Helper, Comment administrators, rollback
577
edits
MrsMajor.exe: Difference between revisions
Added file icons and updated links section.
No edit summary |
Nemesis6051 (talk | contribs) (Added file icons and updated links section.) |
||
| Line 1: | Line 1: | ||
{{Infobox | {{Infobox | ||
|title = MrsMajor.exe | |title = MrsMajor.exe | ||
|image = BossDaMajor_icon.png | |||
|maker = Elektro Berkay | |maker = Elektro Berkay | ||
|type = Application | |type = Application | ||
|date = 2017 | |date = 2017 | ||
|imagecaption = The '''BossDaMajor.exe''' icon. | |||
}} | }} | ||
| Line 25: | Line 27: | ||
A window titled <code>MrMajor</code> appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. [https://youtu.be/6WyH5E8Xs0c Thresh’s Theme] from ''[[wikipedia:League_of_Legends|League of Legends]]'' plays in the background. | A window titled <code>MrMajor</code> appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. [https://youtu.be/6WyH5E8Xs0c Thresh’s Theme] from ''[[wikipedia:League_of_Legends|League of Legends]]'' plays in the background. | ||
===MrsMajor2.0.exe === | ===MrsMajor2.0.exe=== | ||
{{Infobox | |||
|title = MrsMajor2.0.exe | |||
|image = MrsMajor2_icon.png | |||
|maker = Elektro Berkay | |||
|type = Application | |||
|date = 2017 | |||
|imagecaption = The '''MrsMajor2.0.exe''' icon. | |||
}} | |||
[[File:MrsMajorWarningMessage.png|thumb|The warning message that appears before MrsMajor2.0 executes its payload]]Upon execution, MrsMajor2.0.exe presents the user with an end-user license agreement (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload. | [[File:MrsMajorWarningMessage.png|thumb|The warning message that appears before MrsMajor2.0 executes its payload]]Upon execution, MrsMajor2.0.exe presents the user with an end-user license agreement (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload. | ||
| Line 82: | Line 93: | ||
===MrsMajor3.0.exe=== | ===MrsMajor3.0.exe=== | ||
When MrsMajor3.0.exe is executed, it prompts the user to enter an authorization code in order to decrypt and run the trojan. Once the code is entered, the trojan asks the user if they would like to view the list of rules, and | {{Infobox | ||
|title = MrsMajor3.0.exe | |||
|image = MrsMajor3_icon.png | |||
|maker = Elektro Berkay | |||
|type = Application | |||
|date = 2020 | |||
|imagecaption = The '''MrsMajor3.0.exe''' icon. | |||
}} | |||
When MrsMajor3.0.exe is executed, it prompts the user to enter an authorization code in order to decrypt and run the trojan. Once the code is entered, the trojan asks the user if they would like to view the list of rules, and if the user accepts, it displays a message that reads:<pre> | |||
Searching keywords on google such as "antivirus download". | Searching keywords on google such as "antivirus download". | ||
"malwarebytes download". "do i have a virus" is not allowed. If you | "malwarebytes download". "do i have a virus" is not allowed. If you | ||
| Line 97: | Line 117: | ||
</pre>After a couple of seconds, the trojan changes the desktop background to an image of a dark forest and forces a system restart. | </pre>After a couple of seconds, the trojan changes the desktop background to an image of a dark forest and forces a system restart. | ||
Upon restarting, an edited image of the doll from the previous versions of MrsMajor appears, featuring blood dripping from its eyes and mouth, as well as several bloody holes in its forehead. Next to the doll is a vertical red meter labeled “Blood Left:” which gradually depletes over time. | Upon restarting, an edited image of the doll from the previous versions of MrsMajor appears, featuring blood dripping from its eyes and mouth, as well as several bloody holes in its forehead. Next to the doll is a vertical red meter labeled “Blood Left:” which gradually depletes over time. [https://youtu.be/_Qr2T1az1Ck Song of Unhealing] from the Ben Drowned creepypasta plays in the background. The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor. | ||
If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a Blue Screen of Death (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;"> | If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a Blue Screen of Death (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;"> | ||
| Line 113: | Line 133: | ||
==Link== | ==Link== | ||
<u>NOTE</u>: the following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting|malicious script]] that may harm your computer! | <u>NOTE</u>: the following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting|malicious script]] that may harm your computer! | ||
*github.com/ | *github.com/NotReal96/Malware/blob/master/MrsMajor.md | ||
===YouTube showcase=== | |||
'''BossDaMajor.exe''': youtube.com/watch?v=DNXXKd4XrcE | |||
'''MrsMajor2.0.exe''': youtube.com/watch?v=xA9VCln_aSY | |||
'''MrsMajor3.0.exe''': youtube.com/watch?v=-a12fxEOuU4 | |||
{{Maliciousnav}} | {{Maliciousnav}} | ||
