Although the worm did not affect many computer users, it attracted widespread attention because it was the first to exploit interest in the Iraq conflict, promising images from US spy satellites and anti-US information.
However, the virus writer contributed to his own downfall by adding his own message which read, “Coded by Uncle Roger in Haernoesand, Sweden 03.03”, to the worm’s code, which allowed police to track him down to Haernoesand, a town 400km north of Stockholm.
The man was not arrested but will be charged with computer trespassing and inflicting damage, Swedish police said at a press conference.
Carole Theriault, anti-virus consultant at security specialists Sophos, said the swift action taken by the Swedish police was an encouraging sign.
"It is good to see computer crime authorities around the world taking the virus threat more seriously,” she said.
“The worm author was particularly insidious in using current events to spur the general public into double-clicking on the infected attachment."
Read more on Antivirus, firewall and IDS products
How diplomatic immunity silenced the prosecutor who coordinated Sweden’s EncroChat probe
Revealed: The man behind the first major computer virus pandemic
CPS faces legal ruling over refusal to disclose emails with US on WikiLeaks and Assange extradition
Met Police collaborated with US prosecutors in WikiLeaks investigation