System plugin at 0x00874324 got critical error

Luffy321

Hi, when I booted up my pc I got an error message saying System plugin at 0x00874324 got critical error. It tells me to call several numbers and enter a identification key.

From the the bad grammar I could tell it was a trojan straight away. I looked around on the internet with my laptop and supposedly this trojan is suppose to lock you out of your desktop until your force to call out the numbers or wipe your hard drive.

So I booted up my pc one more time, when the trojan came up I just clicked next without calling the numbers or entering an identification number and it went away.

Needless to say I bet it is still hiding on my system somewhere. I hate the idea of my system being compromised like this since it could lock me out of my system anytime I boot up.

Can anyone tell me a way to remove this trojan noting that conventional antivirus like bullgaurd (currently installed) wont detect it. I tried Norton Power Eraser but when it is processing the result it gets an error saying it cant access symatec servers which Im sure is down to the trojan.

Any help would be much obliged, this is a new PC. Im pretty !!!!ed off that im facing problems like this already.

asbokid

you have every right to be annoyed. this problem is all too common with PCs running Microsoft Windows. Since the anti-virus software hasn't detected the infection and it is still present on the system, then to be 100% safe (at least until next time) you should re-install Windows.

Luffy321

Firstly how do I reinstall Windows and does this mean it will wipe out all my saved data and drivers currently installed.

Secondly isnt there a way to find and remove the trojan. Its called Trojan.Generic.KDV.153863.

Seriously, this thing is slowly infecting my system files, I need it gone. But I would rather do anything and everything to remove it before reinstalling windows.

Firetastic

I can't help with the virus but I can tell you that reinstalling Windows means it's goes back to factory settings. This means you will lose all your data. It's just like a fresh slate.

chrisichris

Trojan.Ransomware is a piece of malware that hijacks your computer and demands payment in exchange for the unlock key. If you don't have the key, you can't do anything. Very often, ransomware locks Windows in Safe Mode and Safe Mode with Networking too; otherwise you could easily get rid of it. However, there are a couple of steps that you can generally follow to get rid of the majority of Trojan.Ransomware type infections.



http://deletemalware.blogspot.com/2011/03/remove-trojanransomware-uninstall-guide.html

if needed use this code to unlock your computer: 27496

YOU REALLY DONT NEED TO RE INSTALL WINDOWS

akward

chrisichris, you bloody genius! The code that you gave works just perfectly. The blog is also great, there's even a separate entry for this virus with screen shots. OMG, what a relief. I thought my PC was doomed after being infected by this virus. Thanks again guys!

chrisichris

you are welcome, and as for the guys that said to format the drive - tut,tut- shame on you, that is the easy way out and should only be dont as a last resort- virus removal is one of the easiest things to do if you have patience,

RussJK

Didn't view this thread until now. Seeing that the trojan is disabled with the code, you'll want to remove it. Download Malwarebytes then install it, update it, and do a quick scan, clean anything it finds, then post the log here:
http://www.users.on.net/~russ/mb.exe

Also please save HijackThis to your desktop, hold shift and right click on it, and select 'Run as administrator', then do a Scan and copy/paste the log:
http://www.trendmicro.com/ftp/products/hijackthis/HijackThis.exe

chrisichris

if you follow the link i posted - it tells you how to remove it there , no need for logs - i find that a waste

RussJK

chrisichris wrote: »

if you follow the link i posted - it tells you how to remove it there , no need for logs - i find that a waste

You might, but I don't. Unless you think having one item of malware precludes the possibility of another another separate infection?

The log lets us see what we'd be able to see if we were present at the computer, otherwise we can't really give valid advice. Quite often logs reveal that the scan was done with old Malwarebytes definitions, or that they need to update to SP3 in XP, etc. In this case, a HijackThis log would confirm that the OP has been able to understand the information in the link enough to carry it out properly.

chrisichris

Dont you think the best thing to do to stop malware is to stop clicking on the links that cause it - in 20 years me using pc`s i had maybe 2 really bad infections - but still not enough to wipe my hard drive, and i have never found the need to use logs or Malwarebytes