Malware · Interactive

Malware Museum

Every virus on this site, running on a fake little computer inside your browser. Click an exhibit, watch the screen slowly lose its mind, and close it when you've had enough. Like a real museum, but the exhibits fight back. A bit.

Nothing here is real malware. Each exhibit is a recreation I drew with HTML, CSS and JavaScript to show what the malware looked like. None of the original code is used. Nothing gets downloaded, installed or changed on your PC, and closing the window ends it instantly.

Heads up: two exhibits (Petya and Windows XP Horror Edition) have flashing red screens. They'll ask first, and you can run them without the flashing. If your device is set to reduce motion, flashing is always off.

Worm2000

ILOVEYOU

Open the love letter and watch it mail itself to your whole address book.

The full story

Trojanc. 2004

You Are an Idiot

Close a window, get two more. Try to escape the bouncing smileys.

The full story

Scam2006–11

Fake Antivirus

A "scan" finds thousands of infections. Only €59.95 to remove them. What could go wrong?

The full story

Ransomware2016

Petya

A crash, a "disk check" that isn't one, and the red skull. Has flashing.

The full story

Trojan2016

MEMZ

Error icons, a shaking cursor, inverted colours and the famous screen tunnel.

The full story

Trojan2016

000.exe

Creepy messages, a desktop full of "UR NEXT", and a reboot you won't like.

The full story

Ransomware2017

WannaCry

Your files turn into .WNCRY one by one, then the countdown starts.

The full story

Trojanc. 2019

Windows XP Horror Edition

A friendly XP update, stuck at 66%. Then everything turns red. Has flashing.

The full story

How the exhibits are made

Each exhibit runs inside a fake screen: a box on this page with its own little desktop, windows and taskbar, all drawn with HTML and CSS. The effects are JavaScript timers that add windows, move them, change colours or draw on a canvas, and the MEMZ tunnel is a canvas that keeps drawing itself smaller inside itself. When you close an exhibit, every timer is stopped and the fake screen is emptied, so nothing keeps running in the background.

Want to see how real malware behaves? Watch my tests on YouTube, where I run the real thing on machines I'm ready to wipe. And never download "the real MEMZ" from random websites: that's how people end up with something much worse.

Simulation · harmless