Markt infects COM files that are in directories listed in the PATH. Markt uses a variable encryption, but is not polymorphic.
Once detected, the F-Secure security product will automatically disinfect the suspect file by either deleting it or renaming it.
Detailed instructions for F-Secure security products are available in the documentation found in the Downloads section of our Home - Global site.
You may also refer to the Knowledge Base on the F-Secure Community site for further assistance.
Markt activates on the 9th of September. At this date it displays a screen with title "Media Markt", a skull with the text "-=> SuXX! >=-" on it's forehead and the following text:
Ups, all Disk's from C: to Z: Trashed! Sorry about that! to ALL Military Inventors its Time to give us the Tachyonator!
After this the virus tries to overwrite data on every drive from C: to Z:. Virus is unable to overwrite data on network drives, though.
Markt also has the following text, which is not displayed:
MediaMarkt WerbeVirus '94 (c) MediaMarkt Germany The Wizard
MediaMarkt is a German company that has nothing to do with the virus.