cancel
Showing results for 
Search instead for 
Did you mean: 
Last One
Level 1

Malware on QB Desktop Pro 2021

My Spectrum Security Suite has found this in my QB it was on all my computers and reported that it "can't handle this item" so it skipped it. Microsoft Security Scanner, Kaspersky, and Malwarebytes don't flag it.

 

Malware.W97M/Redcap.xejih
C:\Program Files (x86)\Intuit\QuickBooks 2021\Components\PConfig\Data1.cab\[2336] qb_timeoff_report.xlt - Skipped
Malware.W97M/Redcap.xejih
F:\Program Files (x86)\Intuit\QuickBooks 2021\Components\PConfig\Data1.cab\[2336] qb_timeoff_report.xlt - Skipped

 

I took all the computers to an IT service for Malware testing and removal.

 

They said it was "dormant" and it was best to leave it alone. It still made me nervous so I removed QB from the computers that I wasn't using QB on and the Spectrum Security Suite Scans immediately started coming back clean.

 

Has anyone seen this before?

Solved
Best answer March 18, 2024

Best Answers
BigRedConsulting
Community Champion

Malware on QB Desktop Pro 2021

It's likely a false positive. They're relatively common.

View solution in original post

Irene R
QuickBooks Team

Malware on QB Desktop Pro 2021

Welcome to the Community, the Last one. 

 

Let's perform some steps to help solve the issue you're currently facing in your QuickBooks Desktop account. 

 

Let's start by downloading and installing the QuickBooks Tool Hub that helps you fix common errors. Ensure that your QuickBooks is ready before using it.

 

  1. Download the most recent version of the QuickBooks Tool Hub (1.6.0.3). Save the file somewhere you can easily find it
  2. Open the file you've downloaded. 
  3.  Complete the on-screen steps to install and agree with these terms.
  4.  Double-click the icon on your Windows desktop to start a tool hub as soon as installation is complete.

 

Next, we have to run the Run QuickBooks File Doctor. You can do that by following the steps below:

 

  1. In the tool hub, select Company File Issues.
  2. You can run the QuickBooks File Doctor program by selecting it. The opening of the file doctor will take up to one minute. If the QuickBooks File Doctor won't open, search for QuickBooks Desktop File Doc and open it manually.
  3. Choose your company file from the dropdown menu in QuickBooks File Doctor. If you don’t see your file, you can use Browse and search to find your file.
  4. Select Check your file and network, then hit Continue.
  5. Type in your QuickBooks admin password and then select Next.

 

The duration of the scan depends on the size of the file. In most cases, it may take up to five minutes or more. Open QuickBooks and your company file as soon as the scan is completed.

 

If you still receive an error message or can access your company file, let's configure your firewall manually. 

 

Here's how:

 

  1. Open the Windows Start menu.
  2. Open Windows Firewall by entering "Windows Firewall" in your search box.
  3. Choose Advanced Settings.
  4. Right-click Inbound Rules, then select New Rule.
  5. Pick Port, then select Next.
  6. Ensure that TCP is selected.
  7. In the Specific local ports field, enter the specific ports needed for your QuickBooks year version:
  • QuickBooks Desktop 2020 and later: 8019, XXXXX.
  • QuickBooks Desktop 2019: 8019, XXXXX.
  • QuickBooks Desktop 2018: 8019, 56728, 55378-55382.
  • QuickBooks Desktop 2017: 8019, 56727, 55373-55377.

 

Know that, QuickBooks Desktop 2019, 2020, and the recent versions use dynamic ports. During installation, there are specified firewall ports available. It ensures the QBDT gets exclusive use of their given ports.

 

To know how to get dynamic ports, I highly suggest reading this article and more about the steps I have laid out above: Set up firewall and security settings for QuickBooks Desktop. 

 

Please let me know if you're having trouble setting up Windows Firewall and Security in QuickBooks Desktop. The community we'll be here if you need further assistance. 

View solution in original post

4Gal
Level 11

Malware on QB Desktop Pro 2021

You should only use endpoint security solutions certified by AVTest. The more reliable a solution is, the fewer false flags you will get.

View solution in original post

3 Comments 3
BigRedConsulting
Community Champion

Malware on QB Desktop Pro 2021

It's likely a false positive. They're relatively common.

Irene R
QuickBooks Team

Malware on QB Desktop Pro 2021

Welcome to the Community, the Last one. 

 

Let's perform some steps to help solve the issue you're currently facing in your QuickBooks Desktop account. 

 

Let's start by downloading and installing the QuickBooks Tool Hub that helps you fix common errors. Ensure that your QuickBooks is ready before using it.

 

  1. Download the most recent version of the QuickBooks Tool Hub (1.6.0.3). Save the file somewhere you can easily find it
  2. Open the file you've downloaded. 
  3.  Complete the on-screen steps to install and agree with these terms.
  4.  Double-click the icon on your Windows desktop to start a tool hub as soon as installation is complete.

 

Next, we have to run the Run QuickBooks File Doctor. You can do that by following the steps below:

 

  1. In the tool hub, select Company File Issues.
  2. You can run the QuickBooks File Doctor program by selecting it. The opening of the file doctor will take up to one minute. If the QuickBooks File Doctor won't open, search for QuickBooks Desktop File Doc and open it manually.
  3. Choose your company file from the dropdown menu in QuickBooks File Doctor. If you don’t see your file, you can use Browse and search to find your file.
  4. Select Check your file and network, then hit Continue.
  5. Type in your QuickBooks admin password and then select Next.

 

The duration of the scan depends on the size of the file. In most cases, it may take up to five minutes or more. Open QuickBooks and your company file as soon as the scan is completed.

 

If you still receive an error message or can access your company file, let's configure your firewall manually. 

 

Here's how:

 

  1. Open the Windows Start menu.
  2. Open Windows Firewall by entering "Windows Firewall" in your search box.
  3. Choose Advanced Settings.
  4. Right-click Inbound Rules, then select New Rule.
  5. Pick Port, then select Next.
  6. Ensure that TCP is selected.
  7. In the Specific local ports field, enter the specific ports needed for your QuickBooks year version:
  • QuickBooks Desktop 2020 and later: 8019, XXXXX.
  • QuickBooks Desktop 2019: 8019, XXXXX.
  • QuickBooks Desktop 2018: 8019, 56728, 55378-55382.
  • QuickBooks Desktop 2017: 8019, 56727, 55373-55377.

 

Know that, QuickBooks Desktop 2019, 2020, and the recent versions use dynamic ports. During installation, there are specified firewall ports available. It ensures the QBDT gets exclusive use of their given ports.

 

To know how to get dynamic ports, I highly suggest reading this article and more about the steps I have laid out above: Set up firewall and security settings for QuickBooks Desktop. 

 

Please let me know if you're having trouble setting up Windows Firewall and Security in QuickBooks Desktop. The community we'll be here if you need further assistance. 

4Gal
Level 11

Malware on QB Desktop Pro 2021

You should only use endpoint security solutions certified by AVTest. The more reliable a solution is, the fewer false flags you will get.

Need to get in touch?

Contact us