Get 50% OFF QuickBooks for 3 months*

Buy now
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Work smarter and get more done with advanced tools that save you time. Discover QuickBooks Online Advanced.

Reply to message

View discussion in a popup

Replying to:
jumper-d-1981
Level 1

Reply to message

I am sorry.  This is unacceptable.  It is now very obvious to me that this is a known exploit, specifically if they know how to fix it, but still almost nothing is being said or actively done to prevent a exploit like this. 

Here is the facts.  I told Intuit about what I suspected to be a scam because the number came back as a known QB scam number.  Nothing else was listed.  I also told them that their "fix" made it worse when I was told to remove completely the program and all folders associated with it.  When I reinstalled instead of it only affecting one user it affected all users.  AND it prevents you from using the QB desktop.

SO I dug.  Found that in the Public user profile there is a folder in the documents called Windows(it is hidden fyi).  SO C:/users/public/public documents/windows

There are 6-10 files.  If you delete everything in that folder that you can the error goes away but there will be three files left.  Intuitdownloadmanager, newonsoft.json.dll and win32_api.dll

These files need to go away too.

here is another more precise explanation on reddit of all places.
https://www.reddit.com/r/QuickBooks/comments/wzzzg0/quickbooks_internal_pop_up_scam/
assuming the link is allowed.
Once those are removed you will want to check the start up items and look at their properties or file location, one of the Quickbooks items in start up points at that downloadmanager.exe so disable that, now you can remove the other files that were previously prevented.  you may have to stop any running instances of that download manager.

Now you have removed the entire "Windows" folder that contained those pesky devils.  NOW check your scheduled tasks.  Disable any task relating to that path.

I had 11 of them.

This should be about as thorough of a clean up as possible without a reinstallation of windows.




Need to get in touch?

Contact us