Source:
Canoe Online
'Sasser' creator tried to limit damage
By GEIR MOULSON
Sasser worm shows need for IT security
BERLIN (AP) - An 18-year-old German who confessed to creating the Sasser computer worm launched a new version meant to limit the damage just before his arrest last week, investigators said Monday.
Authorities who have questioned Sven Jaschan got the impression his motive was to gain fame as a programmer, prosecutor Detlev Dyballa said. Dyballa described as speculation news media reports that Jaschan may have created the disruptive program to drum up business for his mother's computer store, PC-Help, in the small town of Waffensen.
"One can never rule out anything, but there are no facts to suggest it," he told The Associated Press by telephone.
Jaschan was arrested Friday at his mother's house, where police said agents found him sitting at his computer. Investigators say the machine contained the worm's source code.
Earlier Friday, investigators said, Jaschan unleashed the new Sasser e virus - a failed attempt to limit the damage caused by the four previous versions.
Frank Federau, a spokesman for the state criminal office in Hanover, said the worm was "a slightly modified form" of the program that raced around the world over the past week, exploiting a flaw in Microsoft's Windows operating system.
"He did it with good intentions, but it had exactly the same damaging effects," said Sascha Hanke, a Microsoft data protection official in Germany.
Like the other versions, the new variant - which notified users of a Microsoft patch against Sasser - caused computers to crash and reboot.
"The cause was erroneous programming of the virus," Hanke said.
Police have said Jaschan was responsible for all versions of Sasser as well as the Netsky virus.
He is being investigated on suspicion of computer sabotage, which carries a maximum sentence of five years in prison. He was released pending charges after questioning last Friday, when he admitted creating Sasser, police said.
A trial could begin at the end of June, Dyballa said.
Investigators were still examining the contents of Jaschan's confiscated computer Monday.
"This will take quite a long time," criminal office spokesman Detlef Ehrike said. Officials are working to prepare hundreds of pages worth of data for a possible court case, he said.
The teenager has told officials his original intention was to create a virus, Netsky A, that would combat the Mydoom and Bagle viruses, removing them from infected computers.
That led him to develop the Netsky virus further - and after modifying it created Sasser.
"He's not stupid - he's a really good programmer," Dyballa said. "But I don't know whether he was aware of the scale" of the damage.
Sasser affects computers running Windows XP or 2000.
Last Monday, the worm hit public hospitals in Hong Kong and one-third of Taiwan's post office branches. Twenty British Airways flights were each delayed about 10 minutes Tuesday due to Sasser troubles at check-in desks, while British coast guard stations used pen and paper for charts normally generated by computer.
Waffensen residents described Jaschan as shy and withdrawn, and said he hoped to study computing after finishing high school.
"He only got involved when the talk turned to computers," said Christian Mueller, a chef at the Eichenhof restaurant. "I've never heard him talk about anything else."
