unattended TRUSTEER RAPPORT loading and install, suspicious activity


  1. gabrielsmit
    Posts : 43
    Microsoft Windows 10 Pro 10.0.19045 Build 19045
       New #1

    unattended TRUSTEER RAPPORT loading and install, suspicious activity


    yesterday, 4 august 0400 south african time [utc +2], my computer must have loaded trusteer rapport [banking security software which i previously un-installed], made a system restore point before running it and my system time zone was set to cuiaba, brazil [utc -4].
    i tried to go back to a pre trusteer rapport system restore point but all were wiped out and the restore point which was accessible warned me that nearly all my drivers as well as anti malwarebytes and the antimalwarebytes anti-ransomware would be deleted.
    anyone with something similar?
    in the meantime i try to get rid of the trusteer rapport software [an ibm program the banks want to smear off on you] but it re-emerges as i cant get it out of the registry - mostly in HKEY_LOCAL_MACHINE\SYSTEM\Controlset\Services\RapportCerebus_.... and seems to reinstall itself again and again, even creating its folder in the Programs folder.
    so i move to the folder, Trusteer, in order to delete it - not with revo-uninstaller, not with Take Ownership - nothing can touch it. it tells me i have to get permission from xxx which is not even part of my Group or Usernames.
    any help please
    God bless
    gabriel
      My Computer
    Quote Quote

  3. Samuria
    Posts : 8,107
    windows 10
       New #2

    Rapport includes anti-removal protection to prevent malware from removing it from your computer. They have a util to remove it for you it is a trusted app Safe Uninstall Utility | Trusteer
      My Computer
    Quote Quote

  4. gabrielsmit
    Posts : 43
    Microsoft Windows 10 Pro 10.0.19045 Build 19045
    Thread Starter
       New #3

    tx samuria,
    the only things left were the Trusteer folder in Program Data and about 10 registry entries of which one 'RapportHades'... which i all deleted
    God bless
    gabriel
      My Computer
    Quote Quote

 

  Related Discussions
So earlier this morning while working with the same VPN (Private Internet Access) I have for years I logged out and switched to another server (Seattle, US) which I thought I had used before. Everything was good. Shut down when I was finished and...
Is Trusteer Rapport addon safe to use
Hi. My Firefox browser auto-updated to quantum last night. I am willing to give it a try, even thought it doesn't support the addons I use. My issue is that every time I run FQ my internet security software (ESET) notifies me multiple times about...
Suspicious Activity - Yahoo Mail
in Browsers and Email

Received notice from Yahoo that one of my accts was noted to have suspicious activity. Per contact with Yahoo, this can be caused by sending multiple emails or the acct may have been hacked and someone is using the address to send emails. ...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 07:28.
Find Us




Windows 10 Forums