© Copyrights / Auteursrechten © Copyrights / Auteursrechten © Copyrights / Auteursrechten © Copyrights / Auteursrechten © Copyrights / Auteursrechten © Copyrights / Auteursrechten © Copyrights / Auteursrechten
English English Nederlands Nederlands  


 



© Copyrights


© Onderzocht.nl


> Contact   > Masterclasses   > YouTube   > LinkedIn   > Reviews

 

 

© Just click gently on his nose to send Jelle Bouma an e-mail © Just click gently on his nose to send Jelle Bouma an e-mail © Just click gently on his nose to send Jelle Bouma an e-mail

 

Does the Cookie Monster virus actually exist?

 

"A cookie monster virus, similar to the one in the one in the movie 'hackers' does exist in real life. Actually, there are four known cookie viruses.

1. The first one is based on the 'syslock' virus. It adds 2232 bytes to an infected COM or EXE file and is NOT memory resident. Systems infected with this cookie virus may experience system hangs and sometimes it may display the message: "I want a cookie". Anti Virus researchers disagree whether this message is always displayed.

2. The second one is also called Animus. It adds 7360 bytes to an infected COM or EXE file and is memory resident (it hooks interrupts 22 and 24). The virus will switch filenames (datafiles too), so complete directories will be messed up. It displays a similar message.

3. The third one is a variant of the foregoing virus. It adds 7392 bytes to the end of COM and EXE files.

4. The fourth one infects large COM files only. The files are corrupted and cannot be recovered by any Anti Viral product. The original files have to be copied over the infected files in order to get rid of the virus. The message which will be displayed on infected systems is "Cookie, give me a cookie!". Then the computer waits for the input by the keyboard, which has to be 'cookie' followed by the Enter key and then the virus dsplays "Oh, thank you".

So, yes, there is such a virus. Four viruses, actually. And no, the viruses are not funny at all. Most Anti Virus researchers characterize them with the words 'dangerous' and/or 'malicious'. They destroy software, all four viruses do that. By the way: These computer viruses are not very common."

 


 

The Face and Cookie viruses are not funny
"First of all, I would like to refer to my previous article about the four different types of Cookie viruses, which are absolutely no jokes at all. Maybe the original intention of the virus creator could be funny, but the actual behavior of the viruses is not.

I have been investigating computer viruses for several years now, and have never seen any virus which was completely innocent, a joke, and/or funny. Most viruses which are memory resident create a lot of conflicts with other software programs, like for example MS Windows.

Technical information: The Face virus is a memory resident COM, EXE and SYS infector. It hooks interrupt 21. Sometimes it displays a running smile/face character on the screen (which is, in fact, ASCII 1). The Face virus influences the behavior of the Config.SYS file in the root of a computer and reduces the total memory available for DOS, Windows and other software. On some computers, this virus will cause Windows to be inaccessible."

 

Author: Jelle Bouma
Previously published in in the Scientific Virus-L Digest, Volume 9, Numbers 169 and 173.
24 years old


Ben jij een oude vriend of kennis van Jelle via de lagere school van meester Bos, RSG Ooststellingwerf, Rijksuniversiteit Groningen, Accenture, Deloitte & Touche Bakkenist, of ken je hem nog niet en wil je Jelle iets voorleggen, laat dan een afgeschermd privebericht achter. Je boodschap wordt niet online zichtbaar op de site, alleen Jelle Bouma kan deze inzien...




© Copyrights

© Copyrights Soms vergeet hij verjaardagen, maar dat wil niet zeggen dat hij jou is vergeten:




Home

jellebouma.net


Investments

Books

Masterclasses

Reviews

YouTube

LinkedIn



Contact

jellebouma@jellebouma.com


English

Nederlands

Frysk

Disclaimer

© Copyrights

28 04 2026