Trusteer's Rapport Software

I installed rapport as recommended by my bank around the turn of the year. Suddenly crashing Safari every two days or so - no obvious cause tho saw rapport in the crash report. contacted them but usual customer service fob-off that we read about throughout these forums.Read a bit online and decided to uninstall which i did using the uninstaller.

Still crashing with same frequency tho no mention of rapport in crash reports.

Just read this thread and as a result searched through my hard drive where in my user file was a folder of application support files which had not been uninstalled by the uninstaller. Have been as unceremoniously dumped as it possible to do with a graphical user interface

Thanks guys for your help and fingers crossed.

No thanks to trusteer - i hope you got a big fat fee upfront from the banks you are 'helping' - customers of the banks are not being helped one bit.....

Klaus I removed Rapport successfully without any of the problems y'all have experienced. But...when I tried to use Amazon and order stuff I could not access my cart nor send items to my cart. I had to use my Ipad to order and I strongly suspect Rapport as the culprit as that is the only change I have made to my Snow Leopard Imac since installing Rapport. Any advice? Amazon keeps asking me to turn Cookies off and I did in both Safari and Firefox and no luck. I called Amazon and they had no clue what to do. Any advice for a fellow Teuton?

Rapport rep... I removed Rapport successfully without any of the problems y'all have experienced. But...when I tried to use Amazon and order stuff I could not access my cart nor send items to my cart. I had to use my Ipad to order and I strongly suspect Rapport as the culprit as that is the only change I have made to my Snow Leopard Imac since installing Rapport. Any advice? Amazon keeps asking me to turn Cookies off and I did in both Safari and Firefox and no luck. I called Amazon and they had no clue what to do. I know Rapport is still sitting there as it tries to Phish but my anti phishing software stops it. I don't see it in APPs but I know it is still there. How do I get rid of this scourge?

Roddy old chap see me posts any advice?

hahahahahaha Shalom my friend!

Hi, very helpful to read yours and everyone else's posts (except Trusteer's, which I find extraordinary). But in relation to what you said about clearing every last bit from your Mac, can I ask how you did that please? So I can do the same? Here's the paragraph I refer to:

"Needless to say I uninstalled Rapport. It had so deeply embedded itself across the directories, I decided to ferret out every last resource, plugin file, plist, etc., and trash them all, a process which itself took half an hour to complete, before I was rid of the plague Rapport had visited on my Mac."

Thanks, Sarah

Sarah --

Read these instructions from the Rapport site, OK:

http://www.trusteer.com/uninstalling-rapport-mac-os

Hi Bee, thanks but I have already uninstalled Rapport using the uninstall file. I just want to get rid of all the rest of the files that have been left on my Mac, and I can't seem to delete these ones. Sarah

and I can't seem to delete these ones

Which ones?

Have you tried using the "Find" and/or Spotlight to search for more Rapport or Trusteer files?

Hi Bee,

Sorry, I am diving between two different disucssion threads - the other one being one I started headed: My Safari Keeps Quitting/Crashing.

I posted this there, explaining which files I could not delete. I did use Find Any File to find them, after uninstalling Rapport.

I have followed the good advice in the other Rapport discussion you pointed me to, and have now downloaded Find Any File to seek out all the remaining Rapport files on my Mac. I have found 17 in the following folder that I cannot seem to move to the trash. It asks for my Mac password but when I enter that it still does not move the files to the trash, even though it makes a trash sound. Do you know how I can do this? Thanks

Path: Macintosh HD/private/var/db/receipts

Hi Sazza

yep - what's with 17 receipts eh?

They don't actually do anything, those files - just a record of what was installed. But you ought to be able to be rid of them, after supplying an admin user & password, assuming you're doing it through Finder (or FInd any File unless using 'Delete Immediately').

If you do want rid, I'd try using FaF as Root - you Option click the Find All button... then select the files within FaF & choose Find any File-Results-Delete Immediately ( or right click & Delete Immediately )

That won't trash them, they'll just be gone, so please be extra careful with what you select, and ignore them if you have any doubts, they have no effect.

As I said, you ought to be able to trash them - so just in case it's a simple permissions error - do try repairing permissions before the above... It'd be good to see that working properly, even if actually shifting those files isn't crucial.

Thanks for the reply Andy,

Well, I tried that and it worked! Whoop. So no more Rapport on my Mac. Interesting to see if it does make a difference because my Photoshop Elements crashed yesterday!

Meanwhile, I have come across another strange thing. I have repaired disk permissions using the install disk as I have always understood they had to be repaired from a separate disk. That shows them all to be fine, except the SUID file that cannot be repaired (see my last post in my other discussion: https://discussions.apple.com/thread/3012788?answerId=15053181022#15053181022).

But when I run Verify disk permissions on my actual Mac from the Utilities folder, it shows they have not been repaired at all! Very puzzled.

Sarah

Hi Sarah

So long as permissions repairs says 'complete' at the end - you're all set.

You may see from one to dozens of 'differences' reported, but they can be ignored, even if not specifically on the list at http://support.apple.com/kb/TS1448

" You can safely ignore these messages. You can also usually ignore any "ACL found but not expected..." message. These messages can occur if you change permissions on a file or directory. These messages are accurate but are generally not a cause for concern."

Running from a separate disk is necessary if you're Repairing the Disk (rather than verifying, or repairing/verifying Permissions. Permission repair is best done from an installed disk, since it's possible for OS X updates to have made changes in the permission repair process, which of course won't be on the Install DVD.

Thanks Andy,

It did occur to me that the install disk may be out of date. So I have run it from my computer now.

Differences still show up on the computer version of Disk Utility (while the install disk version shows permissions all to be OK). They all seem related to Java, and those messages are not in Apple's list. Even after I have run repair they still show up even though it says repair has been completed.

But the SUID file is in Apple's list, so that's OK 🙂

All other error messages listed below in case they are important:

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/dt.jar", should be lrwxr-xr-x , they are lrw-r--r-- .

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/jce.jar", should be lrwxr-xr-x , they are lrw-r--r-- .

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/jconsole.ja r", should be lrwxr-xr-x , they are lrw-r--r-- .

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Classes/management- agent.jar", should be lrwxr-xr-x , they are lrw-r--r-- .

User differs on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib", should be 0, user is 95.

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/dt.jar", should be -rw-r--r-- , they are -rwxr-xr-x .

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/jce.jar", should be -rw-r--r-- , they are -rwxr-xr-x .

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/management -agent.jar", should be -rw-r--r-- , they are -rwxr-xr-x .

Permissions differ on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Home/lib/security/b lacklist", should be lrwxr-xr-x , they are lrw-r--r-- .

User differs on "System/Library/Java/JavaVirtualMachines/1.6.0.jdk/Contents/Libraries", should be 0, user is 95.

Permissions differ on "System/Library/Java/Support/Deploy.bundle/Contents/Home/lib/security/cacerts", should be lrwxr-xr-x , they are lrw-r--r-- .

Permissions differ on "System/Library/Java/Support/Deploy.bundle/Contents/Resources/Java/deploy.jar", should be lrwxr-xr-x , they are lrw-r--r-- .

Permissions differ on "System/Library/Java/Support/Deploy.bundle/Contents/Resources/JavaPluginCocoa.b undle/Contents/Resources/Java/deploy.jar", should be lrwxr-xr-x , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Classes/dt.jar", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Classes/jce.jar", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Classes/jconsole.jar ", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Classes/management-a gent.jar", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home/lib/dt.jar", should be lrwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home/lib/jce.jar", should be lrwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home/lib/management- agent.jar", should be lrwxr-xr-x , they are -rwxr-xr-x .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Home/lib/security/bl acklist", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle", should be drwxr-xr-x , they are lrwxr-xr-x .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/deploy.jar", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/1.6.0/Resources/JavaPlugin Cocoa.bundle/Contents/Resources/Java/libdeploy.jnilib", should be -rwxr-xr-x , they are lrwxr-xr-x .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/Deploy.bundle/ Contents/Home/lib/security/cacerts", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/Deploy.bundle/ Contents/Resources/Java/deploy.jar", should be -rw-r--r-- , they are lrw-r--r-- .

Permissions differ on "System/Library/Frameworks/JavaVM.framework/Versions/A/Resources/Deploy.bundle/ Contents/Resources/Java/libdeploy.jnilib", should be -rwxr-xr-x , they are lrwxr-xr-x .

Warning: SUID file "System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/MacOS/ARDAg ent" has been modified and will not be repaired.

I sometimes wonder if I should just reinstall the OS!

Sarah

they're fine - it's annoying that the system can't suppress numerous 'messages' that aren't errors - but so long as it's 'complete' you are ok.