Pikachu Virus
   HOME

TheInfoList



OR:

The Pikachu virus, also referred to as Pokey or the Pokémon virus, was a
computer worm A computer worm is a standalone malware computer program that replicates itself in order to spread to other computers. It often uses a computer network to spread itself, relying on security failures on the target computer to access it. It wil ...
believed to be the first
malware Malware (a portmanteau for ''malicious software'') is any software intentionally designed to cause disruption to a computer, server, client, or computer network, leak private information, gain unauthorized access to information or systems, depri ...
geared at children, due to its incorporation of Pikachu, the mascot species of the ''
Pokémon (an abbreviation for in Japan) is a Japanese media franchise managed by The Pokémon Company, founded by Nintendo, Game Freak, and Creatures (company), Creatures, the owners of the trademark and copyright of the franchise. In terms of ...
'' media franchise. It was considered similar to the
Love Bug The lovebug (''Plecia nearctica'') is a species of march fly found in parts of Central America and the southeastern United States, especially along the Gulf Coast. It is also known as the honeymoon fly or double-headed bug. During and after mat ...
, albeit slower in its spread and less dangerous. The worm was first detected in June 2000, and mainly spread in the form of an email titled "Pikachu Pokemon". The body of the email contained an attached
executable In computing, executable code, an executable file, or an executable program, sometimes simply referred to as an executable or binary, causes a computer "to perform indicated tasks according to encoded instruction (computer science), instructi ...
file, "PikachuPokemon.exe", which installed a worm that attempted to delete two critical directories of the user's
Microsoft Windows Windows is a group of several proprietary graphical operating system families developed and marketed by Microsoft. Each family caters to a certain sector of the computing industry. For example, Windows NT for consumers, Windows Server for serv ...
operating system. This would cause their computer to malfunction. However, an unintended prompt would be given, asking users if they wanted to delete the folders in question; this made the worm less effective than it could have been.


Background

Pikachu is a yellow mouse-like creature with electricity powers in ''
Pokémon (an abbreviation for in Japan) is a Japanese media franchise managed by The Pokémon Company, founded by Nintendo, Game Freak, and Creatures (company), Creatures, the owners of the trademark and copyright of the franchise. In terms of ...
'', a Japanese video game series and
cartoon A cartoon is a type of visual art that is typically drawn, frequently animated, in an unrealistic or semi-realistic style. The specific meaning has evolved over time, but the modern usage usually refers to either: an image or series of images ...
. In 2000, ABC News described the series as a "worldwide craze".
Computer viruses A computer virus is a type of computer program that, when executed, replicates itself by modifying other computer programs and inserting its own code. If this replication succeeds, the affected areas are then said to be "infected" with a compu ...
infect a computer and damage it, and are spread when users sent them from one PC to another, whereas computer worms spread on their own. Despite this distinction, the worm which incorporated Pikachu was known as the "Pikachu virus" or "Pokémon virus". It was also known as "Pokey". It started spreading in the United States in late June 2000, and was detected then. The worm was in the form of an email titled "Pikachu Pokemon". Different sources state that the email read either "Pikachu is your friend", or "Great Friend! Pikachu from Pokemon Theme have some friendly words to say. Visit Pikachu at http://www.pikachu.com. See you."


Description

The email had an attached
executable In computing, executable code, an executable file, or an executable program, sometimes simply referred to as an executable or binary, causes a computer "to perform indicated tasks according to encoded instruction (computer science), instructi ...
file, "PikachuPokemon.exe", which contained the worm-program. Opening the executable showed users an animated image of Pikachu bouncing, along with the message: "Between millions of people around the world i found you. Don’t forget to remember this day every time MY FRIEND!" Meanwhile,PikachuPokemon.exeadded the lines "del C:\WINDOWS" and "del C:\WINDOWS\system32" to the file "
autoexec.bat AUTOEXEC.BAT is a system file that was originally on DOS-type operating systems. It is a plain-text batch file in the root directory of the boot device. The name of the file is an abbreviation of "automatic execution", which describes its funct ...
". These commands would be executed at the next
boot A boot is a type of footwear. Most boots mainly cover the foot and the ankle, while some also cover some part of the lower calf. Some boots extend up the leg, sometimes as far as the knee or even the hip. Most boots have a heel that is cle ...
(the next time computer is turned on), in an attempt to delete two critical directories of the
Microsoft Windows Windows is a group of several proprietary graphical operating system families developed and marketed by Microsoft. Each family caters to a certain sector of the computing industry. For example, Windows NT for consumers, Windows Server for serv ...
operating system. This would cause the operating system to malfunction. However, users would be given a yes/no prompt asking whether or not they wanted to delete those folders, since the author did not write the added lines as “del C:\WINDOWS\*.* /y” and “del C:\WINDOWS\SYSTEM\*.* /y” (the /y switches would have automatically chosen the yes option). This defect was the reason that the worm did not cause more damage to computers.


Spread

If the user who received the virus used
Microsoft Outlook Microsoft Outlook is a personal information manager software system from Microsoft, available as a part of the Microsoft Office and Microsoft 365 software suites. Though primarily an email client, Outlook also includes such functions as Calen ...
, the email would send itself to all the contacts in their Outlook address book. This made the virus similar to the
Love Bug The lovebug (''Plecia nearctica'') is a species of march fly found in parts of Central America and the southeastern United States, especially along the Gulf Coast. It is also known as the honeymoon fly or double-headed bug. During and after mat ...
, which spread in May. However, the Pikachu virus was considered far less dangerous, and slower in its dissemination. Anti virus companies said there had not been previous viruses or worms directed at children, and the Pikachu virus exploited the fact that children "tend to be less careful about security than their parents". On August 24, anti-virus company Trend Micro said they had only received ten reports of the virus, and that nobody had opened it yet. However, on August 25, it was reported to be widespread in the United States, but was also present in Europe and Japan. A consultant for the anti-virus company
Sophos Sophos Group plc is a British based security software and hardware company. Sophos develops products for communication endpoint, encryption, network security, email security, mobile security and unified threat management. Sophos is primarily ...
said that anyone who had up-to-date security software was unlikely to be affected by it. Trend Micro recommended that users delete the email without opening it.
Symantec Symantec may refer to: *An American consumer software company now known as Gen Digital Inc. *A brand of enterprise security software purchased by Broadcom Inc. Broadcom Inc. is an American designer, developer, manufacturer and global supplier ...
(another anti-virus company), Trend Micro, and Sophos said that the slow spread of the email gave them time to update their products to include a defense against the worm. These products were available by August 25.


See also

* ILOVEYOU * Timeline of computer viruses and worms *
Computer virus A computer virus is a type of computer program that, when executed, replicates itself by modifying other computer programs and inserting its own code. If this replication succeeds, the affected areas are then said to be "infected" with a compu ...


References


External link

*Pikachu.com as it appeared in 2000: {{DEFAULTSORT:Pikachu Virus Hacking in the 2000s Email worms