Madoka.exe: Difference between revisions

Jump to: navigation, search
m
no edit summary
No edit summary
mNo edit summary
Tag: Manual revert
 
(4 intermediate revisions by 2 users not shown)
Line 14: Line 14:


==Payload==
==Payload==
When the user runs the malware by executing the [[.exe]] directly, a picture of an Asian woman in full screen is displayed along with the "introduce dialogue" Chinese text showing line by line in the upper-left corner of the screen. However, a ghost version of the woman in the image will appear briefly along with a scream sound effect, before immediately returning to the original image.  
When the user runs the malware by executing the [[.exe]] directly, a picture of Madoka Ozawa, a Japanese adult actress, in full screen is displayed along with the "introduce dialogue" Chinese text showing line by line in the upper-left corner of the screen. However, a ghost version of the woman in the image will appear briefly along with a scream sound effect, before immediately returning to the original image.  


Before showing the initial payload, the malware will copy itself to the Windows directory as <code>ozawa.exe</code> and try to append itself to <code>win.ini</code> in order to auto start with the operating system. Judging from the decompiled source code, this only works on [[wikipedia:Windows 98|Windows 98]] and [[wikipedia:Windows ME|Windows ME]]. On [[wikipedia:Windows_XP|Windows XP]] or higher, there is no ''Run'' section in <code>win.ini</code> and the malware will not work apart from the initial payload.
Before showing the initial payload, the malware will copy itself to the Windows directory as <code>ozawa.exe</code> and try to append itself to <code>win.ini</code> in order to auto start with the operating system. Judging from the decompiled source code, this only works on [[wikipedia:Windows 98|Windows 98]] and [[wikipedia:Windows ME|Windows ME]]. On [[wikipedia:Windows_XP|Windows XP]] or higher, there is no ''Run'' section in <code>win.ini</code> and the malware will not work apart from the initial payload.
Line 28: Line 28:
Introduce Dialogue=
Introduce Dialogue=


[[File:Madoka mess1.bmp|thumb]]
[[File:Madoka mess1.bmp|none]]


Are you looking at me?
Are you looking at me?
Line 52: Line 52:
|-|Meet-again Dialogue=
|-|Meet-again Dialogue=


[[File:Madoka mess2.bmp|thumb]]
[[File:Madoka mess2.bmp|none]]


Why it's you again?
Why it's you again?
Line 62: Line 62:
|-|Bye Dialogue=
|-|Bye Dialogue=


[[File:Madoka mess3.bmp|thumb]]
[[File:Madoka mess3.bmp|none]]


You are so annoying!
You are so annoying!
18

edits

Navigation menu