- Sub: Viral Infections in Commercial/Government Media/Software - Jan 97 Revised STEWS-SD-S (380-19a) MEMORANDUM FOR RECORD SUBJECT: Viral Infections in Commercial/Government Media/Software 1. The following list, compiled from VIRUS-L, RISKS-FORUM and other public sources, identifies virus infections transmitted through either commercial or government entities in which the distributor would generally have been considered to be a "reputable source". If anyone has additional incidents, I would appreciate receiving such information so that I may update this list. Any contributor will receive the appropriate credit. 2. I have consciously omitted those incidents in which there was suspicion that the reporting location was either suspect, unsure itself as to the source of the infection, or unwilling to provide full disclosure. I have placed an asterisk (*) besides those entries which represent an addition from the previous list. 3. MS-DOS INFECTIONS SOFTWARE REPORTING LOCATION DATE VIRUS a. Unlock Masterkey Kennedy Space Center Oct 89 Vienna b. SARGON III Iceland Sep 89 Cascade c. ASYST RTDEMOO2. Fort Belvoir Aug 89 Jerusalem EXE d. Desktop Fractal Various Jan 90 Jerusalem e. Bureau of the Government Printing Jan 90 Jerusalem Census, Elec. Office/US Census County & City Data, 1988 f. Northern Iceland Mar 90 Disk- Computers Killer g. Far Side Moon Japan Apr 90 Nambal/ Artdink Inc. NambaII (PC Manufacturer shipped infected systems.) h. PC Today United Kingdom Jul 90 Disk- (Magazine distributed non-working copy of virus.) Killer i. Modular Circuit Padgett Peterson Oct 90 Stoned Technology Utility Disk j. DOS-TREND Christoph Fischer Nov 90 Stoned II Germany (Magazine distributed infected disks in Issue 10/11.) k. PC Benelux World David Ferbrache Nov 90 Cascade 1704 l. Shimadzu Photo- Dr. Werner Klotz- Nov 90 Vienna detection Detec- buecher, Germany STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software tor SPD-M6A Version 2.14 m. Joint Service Fred O'Kelley Nov 90 Stoned Software System El Paso, TX (Contractor installed financial system at multiple Army sites from an infected disk.) n. Arkanoid II Alex Jauch Nov 90 Jerusalem o. Modem Protocall Brian Daniel Dec 90 Stoned One Modem Columbus, GA Evaluation Novell IPX & NETBIOS Version (LAN Source Technologies Distributing distributed.) p. COMBASE and SVGA- Michael Head/ Dec 90 Music Bug Utility R. Wallace Hale q. A-MAIL VCH BIBLIO Lynne Munro Mar 91 1701/1704 Disk 2 of 2 Oxford University r. Oracle Windows' Sam Daniel Jul 91 Stoned DDE/Toolbox Demo Unisys Disk s. European Patent Iain Noble,UK Aug 91 Stoned Office (Reported in New Bulletin Disk Scientist, 10 Aug 91) t. Sun Microsystems DOE CIAC Bulletin Sep 91 Jerusalem PCNFS 3.5b B-40 u. Cypress Semi- Padgett Peterson Sep 91 Stoned Conductor MAXPROG, version 2.72C v. PUMPKIN PATCH Various Oct 91 Jerusalem Screen Saver, Publishing International w. PC Paintbrush John-David Childs Oct 91 Michel- Update Disk University of Montana angelo from Z-Soft (one site report) x. Software John Kida Nov 91 Stoned Perspectives Demo Disk y. NTIS Software Various Nov 91 Stoned Distribution (Federal Computer Week, November 4, 1991) z. Zinc Software PCWeek, 25th Edition Nov 91 Form C++ Library Disk aa. Virtual Reality PCWeek, 25th Edition Nov 91 Michel- Lab Distant Suns angelo Disk ab. Novell Network DOE CIAC Bulletin Dec 91 Stoned-3 Encyclopedia C-10 Disks ac. Konami Inc. John Markoff Dec 91 Stoned Spacewrecked NY Times Game Disk ad. Software Pre- AISS Alert 91-18 Dec 91 Michel- STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software loaded in AUVA angelo 350/25 Systems (Assembled in Taiwan for Information Management Consultants, Brookfield, WI) ae. Software Pre- USAISC-AMC Memo Jan 92 Michel- loaded in Easy angelo Data Model 386 Systems from Trident VGA Co. af. Leading Edge National Public Jan 92 Michel- Preloaded 6,000 Radio angelo PCs from 10-27 Dec 91 ag. PC Fun Magazine Nick FitzGerald Jan 92 Stoned Disk New Zealand ah. Da Vinci Systems Various Feb 92 Michel- E-Mail 2.0 Demo angelo Disk ai. Meridian Data Tim Martin Feb 92 Michel- Inc. CD-ROM angelo Extension Software (special disk shipment to one site) aj. WIN Laboratory Virus-L Feb 92 Stoned Systems Preloaded with MS-DOS 4.01 ak. Sony Laser Virus-L Feb 92 Dark Library Avenger Distribution Disk al. IntelCorp Peter Neumann Mar 92 Michel- LANSpool SRI angelo 3.01 Disk am. Symbol Techno- Chris Bray Mar 92 Michel- logies Preloaded angelo Systems an. Neural Networks Bart Kosko Mar 92 Michel- & Fuzzy Systems angelo Book with Infected Disk (one site report) ao. Chicony Corp John Qualtrough Mar 92 Michel- Keyboard Tracking White Sands angelo Ball Software Disk ap. Pionex 386 Pro Al Guiterrez Mar 92 Michel- System Preloaded White Sands angelo with DOS 5.0 aq. Lotus Development PCWeek Mar 92 Michel- Corp CD/Networker March 9, 1992 angelo LAN Version ar. Netware Support Ken Haynes Mar 92 NoInt Encyclopedia 900 Support/LAN (NSE) Standard Magazine STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software Edition (Novell distributed.) as. Golden/Diamond Chris Mc Donald Jun 92 Fish Boot International/ White Sands System Cactus OCR Disk at. DacEasy Inc. PCWeek Jun 92 Stoned Instant Account- June 29, 1992 ing Package au. Phoenix Data Tim Polk Jul 92 Michel- Systems Diagnos- NIST angelo tic Disk for Ethernet Board av. Standard Army TRADOC Aug 92 Form Hazardous Materials Tracking System Disk from Wilson Hill Associates ax. International James McLeod Aug 92 Stoned/ Data Systems Aberdeen Proving Michel- Preloaded 486 Ground, MD angelo Systems, Model IDS 4331 ay. Factory Sealed John Melka Oct 92 Michel- Device Driver Georgia Institute angelo Disks ID PVGA of Technology 1024x (one site report) az. Update Disk #48 Ludwig Schumacher Oct 92 Michel- FAR-TRIEVE, Mainz, Germany angelo Distributed by CACI, INC-FEDERAL ba. Data Disks Rae Rollins Oct 92 Form from Army White Sands Contractor bb. Physical Sciences Chris Mc Donald Nov 92 Michel- Lab Proposal Disk White Sands angelo 92-A0117 bc. Star LC24 Print Otto Stolz Dec 92 Vacsina Driver Disk Loader (no replication) bd. FUJITSU Germany Klaus Brunnstein Jan 93 V-Sign Printer Disks VTC, University of Hamburg be. DCA Printer Virus Bulletin Jan 93 NoInt Driver Disks UK bf. Coleman Research Chris Mc Donald Feb 93 Stoned Proposal Disk White Sands CEP/93-001 bg. GTE Government M. Hanzlik Mar 93 Stoned/ Systems Corp Fort Belvoir STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software Preloaded 386SX Michel- on Contract Number F09603-91-0-0999 bh. Hoskyns' Project Virus Bulletin Apr 93 Form Manager Workbench UK Software bi. STIG 486 PCs James McLeod Jun 93 Stoned Preloaded on Aberdeen Proving VGA Disk (50 Ground, MD systems) bj. Telemate Tapio Keihanen Jun 93 Stoned File TM411-4. Virus-L/Winfred Hu, ZIP Telemate Author bk. COOP Supermarket Harvey Stein Jul 3 Stoned/ Game Disk, ZOOM, Virus-L DIR-II Distributed in Israel bl. CIX Online Iolo Davidson Jul 93 Butterfly Service Posted S&S International, SPORT21C.ZIP UK bm. IBIS Training Joe Reich Sep 93 Michel- Class on Harvard Fort Monmouth, NJ angelo Graphics with Distribution of Infected Disks to Students bn. Long-Term SLA Linda Hodgson Oct 93 Form Training Class Pine Bluff, AR Distribution of Infected Disks to Students bo. So Much Shareware Bill Lambin Dec 93 Power Vol II CD, Power- Pump User Software Distributed with Infected File XYPHR2.ZIP bp. Oliver Marketing R. Wallace Hale Dec 93 Jerusalem Inc. Distribution /Stoned of Demo Disks (The date shown is the date of the report, not of the incident.) bq. PURS Program Disk Bas van der Most/ Feb 94 SatanBug Distributed by Jim Silsbee, MTMC 5th Signal Command in Europe br. Die DFUe-CDROM Peter Immond Jun 94 Crusader Distributed by Virus-L Mediaplex bs. Nine Files on Katherine Prouty Jun 94 Chill PBS Forum on ZiffNet Forums STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software ZiffNet Manager bt. Demo Version Larry Rouse Nov 94 AntiCmos 2.0 GPSLOG by DOE, NV Sandia Research Associates Inc bu. Preformatted Virus Bulletin Nov 94 LZR Disks from China UK in Finland and Sweden (20,000 Estimated) bv. Laptops Delivered ASSIST Bulletin Dec 94 Monkey by IDP Corp under # 94-35 Navy Contract N66032-92-D-0002 bw. Army Distribution Robert Bowlby Feb 95 AntiCmos of Software for Internal Use bx. European Klaus Brunnstein Feb 95 Gallicia Commission Office VTC, University of Distributed Hamburg 1,000 Disks by. Microsoft Virus-L Feb 95 Form Distributed 200 Disks in UK bz. MITSUMI Mouse Virus-L Feb 95 Form Driver Software Model ECM-S31 Type ca. Night Owl 15 Virus-L Feb 95 Taipan.666 CD-ROM with File DMNCHEAT.ZIP cb. ARTEC/Genius PC Digest/WS Mar 95 Anti-Tel Mouse Drivers Computer Publishing Corp, Philippines cc. CD-ROM The Gates Virus Bulletin May 95 Tai-Pan of the Underworld UK & Goldbug Distributed by Home Grown Productions Ltd cd. Data Expert 486 Steve Clark Jun 95 NATAS Systems Preloaded Aberdeen Proving Ground, MD ce. American Online AFCERT Jun 95 Bupt Distribution Kelly AFB, TX Disks cf. Merriam-Webster Information Week Jul 95 AntiExe Electronic July 3, 1995 Version of Collegiate Dictionary and STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software Thesaurus (500 Units Shipped) cg. Ford Motor Co. Tampa Tribune Aug 95 Monkey Public Relations July 31, 1995 Disk ch. Microsoft Virus Bulletin Oct 95 WinWord. Distribution of UK Concept Windows 95 Soft- ware Compatibi- lity Test Version 4.0 CD-ROM ci. ServerWare Virus Bulletin Oct 95 WinWord. Distribution of UK Concept Snap-on Tools for the Windows NT Professional CD-ROM cj. DEC Distribution Virus Bulletin Sep 95 WinWord. of DECUS Disk UK Concept ck. PC Magazine Virus Bulletin Oct 95 SAMPO Distribution UK of "Editor's Day" Disk cl. Ziff-Davis UK Virus Bulletin Jan 96 Parity_ Ltd Distribution UK Boot.B of Electronic Christmas Card on Disk cm. Powersoft Multi- David Kennedy Jan 96 Taipan. media U.S.A. from NCSA Forum 666 Distribution of CD-ROM "101 Card Games" cn. Microsoft David Kennedy Jan 96 WinWord. Distribution of from S & S Concept CD-ROM "The International Microsoft Office 95 and Windows 95 Business Guide" co. OSD C3I Distri- Thomas Bozek Feb 96 Ripper bution of disk OSD C3I "40th ARMA Conference" cp. Alpine Media Wayne Riddle Mar 96 B1 Distribution of NCSA Forum Microsoft Developer Server Disk cq. Assistance Chief Wyland Leadbetter Mar 96 WinWord. of Staff for COL, DAIM-MD Concept Installation STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software Management Distribution of Biographies Disk cr. Industrial Laura Steen May 96 AntiCmos- Computer Source ICS Customer A (ICS) Distribu- Engineering Manager tion of Windows 95 Driver Disks for ROCKETPORTXX cs. HQ FORSCOM John Mitchener Sep 96 WinWord. Distribution of White Sands Concept Uuencoded Files over the Internet ct. HQ CIO MICOM John Mitchener Oct 96 WinWord. Distribution of White Sands Concept MIME-encoded Files over the Internet cu. Microsoft Klaus Brunnstein Oct 96 Wazzu.A Distribution of University of CD-ROM at Swiss Hamburg IT Exhibition and Swiss Internet Site * cv. Ascii Corp Nikkei English News Nov 96 Micro Distribution of David Kennedy, NCSA Software with Magazine * cx. Microsoft Virus Bulletin Nov 96 Wazzu Distribution on Solution Provider CD (SPCD) for Sep 96 4. MACINTOSH INFECTIONS SOFTWARE REPORTING LOCATION DATE VIRUS a. Freehand Various Mar 88 MacMag/ Peace b. QLTECH MegaRom Various Oct 88 nVIR c. MS Word 4 Various Oct 88 nVIR d. STELLA 2.0 EARN Oct 88 nVIR e. CMS HardDrive Various Nov 88 Scores Utilities, Ver 3.4 f. NoteWriter Colgate College Sep 89 Scores & nVIR g. Brady Hypercard Various Sep 89 nVIR A 1.2.2 within the Book Applied HyperTalk STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software h. Grammitik Various Jan 90 WDEF A i. MacPublishing David Ferbrache Jan 90 WDEF Font Disk j. Chessmate 2100/ Various Apr 90 WDEF Cribgin k. CC-on-Diskette Mike Tyo Apr 90 WDEF A Distributed by the Institute for Scientific Information l. Diskworld Diskette Chuck Hoffman May 90 WDEF Softdisk Publishing m. Excel Microsoft Gail Lawley Jun 90 WDEF n. SecureWare INC Marshall Abrams Aug 90 nVIR o. Rodime PLUS/RX Paul Woodman Feb 91 WDEF A Praxis Software Engineers p. Seiko PS-X Printer ASSIST Jul 92 CDEF Driver Software Distributed by American Computer Resources, VA q. Standard Distribution Jim Huggins Oct 93 nVIR Disks for University Michigan Daily of Michigan Computer Kickoff Sale r. CD-ROM Journal of CIAC May 94 nVIR Vacuum of Science & Technology, Vol 12, 1Q94 s. CD-ROM within Brian Nickels Sep 94 WDEF UK MACFORMAT Adelaide, Australia t. Macintosh System NASA Automated Oct 94 MBDF 7.5 Sample Upgrade Systems Incident Kit (HDSC Setup and Response Capability Disk First Aid Applications u. West German Dis- Klaus Brunnstein Nov 94 MerryXmas tribution of 4,000 Hamburg CD-ROMs with MacTools and MacPower Collection v. MacUser, UK Edition, OXCERT May 96 MDBF-A Distribution of CD-ROM with One Director Movie Infected 5. ATARI INFECTIONS SOFTWARE REPORTING LOCATION DATE VIRUS STEWS-SD-S (380-19a) Jan 97 SUBJECT: Viral Infections in Commercial/Government Media/Software WordUp 2.0 Various Sep 89 Key 6. AMIGA INFECTIONS SOFTWARE REPORTING LOCATION DATE VIRUS Sama Software Inc Leonard Fetterhoff 1988 Byte Disk Distributed in White Sands Bandit AmigoTimes 7. Individuals may forward any information on additional incidents to mcdonalc@wsmr.army.mil.