Proclaim disabled by Microsoft Defender

Is your Windows 10 installation completely up to date? Including the Windows Defender virus definition? I see some false positive reports for this trojan in various forum posts which were resolved by Windows Update.

If you're all up to date and still experiencing the issue I recommend completely uninstalling Proclaim via Add/Remove Programs, then downloading the latest version from http://proclaimonline.com/download

https://community.logos.com/discussion/comment/766537#Comment_766537

Did a system restore to just prior to the update. Checked virus definitions were fully up to date. Then opened Proclaim, was offered the update, downloaded and same result - disabled by Windows Defender.

Uninstalled Proclaim through the Control Panel. Downloaded fresh installation from the web site. Installed again, but exactly the same result - Trojan warning, disabled program.

https://community.logos.com/discussion/comment/766547#Comment_766547

I would expect Proclaim 1.30 to be marked as malicious for all Win 10 installs yet we cannot reproduce this in house. For the next troubleshooting step let's see if the previous version is also marked as malicious by Windows Defender on your machine. Please uninstall the current version via add/remove programs, then install the previous version from here https://downloads.logoscdn.com/Proclaim/Installer/1.29.0.0426/ProclaimSetup.exe

You'll need to be sure to skip the update prompt when starting the previous version.

https://community.logos.com/discussion/comment/766550#Comment_766550

I am experiencing exactly the same problem.. Uninstalled Proclaim and then install the previous version as instructed above. This version tries to load but reports an error and will not load either.

https://community.logos.com/discussion/comment/766570#Comment_766570

I am experiencing exactly the same problem.. Uninstalled Proclaim and then install the previous version as instructed above. This version tries to load but reports an error and will not load either.

Hello Rodney, could you please post the log file that is generated after trying to run the 1.29 version? http://support.proclaimonline.com/hc/en-us/articles/203763785-How-do-I-submit-log-files-

I'm unable to reproduce this issue currently, so we cannot be certain about exactly why Proclaim is being flagged as malware. For the time being, as long as the above files are both related to Proclaim.exe, selecting "Restore" should bypass this menu and allow Proclaim to run.

https://community.logos.com/discussion/comment/766550#Comment_766550

Just for information, I managed to install 1.29.0.0426 without a problem.

Dave Ham

https://community.logos.com/discussion/comment/766550#Comment_766550

I am also experiencing this problem. I am running Windows 7. Downloaded the update to version 1.3 and Windows defender kills it. Tried this a few times and even trying to get Windows Defender to ignore Proclaim but to no avail. I followed the advice to completely remove Proclaim and reinstall version 1.29 but that fails to run.

https://community.logos.com/discussion/comment/766631#Comment_766631

In order to get 1.29 to install after removing 1.30 I rebooted and manually had to delete everything in the AppData folder (which will be something like C:\Users\YourAccountName\AppData\Local\Proclaim.

Only after that could I get reinstall successfully.

https://community.logos.com/discussion/comment/766642#Comment_766642

In order to get 1.29 to install after removing 1.30 I rebooted and manually had to delete everything in the AppData folder (which will be something like C:\Users\YourAccountName\AppData\Local\Proclaim.

Only after that could I get reinstall successfully.

Depending on how far you get with version 1.30 you may need to remove the upgraded databases. Sounds like this is where you ended up Craig. A slightly less heavy handed approach is to paste the following path into Windows File Explorer

%LOCALAPPDATA%\Proclaim\Users

Then delete the file named UserManager.db

This will cause your data folder to be recreated but preserves the old copy, in case you find you're missing something (not synced) it's recoverable.

We're actively looking into the Windows Defender issue. As Peter mentioned we aren't able to reproduce internally and I can see touch points from hundreds of users running 1.30 on Windows 10. It may be related to some combination of the new Proclaim version and another application on the system.

Nick Ericson (Proclaim)

https://community.logos.com/discussion/comment/766649#Comment_766649

We have submitted a report to the Microsoft Defender team. Since we cannot reproduce this in house if you see this again would you paste the following information into this thread:

In your Microsoft security software, click on the History tab.
Click on All detected items.
Copy the name of the detection into this thread.

Along with:

In your Microsoft security software, click the arrow next to the Help button and then click About.
Select the definition information and press Ctrl+C.
Paste the information into this thread.

Hank Kuo

https://community.logos.com/discussion/comment/766870#Comment_766870

I am running into the same issue, in Windows Vista(!) SP2 32-bit and using Microsoft Security Essentials

Here's a screenshot of the MSE quarantine window

and here's my MSE info per Nick's request:

Antimalware Client Version: 4.8.204.0
Engine Version: 1.1.12101.0
Antivirus definition: 1.207.1168.0
Antispyware definition: 1.207.1168.0

Thanks,

Hank

https://community.logos.com/discussion/comment/767269#Comment_767269

My recommendation is to remove Proclaim.exe from the quarantined list.

If you don't want to do that you can uninstall the current version and install the previous version from https://downloads.logoscdn.com/Proclaim/Installer/1.29.0.0426/ProclaimSetup.exe You'll have to delete the UserManager.db file and sign back in in order to run the older version. This file can be found here %localappdata%\Proclaim\Users

I'm on my phone so I hope I got those paths correct. Please post back and let us know how it goes. I'll be monitoring the forums.

Nick Ericson (Proclaim)

https://community.logos.com/discussion/comment/767271#Comment_767271

If, after removing Proclaim from the quarantined list, it still does not run also see the information in this thread.

https://community.logos.com/forums/t/116823.aspx

You may be able to run the latest version directly from the install directory.

https://community.logos.com/discussion/comment/767272#Comment_767272

Just updated again (after church, obviously) - same problem.

Windows 10 PC. Windows Defender identifies the risk as:

Trojan:Win32/Bulta!rfn

Category: Trojan

Description: This program is dangerous and executes commands from an attacker.

Recommended action: Remove this software immediately.

Items:
file:C:\Users\Admin\AppData\Local\Proclaim\System\Proclaim.exe
file:C:\Users\Admin\AppData\Roaming\Microsoft\Installer\{C4E50890-2319-4410-999E-134B1C40CCFC}\Proclaim.exe.icon

Antimalware Client Version: 4.8.10240.16384
Engine Version: 1.1.12101.0
Antivirus definition: 1.207.1186.0
Antispyware definition: 1.207.1186.0
Network Inspection System Engine Version: 2.1.11804.0
Network Inspection System Definition Version: 115.22.0.0

Restoring Proclaim.exe within Defender does allow the program to run, although it doesn't have any shortcuts so needs to be run manually from the %localappdata%/proclaim/system folder.

Hope this helps find a solution.

https://community.logos.com/discussion/comment/766574#Comment_766574

71251.Proclaim.log

5277.ProclaimCrash.txt

https://community.logos.com/discussion/comment/767544#Comment_767544

71251.Proclaim.log

5277.ProclaimCrash.txt

Hello Rodney, this crash is happening because the new 1.30 version was able to run for long enough on your machine to upgrade the local databases. When you try to run the old version Proclaim does not know how to read the upgraded data. To work around this please delete the following file and restart Proclaim

C:\Users\Debra\AppData\Local\Proclaim\Users\UserManager.db

We're actively trying to sort out the Windows Defender issue as we'd really like people to run the latest version.

Richie Stockholm

https://community.logos.com/discussion/comment/767551#Comment_767551

Has this been resolved yet. My office staff are still reporting a problem. I had her opening the application using the exe file in the System1 folder since that wasn't being caught by Windows Defender, but I believe that has stopped working for her now too.

https://community.logos.com/discussion/comment/768528#Comment_768528

Richie, I've left a phone call with your office to set up an appointment to resolve this issue.

https://community.logos.com/discussion/comment/768528#Comment_768528

Same thing happened to us this afternoon. The fix stopped working

Richie Stockholm

https://community.logos.com/discussion/comment/768590#Comment_768590

Great, thanks!

https://community.logos.com/discussion/comment/768619#Comment_768619

Rodney, sorry to hear the fix is no longer working. Are you still having problems with the most recent version of Proclaim (1.30.0.714)? If so, we can remote in again to get it working.

https://community.logos.com/discussion/comment/769590#Comment_769590

Did a Windows 10 update, and a fresh install of Proclaim... looks like all is well! Thanks!

https://community.logos.com/discussion/comment/770201#Comment_770201

Did a Windows 10 update, and a fresh install of Proclaim... looks like all is well! Thanks!

Glad to hear it! Thanks for letting us know.

Dave Ham

https://community.logos.com/discussion/comment/770242#Comment_770242

My Pastor reinstalled Windows 7 on his laptop and then the latest version of Proclaim and that worked ok. I had to completely remove the new version from Win7 as described in this forum and then reinstall the older version of Proclaim and that worked. So I'm currently stuck with not being able to upgrade.