A British man was arrested on July 23 on charges that he created and released the W32-Leave.worm, Scotland Yard confirmed on Wednesday.
In a joint investigation with the U.S. Federal Bureau of Investigation (FBI), Scotland Yard (also known as the Metropolitan Police) arrested the 24-year-old man on July 23 under the U.K.'s Computer Misuse Act 1990, confirmed a Met Police spokeswoman.
"We cannot comment too much as he has only been arrested at this stage after a search warrant was issued. He was released and is to return to a London police station in September either for further questioning or to be charged," the spokeswoman said. The investigation is ongoing, she said.
Under U.K. law the man's name was not made public, though the Met Police spokeswoman confirmed that he is believed to have created the W32-Leave.worm.
The W32-Leave.worm, which was reported by the FBI's National Infrastructure Protection Center (NIPC) in June, when it issued a warning, reportedly helps a hacker to break into a victim's computer. The hacker could then steal or delete files, or use the computer to commit other hacks or launch denial of service attacks.
According to the NIPC's warning, the worm only affects computers that have been infected previously with another virus called the SubSeven Trojan. The worm and trojan work together to complete control of and use the target machine, the NIPC said.
The worm was deemed a low risk by antivirus software companies such as Trend Micro Inc. "We don't know of too many cases of the worm infecting systems," said Trend Micro (UK) Ltd. spokeswoman Penny Brennan. Trend Micro did not deem the worm "destructive" because it does not do damage to infected systems, instead creating a backdoor for hackers to gain access to infected systems.
More information on the W32-Leave.worm can be found at: www.antivirus.com/vinfo/virusencyclo/default5.asp?VName=TROJ_leave.a or at www.nipc.gov/warnings/advisories/2001/01-014.htm.