Threat Description



Category: Malware
Type: Virus
Platform: W32
Aliases: Markt, Media, Werbe, VCL.Werbe


Markt infects COM files that are in directories listed in the PATH. Markt uses a variable encryption, but is not polymorphic.


Automatic action

Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.

More scanning & removal options

More information on scanning or removal options is available in the documentation for your F-Secure security product on the Downloads section of our Home - Global site.

You may also refer to the Knowledge Base on the F-Secure Community site for more information.

Contact Support

For further assistance, F-Secure customers can request support online via the Request support or the Chat forms on our Home - Global site.

Technical Details

Markt activates on the 9th of September. At this date it displays a screen with title "Media Markt", a skull with the text "-=> SuXX! >=-" on it's forehead and the following text:

Ups, all Disk's from C: to Z: Trashed! Sorry about that!    to ALL Military Inventors its Time to give us the Tachyonator!        

After this the virus tries to overwrite data on every drive from C: to Z:. Virus is unable to overwrite data on network drives, though.

Markt also has the following text, which is not displayed:

MediaMarkt WerbeVirus '94  (c) MediaMarkt Germany The Wizard      

MediaMarkt is a German company that has nothing to do with the virus.


Suspect a file or URL was wrongly detected? Submit a sample to our Labs for analysis

Submit Now

Give And Get Advice

Give advice. Get advice. Share the knowledge on our free discussion forum.

Learn More