TrusteerRapport still causing problems (Or is this "Malware Week"?)

grumpycrab

Just had a Windows10 machine killed ("Automatic Repair" loop); the cause was a corrupt driver: - rapporthades64.sys
I don't know how it became corrupt (guess it could happen to any driver!?); but it well and truly stuffed the computer.

EDIT: the plot thickens - may be Spyhunter thinking that Rapport is malware...blimey - this week should have been named "malware week"; what's going on - I don't have an issue with malware/popups/diverting to unwanted sites. Perhaps I'm just not normal...

esuhl

I've always been a bit suspicious of SpyHunter after reading this news article about them:

http://www.csoonline.com/article/3029975/techology-business/spyhunter-anti-malware-maker-files-lawsuit-over-bad-review.html

And the comments here:
https://www.bleepingcomputer.com/forums/t/550005/spyhunter-vs-malwarebytes-vs-iobit/

Maybe SpyHunter is better now, but I've always avoided it.

:-/

AndyPix

esuhl wrote: »

but I've always avoided it.
:-/

Me too, and that god awful Trusteer Rapport thing

RumRat

Yes, perhaps it's just realising how !!!! Trusteer is...It's time the banks stopped trying to push it.

Mr.Generous

Trusteer slowed 2 pc's down to a crawl last time I tried it, deleted very quickly.

J_B

grumpycrab wrote: »

Spyhunter thinking that Rapport is malware...

Can't disagree with Spyhunter there!!

GunJack

Both programs I'd avoid like the Plague tbh.... even if Spy Hunter was totally legit (which I very much doubt) their behaviour towards bleepingcomputer has been utterly disgusting - that site has probably done more in the fight against malware than most of the others put together :mad:

Strider590

Never allow anti-virus or anti-malware software to automatically delete or quarantine anything.

There is this thing called a file hash, a unique serial number applied to a file when first create, this is primarily how AV software finds threats, but what virus/malware creators do is they fake a file hash that belongs to a genuine file, your AV then struggles to tell whether the file is genuine or a threat, it quarantines the file and depending on what the genuine file actually was this can completely screw your system.

John_Gray

How remarkably apposite is that Trusteer Rapport driver name:
rapporthades64.sys

Hell on earth!

DoaM

I had exactly the same thought when I saw that.

coffeehound

Spent a couple of hours trying to solve a slow laptop for an elderly relative yesterday. Came on here and read the comments on Trusteer/Rapport. Sure enough it was installed. Removing it (though it held on by its fingernails to avoid being dumped) immediately solved the slow running issue. Cheers!