Suspect admits creating Melissa
- — 26 August, 1999 21:49
The man arrested in connection with the Melissa virus has admitted to creating the virus, which proliferated quickly throughout computer systems in March and forced some companies to shut down their e-mail systems.
David L. Smith, a 30-year-old from Aberdeen, New Jersey, admitted to investigators that he created the virus, and his admission was included in documents submitted in Superior Court in Monmouth County, New Jersey, said Paul Loriquet, a spokesman for the New Jersey Attorney General's office.
Smith was arrested in April on felony counts including interruption of public communications, theft of computer services and damage or wrongful access to computer services. He was released on $US100,000 bail and faces $US480,000 in fines and 40 years in prison if convicted.
Smith has denied committing the offences. His case is expected to be considered by a state grand jury, which would decide whether or not to indict him, Loriquet said.
"We expect some kind of resolution in September," said Loriquet, who declined to say whether a plea bargain is an option.
Smith's attorney said he hadn't seen the documents in which his client is said to have admitted creating the virus, and so declined to comment on them.
"We're confident Mr Smith did not commit the crimes that are the basis for the (arrest) warrant," said attorney Ed Borden.
Meanwhile, a judge refused Borden's request that the Attorney General's office disclose information that officials used to base search warrants on, Borden said. "As soon as they release those, Mr. Smith will respond" to the charges, Borden said.
Smith has not been indicted yet so he has not given a formal plea, but has denied guilt, Borden explained.
The virus was spread through a Microsoft Word document with a macro virus attached to it, and Microsoft Exchange servers running Microsoft Outlook were vulnerable. The e-mail, usually bearing the name of someone the recipient knew, had a subject line that said, "Here is the document you asked for ... don't show anyone else ;-)". When a user opened the attachment the virus was then sent to the first 50 names in the user's address book.
While considered more of a nuisance than malicious, the virus spread so quickly within one day that it forced the shut-down of e-mail systems at companies including Microsoft and Lucent Technologies. Agencies tracking it estimated that tens of thousands of users were affected.