Comments on: A Closer Look at Rapport from Trusteer http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/ In-depth security news and investigation Sat, 11 Feb 2012 19:29:31 +0000 hourly 1 http://wordpress.org/?v=3.3.1 By: JCitizen http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-25055 JCitizen Thu, 11 Aug 2011 23:27:17 +0000 http://krebsonsecurity.com/?p=2731#comment-25055 I have many clients with many Win 7 file issues. It seems almost that it is a Windows 7 issue more than anything. Disappearing folders, files, and shortcuts. Then suddenly reappearing again! I don't have the same problems on Vista x64, but perhaps one should not do banking on a Win7 PC anyway; if you are not going to use Rapport. I'm leaning heavily on ordering a Puppy Linux Live CD from On-Disc, and trying that for a while. I think readers should be aware, that there is a malware poser for Rapport, and the only way to superficially recognized it is by examining these icons I cobbed from an article by Michael Kassner on TechRepublic. You can view them here: http://i.techrepublic.com.com/blogs/zitmo2.png?tag=content;siu-container It seems Zeus has an interesting mobile phone variant called Zitmo that can defeat two factor SMS authentication. I always knew they'd find a way to break that anyway. I think readers here would be interested in that article too. I have many clients with many Win 7 file issues. It seems almost that it is a Windows 7 issue more than anything. Disappearing folders, files, and shortcuts. Then suddenly reappearing again!

I don’t have the same problems on Vista x64, but perhaps one should not do banking on a Win7 PC anyway; if you are not going to use Rapport. I’m leaning heavily on ordering a Puppy Linux Live CD from On-Disc, and trying that for a while.

I think readers should be aware, that there is a malware poser for Rapport, and the only way to superficially recognized it is by examining these icons I cobbed from an article by Michael Kassner on TechRepublic. You can view them here:

http://i.techrepublic.com.com/blogs/zitmo2.png?tag=content;siu-container

It seems Zeus has an interesting mobile phone variant called Zitmo that can defeat two factor SMS authentication. I always knew they’d find a way to break that anyway. I think readers here would be interested in that article too.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: Tim O'Connor http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-24999 Tim O'Connor Wed, 10 Aug 2011 19:10:59 +0000 http://krebsonsecurity.com/?p=2731#comment-24999 Beware there are issues with Rapport and Win 7. It creates a directory in User/Default/AppData/Roaming called Trusteer/Rapport/user/store/user which has a file user_var_0.cfg.data. I do not know if this file was corruted or if they contolled it through the System, but when you go to create a new user it will not get a profile and you will be going through the old Vista error problems and not being able to log in the new user. Event errors show that the new user routine was not able to copy the file which left the routine in hung mode and didn't finish. This will also show up when trying to use IIS www to bring up a htm. The service tries to create a pass through user using the application pool and it ends up with the same problem of not able to copy the file, except now it can't delete the temp. user and you end up with a boat load of new users with each retry. Changing the rights in Safe Mode was not helpful, the only solution was to cut the file and move it somewhere else in Safe Mode. Until they fix their Win 7 problems I'm uninstalling. Beware there are issues with Rapport and Win 7. It creates a directory in User/Default/AppData/Roaming called
Trusteer/Rapport/user/store/user which has a file user_var_0.cfg.data.

I do not know if this file was corruted or if they contolled it through the System, but when you go to create a new user it will not get a profile and you will be going through the old Vista error problems and not being able to log in the new user.

Event errors show that the new user routine was not able to copy the file which left the routine in hung mode and didn’t finish.

This will also show up when trying to use IIS www to bring up a htm. The service tries to create a pass through user using the application pool and it ends up with the same problem of not able to copy the file, except now it can’t delete the temp. user and you end up with a boat load of new users with each retry.

Changing the rights in Safe Mode was not helpful, the only solution was to cut the file and move it somewhere else in Safe Mode.

Until they fix their Win 7 problems I’m uninstalling.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: JCitizen http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-24262 JCitizen Tue, 19 Jul 2011 06:07:28 +0000 http://krebsonsecurity.com/?p=2731#comment-24262 Yes, right now Rapport is inoperative in Firefox 5.0.1, and Chrome, but working fine for IE9. This on Vista x64. With everything in flux right now, and no HTML5 standard, I imagine the developers everywhere got their work cutout for them! Yes, right now Rapport is inoperative in Firefox 5.0.1, and Chrome, but working fine for IE9. This on Vista x64. With everything in flux right now, and no HTML5 standard, I imagine the developers everywhere got their work cutout for them!

Like or Dislike: Thumb up 0 Thumb down 1
]]> By: JCitizen http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-24260 JCitizen Tue, 19 Jul 2011 05:44:45 +0000 http://krebsonsecurity.com/?p=2731#comment-24260 I must add that none of these PCs had Rapport installed, so that wasn't a factor. I must add that none of these PCs had Rapport installed, so that wasn’t a factor.

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: JCitizen http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-24259 JCitizen Tue, 19 Jul 2011 05:43:50 +0000 http://krebsonsecurity.com/?p=2731#comment-24259 Sorry for your experience, PC Elliot: In the last month I've had at least three clients with brand new Dell computers - one was a laptop, and the other two were identical desktops - that were completely hosed by simply trying to update to SP1 for Win 7. The laptop was damaged so bad the tech trashed the motherboard; and one of the other two had to resort to using Microsoft supplied operating system discs with SP1 pre-installed. I don't know what is going on with the OEMs, but my work load has gone up 1000% because of Windows update problems. I see many folks on the tech forums getting new hard drives from Microsoft!! All of them either Dells or HPs! Sorry for your experience, PC Elliot:

In the last month I’ve had at least three clients with brand new Dell computers – one was a laptop, and the other two were identical desktops – that were completely hosed by simply trying to update to SP1 for Win 7. The laptop was damaged so bad the tech trashed the motherboard; and one of the other two had to resort to using Microsoft supplied operating system discs with SP1 pre-installed.

I don’t know what is going on with the OEMs, but my work load has gone up 1000% because of Windows update problems. I see many folks on the tech forums getting new hard drives from Microsoft!! All of them either Dells or HPs!

Like or Dislike: Thumb up 0 Thumb down 0
]]> By: artzy http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-24256 artzy Tue, 19 Jul 2011 04:31:44 +0000 http://krebsonsecurity.com/?p=2731#comment-24256 I'm running Trusteer on my Mac Mini and have had no problems. Funny how you can run software on Macs problem-free and watch as people on PCs have all sorts of problems I’m running Trusteer on my Mac Mini and have had no problems. Funny how you can run software on Macs problem-free and watch as people on PCs have all sorts of problems

Like or Dislike: Thumb up 1 Thumb down 2
]]> By: PC Elliott http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-24254 PC Elliott Tue, 19 Jul 2011 02:10:36 +0000 http://krebsonsecurity.com/?p=2731#comment-24254 Don't install Rapport... It was 'forced' onto us by a US national bank (think directional instmts) that was bought out by a British bank (BB...). My great running new Dell E6300 (maxed out) laptop has had nothing but problems since. All of the scans pointed to Trusteer files (registry errors, file coruption, and also blocking the functions of other apps, both MS and others). I am uninstalling and also scanning for any files that contain either Rapport or Trusteer to remove today. Hopefully, that will resolve the problem. If not Dell Tech support here I come (glad I got full support).... Don’t install Rapport… It was ‘forced’ onto us by a US national bank (think directional instmts) that was bought out by a British bank (BB…). My great running new Dell E6300 (maxed out) laptop has had nothing but problems since. All of the scans pointed to Trusteer files (registry errors, file coruption, and also blocking the functions of other apps, both MS and others). I am uninstalling and also scanning for any files that contain either Rapport or Trusteer to remove today. Hopefully, that will resolve the problem. If not Dell Tech support here I come (glad I got full support)….

Like or Dislike: Thumb up 0 Thumb down 1
]]> By: Tammy Elliott http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-23683 Tammy Elliott Mon, 27 Jun 2011 02:46:36 +0000 http://krebsonsecurity.com/?p=2731#comment-23683 I have been using Rapport for about 9 months on OSX (i am running 10.6.6 currently). I just got an update notice; while running Firefox. I never use Safari since MacWorld cited security problems. I have not had any problems but after reading the blog, I am leary of the update. I would love for the company to address its stability on a Mac running Firefox. I, too, clicked on a link at the top of their web page; think it was "products" and it said the page was unavailable. For a company who specializes in web security, this spoke volumes to me, the lowly graphic designer! I would welcome comments from some Mac experts. I have been using Rapport for about 9 months on OSX (i am running 10.6.6 currently). I just got an update notice; while running Firefox. I never use Safari since MacWorld cited security problems. I have not had any problems but after reading the blog, I am leary of the update. I would love for the company to address its stability on a Mac running Firefox. I, too, clicked on a link at the top of their web page; think it was “products” and it said the page was unavailable. For a company who specializes in web security, this spoke volumes to me, the lowly graphic designer! I would welcome comments from some Mac experts.

Like or Dislike: Thumb up 1 Thumb down 0
]]> By: Peter Grove http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-23576 Peter Grove Fri, 24 Jun 2011 09:16:18 +0000 http://krebsonsecurity.com/?p=2731#comment-23576 My bank (RBS) recommended that I install Trusteer Rapport. I have used it on two different laptops and two different desktop PC's, with Windows XP, Vista and Windows 7, with Firefox 3, 4 & 5 and IE 7, 8 & 9. So far (touch wood) I have not experienced any problems with it. My daughter, who also has an RBS account (I opened it for her when she was 16) also has Rapport installed and has had no issues with it. I think it's true (as others have mentioned) that the people who don't have a problem with a piece of software don't usually bother posting to say so. My bank (RBS) recommended that I install Trusteer Rapport. I have used it on two different laptops and two different desktop PC’s, with Windows XP, Vista and Windows 7, with Firefox 3, 4 & 5 and IE 7, 8 & 9.

So far (touch wood) I have not experienced any problems with it. My daughter, who also has an RBS account (I opened it for her when she was 16) also has Rapport installed and has had no issues with it.

I think it’s true (as others have mentioned) that the people who don’t have a problem with a piece of software don’t usually bother posting to say so.

Like or Dislike: Thumb up 2 Thumb down 0
]]> By: JCitizen http://krebsonsecurity.com/2010/04/a-closer-look-at-rapport-from-trusteer/comment-page-2/#comment-23154 JCitizen Sun, 12 Jun 2011 20:28:22 +0000 http://krebsonsecurity.com/?p=2731#comment-23154 @artzy; I should think OSX being a totally different operating system would have totally different problems on Safari 5. At least that is the browser that is supported. This assuming there are problems. None of my Apple clients have tried ANY security programs so far. @artzy;

I should think OSX being a totally different operating system would have totally different problems on Safari 5. At least that is the browser that is supported. This assuming there are problems. None of my Apple clients have tried ANY security programs so far.

Like or Dislike: Thumb up 0 Thumb down 0
]]>