Fandom

Malware Wiki

NoStart

1,328pages on
this wiki
Add New Page
Comments3 Share

Trojan.Win32.NoStart or NoStart is a trojan that runs on Microsoft Windows.

Behavior Edit

When executed, the trojan places a fake "Start" button covering the real Start button, making it hard to detect.

This trojan works on all Windows systems, however the label of the fake "Start" button is always in English, and is styled to be like the Windows Standard palette on Windows ME or below. If the language of the host system is not English (like that in the image), different color palette, or the user is running Windows XP or higher, it can be noticed immediately.

PayloadEdit

When the fake "Start" button has been clicked, the trojan kills the process of Explorer.exe, turns the screen black, and disables the Ctrl+Alt+Del input, followed by hanging the system. The user must take a cold reset in order to use the computer again. However the trojan has no other harmful payload, and it can be easily removed.

When the trojan is triggered under NT based system (like Windows NT 4.0 or 2000), it would turn the screen to black only, and the user may still able to kill the trojan's process in Task Manager after triggering.

Pressing the Windows key on the keyboard will not trigger the payload, and open the real Start Menu.

Other detailsEdit

There is another virus of the same name, but it is a backdoor virus that is more severe.

VideosEdit

Trojan.Win3201:10

Trojan.Win32.Nostart

Trojan.Win3201:12

Trojan.Win32.NoStart

NoStart trojan review by danooct1

Ad blocker interference detected!


Wikia is a free-to-use site that makes money from advertising. We have a modified experience for viewers using ad blockers

Wikia is not accessible if you’ve made further modifications. Remove the custom ad blocker rule(s) and the page will load as expected.