whc2001 Hi everyone, I finally got some time to sort out those things from my NAS hard drive. I am gonna upload them through Catbox since my Mega account got banned for sharing malware. ALL THE ARCHIVES HAVE PASSWORD, WHICH IS "ScreamerWiki666".
whc2001 Strimage.exe (with a short README file inside): files.catbox.moe/1djoe4.zip The original Chinese name is "女鬼2之阴魂不散"
whc2001 Ring.exe: files.catbox.moe/uwlrv9.zip I didn't test this one and someone please do an article writeup after testing in virtual machine. It has something to do with the movie The Ring.
whc2001 胆小别点.exe: files.catbox.moe/g7i6du.zip I didn't test this one and someone please do an article writeup after testing in virtual machine. The original name is "女鬼再现I 端午节特别版" and I am not sure what it does except that it's a screamer.
whc2001 PC整蛊专家2009(一刻钟): files.catbox.moe/rjnxrv.zip This is a "compound screamer" named "PC Prank Master 2009: 15 minutes". It's a collection of five different malware/jokewares with a VBS script to coordinate them to perform the effect. I have tested it before but still need someone to test it out in virtual machine and complete the information below. The malware releases five executables 1~5.exe and B12345.vbs to Program Files. The VBS file then get executed and works like a "director" of the screamer payload sequence. Upon execution it would minimize all the opened windows (to show the execution is successful) then wait for 15 minutes before the payload sequence begins (hence the name). 1.exe: A jokeware that ejects your optical drive indefinitely. With a desktop ODD it would eject and retract the tray like crazy. With a laptop ODD (the one that only ejects and requires you to manually close the tray) it can't do much and only ejects. This jokeware also registers itself to auto startup, but the main VBS scripts kills this activity since it's only part of the payload sequence. 2.exe: A jokeware that performs a "rotating" visual effect on your screen content upon execution. This one is the most harmless one and it auto exits after some time, but it may induce photosensitive epilepsy. 3.exe: A screamer that is a Flash Player with SWF movie embedded. It plays the summary plot of the classic horror movie The Ring. It also exits after the playback is done. 4.exe: A screamer which is an ArcaMax digital animation greeting card. It shows a repeated zoom-in animation of "Creepy Ugly Guy" screamer image that's photoshopped in an Arabian white robe, with some Arabian (can anyone type and translate that?) written on the forehead. An evil giggle is played along repeatedly. There are Play/Stop buttons on the bottom of the player, and it can be closed directly. 5.exe: That's just a copy of Strimage.exe