Removing Trusteer Rapport

After uninstalling Rapport, some folders will remain, storing your Rapport settings (for future installation) and Rapport logs (for technical support analysis, if needed). These files and folders are completely inactive and may contain information useful for future installation or diagnosis of problems with Rapport.
Should you choose to delete these folders, or if you have trouble uninstalling Rapport and would like to manually remove all folders, please follow the instructions provided below. 

Removing Rapport folders for Mac OS X

Removing Rapport folders for Windows XP

Removing Rapport folders for Windows Vista / 7 / 8

1) Go to Start menu and Choose Run (or Press the Windows key and the 'R' key together)
2) Type "C:\Program files" (or "c:\program files (x86)" for 64-bit machines) and click "Ok".

3) Find a folder named “Trusteer”, right click it with the mouse, and choose “Delete”. Make sure the folder was removed.

4) Open the Run command as described in step 1
5) Type "%userprofile%\appdata\local" and click "Ok".
   
6) Find a folder named “Trusteer”, right click it with the mouse, and choose “Delete”. Make sure the folder was removed.
* If the path results in an error, please use the following path instead: %appdata%
7) Open the run command again and this time type "%programdata%" and click "Ok".

- If you cannot locate the folder, it might be hidden because of default settings. 

To change the folder’s settings: 

- Go to the Start menu, 

- Click on Control Panel, 

- Click on Folder Options, 

- Click on the View tab, 

- Under “Hidden files and folders”, choose “Show hidden files, folders, and drives” and click OK. 

 

8) Find a folder named “Trusteer”, right click it with the mouse, and choose “Delete”. Make sure the folder was removed.

9) Open the run command and this time type: c:\windows\system32\drivers. Click Ok.
10) Locate the following files and remove them (right click it with the mouse, and choose “Delete”):
* RapportKELL.sys (would be named RapportKE64.sys in 64-bit operating systems)
* RapportHades64.sys (Windows 8 only)

11) To ensure all Trusteer files were removed, open C drive and search for “Trusteer” in the search bar on the top right-hand side of the window. 

If any files related to Trusteer are found, delete them. 

A change of career...

I've recently embarked on a new journey and I'm retraining as a counsellor.  Please drop by to see my other Blog Counsellor Chris and see what I'm up to.

Windows 9 Technical Preview Leak

With thanks to WinSupersite

"Two German technology blogs have leaked screenshots of the upcoming Windows 9 Technical Preview, which is billed as build 9834. The shots depict the new Start menu, floating Modern app windows, a notification center, multiple desktop workspaces, a flat new design for the desktop, and many other changes that we've long expected."

http://winsupersite.com/windows/windows-9-technical-preview-screenshots-leak-analysis-part-1

SCCM Report for all machines with IE9

If you know the steps to create a report then the SQL query you could use would be somthing like:

SELECT DISTINCT a.Name0 AS [Machine Name],
c.FileVersion AS [IE Version],
d.Caption0
FROM v_GS_SoftwareFile c INNER JOIN
v_GS_SYSTEM a ON c.ResourceID = a.ResourceID INNER JOIN
v_GS_OPERATING_SYSTEM d ON a.ResourceID = d.ResourceID INNER JOIN
v_FullCollectionMembership b ON a.ResourceID = b.ResourceID
WHERE     (c.FileName = 'iexplore.exe') AND (c.FileVersion like '9.%')
ORDER BY a.Name0

Please note this has a little bug where it will report multiple instances of the same machine due to the fact that SCCM will have polled every version of IE9 (each incremntal update etc)

It would be better to export this data in to Excel and then delete the duplicates in the name column...

ifM63x64.sys file missing or corrupt - SCCM OSD (X1 Carbon)

Building a new Lenovo X1 Carbon with the new integrated LAN adapter (no more guessing which USB port to use!) via SCCM 2007 and I came across this little blinder.

After the first reboot to OS I was presented with this error screen:

I spotted that is was driver in my driver pack (taken from Lenovo's SCCM pack) for the  Intel Ethernet FCoE Virtual Storport Miniport Driver.

I located the driver in my driver pack and removed it - left he check box UNTICKED to update the distribution point and then manually when and updated it after myself. 

Once I was happy that the source had incremented by one version I kicked off the build again.

Sure enough it sailed through and we are all happy....

 

Your account has been disabled. Please see your system administrator

Scenario:

A non-domain joined virtual machine (HyperV) that as just been sysprepped.  SCCM Capture has completed, machine has rebooted but you get presented with Username and password field instead of Windows config options. 

You try to log on with local admin account and get the error "Your account has been disabled.  Please see your system administrator".

Assumptions:

• You've been using SCCM to build machines

• You didn't activate the admin account

• You really can't be arsed to go back to the task sequence and make the change then spend 1hr rebuilding the machine

• You have some form of access to WinPE either via PXE (F12) or USB/CD boot image
•  
• Troubleshooting is ENABLED in your BootPE to allow for F8 to envoke a cmd prompt.

Solution:

Now this isn't going to work for everyone but this is a method I've used previously when I've done something dumb like not enabling the local admin account!

Bare in mind this is for when there are NO ACCOUNTS AVAILABLE !  You may have seen this method elsewhere on the net when they then tell you to log in as an administrator....  Really....  When I've just Googled "I've been dumb and forgotten to activate my admin account"...  You're telling me to fix it by logging on as administrator.... REALLY???

Here goes.

• Boot your machine into WinPE via F12 PXE or via removable media boot disk
• Hit F8 and bring up the CMD prompt
• Nav to C:\Windows\System32
• Enter the following commands:
• Ren magnify.exe magnify1.exe
• Ren cmd.exe magnify.exe
• Reboot your machine
• At login click the Ease of Access button at the bottom left of the screen – tick the box that says “Make items on the screen larger (Magnifier)” then click apply and if you’ve done everything correctly a command prompt will appear.
• Enter the following command:
• Net user administrator /active:yes
• This activates the administrator account
• Net user administrator 123
• (This is telling the administrator account to use a password of 123)
• Try logging on!!!
• Don't forget to go and rename magnify.exe to cmd.exe and magnify1.exe to mangnify.exe

2 more armed forces hits today!

Great to see that Pheasant Plucker is getting hits from Armed Forces techs!

Hope it helps you lads and lasses out there :)

DN