Articles, Blog


December 29, 2019

Hello everyone! Today we’re taking a look
at the Twitch Win16 Virus. Now, I have had a lot of people ask me
if I’m ever going to do Twitch streams. So, here I am with Twitch.
Streaming it for you on YouTube. I have twitch.exe, which I’m not
sure how that translates into .tv, but we’re going to go ahead and run it! And, apparently, nothing has really happened. If we look at some of our files here, like Minesweeper. We can see it’s running
at a healthy 27,776 bytes. And when we run it, We just double click it, we can play us some minesweeper. Eventually, I’ll click a mine. There we go! And we lost, RIP. So, for now, nothing
really appears to happen. But, every minute, Twitch will infect
another Windows executable file. So, we just have to sit
here and wait patiently. And, eventually, you will hear… [HARD DRIVE CLICKING NOISE] ..that! So, the window quickly refreshes, ..if you are observant. You see that the total size of the files increases. As Twitch picks a file, and infects it! This continues, every
minute, on the minute! Until all the files are infected. We’ll go ahead and let this run. And we’ll get back to it. When the fun stuff starts to happen! So, one more file has just been infected. You heard the hard drive click, and the total size,
in bytes, increases. We also see the total
number of files increase, which I’m not totally sure why that is,
but I’m not going to question it. So, one of the biggest problems
that you have with the Twitch virus on Windows 3.1, is actually
not a big problem at all. Not once, every minute or two, you’ll see a slight twitch, just like that! The virus looks for
more files to infect, and also twitches the open windows. It causes their contents to refresh, and makes an audible click on the hard drive. And, generally doesn’t do much else. One interesting thing, is that if we look at our friend over here. winmine.exe. We see that its file size
has actually shrunk(!), according to Windows. It’s now 12,117 bytes, when,
before it was way bigger! There’s also something a little
weird going on with our date here. Because, normally, there’s not
semicolons in the years value. So, there’s a great example of it.
[The twitch] What normal users might attribute,
to their machines slowing down, is actually the Twitch virus
interfering with their performance, and causing all the
windows to twitch like that. It’s especially noticeable when trying to
perform new actions, while opening files. Basically, it just causes
an overall degradation of of performance on the machine. One last thing to notice, is that the machine
starts to get really weird. When running programs, sometimes they just
simply don’t run, in fact, usually the first time you try
to run anything it doesn’t run. Running it a second time,
usually gets it to pop up. [HARD DRIVE CLICKING NOISE] Listen to that! It goes nuts! It loaded about five to
six seconds, maybe a little bit longer. Even Minesweeper refreshed and
Minesweeper never refreshes. At least, not on the versions I’m used to. We will close out of Minesweeper. Let’s try a few other files. Because, in testing, I’ve gotten
some weird error messages. [HARD DRIVE CLICKING NOISE] Here we go, here’s
the Character Map. [HARD DRIVE CLICKING NOISE] Oh, man, that is slow! [HARD DRIVE CLICKING NOISE] My hard drive is chugging! Wow! [HARD DRIVE CLICKING NOISE] Okay, I pressed close, how
long is this going to take?! So, Twitch has really, severely, impacted
this machine’s performance. No Kappa at all on that,
it is bad, look at this!! [HARD DRIVE CLICKING NOISE] It shouldn’t even run
this poorly, it’s a 386!! Okay.. we’re finally out of it. Now, [HARD DRIVE CLICKING NOISE] We’re still doing things. Twitch is just having
its way with this machine. [HARD DRIVE CLICKING NOISE] Come on, Paintbrush! “Not enough memory to edit image.” So, I guess the virus must
have a memory leak. Or, else it’s allocating more than it needs, because, we’re really starting
to run out of memory here. Or, maybe that’s just Windows. [HARD DRIVE CLICKING NOISE] Okay, so we got out of the menu,
and it’s loading Paintbrush, anyway(?) I thought we were out of memory! [HARD DRIVE CLICKING NOISE] I’m no expert, but this
doesn’t look quite right to me. [HARD DRIVE CLICKING NOISE] There we go! So, after taking 30 seconds
to close out of Paintbrush, we finally got the error message,
that I saw before, which doesn’t quite look like anything I’ve,
really seen in Windows before, But, I’m just gonna go with it. Upon clicking “OK”…
Will it refresh everything and every window? [HARD DRIVE CLICKING NOISE] Sort of. [HARD DRIVE CLICKING NOISE] It’s still loading everything, so, it seems we got off
easy that time, but that is really about it for the Twitch Windows virus. It’s not destructive. But, it’s really annoying and it severely
degrades system performance. I guess, the same could be said if
you watch Twitch streams, while you’re supposed to be working! So, no matter which Twitch you
go to, it’s bad for your system. But, if you’re bored, and want
some new streams to watch, my girlfriend is as I said
before, starting up streaming. So, please check out her stream at The link is in the description. It would mean a lot to her,
it would mean a lot to me. Thank you very much for watching. Take care. [subtitles—leemetme]


  • Reply Simply Southern Catering December 11, 2017 at 1:31 am

    I need help with YouTube videos on my other YouTube channel.
    Link in my channel description. ?

  • Reply Mario583 December 11, 2017 at 4:53 am


  • Reply this account is no longer in use December 11, 2017 at 5:12 am

    you honestly should lookat more win16 malware

  • Reply NonPlussedFlame December 11, 2017 at 6:48 am

    It's lil glass balla fool

  • Reply shyboy December 11, 2017 at 7:01 am

    Good, you ain't dead 🙂
    Anyways I will still love your videos even if I have to wait months for them.

  • Reply Aditya Aloy Sen December 11, 2017 at 7:22 am

    I love these videos of yours but being a computer science student I would like to know how do you obtain these viruses … I would also like to study them

  • Reply Dee-jay luig-jay December 11, 2017 at 8:38 am

    A virus crashes Paper Mario

  • Reply Landree Allen December 11, 2017 at 9:18 am

    I'm fine, I'm fine…

    TWITCH CREATES ADDITION FILES just thought it was REQUIRED information…

  • Reply Landree Allen December 11, 2017 at 9:21 am

    I love harddrive-brand popcorn

  • Reply Sidney Khryseai December 11, 2017 at 10:13 am

    a memory leak in a virus is a feature

  • Reply Sub G December 11, 2017 at 11:01 am

    yay, another win16 virus! what is this, the second one?

  • Reply Snekcharmer December 11, 2017 at 11:42 am


  • Reply breeztube December 11, 2017 at 12:06 pm

    The weird error message at 5:46 occurs when the system is out of memory. Try opening notepad 100's of times on a win95 machine for example and you'll see a similiar messagebox.

  • Reply Rex Gaming December 11, 2017 at 3:13 pm

    Your alive!

  • Reply SapphireFlame December 12, 2017 at 4:18 am

    Does this work as intended on NTVDM?

  • Reply Raffi Bel. December 12, 2017 at 4:42 am

    Oh by the way Daniel, you didn’t notice that twitch creates additional files following infection. That would explain the file amount increase. Just to point that out.

  • Reply Luiz Almeida December 12, 2017 at 12:07 pm

    Pretty evil!

  • Reply Citroen Games December 12, 2017 at 3:13 pm

    R.I.P HardDrive

  • Reply Wilson Jimenez December 12, 2017 at 6:26 pm

    Like a phoenix rising from the ash, another virus for our entertainment.

  • Reply hella December 12, 2017 at 7:44 pm

    will you show like malware that ignores virtual machines?

  • Reply rachel December 12, 2017 at 8:12 pm

    Is it weird I find the clicks of the hard drive satisfying? Like, lmao.

  • Reply Kikiclark December 13, 2017 at 1:11 am

    Wait, if Minesweeper shrunk practically double the size, would be funny if that was why the Twitch virus needs you to run it twice to start

  • Reply Caleb December 13, 2017 at 2:42 am


  • Reply AmberZeChao December 13, 2017 at 4:29 am

    Jeez this was posted on my birthday and I didn't realize it, this is an interesting virus since it literally makes windows twitch.

  • Reply Stink Terios December 13, 2017 at 3:02 pm

    Do Sonic Gather Battle, that one is rather unique.

  • Reply SparktheDog December 13, 2017 at 3:56 pm

    Ever heard of Sonic Gather Battle? It's a fan game disguised as a trojan because the creator of the game was overly NRS-levels of paranoid

  • Reply Wüstenfuchs Von Nordafrika December 13, 2017 at 6:41 pm

    I would love to see a virus that changes all of your icons, your background, and your error icon logo to the Thomas the Train engine face (you know which one I'm talking about) and when you try to remove it, it could either fuck your files and executables or it renders your computer useless. Yeah I have a weird imagination.

  • Reply 7xA December 14, 2017 at 12:11 am

    Why do u use old computers?

  • Reply RJARRRPCGP December 14, 2017 at 4:22 am

    Infecting other files=Sounds like Win32.Pinfi. A sign of that virus, is often getting an error message from any installer you downloaded or clicked on, that the file is corrupted, because that memory-resident virus appends junk to the end of any file you access, pretty much… I got that one in 2003… So the SoundBlaster driver installer failed, lol.

  • Reply RJARRRPCGP December 14, 2017 at 4:27 am

    At 4:21 the statement, "It shouldn't even run this poorly it's a 386!", I like…

  • Reply Farhan Maleq December 14, 2017 at 4:10 pm

    I've waited for a couple of months. Now, you're finally back! Thanks so much for the new video, DanoOct1!

  • Reply alext0313 December 14, 2017 at 4:51 pm

    Hey dan, i wanna know, where are you getting these relatively recent malware samples? Ive been searching for sites hosting recent samples but i cannot find any that are hosting recent samples

  • Reply 何晓艺 December 15, 2017 at 11:54 am


  • Reply FairPlay137 December 15, 2017 at 6:20 pm

    I can translate that weird error for you: "Windows is out of memory. Please close out any running programs to free up memory."
    I am an expert in gibberish.

  • Reply FairPlay137 December 15, 2017 at 6:22 pm

    Windows 3.1, Windows 10 edition.

  • Reply traso December 15, 2017 at 11:14 pm

    twitch is a virus guys that's why i never trusted it and youtube is forever the best

  • Reply ZOMBIE December 16, 2017 at 9:19 am

    have you ever did malware that isn't Virus, Trojans and worms?
    like adwares, ransomwares, spywares etc…

  • Reply Love Is All You Need December 16, 2017 at 12:37 pm

    I think YouTube is beginning to bury certain content creators.. I have the bell on for your vids but I never got the notification for this one.

  • Reply jkdfgxvj,c,lxcvvb xcvxcvxcvxcvxv December 16, 2017 at 3:26 pm

    Hi, do you make Mebromi BIOS kit video please?


  • Reply Squiggs 【Glitches - ROM Hacks - Speedruns】 December 16, 2017 at 3:59 pm

    This is my favourite channel on YouTube. Please never stop making videos.

  • Reply caff December 17, 2017 at 1:43 am

  • Reply Saturnix December 17, 2017 at 5:00 am

    Sonic 06 in virus form

  • Reply Richard Cowlishaw December 19, 2017 at 2:35 am

    Not to be confused with

  • Reply CoreyStar7 December 25, 2017 at 8:49 pm

    4:40 my laptop in a nutshell

  • Reply Cthulhu’s Abode December 26, 2017 at 3:06 am

    Which computer is this? Is it one of those NT Workstations?

  • Reply Edward December 26, 2017 at 6:57 pm

    Clicking intensifies

  • Reply Izaac Goudreau Reloaded December 28, 2017 at 6:15 am

    I knew you were going to make this joke.

  • Reply sez December 30, 2017 at 3:00 am


  • Reply FlexagonPark December 31, 2017 at 1:28 am

    WOW!!! Twitch kills computer! Don't log-in in Twitch!

  • Reply O Show do Cauã January 4, 2018 at 10:16 pm

    What twitch? The stream website (BA DUM TSS)

    Ok, i'll leave now

  • Reply saltmaster January 11, 2018 at 8:31 pm

    run this virus on a modern pc

  • Reply aNeo January 30, 2018 at 8:33 pm

    Hard drive clicking*
    Me: Is the popcorn ready!
    My friend: What popcorn?

  • Reply The Kitty Gaming February 3, 2018 at 4:30 am


  • Reply SecretWeapon7 Fanboy February 8, 2018 at 9:57 pm

    I see what you did there…

  • Reply Andrew Willett February 18, 2018 at 3:49 pm

    Does this virus start a live stream?

  • Reply Annyoin February 19, 2018 at 2:26 am

    The thing is it runs faster than my computer
    it took two months to load the video

  • Reply EclipticSaiyan Hand March 14, 2018 at 11:27 pm

    I am VERY drunk right now from juzt a sipkgKingmandBm

  • Reply Kendall Tisinger March 19, 2018 at 1:00 am

    Why is your computer slow. Just download more ram.

  • Reply AndreaGamer April 12, 2018 at 4:35 pm

    I hate drone

  • Reply Kraio April 13, 2018 at 11:59 am

    No thank you, I prefer Mixer

  • Reply shamrice April 21, 2018 at 7:25 am

    IIRC, Win 3.1 had a Y2K bug which caused the date to display as, for example, ":7" for 2017. I remember this being the case with my installation of Win 3.1 back in the day on a computer that was no infected. Honestly all these years later I don't remember what I did but as of today, it displays the date correctly. (maybe installing the win32 update?)

  • Reply Mr.MagicMan April 26, 2018 at 11:47 pm

    You need to go after the malat trojan. It’s a severe one and I want to know what it does

  • Reply SkeIetor April 29, 2018 at 5:42 pm

    1 minute…huh? good trick to get 10 mins lol

  • Reply EntropyInEffect April 30, 2018 at 5:28 am

    The pauses are about the same time as the stream delay on twitch.

  • Reply Black Hat May 14, 2018 at 2:53 pm


  • Reply Mishal Mohamed May 17, 2018 at 7:49 am

    Please tell me how you can be a guy who launches random viruses on his computer and have a girlfriend at the same time :O

  • Reply ItsMandatory / IM June 12, 2018 at 11:53 am

    what is this livestream man

  • Reply DrumAndBassFreak June 25, 2018 at 10:32 am

    There is a 2018 version, preinstalled on every computer and called Microsoft Compatibility Telemetry xDD

  • Reply A Duck Named Bob. June 29, 2018 at 10:35 am

    The Harddrive sounds like a Popcorn Machine.

  • Reply Doritolover 95 July 2, 2018 at 12:44 am

    Lol at one part of the vid it sounded like the hard drive was playing darude sandstorm XD

  • Reply Silenced July 2, 2018 at 8:00 am

    does anyone see purple lines in the background or is it just me

  • Reply Abdullah Alsawaji July 9, 2018 at 6:51 pm

    Hard drive is dying

  • Reply Егор Цыба August 21, 2018 at 2:28 pm

    And now it calls as another YouTube

  • Reply Егор Цыба August 21, 2018 at 2:31 pm

    How you restart your PC's?

  • Reply Hitman Ryder September 21, 2018 at 3:59 am

    the twitch stacks on top of each other everytime it refreshes and eventually allocate all of the RAM that dis machine has RIP

  • Reply Walki Acid October 16, 2018 at 6:07 pm

    WORM/VIRUS are destorying the compter whem you run it!

  • Reply Jeiku Furame October 30, 2018 at 5:51 pm

    And it still runs better than the streaming service of the same name.

  • Reply Segfault November 21, 2018 at 9:57 pm

    This is the common windows performance I remember from my childhood

  • Reply F-series November 23, 2018 at 6:04 am

    Guys why are you still using twitch?
    it’s infecting our files?

  • Reply James Livesey December 5, 2018 at 4:56 pm

    I'm not sure if you're aware but Twitch creates additional files following infection
    Just thought I'd point it out ?

  • Reply Chriserl Arreglo December 14, 2018 at 7:49 am

    Hello danooct1! I liked your videos. I sub you. So, can i have Virus.Win16.Twitch? I want it.

  • Reply Alex Clover December 14, 2018 at 10:36 am

    Is it bad my modern phone runs slower than this?

  • Reply Twitch The Time Sweeper December 18, 2018 at 7:32 pm

    Hope i didnt break something

  • Reply Captain Giratina December 20, 2018 at 9:39 pm

    The virus turns your hard drive into a Geiger Counter

  • Reply WTHRZ February 1, 2019 at 11:12 pm

    "No Twitch Niggas" -Etika, 2017

  • Reply NadavGames February 6, 2019 at 10:13 pm

    Virus "Twitch"
    "No stream for U!"

  • Reply Firefox Julien March 27, 2019 at 12:30 am

    how did u get it on 3.1???? it doesnt have internet explorer

  • Reply Soaptic March 27, 2019 at 7:32 am

    Please make big chungus virus somebody

  • Reply Milo DeMelo April 8, 2019 at 5:51 am

    watching a computer click away and run this slowly actually pains me

  • Reply Brandon Taylor May 29, 2019 at 5:29 am

    Talk about viruses that brutally rape your system…!

  • Reply TogoDash! ツ May 29, 2019 at 11:33 pm

    Twitch in the 90s

  • Reply ethan June 11, 2019 at 10:34 pm

    Did someone mention the streaming app?

  • Reply JivarMC August 3, 2019 at 11:52 am

    Now i get it why noone uses twitch's app it makes performance like this Kappa

  • Reply name2 August 6, 2019 at 8:48 pm

    Twitch IS a virus. It fills your browser and computer with thot girls that wanna show off their body.

  • Reply Fakefirstname Fakelastname August 16, 2019 at 7:47 am

    When 2 year old roblox streamers decide to get twitch

  • Reply Timo Okken August 22, 2019 at 10:58 am

    can u borrow me that geigercounter? 😀 it's going nuts! ^^

  • Reply NewAgeDerpDerp September 4, 2019 at 1:14 am

    winmine was created on 8/18/;7 because jumiffijkifk

  • Reply Chickerino Radio September 21, 2019 at 11:25 pm

    Ok, so I've done a seperate analysis of this virus on my own virtual machine and here's what I've found:

    1. This virus is a companion virus, where it overwrites the original .exe every few seconds (and usually whenever you're doing things) with the virus, and puts the original program into a seperate .ovl file. So you'll have calc.exe and calc.ovl.
    2. The first time you run an infected file on a reboot, it will simply run the virus, and refuse to run the original program. Running the same file again will… well… run the file.
    3. Turns out there may be a memory leak? During my tests the memory avaliable was slowly decreasing the longer the OS was running, and I guess that explains some of the memory issues you were running into later into the video.
    4. Trying to directly open any non-executable file from file manager (like .wav .txt .hlp etc) will run the program assosiated with it, but not actually open the file you were trying to open.

    If you guys want I can make a video with an in-depth analysis on this virus, as its kind of hard to explain everything through text, but you get the main idea.

    And incase you're wondering, I was using PCem as my emulator, which does a very good job of emulating old hardware (like 386, 486, hell even 8086 if you want to)

  • Reply Dusk Ember December 21, 2019 at 5:13 pm

    He forgot the shock drones.

  • Reply NeverLift Drift December 25, 2019 at 5:49 pm

    About to watch your gf get mad at mega Man! Lol +1 for that!

  • Leave a Reply