Threat Description

Markt

Details

Aliases: Markt, Media, Werbe, VCL.Werbe
Category: Malware
Type: Virus
Platform: W32

Summary



Markt infects COM files that are in directories listed in the PATH. Markt uses a variable encryption, but is not polymorphic.



Removal



Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details



Markt activates on the 9th of September. At this date it displays a screen with title "Media Markt", a skull with the text "-=> SuXX! >=-" on it's forehead and the following text:

Ups, all Disk's from C: to Z: Trashed! Sorry about that!
   to ALL Military Inventors its Time to give us the Tachyonator!
   
   

After this the virus tries to overwrite data on every drive from C: to Z:. Virus is unable to overwrite data on network drives, though.

Markt also has the following text, which is not displayed:

MediaMarkt WerbeVirus '94  (c) MediaMarkt Germany The Wizard
     

MediaMarkt is a German company that has nothing to do with the virus.






SUBMIT A SAMPLE

Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More