In a bid to crack down on computer attacks, Pennsylvania Gov. Tom Ridge, R, last week signed legislation making it a crime to spread computer viruses in the Keystone State.

E-vandals who spread computer viruses could face up to seven years in jail and will be forced to reimburse virus "victims" for any damages caused by their technological terrors under the legislation, which Ridge signed into law May 26.

"This month the world witnessed the crippling affects of a computer virus," Ridge said in written remarks following last week's vote. "The malicious (LoveBug) virus overwhelmed networks, crippled unsuspecting businesses, and destroyed the files of countless personal computer users. We certainly were not immune in Pennsylvania. But today we create a new vaccine - severe criminal penalties for hackers."

The Pennsylvania legislation defines a virus as any "computer program copied to or installed on a computer, computer network, computer program, computer software or computer system without the informed consent of the owner that may replicate itself and that causes unauthorized activities within or by the computer."

Perhaps even stiffer than the seven-year jail terms called for under the Pennsylvania law is a codicil requiring virus spreaders to reimburse their victims. Fines under the statute could be virtually limitless, because the law would force computer criminals to cover not only the cost of fixing and replacing damaged equipment, but would also make them liable for any costs incurred because of lost profits caused by computer "downtime."

While there are no federal laws dealing expressly with the creation and dissemination of computer viruses, virus spreaders can be tried under existing federal computer crime law.

Federal statutes, which allow for jail terms of up to five years for convicted computer criminals, are the subject of some scrutiny on Capitol Hill, where a handful of lawmakers are striving to beef up the penalties available under the law.