Non-stickiness of "Allow" for Quicken Online Backup

[Guest]

Every night my system is set up to use Quicken Online Backup to provide
offsite support for my financial files. And every night Windows Defender
raises a question as to whether I want to permit QOB to access the Internet.
Every night I confirm "Allow". But the same request is always there again
the next night.

Clearly, for some reason Defender is not accepting my request to Allow QOB,
even though it seems to work just fine for everything else. Any ideas on how
to get Defender to accept my request? I can't find any means in the program
to manually add QOB to the allowed programs.

 

[Guest]

i open onecare, click 'view or change settings" on the left, then select
"firewall" and click "advanced settings" , then scroll down till you find
your program and select "allow" .

Or open defender and click the dropdown arrow next to the question mark and
choose "search" ,then select "contents" and open the "how to use windows
defender" folder. Then open the seventh file " add or remove items from the
windows defender allowed list"

hope that helps

 

[Guest]

Or open defender and click the dropdown arrow next to the question mark and
choose "search" ,then select "contents" and open the "how to use windows
defender" folder. Then open the seventh file " add or remove items from the
windows defender allowed list"

This doesn't work for me. During the course of the hundreds of times it has
spuriously alerted me to the suspicious behaviour of the AOL driver ATWPKT2,
on no occasion has it ever given me an option to allow or disallow the
action. It just allows it every time, but goes on and on notifying me, every
time I start AOL. I can tell it NOT to notify me - but then it logs the alert
in history instead, and, worse, starts creating zillions of pointless
checkpoints.

 

[Guest]

have you seen this page
http://windowshelp.microsoft.com/Windows/en-US/Help/5d42c151-d187-4eb5-a4a3-8cf163e1b78d1033.mspx

In "tools/options" you can set the program to ignore certain things. Also
you can switch off real time scanning so that it only scans when you want it
to

 

[Guest]

have you seen this page
http://windowshelp.microsoft.com/Windows/en-US/Help/5d42c151-d187-4eb5-a4a3-8cf163e1b78d1033.mspx

This doesn't address the problem. As I explained, Defender flags up a
notification bubble but never offers me the opportunity to 'allow' the
program. It isn't a dialogue. It's a Defender monologue.

In "tools/options" you can set the program to ignore certain things. Also
you can switch off real time scanning so that it only scans when you want it
to

Well, these is an issue I've been discussing here for a few weeks now.
Telling Defender to ignore certain files when it runs a scan (as you suggest
here) addresses a completely different issue, and doesn't affect Defender's
wish to alert in real time when a program does something it thinks is
supsicious.

I've had real time protection disabled for a while, and have only recently
turned it back on again one it was clear how to stop the multiple checkpoint
problem. But in truth there are several distinct issues here:
(1) false alerts about the behaviour of certain benign programs
(2) the inability to tell Defender to ignore the actions of these benign
programs
(3) pointless notifications of changes that Defender ITSELF regularly makes
to itself
(4) the potentially disastrous 'crying wolf' effect of these pointless
notifications (if real malware caused these changes instead, I would ignore
it)
(5) the weird bug associated with history logging, which is disabled when I
choose to be notified of alerts.
(6) the multiple checkpoints created as a result of spurious alerts.

That's a lot of bugs to sort out.....

 

[Guest]

have you tried the quicken forums for help:
http://www.quickenforums.com/index.jspa

 

[Guest]

have you tried the quicken forums for help:
http://www.quickenforums.com/index.jspa

It's not 'help' I need, now. I've found ways around all these issues thanks
to the folks on this board. What's needed now is for Microsoft to fix the
bugs.

 

[JRosenfeld]

It's not 'help' I need, now. I've found ways around all these issues
thanks to the folks on this board. What's needed now is for Microsoft
to fix the bugs.

I only know the stand alone beta 2 version of Windows Defender.
Unfortunately that does not have an always allow option when you get an
alert (as the help file says, not everything it describes is yet
implemented), nor, on the allowed items is there an option to add items
(since I cannot set it to allow anything permanently, I've never had an
entry there either).

However, I have found that by adding the full path and file name to the
Tools/Options/ do not scan box, WD does not give an alert nor interfere with
the running of the app (but it does create an event log). So that box is not
just for the scanning, despite its description..

 

[Guest]

However, I have found that by adding the full path and file name to the
Tools/Options/ do not scan box, WD does not give an alert nor interfere with
the running of the app (but it does create an event log). So that box is not
just for the scanning, despite its description..

I tried that, with regard to the AOL driver, ATWPKT2. It's true that I
didn't get any alerts (I had the two extra boxes unticked). But as you say,
it still enters the events in the history log and also creates a defender
checkpoint for each event. I wasn't willing to accept the multiple daily
checkpoints that ensued, so I ticked the two boxes and tolerate the spurious
alerts instead.

 

[JRosenfeld]

I tried that, with regard to the AOL driver, ATWPKT2. It's true that I
didn't get any alerts (I had the two extra boxes unticked). But as
you say, it still enters the events in the history log and also
creates a defender checkpoint for each event. I wasn't willing to
accept the multiple daily checkpoints that ensued, so I ticked the
two boxes and tolerate the spurious alerts instead.

Re WD checkpoints, I used the regedit fix posted somewhere on one or other
board

In the key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan

change the data of the value DisableRestorePoint from 0 to 1.

Since doing that I've not had any WD restore points, just the system
checkpoints (and of course occasionally others during install of some apps,
etc.)

 

[Guest]

Re WD checkpoints, I used the regedit fix posted somewhere on one or other
board

In the key

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Scan

change the data of the value DisableRestorePoint from 0 to 1.

Since doing that I've not had any WD restore points, just the system
checkpoints (and of course occasionally others during install of some apps,
etc.)

Yes, I know about that, thanks - but I don't feel competent to edit the
registry.

 

[Guest]

See my comments interspersed below:

i open onecare, click 'view or change settings" on the left, then select
"firewall" and click "advanced settings" , then scroll down till you find
your program and select "allow" .

I am not aware of any program on my system called "onecare." Am I missing
something?

Or open defender and click the dropdown arrow next to the question mark and
choose "search" ,then select "contents" and open the "how to use windows
defender" folder. Then open the seventh file " add or remove items from the
windows defender allowed list"

hope that helps

Unfortunately, it is no help at all. I have been through the help screens
several times. I am supposed to have the options "Always allow" and "Block",
but the choices I am given are simply "Allow" and "Ignore." (BTW, the
message I receive from Defender is that QOB wants to modify a couple of files
--which it has to in order to update its log of my backups. Defender is
asking whether I want to permit that for a program "not yet classified.")

I should also note that the "Allowed programs" screen should list all the
programs I have allowed and should give me the option to request returning
them to the scan with a "Remove" command. But, only one program is listed
(of the many I have "allowed") and I can check mark the file, but I see no
"Remove" command anywhere on the screen (although there is a "Clear" button).
Could that be what is being referred to?

I have followed some of the other advice given here, namely:

1. I have asked Quicken Online Backup Technical Support if they have an
advice. No response as yet. (I only contacted them last evening.)
2. I have added the QOB files listed in the scan to the "Do Not Scan" list.
3. I have unchecked the option to have Defender ask about changes made to
my computer by software that is allowed to run.

These latter two steps seem like a rather "kludgy" solution, but if it works
.. . . .