DIA WASHINGTON DC//DSM-4// AIG 7894 AIG 7005 USAISC FT SHERIDAN IL//ASQNA-SHD-0// NAVWPNCEN CHINA LAKE CA//CODE 2408// SECDEF WASHINGTON DC//C3I-T/C3I-IS// JOINT STAFF WASHINGTON DC//6JT/DIRM: SCD// HQ AFOSI BOLLING AFB DC//IVSC/SCX// AFCSC KELLY AFB TX//SR/SRE/SRM/SRMA// HQ ESC KELLY AFB TX//INAR// DA WASHINGTON DC//DAMI-AM/DAMI-CIC/SAIS-SS// CDRINSCOM FORT BELVOIR VA//IAOPS-CI-TO/IAM-AUT-L// CDRUSAOPSGP FT GEORGE G MEADE MD//IAGPC-TSE// CDR730THMIBN MUNICH GE//IAGPE-SCM// COMNAVINTCOM WASHINGTON DC//OOQ/OOJ// NAVINVSERV ERREG LONDON UK//60HQ// NAVINVSERVRA LONDON UK//60LN// AFOSI DET 7008 MUNICH GE//CC// CMC WASHINGTON DC//INTX// USCENTCOM MACDILL AFB FL//J2/J6/SOJ2-SSO/SOJ2-IS// USCINCEUR VAIHINGEN GE//ECJ2/ECJ2-P/ECJ6/ EUCOM AIDES// USCINCLANT NORFOLK VA//J2/J6/J63// USCINCPAC HONOLULU HI//J2I/J6// CINCSAC OFFUTT AFB NE//INYSCC// USCINCSO QUARRY HEIGHTS PM//J2/J2-ID/J6/ SCJ6-A/SSO// USCINCTRANS SCOTT AFB IL//J2/J6// USCINCFOR FT MCPHERSON GA//J2/J6/FCJ6-TPM// USSPACECOM PETERSON AFB CO//J2/J6// USNMR SHAPE BE//DACOS INTEL// NSACSS FT GEORGE G MEADE MD//C912/X43// CDRINSCOM FT BELVOIR VA//IAIM-AUT-L// NAVELEXSECCEN WASHINGTON DC//CODE 04/CODE 043// DCAA CAMERON STATION VA//OWN// CMC WASHINGTON DC//CODE CCIS/INTZ// DIS WASHINGTON DC//V0060// DMATSC RESTON VA//IS// SECDEF WASHINGTON DC//USDP/DSAA// DLA CAMERON STATION VA//IA// SECDEF WASHINGTON DC//PHYSICAL SECURITY DIV// USUHS BETHESDA MD//UCC// SECDEF WASHINGTON DC//DARPA-ITSO/SQUIRES// SDIO WASHINGTON DC//POI// NCRLANT NORFOLK VA// DOE LIVERMORE CA//LLNL// COMDT COGARD WASHINGTON DC//G-TPS-4/G-OIN// FTC WRIGHT PATTERSON AFB OH//DXST// HQ DOE WASH DC//IN-40// CG FIRST MEB//SSO// CG SECOND MAW//G2/SSO// CG THIRD MAW//G2/SSO// FORSCOM AISA FT BRAGG NC CNO WASHINGTON DC//OP941/OP942/OP945/OP943/921// COMSPAWARSYSCOM WASHINGTON DC//PMW161/PMW162/PD60// CG FMFLANT//G2/G6/ISMO// CDRUSAISC FT HUACHUCA AZ//ASIS-A// CDR USACIDC WASH DC//C1ID-IN-SC// CG FIRST MEF//G-2/ISSO// HQDA WASHINGTON DC//JDMSS-W/JDPP-SO// CDR 751STMIBN PYONGTAEK KOR//IABDK-FS-IMO// MARCORINTCEN QUANTICO VA//MCIC10// HQ AFISA BOLLING AFB WASH DC//INDXS// CJTF FIVE//J64// CSG USSPACECOM NORAD CMAFB COLORADO SPRINGS CO COMUSFOREA INTEL TAEGU KOR//IABDK-ISD-S// CINCUSNAVEUR LONDON UK//N2/N23/N26/N6/N8/016// CDR 902ND FT MEADE MD//IAGPA-OP-I/IRGPA-T/ IAGPA-A-OP// COMNAVAIRTESTCEN PATUXENT RIVER MD//SYO2B2// HQ AFLC WRIGHT PATTERSON AFB OH//INS// CTJF FOUR/J2 DEA WASHINGTON DC//AIC// PM ASAS MCLEAN VA UCTRANS INTEL CEN SCOTT AFB IL//TCJ2-S/TCJ2-PG// CDR USARPAC FT SHAFTER HI//APIN-SC// CDR USASCO FT CLAYTON PM//SOIN-CIS// CINCUSAREUR HEIDELBERG GE//AEAGB-CI/AEAGB-CI-S// DIRNSA FT MEADE MD//X411// NAVOCEANSYSCEN SAN DIEGO CA//422// EW MGT DIR ROBINS AFB GA//LNN// MAC INTEL CEN SCOTT AFB IL//IND// CDR AMC ALEXANDRIA VA//AMCMI-C// UNCLAS E F T O FOUO SUBJECT: COMPUTER SECURITY ALERT FOR DIRECT MAILING OF VIRUS PROGRAMS {ASSIST 91-16} U-8,152/DSM-4 1. {U} SUMMARY: THE AIR FORCE OFFICE OF SPECIAL INVESTIGATIONS RECENTLY INFORMED ASSIST THAT FLOPPY DISKETTES ARE BEING MAILED TO THE SERVICE'S PUBLIC AFFAIRS OFFICE WHICH CONTAIN THE VIRUS "STONED". THE VIRUS CONTAMINATED DISKETTES ARE ACCOMPANIED BY A LETTER OF A POLITICAL NATURE. 2. {FOUO} THE ORIGIN OF THE LETTERS RECOVERED TO DATE IDENTIFY THE "NATION OF ISLAM//HIS MAJESTY ALLAH//MASTER FARD MUHAMMED// 4855 S. WOODLAWN AVENUE//CHICAGO, ILL. 60615//{912} 823-3142// AS THE ORIGINATOR. AN ADDITIONAL RETURN ADDRESS HAS BEEN STAMPED UNDER THE ABOVE LISTED ADDRESS AND READS: DR. W. D. FARD//839 WEST 11TH STREET//JUNCTION CITY,KANSAS 66441//{913} 238-3825//. 3. {U} INFORMATION TO DATE REVEALS THAT THE DISKETTES ENCLOSED WITH THE CORRESPONDENCE ARE CONTAMINATED WITH THE COMPUTER VIRUS "STONED". STONED IS A BOOT INFECTOR VIRUS WHICH WILL CONTAMINATE THE HARD DISK OF A PC WHEN BOOTED FROM A CONTAMINATED DISKETTE. THE VIRUS IS NORMALLY NOT DESTRUCTIVE EXCEPT OCCASIONAL OVERWRITES HAVE RESULTED IN CRASHED HARD DISKS. ADDITIONALLY, STONED WILL CAUSE A CORRUPTION OF LOGICAL SECTORS OF A SINGLE HARD DISK RESULTING IN IT'S CRASH. 4. {U} MOST ANTI-VIRUS PACKAGES WILL DETECT THE STONED VIRUS. ERADICATION FOR NON-DODIIS MACHINES CAN BE ACCOMPLISHED THROUGH THE ANTI-VIRUS SOFTWARE UTILITIES OR BY PERFORMING A LOW LEVEL FORMAT FROM CLEAN TRUSTED BACK-UPS {NOTICE: A LOW LEVEL FORMAT WILL DESTROY ALL DATA ON THE HARD DISK REQUIRING BACKUP OF ALL DATA FILES}. 5. {U} REQUEST THAT UPON RECEIPT OF THIS MESSAGE, CONTACT YOUR LOCAL PUBLIC AFFAIRS OFFICE AND INVESTIGATE AGENCY AND RELAY THIS ALERT. IF THE CORRESPONDENCE AND DISKETTE HAVE BEEN RECEIVED AND THE DISKETTE HAS BEEN LOADED ON ANY PC'S, THOSE PC'S MUST BE QUARANTINED UNTIL CHECKED FOR THE PRESENCE OF THE VIRUS. 7. {U} POINT OF CONTACT: ASSIST POINT OF CONTACT FOR THIS MATTER IS MIKE HIGGINS, COMM {703} 284-0182 / DSN 251-0182. ASSIST CAN BE REACHED 24 HOURS PER DAY, COMMERCIAL PAGER {202} 896-6863 {FROM A TOUCH TONE PHONE ENTER THE CALL BACK NUMBER AFTER THE TONE PROMPT} OR AUTOVON DIAL 243-8000 AND ASK TO HAVE THE ASSIST DUTY OFFICER PAGED.