Trusteer Rapport problems [OT in uk.d-i-y]

Ramsman :
Santander suggest I install it every time I log on. What's a good (i.e.
bad) Spanish phrase for telling them to go away?

My Spanish is crap, but using Google Translate: "Su servicio es una
porquería. Me gustaría cerrar todas mis cuentas inmediatamente".

You know it makes sense.

--
Mike Barnes

On Mon, 04 Mar 2013 14:37:16 +0000, Roger Mills wrote:

Anyone out there using this evil pernicious bit of software?

In case you haven't come across it, it is supposed to protect you when
using on-line banking by warning you if you inadvertently enter your
banking passwords into bogus sites, as used by phishing expeditions.
It's often provided free by banks "for your own good". Mine was provided
by Nationwide.

So far so good. Except that it uses a lot of system resources *and*
embeds itself into the kernel of your OS - like a rootkit virus - making
it difficult to get rid of.

I have had it installed on my (W7 32-bit SP1) system for a couple of
years without too much ado *but* it has just updated itself (to
v3.5.1205.20) and keeps crashing. Every time it crashes, it freezes my
browser (Firefox) for a few seconds. Then it attempts to re-start every
couple of minutes and crashes again . . .etc.

I decided that enough was enough and that its nuisance value exceeded
its usefulness - so I tried to get rid of it. Nothing I have tried so
far has worked. Although the application itself will not run, there are
remnant processes and services still running, and these refuse to be
stopped in Task Manager.

I've tried to uninstall the application in Control Panel/Programs and
Features. It goes through the motions but doesn't *actually* uninstall.

I've tried doing it in Safe Mode but that can't find the Installer
program to do the uninstalling.

I've tried restoring the system to a restore point prior to the update.
Again it goes through the motions but then reports that it was unable to
complete the restore - so nothing has been changed!

Anyone else had similar problems? Have you managed to sort it? If so, how?

TIA.

Just a couple of remarks, for what they're worth...

A couple of replies suggested reinstalling the software and then trying
to uninstall it again, but you seemed skeptical.

That is often a good idea, in that, if your uninstaller has gotten
messed up, reinstallation will set up the uninstaller properly - under
normal circumstances.

I used to have Norton Antivirus. That is also very hard to uninstall,
but at least Norton provides at their site a tool to uninstall its
software. Perhaps Trusteer has something comparable.

Other than that, I hope you don't have to resort to a stick of dynamite.

--
Gene E. Bloch (Stumbling Bloch)

Roger Mills wrote:
Anyone out there using this evil pernicious bit of software?

In case you haven't come across it, it is supposed to protect you when
using on-line banking by warning you if you inadvertently enter your
banking passwords into bogus sites, as used by phishing expeditions.
It's often provided free by banks "for your own good". Mine was provided
by Nationwide.

So far so good. Except that it uses a lot of system resources *and*
embeds itself into the kernel of your OS - like a rootkit virus - making
it difficult to get rid of.

I have had it installed on my (W7 32-bit SP1) system for a couple of
years without too much ado *but* it has just updated itself (to
v3.5.1205.20) and keeps crashing. Every time it crashes, it freezes my
browser (Firefox) for a few seconds. Then it attempts to re-start every
couple of minutes and crashes again . . .etc.

I decided that enough was enough and that its nuisance value exceeded
its usefulness - so I tried to get rid of it. Nothing I have tried so
far has worked. Although the application itself will not run, there are
remnant processes and services still running, and these refuse to be
stopped in Task Manager.

I've tried to uninstall the application in Control Panel/Programs and
Features. It goes through the motions but doesn't *actually* uninstall.

I've tried doing it in Safe Mode but that can't find the Installer
program to do the uninstalling.

I've tried restoring the system to a restore point prior to the update.
Again it goes through the motions but then reports that it was unable to
complete the restore - so nothing has been changed!

Anyone else had similar problems? Have you managed to sort it? If so, how?

TIA.

http://krebsonsecurity.com/2010/04/a...from-trusteer/

"Our software integrates into the bank’s site and communicates with the
[Rapport] software installed on customer machines, and the two of them
can work together so that the bank can effectively measure what the
software does on the customer’s desktop. Whenever the customer logs
into the bank’s site, the bank knows whether Rapport is there, whether
it’s up to date, whether its been attacked or compromised."

"We’re basically pushing updates almost on a weekly basis. These are
not signature updates, but updates to our security mechanisms to the
way the product works."

"Trusteer recently built a new component into Rapport called Flashlight,
which tries to give partner banks the ability to remotely check to see
if their customers’ systems are infected with malicious software."

Simply, amazing.

What doesn't it do ?

Does the bank know my shoe size now ?

*******

It even uses a Captcha during removal :-)

Apparently, you can also contact their support, and their support
offer to log into the machine, to "fix problems". I mean, they're
already inside your machine, so why shouldn't they be inside your
machine ?

http://www.trusteer.com/support/unin...-and-windows-7

The Krebs article indicates that eventually, the Rapport software will be
specifically attacked. Maybe the reason it is crashing, is the Rapport
software has been "tipped over" by something, rather than the Rapport
software having a bug.

Paul

On Mon, 04 Mar 2013 15:07:45 -0500, Paul wrote:

Roger Mills wrote:
Anyone out there using this evil pernicious bit of software?

In case you haven't come across it, it is supposed to protect you when
using on-line banking by warning you if you inadvertently enter your
banking passwords into bogus sites, as used by phishing expeditions.
It's often provided free by banks "for your own good". Mine was provided
by Nationwide.

So far so good. Except that it uses a lot of system resources *and*
embeds itself into the kernel of your OS - like a rootkit virus - making
it difficult to get rid of.

I have had it installed on my (W7 32-bit SP1) system for a couple of
years without too much ado *but* it has just updated itself (to
v3.5.1205.20) and keeps crashing. Every time it crashes, it freezes my
browser (Firefox) for a few seconds. Then it attempts to re-start every
couple of minutes and crashes again . . .etc.

I decided that enough was enough and that its nuisance value exceeded
its usefulness - so I tried to get rid of it. Nothing I have tried so
far has worked. Although the application itself will not run, there are
remnant processes and services still running, and these refuse to be
stopped in Task Manager.

I've tried to uninstall the application in Control Panel/Programs and
Features. It goes through the motions but doesn't *actually* uninstall.

I've tried doing it in Safe Mode but that can't find the Installer
program to do the uninstalling.

I've tried restoring the system to a restore point prior to the update.
Again it goes through the motions but then reports that it was unable to
complete the restore - so nothing has been changed!

Anyone else had similar problems? Have you managed to sort it? If so, how?

TIA.

http://krebsonsecurity.com/2010/04/a...from-trusteer/

"Our software integrates into the bank¢s site and communicates with the
[Rapport] software installed on customer machines, and the two of them
can work together so that the bank can effectively measure what the
software does on the customer¢s desktop. Whenever the customer logs
into the bank¢s site, the bank knows whether Rapport is there, whether
it¢s up to date, whether its been attacked or compromised."

"We¢re basically pushing updates almost on a weekly basis. These are
not signature updates, but updates to our security mechanisms to the
way the product works."

"Trusteer recently built a new component into Rapport called Flashlight,
which tries to give partner banks the ability to remotely check to see
if their customers¢ systems are infected with malicious software."

Simply, amazing.

What doesn't it do ?

Does the bank know my shoe size now ?

*******

It even uses a Captcha during removal :-)

Apparently, you can also contact their support, and their support
offer to log into the machine, to "fix problems". I mean, they're
already inside your machine, so why shouldn't they be inside your
machine ?

http://www.trusteer.com/support/unin...-and-windows-7

The Krebs article indicates that eventually, the Rapport software will be
specifically attacked. Maybe the reason it is crashing, is the Rapport
software has been "tipped over" by something, rather than the Rapport
software having a bug.

Paul

What you quote above is in my mind rather terrifying...

--
Gene E. Bloch (Stumbling Bloch)

On Mon, 04 Mar 2013 14:37:16 +0000, Roger Mills
wrote:

Anyone out there using this evil pernicious bit of software?

Yes, with no noticeable problems so far. If I wanted to uninstall it
I'd use a good uninstaller program such as Revo Pro, which is not free.
Thanks for bringing up its potential problems.
--
Robin Bignall
Herts, England

On 04/03/2013 18:58, Tim Streater wrote:

Mmmm. Another reason I'm glad I use a Mac. In any case, Safari
automatically warns me if I'm going to a suspicious site and gives me
the option of going there or not.

Yes, using a Mac gives you much better protection, because most viruses
are written for the most common platform.

Most, not all.

And Firefox on PC also warns about suspicious sites. I'd say it catches
3/4 of the ones I expect it to, and doesn't _often_ flag a good site as
positive.

Still, if you are sure that having a Mac makes you invulnerable who am I
to argue?

Andy

Peter Taylor wrote:
On 3/4/2013 3:37 PM, Roger Mills wrote:
Anyone out there using this evil pernicious bit of software?

In case you haven't come across it, it is supposed to protect you when
using on-line banking by warning you if you inadvertently enter your
banking passwords into bogus sites, as used by phishing expeditions.
It's often provided free by banks "for your own good". Mine was provided
by Nationwide.

So far so good. Except that it uses a lot of system resources *and*
embeds itself into the kernel of your OS - like a rootkit virus - making
it difficult to get rid of.

I have had it installed on my (W7 32-bit SP1) system for a couple of
years without too much ado *but* it has just updated itself (to
v3.5.1205.20) and keeps crashing. Every time it crashes, it freezes my
browser (Firefox) for a few seconds. Then it attempts to re-start every
couple of minutes and crashes again . . .etc.

I decided that enough was enough and that its nuisance value exceeded
its usefulness - so I tried to get rid of it. Nothing I have tried so
far has worked. Although the application itself will not run, there are
remnant processes and services still running, and these refuse to be
stopped in Task Manager.

I've tried to uninstall the application in Control Panel/Programs and
Features. It goes through the motions but doesn't *actually* uninstall.

I've tried doing it in Safe Mode but that can't find the Installer
program to do the uninstalling.

I've tried restoring the system to a restore point prior to the update.
Again it goes through the motions but then reports that it was unable to
complete the restore - so nothing has been changed!

Anyone else had similar problems? Have you managed to sort it? If so,
how?

TIA.

I suspect the only sure way would be to back up everything and reinstall
Windows.

You will have to learn how to use regedit.

Hi, Robin.

Yes, with no noticeable problems so far.

How far is "so far"? A year? Month? Day?

RC
--
R. C. White, CPA
San Marcos, TX

Microsoft Windows MVP (2002-2010)
Windows Live Mail 2012 (Build 16.4.3505.0912) in Win8 Pro


"Robin Bignall" wrote in message
...

On Mon, 04 Mar 2013 14:37:16 +0000, Roger Mills
wrote:

Anyone out there using this evil pernicious bit of software?

Yes, with no noticeable problems so far. If I wanted to uninstall it
I'd use a good uninstaller program such as Revo Pro, which is not free.
Thanks for bringing up its potential problems.
--
Robin Bignall
Herts, England

On Mon, 4 Mar 2013 16:43:38 -0600, "R. C. White"
wrote:

"Robin Bignall" wrote in message
.. .

On Mon, 04 Mar 2013 14:37:16 +0000, Roger Mills
wrote:

Anyone out there using this evil pernicious bit of software?

Yes, with no noticeable problems so far. If I wanted to uninstall it
I'd use a good uninstaller program such as Revo Pro, which is not free.
Thanks for bringing up its potential problems.

Hi, Robin.

Yes, with no noticeable problems so far.

How far is "so far"? A year? Month? Day?

Hi, RC. (I shifted your post around because most here practise bottom
posting -- just a convention.)

It's been installed since early last year. Like others have found, my
bank (a subsidiary of HSBC) was nagging me about it every time I
accessed my accounts.
--
Robin Bignall
Herts, England

On 04/03/2013 14:37, Roger Mills wrote:

I've tried to uninstall the application in Control Panel/Programs and
Features. It goes through the motions but doesn't *actually* uninstall.

I've tried doing it in Safe Mode but that can't find the Installer
program to do the uninstalling.

I've tried restoring the system to a restore point prior to the update.
Again it goes through the motions but then reports that it was unable to
complete the restore - so nothing has been changed!

Anyone else had similar problems? Have you managed to sort it? If so, how?

Reinstall and uninstall is worth trying. Failing that visit:

live.sysinternals.com (will simply give you a file listing) and click on
autoruns.exe

Wade through (a list of every conceivable way a program can be
automatically started), and untick all the likely components. Exist the
program, and reboot. See if that is better.

--
Cheers,

John.

/================================================== ===============\
| Internode Ltd - http://www.internode.co.uk |
|-----------------------------------------------------------------|
| John Rumm - john(at)internode(dot)co(dot)uk |
\================================================= ================/

Roger Mills wrote in
:

Anyone out there using this evil pernicious bit of software?

Use revo uninstall, a very nice program, that kills
all remnants on disk and in the registry.

In message , Paul writes
Sjouke Burry wrote:
Roger Mills wrote in
:
Anyone out there using this evil pernicious bit of software?

Use revo uninstall, a very nice program, that kills
all remnants on disk and in the registry.

http://www.trusteer.com/support/unin...roubleshooting

"Safe Uninstall Utility


Like a gift from the Gods :-)

Probably comes complete with "small animal sacrifice".

Leaves loadsa Registry entries, (which CCleaner doesn't remove), and
folders on Program Files & Application Data.

--
Simon

12) The Second Rule of Expectations
An EXPECTATION is a Premeditated resentment.

Well I know a friend got rid of it on xp with revo uninstaller but I have
been warned to steer clear of it, but I do not use online banking.
Unfortunately some banks insist on its use or they wondt let you in. I
wonder how many of these have actually tested it. From what you say,
probably very few!

Brian

--
From the Sofa of Brian Gaff Reply address is active
"Roger Mills" wrote in message
...
Anyone out there using this evil pernicious bit of software?

In case you haven't come across it, it is supposed to protect you when
using on-line banking by warning you if you inadvertently enter your
banking passwords into bogus sites, as used by phishing expeditions. It's
often provided free by banks "for your own good". Mine was provided by
Nationwide.

So far so good. Except that it uses a lot of system resources *and* embeds
itself into the kernel of your OS - like a rootkit virus - making it
difficult to get rid of.

I have had it installed on my (W7 32-bit SP1) system for a couple of years
without too much ado *but* it has just updated itself (to v3.5.1205.20)
and keeps crashing. Every time it crashes, it freezes my browser (Firefox)
for a few seconds. Then it attempts to re-start every couple of minutes
and crashes again . . .etc.

I decided that enough was enough and that its nuisance value exceeded its
usefulness - so I tried to get rid of it. Nothing I have tried so far has
worked. Although the application itself will not run, there are remnant
processes and services still running, and these refuse to be stopped in
Task Manager.

I've tried to uninstall the application in Control Panel/Programs and
Features. It goes through the motions but doesn't *actually* uninstall.

I've tried doing it in Safe Mode but that can't find the Installer program
to do the uninstalling.

I've tried restoring the system to a restore point prior to the update.
Again it goes through the motions but then reports that it was unable to
complete the restore - so nothing has been changed!

Anyone else had similar problems? Have you managed to sort it? If so, how?

TIA.
--
Cheers,
Roger
____________
Please reply to Newsgroup. Whilst email address is valid, it is seldom
checked.

usenet2012 wrote:
In message , Paul writes
Sjouke Burry wrote:
Roger Mills wrote in
:
Anyone out there using this evil pernicious bit of software?

Use revo uninstall, a very nice program, that kills
all remnants on disk and in the registry.

http://www.trusteer.com/support/unin...roubleshooting

"Safe Uninstall Utility


Like a gift from the Gods :-)

Probably comes complete with "small animal sacrifice".

Leaves loadsa Registry entries, (which CCleaner doesn't remove), and
folders on Program Files & Application Data.


Their site is great. I stumbled on another article, that
provides instructions on cleanup of your list of items.

So their "Safe Uninstaller" works that way on purpose, along the
lines of "you're going to be installing our software again and
then any settings are preserved" (Ha!). The only exception, is the
last item in their list, where you remove RapportKELL.sys, which
is something that ran at driver level, and for some reason,
their fine uninstaller doesn't nab it. It's possible, that whatever
causes that to load, was simply disabled by the Safe Uninstaller.
Then the question would be, why leave that file sitting around ?

http://www.trusteer.com/support/remove-rapport-folders

Paul

In message , Paul writes
usenet2012 wrote:
In message , Paul writes
Roger Mills wrote in
:
Anyone out there using this evil pernicious bit of software?


http://www.trusteer.com/support/unin...roubleshooting

"Safe Uninstall Utility

The only exception, is the
last item in their list, where you remove RapportKELL.sys, which
is something that ran at driver level, and for some reason,
their fine uninstaller doesn't nab it. It's possible, that whatever
causes that to load, was simply disabled by the Safe Uninstaller.
Then the question would be, why leave that file sitting around ?

http://www.trusteer.com/support/remove-rapport-folders

Paul

In my case it removed that too.

--
Simon

12) The Second Rule of Expectations
An EXPECTATION is a Premeditated resentment.