System plugin at address 0x00874324 got critical error" is a fake warning and the only visible part of the infection which is defined as a Trojan/Ransomware. This type of malware intentionally displays fake system errors or security alerts to scare you into believing a problem exists on your computer. The ransom Trojan blocks the Task Manager and other system tools. It won't let you enter pretty much anything including System Restore, Safe Mode, Last known good configuration, etc. Logging on as the Administrator or any other User won't help either. "System plugin at address 0x00874324 got critical error" demands payment in exchange for the identification key. You need to call one of the given international (premium-rate) numbers to get your 5 digit number which unlocks the computer. However, you shouldn't do that. If you are on a full system lock down, please follow the steps in the removal guide below.
Here is a screenshot of what the misleading "System plugin at address 0x00874324 got critical error" looks like:
"System plugin at address 0x00874324 got critical error" removal instructions:
1. You can use this code to unlock your computer: 27496
Custom Search Control
Web
..Your computer is infected with malicious software? Do you have popups on your PC?
If so, search this blog for removal instructions or find computer threats by category.
Wednesday, April 27, 2011
"System plugin at address 0x00874324 got critical error" Ransomware Removal
Share "System plugin at address 0x00874324 got critical error" is a fake warning and the only visible part of the infection which is defined as a Trojan/Ransomware. This type of malware intentionally displays fake system errors or security alerts to scare you into believing a problem exists on your computer. The ransom Trojan blocks the Task Manager and other system tools. It won't let you enter pretty much anything including System Restore, Safe Mode, Last known good configuration, etc. Logging on as the Administrator or any other User won't help either. "System plugin at address 0x00874324 got critical error" demands payment in exchange for the identification key. You need to call one of the given international (premium-rate) numbers to get your 5 digit number which unlocks the computer. However, you shouldn't do that. If you are on a full system lock down, please follow the steps in the removal guide below.
Here is a screenshot of what the misleading "System plugin at address 0x00874324 got critical error" looks like:
--------------------------------------------------------------------------------
"System plugin at address 0x00874324 got critical error" removal instructions:
1. You can use this code to unlock your computer: 27496
2. If the above code doesn't work, please follow the general Ransomware removal guide.
3. If none of the above recommendations work, you can follow the alternate removal guide at Malwarebytes forum.
--------------------------------------------------------------------------------
Associated "System plugin at address 0x00874324 got critical error" files and registry values:
Files:
Windows XP:
•C:\Documents and Settings\[UserName]Application Data\svchost.exe
•C:\Documents and Settings\[UserName]Application Data\delself.bat
•C:\Documents and Settings\[UserName]Application Data\svchost.tmp_time
Windows Vista/7:
•C:\ProgramData\svchost.exe
•C:\ProgramData\delself.bat
•C:\ProgramData\svchost.tmp_time
Registry values:
•HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Userinit= "