By: Zaffirini  S.B. No. 1009
         (In the Senate - Filed February 28, 2007; March 14, 2007,
  read first time and referred to Committee on Business and Commerce;
  April 20, 2007, reported adversely, with favorable Committee
  Substitute by the following vote:  Yeas 8, Nays 0; April 20, 2007,
  sent to printer.)
 
  COMMITTEE SUBSTITUTE FOR S.B. No. 1009 By:  Janek
 
 
A BILL TO BE ENTITLED
 
AN ACT
 
  relating to the use of a computer for an unauthorized purpose.
         BE IT ENACTED BY THE LEGISLATURE OF THE STATE OF TEXAS:
         SECTION 1.  Section 48.002, Business & Commerce Code, as
  added by Chapter 298, Acts of the 79th Legislature, Regular
  Session, 2005, is amended by adding Subdivisions (1-a) and (10) to
  read as follows:
               (1-a)  "Botnet" means a collection of zombies.
               (10)  "Zombie" means a computer that, without the
  knowledge and consent of the computer's owner or operator, has been
  compromised to give access or control to a program or person other
  than the computer's owner or operator.
         SECTION 2.  Section 48.054, Business & Commerce Code, as
  added by Chapter 298, Acts of the 79th Legislature, Regular
  Session, 2005, is amended to read as follows:
         Sec. 48.054.  KNOWING VIOLATION. A person knowingly
  violates Section 48.051, 48.052, [or] 48.053, or 48.057 if the
  person:
               (1)  acts with actual knowledge of the facts that
  constitute the violation; or
               (2)  consciously avoids information that would
  establish actual knowledge of those facts.
         SECTION 3.  Subchapter B, Chapter 48, Business & Commerce
  Code, as added by Chapter 298, Acts of the 79th Legislature, Regular
  Session, 2005, is amended by adding Section 48.057 to read as
  follows:
         Sec. 48.057.  UNAUTHORIZED CREATION OR USE OF ZOMBIES OR
  BOTNETS. (a)  If a person is not the owner or operator of the
  computer, the person may not knowingly cause or offer to cause the
  computer to become a zombie or part of a botnet.
         (b)  A person may not knowingly create, have created, use, or
  offer to use a zombie or botnet:
               (1)  to send an unsolicited commercial electronic mail
  message, as defined by Section 46.001;
               (2)  for an attack on a computer system or network that
  causes a loss of service to users;
               (3)  to artificially add increments to a click counter
  by automatically clicking on an advertisement on an Internet
  website;
               (4)  to forward computer software designed to damage or
  disrupt another computer or system;
               (5)  to collect personally identifiable information;
               (6)  to manipulate online polls or games; or
               (7)  for another purpose not authorized by the owner or
  operator of the computer.
         (c)  A person may not:
               (1)  purchase, rent, or otherwise gain control of a
  zombie or botnet created by another person; or
               (2)  sell, lease, offer for sale or lease, or otherwise
  provide to another person access to or use of a zombie or botnet.
         SECTION 4.  The changes in law made by this Act apply only to
  conduct that occurs on or after the effective date of this Act.
  Conduct that occurs before the effective date of this Act is
  governed by the law in effect at the time the conduct occurred, and
  that law is continued in effect for that purpose.
         SECTION 5.  This Act takes effect September 1, 2007.
 
  * * * * *