Kournikova Virus Writer Speaks

Feb. 13 -- The "Anna Kournikova" computer virus wasn't intended to hurt anyone, a person claiming to be the author says in a public letter on his personal Web site.

The virus, the fastest-spreading since last year's "Love Bug," shut down e-mail servers at major firms around the world Monday and today. Disguised as an e-mail attachment purporting to be a picture of Russian tennis starlet Anna Kournikova, it mass-mailed itself out to everyone in a victim's address book when double-clicked.

The virus' spread is now tapering off as more firms install protection against it, experts said. The virus doesn't destroy files, but it can clog up and shut down mail servers. For e-mail-dependent companies like financial and media firms, that can mean major losses in productivity.

"I never wanted to harm the people you opened the attachment. But after all: it's their own fault they got infected with the AnnaKournikova virus, OnTheFly virus or watever they call it," the alleged virus writer, who calls himself "OnTheFly," says on his site in a message dotted with spelling and other errors.

Antiviral experts have been repeating a similar message: People should practice safe computing and not click on unsolicited e-mail attachments, even if they look enticing or come from friends.

Dave Kroll, president of Finjan Software, a San Jose, Calif.-based antivirus firm, also places some blame on antiviral companies. He said some antivirus software is too "reactive," requiring users to download continual updates to protect against the newest threats.

"You can't be reactive any more; you need something more proactive," he said.

Information technology managers should also be a bit more proactive, said Graham Cluley of the antivirus firm Sophos. A few simple steps taken after the Love Bug fiasco, such as blocking certain types of attachments, would have prevented this virus attack.

"Are you going to wait for the Billie Jean King virus?" Cluley said.

Not a Programmer

One of the scarier aspects of this virus attack is that the writer is apparently not a programmer. He put the virus together from a point-and-click, "viruses for dummies" kit released by an Argentine virus writer called [K]Alamar.