Markt infects COM files that are in directories listed in the PATH. Markt uses a variable encryption, but is not polymorphic.
Disinfection & Removal
Markt activates on the 9th of September. At this date it displays a screen with title "Media Markt", a skull with the text "-=> SuXX! >=-" on it's forehead and the following text:
Ups, all Disk's from C: to Z: Trashed! Sorry about that! to ALL Military Inventors its Time to give us the Tachyonator!
After this the virus tries to overwrite data on every drive from C: to Z:. Virus is unable to overwrite data on network drives, though.
Markt also has the following text, which is not displayed:
MediaMarkt WerbeVirus '94 (c) MediaMarkt Germany The Wizard
MediaMarkt is a German company that has nothing to do with the virus.