Happy 11th anniversary, screamer wiki!

MrsMajor.exe: Difference between revisions

Jump to: navigation, search

MrsMajor.exe (view source)

Revision as of 18:37, 28 January 2024

5,968 bytes added ,  28 January
m
I would rather not compromise the image file quality (of the program icons) by resizing it manually but I don't know how to resize images within the infoboxes themselves. So it looks a bit clunky
VisualWikitext
No edit summary
m (I would rather not compromise the image file quality (of the program icons) by resizing it manually but I don't know how to resize images within the infoboxes themselves. So it looks a bit clunky)
 
(30 intermediate revisions by 8 users not shown)
Line 1: Line 1:
{{Virus}}
{{#seo:
|keywords="MrsMajor, MrsMajor.exe, BossDaMajor.exe, MrsMajor2.0.exe, MrsMajor3.0.exe, Elektro Berkay"
}}
{{Spoiler}}
{{Infobox
|title = MrsMajor.exe
|image = BossDaMajor icon.png
|maker = Elektro Berkay
|type = Application
|date = 2017
|imagecaption = The '''BossDaMajor.exe''' icon.
}}
 
'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') are series of [[screamer]] [[applications]] developed by Elektro Berkay. The trojan gained notoriety after YouTube user Siam Alam created a showcase video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel.
 
According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.
 
==Payload==
 
==='''BossDaMajor.exe'''===
Upon execution, BossDaMajor.exe opens Notepad and displays a message that reads:
Start to CRY!
WHAT I WANT FROM YOU IS DoNT'scxhcar__?-#__3871h--__.....DONT CLICK ANYTHING!
                                            =Created by BeRkaY_the_Coder Elektro Berkay=
The trojan proceeds to flood the user's desktop with numerous [[wikipedia:Text_file|text files]] named "MRS MAJOR WANTS TO MEET YOU" which contain the text "MRS MAJOR IS BEHIND OF YOU!".
 
After, it launches Windows Media Player and plays a copy of the video [[Ghost Caught on Tape]].<ref>The video may not play to completion due to the forced logout and restart routine.</ref> Simultaneously, a window titled "Cute Doll!" appears on the screen, displaying the message "MrsMajor Wants TO MEET YOU!". It then logs out the user and forces a restart.
 
Upon restarting, the trojan changes the desktop background to an image of skulls, replaces file icons with a skull icon, and replaces the cursor with a skull and crossbones icon. It also disables essential system utilities such as [[wikipedia:Task_Manager_(Windows)|Task Manager]] and [[wikipedia:Microsoft_Defender_Antivirus|Windows Defender]].
 
A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends|League of Legends]]'' plays in the background.
 
==='''MrsMajor2.0.exe'''===
{{Infobox
{{Infobox
|title =
|title = MrsMajor2.0.exe
|image = MrsMajor2 icon.png
|maker = Elektro Berkay
|maker = Elektro Berkay
|type = Application
|type = Application
|date = 2017
|date = 2017
|imagecaption = The '''MrsMajor2.0.exe''' icon.
}}
}}
'''MrsMajor.exe''' (also known as BossDaMajor.exe) is a [[screamer]] trojan developed by Elektro Berkay, The trojan gained notoriety after Siam Alam created a video about it. It later had a better version known as MrsMajor2.0.exe, which was also featured in Siam Alam's video.


According to the description. It originated in Turkey and was created in 2017. Surprisingly, despite the fact that the virus is called MrsMajor, the executable is called bossdamajor.exe.
Upon execution, MrsMajor2.0.exe presents the user with an [[wikipedia:End-user_license_agreement|end-user license agreement]] (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload.
=='''Payload'''==
 
A video of the MrsMajor game is displayed by Windows Media Player. The game is a terrifying maze. It shows a maze room with a green tint, followed by a 'scareface.' The wallpaper is later changed to schemes, as are the icons. When it is fully loaded, a flashing and moving image of a frightening doll named "Mrs. Major" appears on the screen. while Thresh's Theme from League of Legends plays in the background.
[[File:MrsMajorWarningMessage.png|thumb|The warning message that appears before MrsMajor2.0 executes its payload]]First, it proceeds to fill the desktop with multiple invalid [[wikipedia:.exe|.exe]] files named "HUMANS ARE TASTY." Then, it flashes multiple copies of the doll image from BossDaMajor.exe across the screen, and then forces a restart.


It includes rules in Version 2.0 of the virus. One of the rules instructs users not to use Task Manager to remove the virus. If the user tries to open Task Manager, a message with the letter "T" will appear. The rules (v2.0) are as follows:
Upon restarting, the trojan changes the desktop background to an image of Annabelle from ''[[wikipedia:The_Conjuring_Universe|The Conjuring]]'' franchise, replaces the default cursor with a [[GIF]] image of an eyeball looking around, and replaces the icons of the newly created .exe files on the desktop with the same icon as the trojan itself.  


<pre>
It then opens a window displaying the doll image from BossDaMajor.exe with various distorting visual effects. The bottom right of the window features a countdown timer starting at 5:00, while the bottom left corner has a button labeled “Show Rules”. When clicked, it opens a new window presenting a list of rules the user must follow:<pre>
Your computer has been infected by MrsMajor.
Your computer has been infected by MrsMajor
If you dont attend rules, your computer will be "Trash"
If you dont attend rules, your computer will be "Trash"
Theese are rules:
Theese are rules:


+If timer runs out, your computer won't work anymore
+If timer runs out, your computer won't work anymore
+If you ATTEMPT to kill any process, your PC will die
+If you ATTEMPT to kill any process, your PC will die
+Do NOT delete any virus files.
+Do NOT delete any virus files.
+Uninstall your antivirusses. They may try to remove virus.
+Uninstall your antivirusses. They may try to remove virus.
+Do not run Taskmanager, cmd, sethc,
+Do not run Taskmanager, cmd, sethc,
+Do NOT use safe mode.
+Do NOT use safe mode.
+Do NOT Remove any registries from msconfig etc..
+Do NOT Remove any registries from msconfig etc..


Or Your PC Will not be able to boot up..
Or Your PC Will not be able to boot up..
</pre>
</pre>


If the user violates the virus's rules, an RSoD (Red Screen of Death) screen will appear informing the user that they have violated the virus's rules. The error code is "TROJANS NEVER JOKE RESPECT THE TROJANS," which may indicate that the malware is a Trojan. If the user turns off their computer while the virus is still active, the virus will destroy the operating system by deleting some boot files. The RSoD screen (v2.0) reads as follows:
Similar to BossDaMajor.exe, "Thresh, the Chain Warden" plays in the background.
<pre>
 
MrsMajor2.0.exe prevents users from opening Task Manager. If the user attempts to open Task Manager, the words "THERE IS NO ESCAPE" flash on the screen one by one.
 
If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one.
 
Then, the trojan triggers a red [[wikipedia:Screen_of_death|Screen of Death]] (RSoD) and overrides logonui.exe. The RSoD reads:<pre>
A problem has been detected and windows has been shutdown to prevent damage to your computer.
A problem has been detected and windows has been shutdown to prevent damage to your computer.


Line 40: Line 85:
If problems continue, contact the virus owner or disable ur bios memory. Jk second way wont work. Do not waste your time. Everytime you boot up your computer, this screen will appear. If you want to contact virus creator, here is the mail: mskonsol11@gmail.com
If problems continue, contact the virus owner or disable ur bios memory. Jk second way wont work. Do not waste your time. Everytime you boot up your computer, this screen will appear. If you want to contact virus creator, here is the mail: mskonsol11@gmail.com
Theese are fake technical informations:
Theese are fake technical informations:


*** STOP: 0x00D1 (0x00C,0x002,0x00,0xF86B5A89)
*** STOP: 0x00D1 (0x00C,0x002,0x00,0xF86B5A89)
Line 48: Line 94:


Windows can't reboot. shutdown.exe is missing. Fix your system. Eh, if its possible.
Windows can't reboot. shutdown.exe is missing. Fix your system. Eh, if its possible.
</pre>
</pre>When the user restarts the machine, it will display the RSoD.
 
==='''MrsMajor3.0.exe'''===
{{Infobox
|title=MrsMajor3.0.exe
|image= MrsMajor3 icon.png
|maker=Elektro Berkay
|type=Application
|date=2020
|imagecaption=The '''MrsMajor3.0.exe''' icon.}}
 
When MrsMajor3.0.exe is executed, it prompts the user to enter an authorization code in order to decrypt and run the trojan. Once the code is entered, the trojan asks the user if they would like to view the list of rules, and if the user accepts, it displays a message that reads:<pre>
  Searching keywords on google such as "antivirus download".
"malwarebytes download". "do i have a virus" is not allowed. If you
do, you'll get prompted with a blue screen explaining you why your
computer just ran into a crash.
  Using 3rd party tools is not allowed. You'll get a BSoD again.
  Once the malware runs out of blood, you'll get your LogonUI
overwritten. If you fix your LogonUI, you'll get your boot sector
overwritten just like your System32 files. So don't do that ig.
  This program can't be ran on a real machine. (VM Only)
 
Have fun!
Elektro Berkay / MoonCon - tobiaddr0c#3158
</pre>After a couple of seconds, the trojan changes the desktop background to an image of a dark forest and forces a system restart.
 
Upon restarting, an edited image of the doll from the previous versions of MrsMajor appears, featuring blood dripping from its eyes and mouth, as well as several bloody holes in its forehead. Next to the doll is a vertical red meter labeled “Blood Left:” which gradually depletes over time. "[https://youtu.be/_Qr2T1az1Ck Song of Unhealing]" from the [[BEN Drowned]] [[creepypasta]] plays in the background.
 
The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor.
 
If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a [[wikipedia:Blue_screen_of_death|Blue Screen of Death]] (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;">
I own not only your thoughts
but also your machine.
</div>
If MrsMajor3.0 detects that logonui.exe has been fixed, it displays an error window titled "uh oh" that reads "You messed up.." upon booting into Windows. Subsequently, it triggers a BSoD and overrides the [[wikipedia:Master_boot_record|Master Boot Record]] (MBR) with the message:<div style="text-align: center;">
You are not very
smart. Are you?
Situation of your
disk is even
worse now.
</div>
==Notes==
<references />
 
==Showcases==
<div style="text-align: center;">
<youtube width="320" height="180">DNXXKd4XrcE</youtube>
<youtube width="320" height="180">xA9VCln_aSY</youtube>
<youtube width="320" height="180">-a12fxEOuU4</youtube>
</div>
 
==Link==
==Link==
<u>NOTE</u>: the following application contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting|malicious script]] that may harm your computer!
<u>NOTE</u>: The following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting|malicious script]]<font color="red"> that will harm your computer!</font>
*github.com/acastillorobles77/MalwareDatabase/blob/master/MrsMajor%202.0.txt
*github.com/NotReal96/Malware/blob/master/MrsMajor.md
 
 
 
 
{{Maliciousnav}}
{{Comments}}
{{Comments}}
[[Category:Malware]][[Category:Malicious scripts]]
[[Category:Applications]]
[[Category:Applications]]
[[Category:Regan MacNeil]]
[[Category:Regan MacNeil]]
[[Category:2017]]
[[Category:2017]]
[[Category:Other makers]]
[[Category:Other makers]]
[[Cateogry:Other scary images]]
[[Category:Other scary images]]
Nemesis6051
Helper, Comment administrators, rollback
577

edits

Retrieved from "https://screamer.wiki/Special:MobileDiff/104922...145498"

Navigation menu