30SWVA17-2 governs procedures for reporting suspicious activity, computer viruses, and classified message incidents by users.
View 30SWVA17-2 on armypubs.army.mil
It identifies suspicious personnel, phishing emails, screen-lock issues, and virus warnings, and provides actions for each situation. It also specifies steps for suspected computer viruses and classified messages sent or received over an unclassified network.
STOP! DISCONNECT THE LAN CABLE. Discontinue use. (paragraph 1)
LEAVE THE SYSTEM POWERED UP. Do not click on any prompts, close any windows, or shut down the system. (paragraph 1)