Suspicious script & PC behaviour

londonman81

When i boot up my PC and reach the desktop, a DOS screen appears very briefly with some text which I can't quite read in time.

I have noticed that i can't update my anti-viruses (AVG, AVAST etc) as it refuses to connect to internet and also certain programs i have downloaded recently don't start-up at all....as if they are being suppresed.

I was advised to try running regedit and then deleting anything I don't recognise to eliminate any possible malicious scripts.

But when I try to run regedit, it doesn't even run...it does precisely nothing. Again - as if it is being suppresed by something which makes me wonder if it's the script on start-up....

Any tips on how to get to the bottom of this??

Thanks!!!

jacktyler

don't run regedit and start deleting things unless you're absolutely certain you know what you're doing.

can you connect to the internet at all? are you using that computer now, or on another one? and what version of windows is the problem PC using?

bob_man_uk

that sounds like some pretty nasty stuff, you could try turning the pc on hammering f8 and start it in safe mode (with or without networking, its up to you) then see if you can get any life out of your antivirus/access the internet and update.

this of course depends on your os, but if its anything XP or over, you should be ok with the above.

londonman81

jacktyler wrote: »

don't run regedit and start deleting things unless you're absolutely certain you know what you're doing.

can you connect to the internet at all? are you using that computer now, or on another one? and what version of windows is the problem PC using?

I have access to internet in general but it doesn't seem to allow anti-viruses to access the net.

I have also managed to figure out the text in the script on start-up, it says 'rapportservice.exe' which is a program i downloaded at the recommendation of NatWest.

However, I have today tried to uninstall it and I cannot for life of me manage to get rid of it - it keeps on saying 'failed install' even though I am trying to uninstall.

And then I can see it in the 'processes' tab but when I click End Process it it says 'The operation could not be completed. Access denied'.


Any clues how I can get rid of this rubbish software?!

jacktyler

it might not be a good idea to try and remove it just yet.

please take a quick read of this short thread.

in the very last post, the poster says you can switch that software on and off at will, and they only turn it on if they want to use the online banking.

perhaps if it's turned off, but still installed, your anti-virus software might be able to update?

worth a try maybe?

http://forums.moneysavingexpert.com/showthread.html?t=1863429

londonman81

jacktyler wrote: »

don't run regedit and start deleting things unless you're absolutely certain you know what you're doing.

can you connect to the internet at all? are you using that computer now, or on another one? and what version of windows is the problem PC using?

I have access to internet in general but it doesn't seem to allow anti-viruses to access the net.

I have also managed to figure out the text in the script on start-up, it says 'rapportservice.exe' which is a program i downloaded at the recommendation of NatWest.

However, I have today tried to uninstall it and I cannot for life of me manage to get rid of it - it keeps on saying 'failed install' even though I am trying to uninstall.

And then I can see it in the 'processes' tab but when I click End Process it it says 'The operation could not be completed. Access denied'.


Any clues how I can get rid of this rubbish software?!

poppy10_2

Install CCleaner

Restart your computer in Safe Mode (this will stop most startup programs from loading)

Open up CCleaner, click Tools>Startup, delete all the nasty cruft you want to get rid of.

Reboot.

jacktyler

it might be best to contact the support for this software.

[EMAIL="support@trusteer.com"]support@trusteer.com[/EMAIL]

if you really want to get rid of it though, read this:

http://www.computing.net/answers/security/rapport-installed-problems/24888.html

the second-to-last post seemed to do the trick (after he'd uninstalled via Add/Remove Programmes)

by all accounts, it sounds like a nasty piece of software to get rid of.