Trusteer Rapport problems [OT in uk.d-i-y]

[Paul]

"Our software integrates into the bank?s site and communicates with the [Rapport] software installed on customer machines, and the two of them can work together so that the bank can effectively measure what the software does on the customer?s desktop. Whenever the customer logs into the bank?s site, the bank knows whether Rapport is there, whether it?s up to date, whether its been attacked or compromised."

"We?re basically pushing updates almost on a weekly basis. These are not signature updates, but updates to our security mechanisms to the way the product works."

"Trusteer recently built a new component into Rapport called Flashlight, which tries to give partner banks the ability to remotely check to see if their customers? systems are infected with malicious software."

Simply, amazing.

What doesn't it do ?

Does the bank know my shoe size now ?

*******

It even uses a Captcha during removal :-)

Apparently, you can also contact their support, and their support offer to log into the machine, to "fix problems". I mean, they're already inside your machine, so why shouldn't they be inside your machine ?

The Krebs article indicates that eventually, the Rapport software will be specifically attacked. Maybe the reason it is crashing, is the Rapport software has been "tipped over" by something, rather than the Rapport software having a bug.

Paul

[Gene E. Bloch]

What you quote above is in my mind rather terrifying...

[Part Timer]

But which website doesn't have some popup about cookies or a "survey" before you get to do what you wanted to? ISTR the money section in the Times once had a sorry tale of someone who relied upon Trusteer Rapport and it didn't do the job intended (they still went to some cloaked .ru or similar and got cleared out).

[Andy Champ]

Yes, using a Mac gives you much better protection, because most viruses are written for the most common platform.

Most, not all.

And Firefox on PC also warns about suspicious sites. I'd say it catches

3/4 of the ones I expect it to, and doesn't _often_ flag a good site as positive.

Still, if you are sure that having a Mac makes you invulnerable who am I to argue?

Andy

[F Murtz]

You will have to learn how to use regedit.

[Bill]

In message , Part Timer writes

So, where does one stand if you use online banking and get taken by some crook and the bank's investigation department says "Ah, but you failed to install the security software we provided foc"?

[John Rumm]

Reinstall and uninstall is worth trying. Failing that visit:

live.sysinternals.com (will simply give you a file listing) and click on autoruns.exe

Wade through (a list of every conceivable way a program can be automatically started), and untick all the likely components. Exist the program, and reboot. See if that is better.

[Sjouke Burry]

Roger Mills wrote in news: [e-mail]:

Use revo uninstall, a very nice program, that kills all remnants on disk and in the registry.

[greyridersalso]

1. Restart PC
2. Tap F8 while PC is starting up
3. Select Safemode with Networking
4. Login
5. Start ->Control Panel-> Administrative Tools->Services
6. Find the RapportManagment services
7. Right Click-> Properties->Start Up Type: Set this to DISABLED
8. Apply OK
9. Restart PC

You can take this a step further and delete all registry keys that have "Rapport" in them or registry folders whose name includes the word Rapport. Disabling the service should be enough though

[Paul]

"Safe Uninstall Utility

Rapport includes anti-removal protection to prevent malware from removing it from your computer. This is the reason for the complex uninstall process. In some rare scenarios the uninstaller is unable to shut down the anti-removal protection and as a result fails to remove Rapport.

What's Next?

We have a special utility that safely removes Rapport from your computer - for downloading the utility, please fill out the following form. You will automatically receive an email with the download link for the utility.

Click here for instructions to run this utility after it was provided by our team."

Like a gift from the Gods :-)

Probably comes complete with "small animal sacrifice".

Paul

[Mike Barnes]

Bill :

IANAL but if the terms and conditions of the account don't require you to use the software provided, that line of argument would get them nowhere.

Banks want you work online because it saves them money even after they've paid out for the resulting fraud. That's why they take such a relaxed attitude about your computing environment.

[usenet2012]

Leaves loadsa Registry entries, (which CCleaner doesn't remove), and folders on Program Files & Application Data.

[Brian Gaff]

Well I know a friend got rid of it on xp with revo uninstaller but I have been warned to steer clear of it, but I do not use online banking. Unfortunately some banks insist on its use or they wondt let you in. I wonder how many of these have actually tested it. From what you say, probably very few!

Brian

[Paul]

Their site is great. I stumbled on another article, that provides instructions on cleanup of your list of items.

So their "Safe Uninstaller" works that way on purpose, along the lines of "you're going to be installing our software again and then any settings are preserved" (Ha!). The only exception, is the last item in their list, where you remove RapportKELL.sys, which is something that ran at driver level, and for some reason, their fine uninstaller doesn't nab it. It's possible, that whatever causes that to load, was simply disabled by the Safe Uninstaller. Then the question would be, why leave that file sitting around ?

Paul

[Man at B&Q]

I was warned by IT staff at work. Apperently they have had a lot of issues by people installing it on their work PCs to do their banking in working hours.

MBQ

[usenet2012]

In my case it removed that too.

[Man at B&Q]

Their 1-2-3 current account, however, pays 3% up to £20K balance plus cash back on utility DDs. Just received our first months interest and cashback. All we had to do was get SWMBOs wage paid into it and move a few DDs which was painless.

MBQ

[Man at B&Q]

Which ones, so I know to avoid them in future?

MBQ

[tinnews]

That's basically my experience with *all* anti-virus, anti-spoof and other software. They all do more harm than good in the long term. Just use good practice as far as possible:-

Use a text mode E-Mail program that doesn't follow links automatically and doesn't open attachments.

Always check the URL when following 'important' links in your browser.

Don't install stuff without thinking fairly hard about it first and checking as far as possible that the source is trustworthy.

Don't save *any* passwords, userids or similar sensitive information on the computer (as in allowing your browser to save them).

While I now run Linux on most of my systems I still do have a couple of MS Windows based systems and, as far as I am able to tell (and I'm not a complete idiot as regards computing) they haven't got any major nasties in them.

[Mike Barnes]

[e-mail]:

Agreed.

Most of my userids and passwords aren't sensitive information and I encourage Firefox to save them.

For sensitive work (only) I use Google Chrome in stealth mode.