What Elk Cloner was
Elk Cloner was a small program for the Apple II, written in 1982 by Rich Skrenta, who was then a high school student. It is commonly described as one of the first computer viruses to spread outside the place where it was made, and often as the first for a personal computer. The wording “often described” matters. Whether any program deserves the title “first” depends on how you define a virus and whether you count laboratory experiments, and that is covered in other articles on this site.
By the account that has been repeated since, Skrenta liked playing practical jokes on friends who swapped game disks. A game that changed behavior after a number of uses was one such trick, and this program took the idea further: it made the disk itself pass the joke along.
How it worked
The Apple II usually started by loading its operating system, Apple DOS 3.3, from a floppy disk. Elk Cloner placed its code in the system area of an infected disk. When someone started the computer from that disk, the virus loaded into memory and hooked the routines that read and wrote the disk. After that, whenever the user put a new disk in the drive and accessed it, the virus checked whether it was already infected and, if not, copied itself on. Taking an infected disk to another machine and booting from it started the process again.
This is why it fits the usual definition of a virus: it needed a host, in this case the boot area of a disk, and spread when that host was used. It did nothing on its own to cross a network, because home computers of the time were mostly not networked.
The poem
Elk Cloner did not delete files or demand anything. On certain startups, counted in a fixed pattern (the figure usually given is every fiftieth boot), it displayed a short rhyme that began by announcing it was “the program with a personality.” The verse boasted that it would get on all your disks and stick like glue. In other words, it was a prank meant to be noticed.
Software that behaves this way can still cause trouble. A program that rewrites system areas without being asked can clash with other software, and some users reported crashes, though accounts of how widespread this was vary. It is fair to call it low in malice, not entirely without effect.
How it spread
The spread was social. People in the 1980s copied disks freely, and trading games was a big part of the culture around early video games on home computers. Disks passed between classmates, user groups and computer clubs. Skrenta’s friends and school contacts were the early carriers. Because few people knew a disk could carry something like this, there was no warning and no scanning, and no practical way of removing it other than re-formatting or replacing the system files. Reports describe it turning up among his acquaintances and in his school; broader claims about how many copies existed are hard to check, so it is best to say it spread widely among a small circle and perhaps beyond it.
Why “in the wild” matters
Researchers use the phrase “in the wild” for malicious or self-copying code that is spreading among real users, as opposed to samples kept in a laboratory. This is the main reason Elk Cloner is often cited. Earlier programs, such as Creeper on a research network in the early 1970s, ran among a handful of computers operated by professionals. Fred Cohen’s formal virus experiments in 1983 were set up deliberately, with permission. And the Brain virus of 1986 spread much more widely, carrying across continents on IBM PC disks. Elk Cloner sits between these: unplanned, out among ordinary users, but small in scale and in damage.
It should also be separated from the first outbreaks that drew real attention. The Morris worm of 1988 was a network program that stopped thousands of machines, which Elk Cloner could not have done.
What it shows
Elk Cloner shows a number of things that stayed true for later threats. A new way of sharing, here swapped game disks, creates a new way to spread code. The first programs of this type were often written out of curiosity and humor, not to steal anything. And computers of the time had no protection against such behavior: an Apple II had no concept of one program being forbidden to modify another.
Skrenta has talked about it in later interviews, and the story is partly remembered because he went on to a career in software. Its legacy is mostly as a marker. Historians of the topic return to it when they want a clear, documented example of the moment viruses moved from theory and labs into the world of ordinary computer users. For people playing games on early microcomputers, it was probably one of the first times they were forced to wonder where a disk had been.