Eng
  1. Skip to navigation
  2. Skip to content
  3. Skip to sidebar


Markt


Aliases:


Markt
Media, Werbe, VCL.Werbe

Malware
Virus
W32

Summary

Markt infects COM files that are in directories listed in the PATH. Markt uses a variable encryption, but is not polymorphic.



Disinfection & Removal

Automatic Disinfection

Allow F-Secure Anti-Virus to disinfect the relevant files.

For more general information on disinfection, please see Removal Instructions.



Technical Details

Markt activates on the 9th of September. At this date it displays a screen with title "Media Markt", a skull with the text "-=> SuXX! >=-" on it's forehead and the following text:

Ups, all Disk's from C: to Z: Trashed! Sorry about that!
   to ALL Military Inventors its Time to give us the Tachyonator!
   
   

After this the virus tries to overwrite data on every drive from C: to Z:. Virus is unable to overwrite data on network drives, though.

Markt also has the following text, which is not displayed:

MediaMarkt WerbeVirus '94  (c) MediaMarkt Germany The Wizard
     

MediaMarkt is a German company that has nothing to do with the virus.







Submit a sample




Wondering if a file or URL is malicious? Submit a sample to our Lab for analysis via the Sample Analysis System (SAS)

Give And Get Advice




Give advice. Get advice. Share the knowledge on our free discussion forum.