nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Microsoft Defender Antivirus sample submission request of a Quicken file.

JB_105

I don't know if this is the right place to post this but when I started Quicken just now I got a message from Microsoft Defender that:
"Microsoft Defender Antivirus would like to check the following files to see if they are safe" C:\ProgramData\Quicken\Inet\Common\patch\quickenPatch\w2940\quicken.2022r48.15.to2022r49.22.wyu
Never had this happen before. Any ideas?

Find more posts tagged with

Accepted answers

All comments

JB_105

So I updated Quicken and got a notice of an update available to install. r49.22. Just is odd that Microsoft Defender is suddenly suspicious of this process.

Dave1234

Just got the same message. Extremely unlikely that Quicken is actually propagating malware... perhaps somewhat likely that something during the patching process simply looks suspicious because of how it operates.

JB_105

Thanks. It helps to know I'm not the only one this may be happening to.

leishirsute

I got the same message and used the option in the message to report to Micrsoft that this is safe software in order to update Windows Defenders list.

Chris_QPW

To me this looks more like something is new in Windows Defender than in Quicken. As in, it checked that it is OK to send a file to them to check it out. I would suspect that most anti-virus software send files to their servers to check out without asking. This is probably the result of someone complaining about such, and Microsoft prompting you to make sure it is OK. You will notice that in no way did it actually say the file had a problem. Note I just got the same prompt, so I know that Windows Defender didn't find anything wrong with the file I let it send.

Steve Long Time User

I've seen the same request recently. r49.22 ??? A day or so later, Quicken was unable to reach the server for any requests. A day later, Quicken failed and claimed my subscription had expired. Restarting and relogging in was necessary to get Quicken subscription status back. Now it thinks my AMEX account has been deleted (CC-800), but it's not. And at the same time It wants to update Quicken to R48.18 HF3.
This seems quite out of band for Quicken. I'm surprised and confused. Something is amiss?

Chris_QPW

https://community.quicken.com/discussion/comment/20357218#Comment_20357218

I suspect your problems are directly related to what the Windows Defender prompt. I suggest that you post yours as a new question so that it gets the right visibility. Select New Post from the top of the page.

Steve Long Time User

Thanks @Chris_QPW for the suggestion. Much appreciated.
I think however this time, I just wanted to confirm seeing the same issue with MS Defender Antivirus as did JB_105 and add some comment on what also happened immediately following that event. In case others may have seen this activity. So I believe I'm in the right place.
As of 4/26, all is back to normal, and the update to R48.18 HF3 is completed.

UKR

https://community.quicken.com/discussion/comment/20358458#Comment_20358458

Is your system up-to-date on Antivirus definitions and/or other Windows System Updates?
Have you contacted Windows Support for assistance in this matter?

Chris_QPW

For what it's worth, I did the update today and didn't get this prompt from Windows Defender. I suspect that people that got this prompt earlier and sent the file to Microsoft resulted in it being put on the "whitelist" for future installs.

JB_105

I didn't get the prompt from the last Quicken update so I had kind of forgotten about this issue.
These notices seem to be occurring only since a recent update to the Windows Defender program.
I also sent the file to Microsoft the first time and this time as well. I may send a bug report to Microsoft for what it's worth.