Creeper Virus: The World’s First Computer Worm

Creeper is widely regarded as the first computer virus, though it functioned technically as the first computer worm. Bob Thomas wrote Creeper at BBN in 1971. This experimental self-replicating program moved across ARPANET and displayed one line of text: “I'M THE CREEPER: CATCH ME IF YOU CAN.”

Creeper caused no damage and stole no data. That single experiment began a lineage that now produces over 450,000 new malware samples every day, according to AV-TEST.

Who Created Creeper and When

Bob Thomas created Creeper in 1971 while working at BBN (Bolt Beranek and Newman), the Cambridge research firm that helped build ARPANET. Thomas wrote the program in PDP-10 assembly to run on the TENEX operating system. He named it after the Creeper, a green ghoul villain from the 1970s Scooby-Doo cartoon.

Its concept predated the code. Mathematician John von Neumann had described self-replicating automata in the late 1940s, and Creeper turned that theory into a working program two decades later.

How the Creeper Program Worked

Creeper worked by copying itself from one computer to the next across ARPANET, then removing itself from the machine it left behind. Three steps defined its behavior.

1. Creeper transferred a copy of itself to a remote PDP-10 over the file transfer protocol (FTP).
2. Teletype screens on the new machine printed the line “I'M THE CREEPER: CATCH ME IF YOU CAN.”
3. Self-deletion removed Creeper from the previous host, and the program moved to the next system on the network.

This hop-and-delete pattern kept only one copy of Creeper on the network at any moment. Its design demonstrated mobile code, a program that relocates itself, rather than self-replicating malware that leaves copies behind.

Was the Creeper Virus Harmful?

No, the Creeper virus was not harmful. Creeper encrypted nothing, deleted no files, and stole no data. Its only action was printing a taunting message, which made it a benign experiment rather than an attack.

Creeper did spread farther than Thomas intended. It disrupted teletypes at research sites and unsettled administrators at labs such as MIT and Stanford, though it damaged no data in the process.

Reaper: The First Antivirus

Reaper was the first antivirus program, written around 1972, to hunt down and delete Creeper. Reaper moved across ARPANET the same way Creeper did, removing each copy it found.

Historians attribute Reaper to Ray Tomlinson, the BBN engineer who invented email and the “@” address format. Records of Reaper's authorship stay incomplete, and Tomlinson died in 2016 without confirming the details.

Is Creeper a Virus or a Worm?

Creeper is technically a worm, though popular history calls it the first virus. A worm spreads across a network on its own, while a virus attaches to a host file and needs a user to run it. NIST defines a worm as a self-replicating program that propagates across a network without a host program or user action.

One nuance sharpens the distinction. Bob Thomas's original Creeper moved and deleted itself, while a later version by Ray Tomlinson replicated and left copies behind, which is the version generally accepted as the first worm. The term “computer virus” arrived later, coined by researcher Fred Cohen in 1983.

Why the Creeper Virus Matters

Creeper matters because it proved that software could travel across a network without human help. That proof confirmed von Neumann's theory and exposed a risk that no defense yet existed to counter.

Its arrival triggered the first antivirus response and set the pattern for every security contest since. Creeper's rivalry with Reaper inspired Core War, an early programming game where programs compete for control of memory.

What Came After Creeper

Creeper opened a lineage of increasingly capable programs. Four milestones trace the path from harmless experiment to modern threat.

• Reaper (1972): the first antivirus, built to erase Creeper from ARPANET.
• Elk Cloner (1982): the first virus found in the wild, written by 15-year-old Richard Skrenta to spread through Apple II floppy disks.
• Brain (1986): the first IBM PC virus, created by two brothers in Pakistan, marking malware's move to personal computers.
• Morris Worm (1988): the first worm to spread widely across the internet, infecting roughly 6,000 computers and prompting the first computer emergency response team.

These programs trace malware's shift from harmless demonstration to real disruption. Modern malware threats steal credentials, encrypt data for ransom, and operate at an industrial scale.

Frequently Asked Questions

Who created the Creeper virus?

Bob Thomas created the Creeper virus in 1971 while working at BBN. Thomas designed it as an experiment to test whether a program could move across a network on its own.

Is Creeper a virus or a worm?

Creeper is technically a computer worm, not a virus. It spread across ARPANET on its own without attaching to a host file, which matches the definition of a worm.

Was the Creeper virus dangerous?

No, the Creeper virus was not dangerous. It damaged no files and stole no data, displaying only a message before moving to the next computer.

What did the Creeper virus say?

Creeper's message read “I'M THE CREEPER: CATCH ME IF YOU CAN.” It was printed on the teletype screens of infected ARPANET computers.

What was the Reaper program?

Reaper was the first antivirus program, created around 1972, to delete Creeper. It moved across ARPANET, removing copies of Creeper from each system it found.

Does the Creeper virus still exist?

No, the Creeper virus no longer exists outside historical archives. It ran only on 1970s ARPANET systems and the TENEX operating system, which are obsolete today.