"5th Generation" (5-June-1990) Entry...............: "5th. Generation" Alias(es)...........: --- Virus Strain........: --- Virus detected when.: May 1989 where.: Utrecht (Netherlands) Classification......: Bootsector-Virus Length of Virus.....: 326 Bytes --------------------- Preconditions ----------------------------------- Operating System(s).: Atari-TOS Version/Release.....: 1.0, 1.2 (1.4 not yet tested) Computer model(s)...: All types of the Atari ST Series --------------------- Attributes -------------------------------------- Identification......: First word in the boot sector = $601C. Type of infection...: Infects the boot sector of the disk A, if it is regarded to be non-infected. Infection Trigger...: check if bootsector is executable Media affected......: Infection of disc in drive A. Interrupts hooked...: BIOS-Trap used and changed by this virus. Damage..............: Infects the boot sector of the disk, if it is regarded to be un-infected. Clear Track 0 with the FAT and the directory. Damage Trigger......: If counter (at start of virus + 324) = 0. Initial value depends on number of infections. Particularities.....: --- Similarities........: --- --------------------- Agents ------------------------------------------ Countermeasures.....: Programs that calculate the bootsector's checksum and modify it, if it is $1234; then, the sector is regarded as not executable. The suspected more dangerous second part of the virus might not be recognized because it does not need to have the correct checksum. Countermeasures successful: --- Standard means......: Write protect the disk / Write an easily identifiable bootsector / 'Manually' change the checksum to a value other than $1234 . --------------------- Acknowledgement --------------------------------- Location............: Virus Test Center, University Hamburg, FRG Classification by...: Ralf Stegen Documentation by....: Ralf Stegen Information Source..: George R. Woodside Date................: 5-June-1990 .