unattended TRUSTEER RAPPORT loading and install, suspicious activity


  1. Posts : 29
    Windows 10 Pro (x64) Version 1903 (build 18362.418)
       #1

    unattended TRUSTEER RAPPORT loading and install, suspicious activity


    yesterday, 4 august 0400 south african time [utc +2], my computer must have loaded trusteer rapport [banking security software which i previously un-installed], made a system restore point before running it and my system time zone was set to cuiaba, brazil [utc -4].
    i tried to go back to a pre trusteer rapport system restore point but all were wiped out and the restore point which was accessible warned me that nearly all my drivers as well as anti malwarebytes and the antimalwarebytes anti-ransomware would be deleted.
    anyone with something similar?
    in the meantime i try to get rid of the trusteer rapport software [an ibm program the banks want to smear off on you] but it re-emerges as i cant get it out of the registry - mostly in HKEY_LOCAL_MACHINE\SYSTEM\Controlset\Services\RapportCerebus_.... and seems to reinstall itself again and again, even creating its folder in the Programs folder.
    so i move to the folder, Trusteer, in order to delete it - not with revo-uninstaller, not with Take Ownership - nothing can touch it. it tells me i have to get permission from xxx which is not even part of my Group or Usernames.
    any help please
    God bless
    gabriel
      My Computer


  2. Posts : 6,907
    windows 10
       #2

    Rapport includes anti-removal protection to prevent malware from removing it from your computer. They have a util to remove it for you it is a trusted app Safe Uninstall Utility | Trusteer
      My Computer


  3. Posts : 29
    Windows 10 Pro (x64) Version 1903 (build 18362.418)
    Thread Starter
       #3

    tx samuria,
    the only things left were the Trusteer folder in Program Data and about 10 registry entries of which one 'RapportHades'... which i all deleted
    God bless
    gabriel
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 21:37.
Find Us




Windows 10 Forums