**************************************************************************
Security Bulletin 9426                 DISA Defense Communications System
November 10, 1994           Published by: DDN Security Coordination Center
                                      (SCC@NIC.DDN.MIL)   1-(800) 365-3642

                        DEFENSE  DATA  NETWORK
                          SECURITY  BULLETIN

  The DDN SECURITY BULLETIN is distributed by the DDN SCC (Security
  Coordination Center) under DISA contract as a means of communicating
  information on network and host security exposures, fixes, and concerns
  to security and management personnel at DDN facilities.  Back issues may
  be obtained via FTP (or Kermit) from NIC.DDN.MIL [192.112.36.5]
  using login="anonymous" and password="guest".  The bulletin pathname is
  scc/ddn-security-yynn (where "yy" is the year the bulletin is issued
  and "nn" is a bulletin number, e.g. scc/ddn-security-9426.)
**************************************************************************

                          Virus Alert: "MONKEY"

1. A new DOS computer virus has reached Europe. The virus is called "Monkey."
It is a serious virus which is passed from computer to computer by infected
disks. It cannot travel by file trnsfers or e-mail. The virus has already
been found in the Graffenwohr training area.

2. Once the virus infects a computer, the hard drive will infect other
diskettes, and over time the hard drive will become unusable, resulting
in total loss of data on the hard disk.

3. The following steps are the precautions you must take to protect your
system:

     (A) Ensure that you have virus checking software that knows about
         the Monkey virus.

     (B) Check every diskette you use. If it hasn't been checked by you,
         it hasn't been checked.

     (C) If you detect the monkey virus, stop. Secure that diskette and
         all other diskettes that came with it.

     (D) Don't attempt to clean out the virus yourself. This virus is
         very difficult to clean.

     (E) Contact your local LAN administrator, Computer Systems Security
         Officer (CSSO), or base computer security office immediately.



For furthur information, contact:
Msgt. Patrick A. Heim, heimp@EUR.IMS.DISA.MIL, 011-49-0711-680-5817, or
     (DSN) 430-5817/7222