[TC] Gaming Forums
[SOLVED] Computer system file - Printable Version

+- [TC] Gaming Forums (https://forum.city-driving.co.uk)
+-- Forum: Community Area (/forumdisplay.php?fid=14)
+--- Forum: Technology Area (/forumdisplay.php?fid=82)
+---- Forum: Tech Support (/forumdisplay.php?fid=85)
+---- Thread: [SOLVED] Computer system file (/showthread.php?tid=7908)

[SOLVED] Computer system file - Roba - 2013-07-23 18:28

My dad has had a laptop for a year now, it had used F-Secure for the year, and now we updated it to Norton 360 Premier Edition.

As the Norton was installed, it soon gave an alert of a serious problem in the computer, and required to install some files.

After a couple re-start and new Norton tools, it said that there's a file "c:\windows\system32\drivers\rikvm_*serialnumber*.sys" in "bad condition" and removed it after saving a system restoration point.

What is this file, and how can it be faulty?

RE: [HELP] Computer system file - Fiona - 2013-07-23 18:43

rikvm_ is a know rootkit that is used disable the system config, it works by disabling boot after a short time. You don't want or need it, its safe to disable/remove and shouldn't be on your system.

RE: [HELP] Computer system file - Pete - 2013-07-23 18:47

http://answers.microsoft.com/en-us/windows/forum/windows_7-security/rikvm-38f51d56sys-virus/eb7db138-07ca-4b3b-8a69-4d893b0e1656

RE: [HELP] Computer system file - Roba - 2013-07-23 18:49

Well Norton removed it, but now it got the same error..

RE: [HELP] Computer system file - Pete - 2013-07-23 18:57

It is replaced after every reboot.

You'll probably need to format and reinstall windows.

I'll take a more in depth look when I get home.

RE: [HELP] Computer system file - Fiona - 2013-07-23 19:02

(2013-07-23 18:49)Roba Wrote:  Well Norton removed it, but now it got the same error..

Any elaboration on the error? Have you tried combofix? if it will run.

Nice find lamp, I checked the community at virus total but the information I found wasn't as good as I would of liked.

RE: [HELP] Computer system file - Roba - 2013-07-23 19:13

The microsoft tool you gave a link to, lamp, says the computer is clean, but Norton Power Eraser finds it.

Thanks for the replies though..

So on the microsoft replies they say that it affects system configuration, and will eventually disable the system booting?

Someone also said it's because of CyberLink programs? Any confirmation on that?

And if it doesn't come from CyberLink programs, where does it come?
(2013-07-23 19:02)Fiona Wrote:  
(2013-07-23 18:49)Roba Wrote:  Well Norton removed it, but now it got the same error..

Any elaboration on the error? Have you tried combofix? if it will run.

Sorry but I don't understand what you mean Laugh

RE: [HELP] Computer system file - Fiona - 2013-07-23 19:25

Roba Wrote:Sorry but I don't understand what you mean Laugh

Sorry, what I meant was what is the exact error message?

and have you tried this : http://www.bleepingcomputer.com/download/combofix/

RE: [HELP] Computer system file - Roba - 2013-07-23 19:52

Well it has disappeared now, after he deleted all the CyberLink programs..

RE: [HELP] Computer system file - Roba - 2013-07-23 20:29

We assume it was because of the CyberLink programs, as it hasn't came back anymore after those were deleted.. Might be lucky co-incidence though, never know.

Anyway, this is solved and may be closed Smile