Coffeeshop
aka Coffee / Java

- discovered
- 1992
- origin
- unknown
- reported by
- various
- author
- unknown
- family
- Coffee
- size
- 1280 bytes
- platform
- DOS
- vector
- COM files
- payload
- prank, visual
- trigger
- random execution
Payload
Pops up a small ASCII coffee cup and refuses to dismiss the dialog until the user types COFFEE.
Coffeeshop is a minor virus with major aesthetic. Where Cookie descended from 1970s mainframe culture, Coffeeshop emerges from the counterculture underground of early 1990s computing. The virus is small, almost dainty; its payload is a single ASCII coffee cup rendered in the terminal, accompanied by a demand: "I WANT COFFEE." The user types "COFFEE" and the system releases. Nothing is harmed. Nothing is stolen. Just an interruption and a joke.
The coffee cup itself is the whole story. It's rendered in pure ASCII, a few dozen characters forming the shape of a vessel, minimalist and somehow charming. The virus writer invested effort here; the payload could have been text alone, but instead they crafted a visual object. It suggests someone working late, caffeinating through a debug session, and thinking, "What if the system itself needed coffee?" The anthropomorphization is deliberate. Prank viruses from this era often carried a hidden philosophy: the machine is alive, and it wants things.
Context matters. By 1992, virus writing was stratifying. The early pranksters were aging out, moving into legitimate security research or disappearing into legend. A new generation was emerging, more technically sophisticated, often angrier. But pockets of the old spirit persisted. Coffeeshop feels like a residual artifact from that moment, a late-era prank before malware became purely destructive.
There's a possible Dutch connection here; the name itself invokes Amsterdam coffeeshop culture, that particular intersection of openly coded drug commerce and bohemian permissiveness that fascinated outsiders throughout the 1980s and 1990s. A hacker in the Netherlands, or influenced by that scene, crafting a virus about coffee and consciousness. It tracks. The phreaker and hacker cultures had deep cross-Atlantic roots, and the counterculture ethos was as important as the technical skill.
Compare Coffeeshop to Stoned, another message-based prank from the same era. Stoned displayed "LEGALISE MARIJUANA." Both viruses come from the same impulse: the desire to broadcast a message through the machine itself, to hijack someone's computer screen for a moment of subversion. Neither virus steals, neither corrupts, neither persists silently. Both interrupt, both demand acknowledgment, both embed a political or cultural statement in the payload.
The aesthetic rating for Coffeeshop is notably high. That coffee cup mattered to whoever preserved this specimen, because the effort to render it, to make the prank beautiful, separates it from generic message boxes. This is virus writing as folk art. The payload is not merely functional; it's meant to be admired, even appreciated, in the moment before the user types COFFEE and moves on.
Coffeeshop is a ghost story from a brief moment when hacker culture and counterculture were still speaking the same language. By the mid-1990s that window was closing. Virus writing was becoming criminalized, compartmentalized, professionalized into malware. Coffeeshop belongs to the last generation of viruses that felt like jokes, like notes left in the machine for other coders to find and smile about.
Related specimens
Sources
- Internet Archive Malware Museum: Coffeeshop :: Mikko Hypponen, Internet Archive Malware Museum
last updated: 2026-04-12 :: curated by the_curator





