Secunia CSI7
Advisories
Research
Forums
Create Profile
Our Commitment
PSI
PSI API
CSI
OSI
xSI
Vulnerabilities
Programs
Open Discussions
My Threads
Create Thread
Statistics
About

Forum Thread: End of life program

You are currently viewing a forum thread in the Secunia Community Forum. Please note that opinions expressed here are not of Secunia but solely reflect those of the user who wrote it.

This thread was submitted in the following forum:
PSI

This thread has been marked as resolved.
fischmi End of life program
Member 12th Dec, 2013 03:51
Ranking: 0
Posts: 3
User Since: 12th Dec, 2013
System Score: N/A
Location: US
I had intuit Quicken 2011 which the PSI recognized as end of life. I then installed Intuit Quicken 2014 but PSI doesn't see it and its scan keeps saying I have an end of life program to correct (Quicken 2011). What to do? The PSI solution just takes me to the web site to buy the update which I've already done and installed.

---START---

Program Name:
Quicken 14.x

Security State:
End-of-Life

Download Link:
http://quicken.intuit.com/

Instances Found:
C:\Users\Mike\Documents\QUICKENW\qw.exe, version: 14.1.4.8

Last System Scan (localtime):
11. Dec 2013, 21:40

Operating System:
Microsoft Windows 7, Microsoft Windows 7

---END---

Post "RE: End of life program" has been selected as an answer.
mogs RE: End of life program
Expert Contributor 12th Dec, 2013 05:59
Score: 2265
Posts: 6,266
User Since: 22nd Apr 2009
System Score: 100%
Location: UK
@fischmi

Hello.
Qucken 2014 is already in the Secunia database here :-
http://secunia.com/advisories/product/48507/

If psi still finds the previous/older version...sometimes it tries to update it. You need to remove the older file/version, and then carry out a full scan.

Hope it helps.........regards......mogs.......

--
Was this reply relevant?
+1
-0

MickeyMouse456

RE: End of life program
[+]
This reply has been deleted
Maurice Joyce RE: End of life program
Handling Contributor 12th Dec, 2013 10:16
Score: 11626
Posts: 8,915
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Mike,
It looks like you have a copy of an old version EXE file in your documents folder.

It is harmless but better to remove it rather than create an Ignore Rule.

1. Open PSI>Scan results.

2. Against the programme marked as vulnerable is a + sign to the left of it.

3. Click that & it will reveal DETECTED INSTANCES.

4. Below that are two yellow folders. Click the one WITHOUT a red dot.

5. That will open Windows Explorer & you will be able to see the vulnerable file.
C:\Users\Mike\Documents\QUICKENW\qw.exe, version: 14.1.4.8

6. Right click on that file & select delete.

7. Carry out a full PSI scan & all should be in order.

In no way should this action prevent your latest version from working correctly but best not to purge your Recycle Bin of the file deleted until you are fully satisfied your new version of Quicken is running correctly with all your data intact.

If you prefer to create an Ignore Rule (not recommended) you can do this:

Open PSI>Scan results>expand any programme by clicking the "+" to the left of the programme entry.(C:\Users\Mike\Documents\QUICKENW\qw.exe, version: 14.1.4.8)

This will reveal DETECTED INSTANCES and below it two Yellow Folders. Click the folder with the RED dot which will create an Ignore Rule for that item.

Sorry about the extra update emails - I posted from my XP test PC in error.






--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
fischmi RE: End of life program
Member 13th Dec, 2013 04:03
Score: 0
Posts: 3
User Since: 12th Dec 2013
System Score: N/A
Location: US
The replies make perfect sense but clicking on the folder without the dot, as suggested, shows the reported file to be Quicken Launcher, original file name qw.exe. This is part of Quicken (for downloading updates), not the previous version of the program so if I delete it, Quicken presumably won't download updates. Why is creating an ignore rule not recommended in this instance?
Was this reply relevant?
+0
-0
Maurice Joyce RE: End of life program
Handling Contributor 13th Dec, 2013 10:15
Score: 11626
Posts: 8,915
User Since: 4th Jan 2009
System Score: N/A
Location: UK
Last edited on 13th Dec, 2013 10:19
If that is what it does by all means create an ignore rule - it looks to me like it is a launcher for an actual older version of Quicken rather than a standalone updater.

https://1ncuig.bn1304.livefilestore.com/y2pUo093TN...


It is EOL rather than vulnerable so if you prefer to keep it so be it.





--
Maurice

Windows 7 SP1 64 Bit OS
HP Intel Pentium i7
IE 11 for Windows 7 SP1
16GB RAM
Was this reply relevant?
+1
-0
fischmi RE: End of life program
Member 13th Dec, 2013 13:44
Score: 0
Posts: 3
User Since: 12th Dec 2013
System Score: N/A
Location: US
You are correct. I believe that Quicken Launcher version has been there since Quicken 2008. I'll delete it and, if that makes download stop working, I can always reinstall Quicken 2014 and do the ignore rule. Thanks very much, Maurice.
Was this reply relevant?
+0
-0

This thread has been marked as locked.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Reports
Webinars
Events
 About us
Careers
Memberships
Newsroom


 
© 2002-2014 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability