MrsMajor.exe - Revision history

Nemesis6051: I would rather not compromise the image file quality (of the program icons) by resizing it manually but I don't know how to resize images within the infoboxes themselves. So it looks a bit clunky

2024-01-29T01:37:32Z

I would rather not compromise the image file quality (of the program icons) by resizing it manually but I don't know how to resize images within the infoboxes themselves. So it looks a bit clunky

← Older revision		Revision as of 18:37, 28 January 2024
Line 12:		Line 12:
	}}		}}

	'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') are series of [[screamer]] [[applications]] developed by Elektro Berkay. The trojan gained notoriety after Siam Alam created a video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel.		'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') are series of [[screamer]] [[applications]] developed by Elektro Berkay. The trojan gained notoriety after YouTube user Siam Alam created a showcase video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel.

	According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.		According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.

SkyTheWanderer at 05:25, 18 December 2023

2023-12-18T05:25:09Z

← Older revision		Revision as of 22:25, 17 December 2023
Line 154:		Line 154:
	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}		{{Comments}}
	[[Category:~~Malicious softwares~~]]		[[Category:Malware]][[Category:Malicious scripts]]
	[[Category:Malicious scripts]]
	[[Category:Applications]]		[[Category:Applications]]
	[[Category:Regan MacNeil]]		[[Category:Regan MacNeil]]

TheGreenHoodieDude at 00:37, 18 November 2023

2023-11-18T00:37:14Z

← Older revision		Revision as of 17:37, 17 November 2023
Line 146:		Line 146:

	==Link==		==Link==
	<u>NOTE</u>: ~~the~~ following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting\|malicious script]]<font color="red"> that will harm your computer!</font>		<u>NOTE</u>: The following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting\|malicious script]]<font color="red"> that will harm your computer!</font>
	*github.com/NotReal96/Malware/blob/master/MrsMajor.md		*github.com/NotReal96/Malware/blob/master/MrsMajor.md

Nemesis6051 at 22:27, 13 August 2023

2023-08-13T22:27:05Z

← Older revision		Revision as of 15:27, 13 August 2023
Line 41:		Line 41:
	}}		}}

	~~[[File:MrsMajorWarningMessage.png\|thumb\|The warning message that appears before MrsMajor2.0 executes its payload]]~~Upon execution, MrsMajor2.0.exe presents the user with an [[wikipedia:End-user_license_agreement\|end-user license agreement]] (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload.		Upon execution, MrsMajor2.0.exe presents the user with an [[wikipedia:End-user_license_agreement\|end-user license agreement]] (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload.

	First, it proceeds to fill the desktop with multiple invalid [[wikipedia:.exe\|.exe]] files named "HUMANS ARE TASTY." Then, it flashes multiple copies of the doll image from BossDaMajor.exe across the screen, and then forces a restart.		[[File:MrsMajorWarningMessage.png\|thumb\|The warning message that appears before MrsMajor2.0 executes its payload]]First, it proceeds to fill the desktop with multiple invalid [[wikipedia:.exe\|.exe]] files named "HUMANS ARE TASTY." Then, it flashes multiple copies of the doll image from BossDaMajor.exe across the screen, and then forces a restart.

	Upon restarting, the trojan changes the desktop background to an image of Annabelle from ''[[wikipedia:The_Conjuring_Universe\|The Conjuring]]'' franchise, replaces the default cursor with a [[GIF]] image of an eyeball looking around, and replaces the icons of the newly created .exe files on the desktop with the same icon as the trojan itself.		Upon restarting, the trojan changes the desktop background to an image of Annabelle from ''[[wikipedia:The_Conjuring_Universe\|The Conjuring]]'' franchise, replaces the default cursor with a [[GIF]] image of an eyeball looking around, and replaces the icons of the newly created .exe files on the desktop with the same icon as the trojan itself.

Nemesis6051 at 21:10, 13 August 2023

2023-08-13T21:10:48Z

← Older revision		Revision as of 14:10, 13 August 2023
Line 1:		Line 1:
			{{#seo:
			\|keywords="MrsMajor, MrsMajor.exe, BossDaMajor.exe, MrsMajor2.0.exe, MrsMajor3.0.exe, Elektro Berkay"
			}}
			{{Spoiler}}
	{{Infobox		{{Infobox
	\|title = MrsMajor.exe		\|title = MrsMajor.exe
Line 14:		Line 18:
	==Payload==		==Payload==

	===BossDaMajor.exe===		==='''BossDaMajor.exe'''===
	Upon execution, BossDaMajor.exe opens Notepad and displays a message that reads:		Upon execution, BossDaMajor.exe opens Notepad and displays a message that reads:
	Start to CRY!		Start to CRY!
Line 27:		Line 31:
	A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends\|League of Legends]]'' plays in the background.		A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends\|League of Legends]]'' plays in the background.

	===MrsMajor2.0.exe===		==='''MrsMajor2.0.exe'''===
	{{Infobox		{{Infobox
	\|title = MrsMajor2.0.exe		\|title = MrsMajor2.0.exe
Line 72:		Line 76:
	If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one.		If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one.

	Then, the trojan triggers a [[wikipedia:Screen_of_death\|~~Red~~ Screen of Death]] (RSoD) and overrides logonui.exe. The RSoD reads:<pre>		Then, the trojan triggers a red [[wikipedia:Screen_of_death\|Screen of Death]] (RSoD) and overrides logonui.exe. The RSoD reads:<pre>
	A problem has been detected and windows has been shutdown to prevent damage to your computer.		A problem has been detected and windows has been shutdown to prevent damage to your computer.

Line 92:		Line 96:
	</pre>When the user restarts the machine, it will display the RSoD.		</pre>When the user restarts the machine, it will display the RSoD.

	===MrsMajor3.0.exe===		==='''MrsMajor3.0.exe'''===
	{{Infobox		{{Infobox
	\|title=MrsMajor3.0.exe		\|title=MrsMajor3.0.exe
Line 120:		Line 124:
	The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor.		The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor.

	If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a Blue Screen of Death (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;">		If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a [[wikipedia:Blue_screen_of_death\|Blue Screen of Death]] (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;">
	I own not only your thoughts		I own not only your thoughts
	but also your machine.		but also your machine.
Line 133:		Line 137:
	==Notes==		==Notes==
	<references />		<references />

	~~==Link==~~
	~~<u>NOTE</u>: the following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting\|malicious script]]<font color="red"> that will harm your computer!</font>~~
	*github.com/NotReal96/Malware/blob/master/MrsMajor.md

	==Showcases==		==Showcases==
Line 144:		Line 144:
	<youtube width="320" height="180">-a12fxEOuU4</youtube>		<youtube width="320" height="180">-a12fxEOuU4</youtube>
	</div>		</div>

			==Link==
			<u>NOTE</u>: the following [[application]] contains a [[screamer]] as well as a [[wikipedia:Cross-site scripting\|malicious script]]<font color="red"> that will harm your computer!</font>
			*github.com/NotReal96/Malware/blob/master/MrsMajor.md

Nemesis6051 at 20:19, 13 August 2023

2023-08-13T20:19:24Z

← Older revision		Revision as of 13:19, 13 August 2023
Line 12:		Line 12:
	According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.		According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.

	==~~'''~~Payload~~'''~~==		==Payload==

	===BossDaMajor.exe===		===BossDaMajor.exe===

Screamer1234 at 11:04, 13 August 2023

2023-08-13T11:04:33Z

← Older revision		Revision as of 04:04, 13 August 2023
Line 155:		Line 155:
	[[Category:Other makers]]		[[Category:Other makers]]
	[[Category:Other scary images]]		[[Category:Other scary images]]
	~~[[Category:.exe]]~~

Screamer1234 at 10:42, 13 August 2023

2023-08-13T10:42:45Z

← Older revision		Revision as of 03:42, 13 August 2023
Line 8:		Line 8:
	}}		}}

	'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') ~~is a~~ [[screamer]] [[~~application~~]] developed by Elektro Berkay. The trojan gained notoriety after Siam Alam created a video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel.		'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') are series of [[screamer]] [[applications]] developed by Elektro Berkay. The trojan gained notoriety after Siam Alam created a video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel.

	According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.		According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.

Nemesis6051 at 04:01, 13 August 2023

2023-08-13T04:01:53Z

← Older revision		Revision as of 21:01, 12 August 2023
Line 8:		Line 8:
	}}		}}

	'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') is a [[screamer]] [[application]] developed by Elektro Berkay. The trojan gained notoriety after ~~[https://www.youtube.com/channel/UCviSYAcwdnDX1UoRzAHYgNg~~ Siam Alam] created a video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel.		'''MrsMajor.exe''' (also known as '''BossDaMajor.exe''') is a [[screamer]] [[application]] developed by Elektro Berkay. The trojan gained notoriety after Siam Alam created a video about it. Elektro Berkay later developed MrsMajor2.0.exe and MrsMajor3.0.exe, which were also featured on Siam Alam's channel.

	According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.		According to the description, BossDaMajor.exe originated in Turkey and was created in 2017.
Line 19:		Line 19:
	WHAT I WANT FROM YOU IS DoNT'scxhcar__?-#__3871h--__.....DONT CLICK ANYTHING!		WHAT I WANT FROM YOU IS DoNT'scxhcar__?-#__3871h--__.....DONT CLICK ANYTHING!
	=Created by BeRkaY_the_Coder Elektro Berkay=		=Created by BeRkaY_the_Coder Elektro Berkay=
	The trojan proceeds to flood the user's desktop with numerous ~~.txt~~ files named ~~<code>~~MRS MAJOR WANTS TO MEET YOU~~</code>~~ which contain the ~~message <code>~~MRS MAJOR IS BEHIND OF YOU!.~~</code>~~		The trojan proceeds to flood the user's desktop with numerous [[wikipedia:Text_file\|text files]] named "MRS MAJOR WANTS TO MEET YOU" which contain the text "MRS MAJOR IS BEHIND OF YOU!".

	After, it launches Windows Media Player and plays a copy of the video [[Ghost Caught on Tape]].<ref>The video may not play to completion due to the forced logout and restart routine.</ref> Simultaneously, a window titled ~~<code>~~Cute Doll!~~</code>~~ appears on the screen, displaying the message ~~<code>~~MrsMajor Wants TO MEET YOU!~~</code> and two buttons, “OK” and “Cancel”~~. It then logs out the user and forces a restart.		After, it launches Windows Media Player and plays a copy of the video [[Ghost Caught on Tape]].<ref>The video may not play to completion due to the forced logout and restart routine.</ref> Simultaneously, a window titled "Cute Doll!" appears on the screen, displaying the message "MrsMajor Wants TO MEET YOU!". It then logs out the user and forces a restart.

	Upon restarting, the trojan changes the desktop background to an image of skulls, replaces file icons with a skull icon, and replaces the cursor with a skull and crossbones icon. It also disables essential system utilities such as Task Manager and Windows Defender.		Upon restarting, the trojan changes the desktop background to an image of skulls, replaces file icons with a skull icon, and replaces the cursor with a skull and crossbones icon. It also disables essential system utilities such as [[wikipedia:Task_Manager_(Windows)\|Task Manager]] and [[wikipedia:Microsoft_Defender_Antivirus\|Windows Defender]].

	A window titled ~~<code>~~MrMajor~~</code>~~ appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. [https://youtu.be/6WyH5E8Xs0c ~~Thresh’s Theme~~] from ''[[wikipedia:League_of_Legends\|League of Legends]]'' plays in the background.		A window titled "MrMajor" appears, displaying a flashing and moving image of a frightening doll. Attempting to close this window results in it immediately reopening. "[https://youtu.be/6WyH5E8Xs0c Thresh, the Chain Warden]" from ''[[wikipedia:League_of_Legends\|League of Legends]]'' plays in the background.

	===MrsMajor2.0.exe===		===MrsMajor2.0.exe===
Line 37:		Line 37:
	}}		}}

	[[File:MrsMajorWarningMessage.png\|thumb\|The warning message that appears before MrsMajor2.0 executes its payload]]Upon execution, MrsMajor2.0.exe presents the user with an end-user license agreement (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload.		[[File:MrsMajorWarningMessage.png\|thumb\|The warning message that appears before MrsMajor2.0 executes its payload]]Upon execution, MrsMajor2.0.exe presents the user with an [[wikipedia:End-user_license_agreement\|end-user license agreement]] (EULA) warning them that running the trojan will destroy the computer. After accepting the EULA, the trojan launches its payload.

	First, it proceeds to fill the desktop with multiple invalid .exe files named ~~<code>~~HUMANS ARE TASTY~~</code>~~. Then, it flashes multiple copies of the doll image from BossDaMajor.exe across the screen, and then forces a restart.		First, it proceeds to fill the desktop with multiple invalid [[wikipedia:.exe\|.exe]] files named "HUMANS ARE TASTY." Then, it flashes multiple copies of the doll image from BossDaMajor.exe across the screen, and then forces a restart.

	Upon restarting, the trojan changes the desktop background to an image of Annabelle from ''[[wikipedia:The_Conjuring_Universe\|The Conjuring]]'' franchise, replaces the default cursor with a ~~.gif~~ image of an eyeball looking around, and replaces the icons of the newly created .exe files on the desktop with the same icon as the trojan itself.		Upon restarting, the trojan changes the desktop background to an image of Annabelle from ''[[wikipedia:The_Conjuring_Universe\|The Conjuring]]'' franchise, replaces the default cursor with a [[GIF]] image of an eyeball looking around, and replaces the icons of the newly created .exe files on the desktop with the same icon as the trojan itself.

	It then opens a window displaying the doll image from BossDaMajor.exe with various distorting visual effects. The bottom right of the window features a countdown timer starting at 5:00, while the bottom left corner has a button labeled “Show Rules”. When clicked, it opens a new window presenting a list of rules the user must follow:<pre>		It then opens a window displaying the doll image from BossDaMajor.exe with various distorting visual effects. The bottom right of the window features a countdown timer starting at 5:00, while the bottom left corner has a button labeled “Show Rules”. When clicked, it opens a new window presenting a list of rules the user must follow:<pre>
Line 66:		Line 66:
	</pre>		</pre>

	Similar to BossDaMajor.exe, ~~Thresh’s Theme~~ plays in the background.		Similar to BossDaMajor.exe, "Thresh, the Chain Warden" plays in the background.

	MrsMajor2.0.exe prevents users from opening Task Manager. If the user attempts to open Task Manager, the words ~~<code>~~THERE IS NO ESCAPE~~</code>~~ flash on the screen one by one.		MrsMajor2.0.exe prevents users from opening Task Manager. If the user attempts to open Task Manager, the words "THERE IS NO ESCAPE" flash on the screen one by one.

	If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words ~~<code>~~THERE IS NO ESCAPE~~</code>~~ flash on the screen one by one.		If the user breaks one of the rules, or if the timer reaches zero, the screen is bombarded with multiple flashing copies of the doll image. Simultaneously, the original window's image becomes distorted by chromatic aberration. Similar to the Task Manager payload, the words "THERE IS NO ESCAPE" flash on the screen one by one.

	Then, the trojan triggers a Red Screen of Death (RSoD) and overrides logonui.exe. The RSoD reads:<pre>		Then, the trojan triggers a [[wikipedia:Screen_of_death\|Red Screen of Death]] (RSoD) and overrides logonui.exe. The RSoD reads:<pre>
	A problem has been detected and windows has been shutdown to prevent damage to your computer.		A problem has been detected and windows has been shutdown to prevent damage to your computer.

Line 116:		Line 116:
	</pre>After a couple of seconds, the trojan changes the desktop background to an image of a dark forest and forces a system restart.		</pre>After a couple of seconds, the trojan changes the desktop background to an image of a dark forest and forces a system restart.

	Upon restarting, an edited image of the doll from the previous versions of MrsMajor appears, featuring blood dripping from its eyes and mouth, as well as several bloody holes in its forehead. Next to the doll is a vertical red meter labeled “Blood Left:” which gradually depletes over time. [https://youtu.be/_Qr2T1az1Ck Song of Unhealing] from the [[BEN Drowned]] creepypasta plays in the background. The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor.		Upon restarting, an edited image of the doll from the previous versions of MrsMajor appears, featuring blood dripping from its eyes and mouth, as well as several bloody holes in its forehead. Next to the doll is a vertical red meter labeled “Blood Left:” which gradually depletes over time. "[https://youtu.be/_Qr2T1az1Ck Song of Unhealing]" from the [[BEN Drowned]] [[creepypasta]] plays in the background.

			The trojan overlays the screen with a translucent red filter, and small red circles and rectangles resembling drops of blood surround the screen. Shortly after, blood begins dripping down from the top of the screen. This overlay remains visible on top of any other open windows. The trojan also replaces the default cursor with a black and red cursor.

	If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a Blue Screen of Death (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;">		If the blood meter fully depletes, or the user breaks one of the rules, the trojan triggers a Blue Screen of Death (BSoD) with the stop code <code>CRITICAL PROCESS DIED</code>. It overrides logonui.exe with a distorted image of the doll with an open mouth and bleeding eyes, accompanied by the text:<div style="text-align: center;">
Line 122:		Line 124:
	but also your machine.		but also your machine.
	</div>		</div>
	If MrsMajor3.0 detects that logonui.exe has been fixed, it displays an error window titled ~~<code>~~uh oh~~</code>~~ that reads ~~<code>~~You messed up..~~</code> with an OK button~~ upon booting into Windows. Subsequently, it triggers a BSoD and overrides the Master Boot Record (MBR) with the message:<div style="text-align: center;">		If MrsMajor3.0 detects that logonui.exe has been fixed, it displays an error window titled "uh oh" that reads "You messed up.." upon booting into Windows. Subsequently, it triggers a BSoD and overrides the [[wikipedia:Master_boot_record\|Master Boot Record]] (MBR) with the message:<div style="text-align: center;">
	You are not very		You are not very
	smart. Are you?		smart. Are you?
Line 145:		Line 147:

	{{Maliciousnav}}		{{Maliciousnav}}
	{{Comments}}~~<references />~~		{{Comments}}
	[[Category:Malicious softwares]]		[[Category:Malicious softwares]]
	[[Category:Malicious scripts]]		[[Category:Malicious scripts]]

Jerhan2010 at 20:40, 7 August 2023

2023-08-07T20:40:13Z

← Older revision		Revision as of 13:40, 7 August 2023
Line 153:		Line 153:
	[[Category:Other makers]]		[[Category:Other makers]]
	[[Category:Other scary images]]		[[Category:Other scary images]]
			[[Category:.exe]]