Filed under: Windows Repair Software
HOW TO REPAIR HIJACKED RANSOMWARE TRUSTEER(?) VIRUS(?) PROBLEM?
April 10, 2010
5 thoughts on “HOW TO REPAIR HIJACKED RANSOMWARE TRUSTEER(?) VIRUS(?) PROBLEM?”
Comments are closed.
Clean Registry and Optimize PC
Remove Hijack
http://adware-scan-online.com/Hijack/
unfortunately the setup_257 trojan (called "scareware") only gives you about 24 hours before it trashes the Windows operating system, therby requiring a clean install.
during that 24 hours, i learned that although Norton was aware of this scareware, Norton was unable to automaticaaly deal with it — a chat with Norton;s assistance staff says they can help u manually remove — but in 1 day, the virus has already killed the o/s, so Norton is essentially useless.
this malware is so clever that one would think (suspect only – no proof) that Norton may have even written it — as at least one user sustects that Zonealarm becomes malware itself when u don"t renew the ZA paid subscription
imho one sdhoulf never use Tryware antivirus — Hijaakthis and Microsoft’s are totally free
Hijaakthis asks for donations and has blocked this malware from changing the Registry after a re-install
this trojan virus likely hides in a datafile when latent and comes ba k after a reinstall of Windowss — it is not detected by Avira , Norton, Windows Security Essentials,or Trendmicro; Hijaak, if installed earlier than the trojan can detect Registry change attempts and block them — but u must use Hijaak in Expert mode with special settings that the average user won"t have a clue
This virus keeps on coming bak, like an unkillable vampire
There are 3 main points here:
1. You have Rapport installed. RapportService.exe and RapportMgmtService.exe are genuine Rapport processes that cannot be easily shut down, otherwise malware would take advantage of this to bypass your protection. Uninstalling or stopping Rapport requires captcha and can be done through the start menu or through add/remove programs. Rapport is recommended by numerous leading banks as protection against financial fraud. Please see http://www.trusteer.com for the banks we work with. You must have installed it while logging into one of your bank accounts.
2. You have a rogue anti-virus that is alerting you constantly, disguised as belonging to Microsoft, and trying to convince you to download .exe files which are most likely extremely dangerous.
3. Your browser has been hijacked, possibly by the same rogue anti-virus or something else related.
What is important to understand is:
1. Do you see the Rapport icon in the address bar? If you do, please try navigating to the bank from which you’ve downloaded Rapport, or to our home page (above). Are you successful? Rapport should protect you and allow you to reach these sites.
If you do not see the Rapport icon, try starting Rapport from the start menu > programs > Trusteer Rapport > Start Rapport. Then restart your browser.
2. We would be very interested to investigate the security breach on your computer. Please contact us at support@trusteer.com and refer us to this page’s address so we can continue from there (or just copy and paste your post).
Thank you. We hope this has been helpful.
Sincerely,
Trusteer Technical Support
If you can’t find the right drivers manually I would recommend just getting a software program that can do it for you. There is a program I use which will find drivers for just about all hardware devices. The best part is it takes a snapshot of your system specifications and matches the right driver to go with it. Perform a free driver scan at:
http://www.drivers-updates.net/
You can also search by the following link:
http://forums.driverguide.com/
It sounds like a malware infection. I would suggest scanning your PC with both of these.
Superantispyware free edition.
http://www.superantispyware.com/download.html
Malwarebytes free version.
http://www.malwarebytes.org/