at midnight hours while it is shut down, so that the screamer can appear while the user is most likely sleeping so that they can get scared either way.

Links

NOTE: The following links contain a screamer image!

  • Virus info: hybrid-analysis.com/sample/82d26220eeb8b13d253de579f604e7d7ac8abd03a2b98a924c5b14cfa4040cea/5723068caac2ed112bfd9d9d
  • Removal (contains the screamer image): vsantivirus.com/ghostgirl.htm


Comments

Comments

Loading comments...