Threaded Mode | Linear Mode

**[RDSR] Roba** · (This post was last modified: 2013-07-23 20:30 by Roba.)

My dad has had a laptop for a year now, it had used F-Secure for the year, and now we updated it to Norton 360 Premier Edition.

As the Norton was installed, it soon gave an alert of a serious problem in the computer, and required to install some files.

After a couple re-start and new Norton tools, it said that there's a file "c:\windows\system32\drivers\rikvm_*serialnumber*.sys" in "bad condition" and removed it after saving a system restoration point.

What is this file, and how can it be faulty?

Fiona · 2013-07-23, 18:43

rikvm_ is a know rootkit that is used disable the system config, it works by disabling boot after a short time. You don't want or need it, its safe to disable/remove and shouldn't be on your system.

**[TC]»Pete«** · 2013-07-23, 18:47

http://answers.microsoft.com/en-us/windo...893b0e1656

**[RDSR] Roba** · 2013-07-23, 18:49

Well Norton removed it, but now it got the same error..

**[TC]»Pete«** · 2013-07-23, 18:57

It is replaced after every reboot.

You'll probably need to format and reinstall windows.

I'll take a more in depth look when I get home.

Fiona · 2013-07-23, 19:02

(2013-07-23 18:49)Roba Wrote: Well Norton removed it, but now it got the same error..

Any elaboration on the error? Have you tried combofix? if it will run.

Nice find lamp, I checked the community at virus total but the information I found wasn't as good as I would of liked.

**[RDSR] Roba** · (This post was last modified: 2013-07-23 19:14 by Roba.)

The microsoft tool you gave a link to, lamp, says the computer is clean, but Norton Power Eraser finds it.

Thanks for the replies though..

So on the microsoft replies they say that it affects system configuration, and will eventually disable the system booting?

Someone also said it's because of CyberLink programs? Any confirmation on that?

And if it doesn't come from CyberLink programs, where does it come?

(2013-07-23 19:02)Fiona Wrote:
(2013-07-23 18:49)Roba Wrote: Well Norton removed it, but now it got the same error..

Any elaboration on the error? Have you tried combofix? if it will run.

Sorry but I don't understand what you mean Laugh

Fiona · (This post was last modified: 2013-07-23 19:26 by Fiona.)

Roba Wrote:Sorry but I don't understand what you mean

Sorry, what I meant was what is the exact error message?

and have you tried this : http://www.bleepingcomputer.com/download/combofix/

**[RDSR] Roba** · 2013-07-23, 19:52

Well it has disappeared now, after he deleted all the CyberLink programs..

**[RDSR] Roba** · 2013-07-23, 20:29

We assume it was because of the CyberLink programs, as it hasn't came back anymore after those were deleted.. Might be lucky co-incidence though, never know.

Anyway, this is solved and may be closed Smile

Possibly Related Threads...
Thread:		Author	Replies:	Views:	Last Post
	Apache2 VirtualHosts help? (Solved)	Kyle	3	3,981	2017-08-30 08:50 Last Post: Kyle
	(solved) G25 problem	Kisiel	10	9,987	2017-07-20 11:56 Last Post: Kisiel
	Looking for new computer case,motherboard/cpu	Jedi	14	10,796	2016-11-04 12:51 Last Post: Jedi
	Origin freezing computer	Jedi	6	5,280	2016-03-22 19:16 Last Post: Adorable
	New computer - Suggestions / Doubt	Frozen	15	10,480	2016-02-08 22:56 Last Post: Frozen
	Computer struggling to start up	MariusMM	4	5,219	2015-07-25 18:41 Last Post: Val
	My Computer Has 99 Problems, and I think I'm one of them.	FR4NOx	24	19,858	2015-05-20 09:46 Last Post: Borja
	SOLVED - MyBB Inline Moderation Error	Raz!	4	5,410	2015-01-06 18:11 Last Post: Raz!
	No BIOS system?	Ant	3	3,467	2014-08-07 21:17 Last Post: Bez
	Selecting a new computer.	B!ll	0	1,959	2014-07-17 08:31 Last Post: B!ll