Home Malware Programs Fake Warning Messages System plugin at address 0x00874324 got critical error

System plugin at address 0x00874324 got critical error

Posted: April 28, 2011

'System plugin at address 0x00874324 got critical error' is a fake alert used by a recent wave of ransomware that prevents normal computer use. The 'System plugin at address 0x00874324 got critical error' alert screen indicates that you should call a premium phone number to get a key to unlock 'System plugin at address 0x00874324 got critical error' from your PC. However, since doing this will fund criminals and potentially put your personal information and finances in danger, it's recommended that you avoid taking the advice of 'System plugin at address 0x00874324 got critical error!' Instead, use the free code '27496' to disable this lockout of your system, and follow it up by removing 'System plugin at address 0x00874324 got critical error' malware with suitable anti-malware techniques and software.

'System plugin at address 0x00874324 got critical error' – an Unmissable Attack on Your PC

As ransomware, threats that deliver the 'System plugin at address 0x00874324 got critical error' message will try to infect your PC without being noticed. After infected your PC, the ransomware will display the 'System plugin at address 0x00874324 got critical error' alert, along with text similar or identical to the following:

"System plugin at address 0x00874324 got critical error,
please follow these steps to deactivate it.

  1. Call one of the following numbers:
    [several premium numbers listed]
  2. Wait for the answer and write down your identification key
  3. Enter the identification key received by phone, click "Next" to continue."

It should be stressed that although ransomware using the 'System plugin at address 0x00874324 got critical error' screen make a passing attempt at an official appearance with the use of common Windows-related icons, they're criminal in nature and unaffiliated with Microsoft. The 'System plugin at address 0x00874324 got critical error' warning is merely a false alarm that's used as a cover for a simple ransom scheme.

Getting Your Computer Back from 'System plugin at address 0x00874324 got critical error' Ransomware

Malicious programs that use 'System plugin at address 0x00874324 got critical error' screens will typically lock up all significant computer functions, including:

  • Windows Task Manager, a crucial system maintenance program that can be accessed by hitting Ctrl+Alt+Del.
  • System Restore, a baseline Windows function that allows you to 'revert' your OS to a previous state, thus reversing any infections attacks.
  • Safe Mode, which can be accessed by hitting F8 during the loading process. This mode allows you to access Windows with minimal additional running processes, often putting a stop to automatic malware launches.

Although 'System plugin at address 0x00874324 got critical error' computer threats disable all major anti-malware solutions that they can find, you can still disable 'System plugin at address 0x00874324 got critical error' lockups by using this free code: '27496.' Once the 'System plugin at address 0x00874324 got critical error' malware is disabled, you'll need to scan your system with appropriate anti-malware programs to make sure that the remaining components of the infection can cause no further harm.

If the above tactic fails to work, you may need to use an alternative method of booting your computer and delete 'System plugin at address 0x00874324 got critical error' malware. Commonly-available methods for this include booting your PC in Windows by USB device or CD. You can also use a pre-installed non-Windows OS to scan for 'System plugin at address 0x00874324 got critical error' without being locked out, since 'System plugin at address 0x00874324 got critical error' lockups are (so far!) only noted to attack Windows.

File System Modifications

  • The following files were created in the system:
    # File Name
    1 C:\Documents and Settings\[UserName]Application Data\delself.bat
    2 C:\Documents and Settings\[UserName]Application Data\svchost.exe
    3 C:\Documents and Settings\[UserName]Application Data\svchost.tmp_time
    4 C:\ProgramData\delself.bat
    5 C:\ProgramData\svchost.exe
    6 C:\ProgramData\svchost.tmp_time

Registry Modifications

  • The following newly produced Registry Values are:
    HKEY..\..\..\..{Subkeys}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon "Userinit= "
Loading...