[HOME]may 6 2018

Windows Failed To Start Because Of RapportHades.sys

Sorry, problems with my camera, no screen shots available but I'll explain the problem and the solution that worked.

My Brother-in-law brought me his Windows 7 desktop it would not boot up. It would get to an error screen that suggested that a driver called RapportHades.sys was the culprit. Located at C:\Windows\System32\drivers\RapportHades.sys.


The computer would not start up in safe mode. So I went on-line to find out what this file, RapportHades.sys was about. From what I can find out it is a part of a security utility called Trusteer from IBM, that may of been downloaded from his banking website.

Because the computer wouldn't start up either normally or in safe mode that meant using a boot CD/DVD/Flashdrive of some kind. Basically, the easiest way to fix this problem was to boot of some media that allowed me to access and control the files on the hard drive. Certain files had to be deleted.

I didn't do that first. First I booted of a Windows install DVD and when it got to the option to press Install I clicked on the option to Repair your Computer in the lower corner of the Install box.

I let Windows run it's own repair option first but not really surprised it couldn't fix it. So when it was finished (by clicking on finish), at first it wanted me to send diagnostic info to Microsoft and I clicked no. When it got to the box that said Startup Repair could not detect a problem, I clicked on the blue letters towards the bottom of that box that said View advanced options for system recovery and support.

System restore was not active on this system so I couldn't use it but it was my first choice. Because the system wasn't booting up the next thing that entered my mind was fixing the Master Boot Record (MBR) so at the command prompt I typed the following hitting enter after every line.

bcdedit /export C:\BCD_Backup
bcd -s -h -r
c:\boot\bcd bcd.old

I also tried the /fixmbr and /fixboot options, neither worked.

Than I ran a scan to fix possible corrupted files:

sfc /scannow

And then checking the hard drive for errors:

chkdsk /r

Nothing worked. So online I went. I finally found out more info about this program from IBM called Trusteer with instructions how to manually remove it, but one problem, you had to be within Windows to do it. This is where your boot disk will come in handy. I booted of my CD and hunted down the following folders and files. I just renamed them by putting .old at the end, just in case it didn't work and I needed the original files.

Just high-light the folder or file and either press F2 on the keyboard to rename or Delete to delete. Rename, my first choice.

Remove or rename these folders:

Then you need to rename or remove these to files:

This did it. The system rebooted and started up normally again. It's better to rename than delete at first until everything gets going properly again then you can hunt the files down and delete them.