"I didn't do it for fun," stated OnTheFly in a Web posting Tuesday. "I never wanted to harm the people who opened the attachment. But after all: it's their own fault they got infected."
The statement confirmed the OnTheFly used a readily available virus-writing tool, known as the Vbs Worm Generator, to create the Anna Kournikova virus, but exonerated the tool's author of aiding him.
Meanwhile, a source at Excite@Home has acknowledged that the company is currently trying to identify and ban a Dutch subscriber who appears to be OnTheFly. A previous virus, known as Iwa, had been posted to the alt.comp.virus.source.code newsgroup using Excite@Home Netherlands' network.
"We are working on it," said the Excite@Home source, who asked not to be named. "It is a clear violation of the acceptable use policy. We will come down hard and fast."
The information connecting OnTheFly and the Excite@Home subscriber had been first found by Richard Smith, chief technology officer of the Privacy Foundation and a key online detective in the Melissa virus case two years ago.
Also known as VBS/SST, VBS_Kalamar, and VBS/OnTheFly, the Anna Kournikova virus initially poses as an attachment--AnnaKournikova.jpg.vbs--that has been included in an e-mail with one of several similar subject lines.
The attachment purports to be a photograph of Kournikova, a 19-year-old Russian tennis player.
The virus uses Visual Basic to infect Windows systems and then, on systems with Outlook, mails itself out to the entire address book. Its ability to mail itself out to a large number of people classifies the virus as a worm.
"It's going to be more widespread than Melissa but less than the LoveBug," said Vincent Weafer, director of the Symantec AntiVirus Research Center.
Melissa kicked off a new age of fast-spreading, hard-hitting worms in March 1999, when the macro virus flooded e-mail systems by using commands built into Microsoft Word to control e-mail. New Jersey programmer David Smith, who pled guilty to authoring and releasing the virus, is currently awaiting sentencing.
In May, a Visual Basic script virus masquerading as a love letter from a friend spread quickly after it was released from the Philippines. A 22-year-old computer school dropout, Onel de Guzman, has since been charged for crimes related to the release of the LoveLetter virus. Due to the lack of laws regarding computer crime in the Philippines, de Guzman is facing charges of credit-card fraud.
Like Melissa, the Anna Kournikova virus does not damage the systems that it's infected, Weafer said.
In his online admission, OnTheFly said a recent study by market researcher IDC, which concluded that surfers had not learned anything from recent virus attacks like LoveLetter, gave him the idea to write the virus.
"I think IDC is right," he wrote. "I also think that you agree with me, according to the rate of spreading."
On Tuesday, security organizations and Internet service providers released data about Monday's spread of the virus. The Computer Emergency Response Team Coordination Center at Carnegie Mellon University said that more than 100 sites reported encountering the virus Monday.
E-mail service provider Mail.com reported that almost 53,000 copies of the virus were sent to its customers Monday, while British-based rival MessageLabs confirmed another 5,800.
The FBI is still assessing the virus attack and hasn't yet decided whether to pursue the case, spokeswoman Deborah Weierman said.
Play video
There are currently no comments for this post.