RapportBuka problem

[helenlouise]

my laptop blue screened earlier, and after doing the dumps for this it picked up this

Error
Symptom:
Device is not present, not working properly, or does not have all of its drivers installed. Cause: A device has a configuration problem that prevents it from working properly. Details: The device, RapportBuka, is reporting "tv_ConfigMgrErr24". This device will not be available until the issue is resolved. The Plug and Play ID for this device is ROOT\LEGACY_RAPPORTBUKA\0000. Resolution: 1. Verify the correct driver is installed.
2. Try updating the drivers using Windows Update.
3. Check with the manufacturer for an updated driver.
4. Attempt to uninstall and then reinstall the device using Device Manager.

on checking in device manager under hidden devices i come across RapportBuka
showing as not working, showing as stopped is this the problem or is this malware hidden? dont know whether to press start?

device type - Non-Plug and Play Drivers
device status - This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

I have no idea if this is what made it blue screen, but have been advised to post in here

 

[helenlouise]

have added the dump things incase they are needed here

 

[Jacee]

Download (free version) Malwarebytes' Anti-Malware to your desktop
Malwarebytes Special Offer!
* Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad. Please save it to a convenient location. Copy and Paste that log into your next reply.

 

[helenlouise]

it never found anything

Malwarebytes Anti-Malware 1.60.1.1000
Malwarebytes : Free anti-malware, anti-virus and spyware removal download

Database version: v2012.03.22.03

Windows 7 Service Pack 1 x86 NTFS
Internet Explorer 9.0.8112.16421
Helen :: HELEN-LAPTOP [administrator]

22/03/2012 15:40:19
mbam-log-2012-03-22 (15-40-19).txt

Scan type: Full scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 300979
Time elapsed: 57 minute(s), 26 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

 

[GEWB]

Google and DuckDuckGo have a lot of search results for "RapportBuka" going back a couple year and as recent as a couple months. Try this and see if it gives you a start:

MalWare Removal • View topic - SearchQu has taken over all my browsers...

Regards,
GEWB

 

[helenlouise]

i have searched all over the internet and not being computer savvy at all it makes little sense, actually no sense at all, i assumed it was something to do with trusteer rapport. as above the above also makes little sense to me, have ran malware and mse and nothing

i have no idea what SearchQu even is

 

[GEWB]

OK, I understand. The post in the link also dealt with RapportBuka.

You may want to search that forum - it is very good for malware problems. In the meantime, members of this forum will continue to search for solution.

Regards,
GEWB

 

[Jacee]

Searchqu is classified as a Browser Hijacker, which means its parasitic damage payload consists of hijacking your browser homepage, error page, or search page with its own, mostly a commercial site of its creators, forcing you to accumulate force hits to a particular website to make it more popular or by using pay-per-click sites to earn money.

The easiest way for a Browser Hijacker such as Searchqu to infect your computer is to exploit certain ActiveX controls and other security holes in your Internet Explorer browser. By browsing insecure websites on the internet, users may encounter various pop-ups, which secretly install Browser Hijackers like Searchqu on your computer once clicked upon.

As soon as Searchqu completes its operations, the overall browser stability and performance severely degrade, making it nearly impossible to surf the web normally.

As found in an article describing this malware.

 

[helenlouise]

thank you both, confused as hell to what i am supposed to be doing, but thank you anyways


just been to device manager and right clicked on rapportbuka and uninstall was now there (not been an option to do that till now), have uninstalled it and it gone, there are other rapport things things there but nothing showing a yellow triangle thing (sorry not tech words lol) also removed rapport from control panel. Anything i can now do to check everything else or should i leave well alone?

 

[Jacee]

Just leave things alone for a while.

 

[helenlouise]

ok, will do thank you very much, will post back if any problems

 

[completemanuk]

RapportBuka reinstall

Hi

I am new to the forum but I have a similar problem with RapportBuka.

My system has slowed right down and the browser is so hard to get it going.

I don't know how to reinstall RapportBuka. It is not working and cannot be found

Can anyone help me please?

thanks

Completemanuk