Cookie
aka Cookie Monster / Wants Cookie

- discovered
- 1986
- origin
- United States
- reported by
- various
- author
- unknown
- family
- Cookie
- size
- 7360 bytes
- platform
- DOS
- vector
- COM files
- payload
- prank
- trigger
- random intervals
Payload
Periodically pops up the message I want a cookie and refuses to let the user continue working until they type the word COOKIE.
Cookie is older than you probably think. The virus's lineage reaches back to 1970s mainframe culture, where system pranks circulated among operators and researchers like folklore. The hostage prank, where a system would demand something from the user before releasing control, was a native form of early computing humor. Cookie translated that tradition directly into DOS, no apologies, pure gesture.
The payload is disarmingly simple: the virus pops a message at random intervals. "I WANT A COOKIE." Nothing threatening. No data erasure, no corruption, no hidden ticking bomb. The system locks, the user cannot proceed, and the only exit is to type "COOKIE" (or sometimes "OREO," depending on variant). Type it, and normal operation resumes. A hostage situation that resolves with a password. A prank with a riddle built in.
The cultural genealogy matters here. Cookie Monster comes from Sesame Street, that mid-70s American children's television moment when technology was becoming household religion. The virus writers knew this. They borrowed the character's singular, obsessive demand and transplanted it into the machine. It's a reference layer; it's also a prank. The user would see that message and understand immediately: this is not a threat, this is a joke. Someone knew their Sesame Street. Someone had a sense of humor about their creation.
This is what separates Cookie from genuine malware. The destructive viruses we catalog here came from anger, from control, from the desire to leave scars. Cookie comes from the opposite impulse: the desire to interrupt, to make someone laugh or at least make them aware something happened. It's closer to grafitti than arson. An artifact from when virus writing still carried the prankster spirit, before it became industrialized.
The virus circulated through BBS networks and pirated software distributors throughout the late 1980s. Every infection was relatively harmless, but wildly disruptive. Imagine: you're working on your spreadsheet, your email, your document, and suddenly a demand appears. I WANT A COOKIE. It became legendary because it was memorable, because it carried personality, because you could tell a story about it afterward.
Cookie represents a moment in early virus culture before the boundary hardened between prank and malware, between mischief and crime. After Cookie came the destructive variants, the data erasure payloads, the logic bombs. But Cookie was the charm offensive. Cookie was the joke before the punch line became a system crash. That's why it matters. That's why it still resonates. The virus that wanted a cookie wanted nothing more than to be acknowledged.
Related specimens
Sources
- Internet Archive Malware Museum: Cookie :: Mikko Hypponen, Internet Archive Malware Museum
last updated: 2026-04-12 :: curated by the_curator





