Navigation


Follow me:

Facebook Twitter

Surf safer for free

Content

Tip: keyboard shortcut Ctrl+F searches in the page contents

Trusteer Rapport

Author: . Last modified: 2013-04-09 18:20:20 EEST

In this tutorial: How to use Trusteer Rapport for protection from password stealers, keyloggers, phishing pages and financial malware in Windows XP, Vista, 7 and 8

Trusteer Rapport prevents banking trojans ZeuS, SpyEye, Silon, Torpig and other financial malware from grabbing your login credentials and robbing your bank account or stealing your identity from other websites. It also provides protection from keylogging, screen grabbing and phishing.
The program has a list of partner web sites where its protections turn on automatically, and you can specify up to 100 other web sites to protect.

Rapport protects your personal data by creating a secure tunnel between your browser and your bank (or the website you are logging in to) and so it keeps you safe from Man-in-the-Browser malware and Man-in-the-Middle attacks. All browsers are checked for unauthorized modifications before launching to prevent Man-in-the-Browser malware infections and information theft. Trusteer Rapport also secures browsers' memory to avoid malicious code injection. Plus it is well capable of removing financial malware all by itself - but do not ditch your anti-virus and anti-malware programs, for Rapport only removes certain types of malware.

Keylogging protection is provided by encrypting all keystrokes that reach your Internet browser.

Phishing protection is provided like this - if you enter a protected user name/password combination on an unknown page, Rapport will pop up a warning that asks to verify you are on the correct site. This way, you will not enter your Twitter password on itwittier.com or twiitter.com, for example.

As Rapport does all this without the need for constant updates and it does not overload your Internet browser or Internet connection, the software is already offered to customers of many well-known banks.
Trusteer Rapport does update itself automatically to provide best protection from newest threats, but the updates are not big in size and do not cause any delays.

Rapport works with and protects most major Internet browsers - Microsoft Internet Explorer (including even the Metro/Modern UI version of IE 10), Mozilla Firefox, Google Chrome and Apple Safari. Sadly, Opera is not supported yet.

Sounds good, right? Wink Let's get the sweetie now!

Please note that some versions of Trusteer Rapport are incompatible with Microsoft EMET - web browsers might not open at all or open a blank, unusable window.
Windows XP users should disable EAF protection for their Internet browsers in EMET configuration.
Windows Vista, 7 and 8 users should disable Mandatory ASLR protection for their browsers in EMET configuration.
avast! Free Antivirus might mislabel Rapport Service (rapportmgmtservice.exe) as malware, but you can safely ignore this warning - Rapport is clean.

Downloading and installing Trusteer Rapport

Go to Rapport download page, and click the link to the right of "PC users:". Windows 8 users should save the file, not run it!
Trusteer Rapport download page. Click the link for PC users to download Rapport setup file.

Windows 8 users might see the "Rapport doesn't support your Windows version" message after setup starts. You must then launch the installer in Compatibility Mode. Just click OK in this dialog.
Trusteer Rapport installer, Windows 8. Rapport doesn't support your Windows version. Click OK.

Locate the downloaded setup file (probably RapportSetup.exe), right-click it and select Properties.
Windows 8, File Explorer. Right-click RapportSetup.exe and select Properties.

Open the Compatibility tab, enable the Run this program in compatibility mode for option and select Windows 7 from the combo box.
Then click OK and re-launch the Rapport setup file.
Windows 8, File Properties, Compatibility tab. Enable the Run this program in compatibility mode for option. Select Windows 7 from combo box. Click OK and start the program.

Trusteer Rapport setup will first notice you about possible firewall or anti-virus program alerts during the install. So, if you see any alerts, it is recommended to click Unblock, Yes, Allow or Permit buttons to let the setup safely finish.

Let me reassure you that Trusteer Rapport is a safe software that vastly improves your online security. Smile
Click OK.
Trusteer Rapport installer. Warning about possible firewall and antivirus software alerts. Click OK.

Rapport will then download the rest of installation files. Just stand by, this won't take long.
Trusteer Rapport installer, downloading Rapport setup package. Stand by.

After this, Rapport setup will begin. Tick the I've read and agreed with Trusteer End User License Agreement check box and click Install.
Trusteer Rapport Installation. Click Install.

The installation takes a few minutes. Click Finish after it is complete.
Trusteer Rapport Installation complete. Click Finish.

Trusteer Rapport will then open your default Internet browser and load a quick compatibility test.
Do not click the Continue button unless you see this screen for more than 15 seconds!
Trusteer Rapport Compatibility Test page. Just stand by, the screen will change by itself.

The next screen you'll see is about Compatibility Test running. Stand by.
Trusteer Rapport Compatibility Test page, please do not close this window. Just stand by.

And the last screen for Rapport Compatibility Test is "Installation Completed".
Trusteer Rapport Compatibility Test, Installation Completed.

Using Trusteer Rapport - protecting your information on websites

You will see a new gray button with a white arrow pointing left on your browser Address Bar or Toolbar. This shows that Trusteer Rapport is running.
Please remember to always check for the icon before entering some protected website - if Rapport needs upgrading, the icon might disappear. If there is no Rapport icon in Address Bar or Toolbar, it means you are not protected.
Trusteer Rapport button on Internet Explorer's Address Bar.

While the button is gray, Trusteer Rapport is not protecting your information on this website.
To keep your login credentials and other information safe on the website, click the Trusteer Rapport button and then click Protect this Website.
As written in the information window, it is recommended to enable Rapport for every website that contains your personal information or requires logging in. Free version protects up to 100 websites - quite enough for average users.
Trusteer Rapport button on Internet Explorer's Address Bar. To protect a website, click the gray button and then click Protect this Website button.

After clicking the Protect this Website button, Rapport's button turns green to show you that protection is turned on. The button will be green each time you will visit the site from now on.
Trusteer Rapport button on Internet Explorer's Address Bar. If the button is green, your information on this website is protected.

If you click the green button, Rapport will notify you that this website is protected by Trusteer.
Trusteer Rapport's green button, this website is protected by Trusteer.

After you type in your password and hit Enter key or click Login button, Trusteer Rapport offers to start protecting it. Protecting the password means preventing phishing attacks in case you enter the same password on a fraudulent website (for example, a malicious website pretending to be PayPal or Facebook).
This also means that you should not reuse your password on many different websites. Please remember to use different passwords for different online services to prevent easy identity theft - read our Creating strong passwords and Password Safe articles to help you with this!
Click Protect this password.
Trusteer Rapport has identified password submission. Click Protect this password.

Now all you have to do is to click the gray button once for each website that you log in to in order to protect your credentials and sensitive information from password-stealing malware. Yeah, banks, webmails and other social network sites should be the first in line. Laughing

Trusteer Rapport's phishing protection in action

In case you enter a protected user name/password combination on some other site, Trusteer Rapport will pop up a Protected Information Warning dialog.
Now it is time to take a good look at browser's Address Bar and verify you are on the correct site! The warning dialog lists both the site where you normally enter this data and the site you are visiting right now.
If the site's address is not the one you were expecting, click the Get me out of here! button immediately - this could be a phishing site.
Oh, and if you tend to re-use passwords (a very, very bad security practice!) and you really are on the correct web site, click Trust this site. But please do not use the same password everywhere as this can cost you dearly in case your login credentials end up in the hands of cyber-crooks who want to empty your bank account or shop online using your credit card.
Read my Creating strong passwords and Password Safe articles for good password practices and storing+auto-filling credentials securely!
Trusteer Rapport, Protected Information Warning, you have just entered text similar to your login on. Verify that your really are on the correct site, not a phishing page! If the site or its address looks suspicious, click Get me out of here.

In case you were on a suspicious site, Trusteer Rapport offers to go to your browser's home page or the site where you normally enter these login details.
Clicking Take me to my home page is the safest bet here.
Trusteer Rapport, Protected Information Warning, you have chosen not to send your information to the site. Click the Take me to my home page link.

Using Trusteer Rapport's Security Best Practices report to check for possible vulnerabilities and weaknesses

Besides protecting your information, Rapport has a built-in security check called Security Best Practices. The report will notify about important out-of-date software, such as Adobe Flash Player.
Let us see it in action!
Click Trusteer Rapport button in your web browser. Then click Open Console.
Trusteer Rapport's button. To see Rapport settings and Security Best Practices report, click Open Console.

The large window with Dashboard will open. First, check if there are any pending updates in the Product Settings section. If Rapport says "no (up to date)", everything's fine. In case it says "yes (restart PC to apply)", you should reboot your computer as soon as possible for the update to take effect.
Then click the Next Page button in the right lower corner.
Trusteer Rapport Dashboard with overview. To see Security Best Practices report, click Next Page button.

See the Security Best Practices section below. If there are improvements available, click View Report.
You should also verify that no security control is disabled in Security Policy section. If there are some disabled security controls, click Edit Policy and re-enable these.
Trusteer Rapport Dashboard, second page. If there are improvements available in Security Best Practices section, click View report.

This will open a list of possible weaknesses in your computer security. As you can see, Adobe Flash Player is out of date and Hosts File is not write-protected.
If you click on a suggestion, you will see some general guidelines for resolving the problem. After you have resolved all weaknesses, it is necessary to click the Scan again link.
Trusteer Rapport Dashboard, Security Best Practices. Adobe Flash Player is out of date and Hosts File is writable.

I do not recommend to dig much deeper into Rapport's settings because, if you configure it incorrectly, you might cut connection to the websites you like to use.
To close Trusteer Rapport Dashboard, click the green X mark in the top right corner.
Trusteer Rapport Dashboard. To close the Dashboard, click the green X in top right corner.

Trusteer Rapport Weekly Activity Reports

Normally you get a notice about a weekly report on the second day of Rapport usage. Click Open report.
Trusteer Rapport, Your periodic activity report is ready and consists of number events. Click Open report.

Check that there is nothing suspicious on the report - No. of blocked screen capture events, No. of certificate mismatch events, No. of blocked IP addresses events, No. of blocked browser add-ons events, No. of blocked cookie access events and No. of blocked process alteration events should all be 0. If any number of these events is higher than zero, it is highly recommended to scan your computer with Malwarebytes' Anti-Malware and check that your anti-virus program is running and up-to-date.

No. of credentials submission events and No. of password keystroke protection events are purely informational, these numbers do not represent anything suspicious.
Trusteer Rapport, Weekly Activity Report. Check that any number of blocked events is not higher than zero. Other events are just informational.

To see details about any events, click the line once.
Here is a list of all passwords typed in during the past days. All these password submissions were encrypted by Trusteer Rapport and therefore protected from keyloggers and password stealers.
Here you can also check exact date and time you logged in to a website in case you have doubts that someone misused your computer.
Trusteer Rapport, Weekly Activity Report, list of protected password submissions. This list is informational only and shows the date and time of logging in to a website.

If you want to keep getting Rapport's weekly reports, click to activate the Automatically present this report at the beginning of each week box. I really recommend checking the box so that you can check your security status once a week.
Click the green X mark on the top right corner to close Trusteer Rapport console.

Upgrading Trusteer Rapport to a newer version or re-enabling protections after a browser upgrade

As Rapport updates itself automatically, the only times you need to re-install or update it are after upgrading your browser to a completely new version or installing new web browsers. Most browser upgrades break the functionality of Trusteer Rapport - always check for Rapport button in Address Bar or toolbar to verify you are protected. No Rapport icon means no protection!

The steps for updating or re-installing Trusteer Rapport are mostly the same as installing the program for the first time.

Before installing the new version, Rapport Setup asks if you want to fix the existing version, update to a newer version or you had no idea that Rapport was installed. The last one seems like Homer Simpson saying: "D'oh!" Tongue out
Click It works - I just want to update it. Then click Next.
Trusteer Rapport update, Rapport is already installed. Click It works - I just want to update it. Then click Next.

During the update, the existing Trusteer Rapport service must be shut down. This causes a security confirmation message, because normally the service must be running. It is now also time to close all open windows of Internet Explorer, Mozilla Firefox, Google Chrome or Apple Safari to make sure the upgrade goes smoothly.
Type the letters on the picture and click Shutdown.
Trusteer Rapport update, Security confirmation message. Type the letters on the image and click Shutdown.

After the update is complete, you will probably see a message that you should restart your computer to activate all new features. Click OK and reboot your PC.
Trusteer Rapport upgrade complete. Click OK and reboot your computer.



 Comments? Suggestions? Ideas? Let me know! 
Your name (public):
Your e-mail (will not be displayed):
Title:
Notify me of new comments to this page: (send e-mail to info[at]winhelp.us to stop receiving)
Your comments/suggestions/ideas (no HTML code!)
winhelp.us owners reserve the right to remove or not publish comments that they find unacceptable because of strong language, inappropriate contents, advertising or spamming.
winhelp.us Privacy Policy.
This is a captcha-picture. It is used to prevent mass-access by robots. (see: www.captcha.net)

Next: Microsoft EMET

Previous: Secunia PSI

PluginCheck Print this page Search Donate