Purchase of Boclean

[pepim]

I want to buy BoClean, but I don't have a creditcard, does anybody know how I can buy it anyway?

[poirot]

I guess they might find an alternative way.
Just contact www.digitalriver.com asking them about this and specify
you want to purchase BOClean, they should reply in due order.

[snowbound]

-{ Quote: "I guess they might find an alternative way.
Just contact www.digitalriver.com asking them about this and specify
you want to purchase BOClean, they should reply in due order." }-
Looks like they do except payment alternatives to credit cards,

http://www.digitalriver.com/dr/sat5/ec_main.entry11?sp=10340&pn=1#q2

-{ Quote: "Can I order without a credit card?

In addition to Credit Cards, we may accept Checks, Money Orders and Wire Transfers." }-




snowbound

[pepim]

-{ Quote: "Looks like they do except payment alternatives to credit cards,

http://www.digitalriver.com/dr/sat5/ec_main.entry11?sp=10340&pn=1#q2






snowbound" }-


I have a problem with the link you gave me Snowbound . There seems to be a cookieproblem, although I allowed all cookies for www.digitalriver.com. I also deleted the cookie file as suggested, but that didn’t make a difference.
I also tried using Internet Explorer (instead of Firefox) but that didn’t solve it either. What should I do?

[snowbound]

Sorry, i'm also having the same problem now as that link was fine when i posted it earlier....

Try this link,

http://www.nsclean.com/boclean.html

Select to purchase Boclean, you'll see your order, then click on Place Secure Order and you'll see the payment options there.

Edit- i changed the link to the main PSC site.



snowbound

[pepim]

-{ Quote: "
Try this link,

http://www.nsclean.com/boclean.html

Select to purchase Boclean, you'll see your order, then click on Place Secure Order and you'll see the payment options there.

Edit- i changed the link to the main PSC site.



snowbound" }-

Thanks for your help, I succeeded in ordering Boclean. :)

[snowbound]

Good show. :thumb:



snowbound

[Tommy]

-{ Quote: "Thanks for your help, I succeeded in ordering Boclean. :)" }-
Welcome to the club :thumb:

[pepim]

-{ Quote: "Welcome to the club :thumb:" }-
Thanks! I recently had a trojan on my pc :-\ and thought that I really needed a trojan hunter. Read information before which one to purchase and knew then, that when I would purchase one, it would be Boclean. So I did.;D

[the Tester]

Excellent choice purchasing BOClean!

[mercurie]

-{ Quote: "Thanks! I recently had a trojan on my pc :-\ and thought that I really needed a trojan hunter. Red information before which one to purchase and knew then, that when I would purchase one, it would be Boclean. So I did.;D" }-...and you will have no more trojans either or most other crap that infects a pc...:thumb: :thumb: I came to the exact conclusion my self several years ago. ;)

[poirot]

I arrived to the same conclusion with the same results.
I might even add that i suggested BOClean to a few friends who -from an informatic point of view- are really,REALLY ignorant and moreover they dont want to have any hassle or think about it: in two-three years time i very seldom heard about problems from them.
It seems the combination Router+Boclean can save even P2P or careless users.
Personally, before BOClean i had SpyBot and AdAware running medium or full steam, afterwards they have become almost useless.
For a long time BOClean was the only paid software i used or would recommend, i cant say no more about it, oh,yes, marvellous assistance and quick replies to any problem!

[pepim]

I am always very careful, my first infection in almost two years!

using:

*Nod32
*Outpost
*ProcessGuard
*WinPatrol
*SpywareGuard
*Adaware

A friend sent me something and I opened it without scanning, that’s why I got the trojan. I will test it again after installing Boclean.

[Tommy]

Please give feedback if BoClean intercepts it, or send me the bad boy by PM.

[pepim]

-{ Quote: "Please give feedback if BoClean intercepts it, or send me the bad boy by PM." }-

I will. :)

[poirot]

And remember that you can scan with BOClean single files even if BC has no scanner by opening with a right click the BC icon in systemtray and then grabbing the file you want to examine holding the left mouse and dragging it somewhere inside the Boclean window near the top then releasing it there:
you'll see a lightning speed rectangular window opening at the top of your monitor for just a second and then vanishing. If the file is ok nothing else is necessary. If its not ok i dont know what happens as it never happened to me ;D ,someone might elaborate on this,if you wish,but i guess that if the file was of an obnoxious origin BC would have already taken care of it.

[pepim]

-{ Quote: " If the file is ok nothing else is necessary. If its not ok i dont know what happens as it never happened to me ;D ,someone might elaborate on this,if you wish,but i guess that if the file was of an obnoxious origin BC would have already taken care of it." }-

The file is definitely not ok, although Nod32 (Ewido and AVG) thought it was. I'm very curious to see what happens when I have Boclean installed, but I have to wait untill my payment has arrived. Thanks. :)

[controler]

-{ Quote: "poirot


And remember that you can scan with BOClean single files even if BC has no scanner by opening with a right click the BC icon in systemtray and then grabbing the file you want to examine holding the left mouse and dragging it somewhere inside the Boclean window near the top hen releasing it there" }-

This is true only if Boclean has the sig for the file. I found recently Boclean obsolete file scan did not detect a file but it H's would have and the only way you will know is if you click on the file. I do not like the idea. Scanners are worthless as Kevin says but I would not have known the file was bad unless I clicked on it. But then again BoClean would have caught it if I did.



-{ Quote: "pepim


A friend sent me something and I opened it without scanning, that’s why I got the trojan. I will test it again after installing Boclean." }-


It is always better to have a security program installed PRIOR to an infection because most do not catch the infection unless you do, DUE to the new sneaky varities.

CONTROLER

[pepim]

-{ Quote: "
It is always better to have a security program installed PRIOR to an infection because most do not catch the infection unless you do, DUE to the new sneaky varities.

CONTROLER" }-

I don't quite understand your posting, sorry. :-[ I do have security programs installed and it was stupid of me to open what was sent to me. Although this friend didn't mean to sent something wrong to me.

[pepim]

@Controler You don't approve Boclean?

[pepim]

Foreign payments; how long does it take if you don't use a creditcard?

[strangequark]

-{ Quote: "And remember that you can scan with BOClean single files even if BC has no scanner by opening with a right click the BC icon in systemtray and then grabbing the file you want to examine holding the left mouse and dragging it somewhere inside the Boclean window near the top then releasing it there:
you'll see a lightning speed rectangular window opening at the top of your monitor for just a second and then vanishing. If the file is ok nothing else is necessary. If its not ok i dont know what happens as it never happened to me ;D ,someone might elaborate on this,if you wish,but i guess that if the file was of an obnoxious origin BC would have already taken care of it." }-

Just had to do a test out of curiosity to see what does happen when you drag a nasty onto the Boclean window. Dragged the old work horse test virus EICAR onto BC and the "lightning speed rectangular window" that poirot noted stays open displaying info of the file being scanned and a second little window opens, with in this case, the name of the nasty EICAR and pointing out that it's MALWARE and giving you the option to delete it.
@ pepim - money well spent !!

[snowbound]

-{ Quote: "Foreign payments; how long does it take if you don't use a creditcard?" }-
Looking at the site, and depending on which option u chose, it says anywhere from to 2 to 8 business days after your payment is received.



snowbound

[Longboard]

@strangequark
-{ Quote: "Just had to do a test out of curiosity to see what does happen when you drag a nasty onto the Boclean window. Dragged the old work horse test virus EICAR onto BC and the "lightning speed rectangular window" that poirot noted stays open displaying info of the file being scanned and a second little window opens, with in this case, the name of the nasty EICAR and pointing out that it's MALWARE and giving you the option to delete it.
@ pepim - money well spent !!" }-
Yes it's a cack to see it go: especially the "yank it" option lol
KMcA a great original. :D
Hard to find anyone who would not give :thumb: to this purchase.

@Pepim
There are recent reports re very difficult mals around that may have slipped through your net :(

I'm sure you would have updated by now and rescanned?

Tell us what you found.

[KikiBibi]

-{ Quote: "@strangequark

Yes it's a cack to see it go: especially the "yank it" option lol
KMcA a great original. :D
Hard to find anyone who would not give :thumb: to this purchase.

@Pepim
There are recent reports re very difficult mals around that may have slipped through your net :(

I'm sure you would have updated by now and rescanned?

Tell us what you found." }-

When I saw the "yank it" option for the first time, I thought that was some malware. :D

[poirot]

Strangequark, thanks for your eicar experiment, now i know the proceedings of the 'after malware find' ,just in case.

[pepim]

-{ Quote: "Looking at the site, and depending on which option u chose, it says anywhere from to 2 to 8 business days after your payment is received.



snowbound" }-

Thanks for your information Snowbound :thumb: I’m not complaining, but pff ...


-{ Quote: "@strangequark

Yes it's a cack to see it go: especially the "yank it" option lol
KMcA a great original. :D
Hard to find anyone who would not give :thumb: to this purchase.

@Pepim
There are recent reports re very difficult mals around that may have slipped through your net :(

I'm sure you would have updated by now and rescanned?

Tell us what you found." }-

I don’t have this trojan anymore and my pc has been updated as always. The trojan was due to my stupidity but I kept the infected file, so as soon as I can use Boclean, I will test the file offcourse.

[Tommy]

-{ Quote: "I don’t have this trojan anymore and my pc has been updated as always. The trojan was due to my stupidity but I kept the infected file, so as soon as I can use Boclean, I will test the file offcourse." }-
I tested your bad file and Boclean found the TrojanHorse ' ZLOB78 Malware Variant' and removed it including all threads from memory.

BTW, where does Boclean saves the copy of the bad boys. I have activated this feature, but i can't find the copy anywhere.

[pepim]

-{ Quote: "I tested your bad file and Boclean found the TrojanHorse ' ZLOB78 Malware Variant' and removed it including all threads from memory.
" }-

Glad to see Boclean found it, I hope I once will experience the same. Sorry a little bit sarcastic.:-\

[Longboard]

@Tommy
Dontcha just love that BoClean :)
see attached: for me anyway

[controler]

Tommy

I think BoClean renames the file so that is is harmless untill you rename it back to an exe ect.

-{ Quote: "The second item on the left side is "Keep copy of trojan as evidence" and allows you to retain a copy of the most recently detected malware, safely disconnected from being operable, for further examination and study. The evidence copy will be named as "evidence.boc" and will be saved to your "My documents" folder or whatever location is specified for the report of malware activity and capture. If you choose to keep the evidence, please move it off your machine and onto a floppy as soon as you can to keep it from being renamed and used to reinfect your machine. It is also possible that another security program might detect it and cause undue panic. This is the reason why we default this to "off" in BOClean. " }-

[Longboard]

-{ Quote: "BTW, where does Boclean saves the copy of the bad boys. I have activated this feature, but i can't find the copy anywhere." }-
I have got to pay attention to the exact question :-[
( and remember every one here knows more that me :ouch: )

[pepim]

-{ Quote: "I have got to pay attention to the exact question :-[
( and remember every one here knows more that me :ouch: )" }-

Hm, I guess it's a joke ;D

[controler]

pepim

You were posted where the file is and that is renamed.
What more do you want?

con

[pepim]

-{ Quote: "pepim

You were posted where the file is and that is renamed.
What more do you want?

con" }-
Did I post something wrong? I haven't installed Boclean yet, still have some problems, but I don't quite understand your posting? I don't want to bother anybody, sorry if I did.:(

[Bubba]

-{ Quote: "Did I post something wrong?" }-We will take the position that as of yet no one has posted anything wrong and simply chalk it up to possible language barrier problem. We'll also await your purchase of Boclean and any further comments you might like to share about the product.

Bubba :lurking:

[pepim]

-{ Quote: "We will take the position that as of yet no one has posted anything wrong and simply chalk it up to possible language barrier problem. We'll also await your purchase of Boclean and any further comments you might like to share about the product.

Bubba :lurking:" }-

Ok I will do that Bubba, thanks :)

[mercurie]

-{ Quote: "Ok I will do that Bubba, thanks :)" }-:lurking: Always interested in the BOClean threads and postings...I'll watch for it... ;)

[controler]

pepim


Hello

I did not mean you said something wrong at all.
I do have BoClean and love it. You can buy one LIC and install it on all your home computers, even if you have 5. What I meant to say is that any scanner is only as good as it's definitions. In BoCleans case, you can still drag a file into it's open GUI but if BoClean does not have a signature for that nasty file, BoClean will not detect it. BoClean will however detect the file with heuristics if you actually click on the file. I am not talking an ICAR test file either. I am talking an unknown nasty.
One of the reasons BoClean is so good is it works as a memory scanner, which means if the nasty is packed with some program it usually must unpack itself in memory before it can do it's damage.
I have heard rumor of a nasty that can stay packed in memory and unpack in memory on the fly. I don't know if this is true or not.
AS far as i have seen, you can't find better support for a security program. BoCleans support is the best as far as I am concerned.

Have you already submitted your file to Virus Total or Jotties?
Those two sites have become very popular this past year the scanners on those sites can many times at least show you that something looks fishy.
Another great idea is that most computers come with some form of restore from disk software these days. Which is better then Microsoft's restore program.
I think it is a rare day to become infected with something with Process Guard & NOD32 installed as you have. NOD & KAV are two of the finest Av's in the world in my opion. PG isn't really for the home user at this point it still requires some knowledge of the operating system and an understanding on what you are clicking yes or no to. Making a program as simple to use as possible for the home user is what most security vender's try to accomplish these days.
BoClean was designed this way from day one. Make it simple for any home or office user and still powerful.

What I meant to say about having security software installed prior to becoming infected was only that some nasties won't be detected by the security software if they were installed first due to taking over the operating system at the kernel level.
If by chance your infection does turn out to be a rootkit, I am sad to say the only way to make sure you are OK is to reformat your hard drive. I know most do not like to hear it and it sounds worse for a typical non computer savvy home user even though it is not as tough to do as many think, mentioning restore software preinstalled on new HP, Dell ect computers.
Back in the day there were only two good re image programs, Ghost & Drive Image. Now days there are some very good ones which are very easy to use.
As the years go by you will see more & more "experts" here using a drive image type program because they now know of all the new drive by nasties
Built for one purpose, to steal your personal information for profit.
You just can not trust your patched browser 100 percent now days.
Any way sorry for rambling. I hope some of what i posted can be useful in some way.

controler

[pepim]

Hello controller,

Sorry for misunderstanding you and yes I did submit the file to Virus Total and Jotties.

-{ Quote: " BoClean will however detect the file with heuristics if you actually click on the file. I am not talking an ICAR test file either. I am talking an unknown nasty." }-

You really mean actually click on it? What happens when you do so?

-{ Quote: " I think it is a rare day to become infected with something with Process Guard & NOD32 installed as you have." }-

As for PG I can explain, I always disable PG when I want to install something and at that moment I had it disabled. (I thought the file was ok because a friend sent it to me) Nod32 noticed it after my pc was infected and the files were sent to Eset.
I followed the instructions of Blackspeare’s topic for the settings of Nod32, so that should be ok.

-{ Quote: " If by chance your infection does turn out to be a rootkit" }-
It was a trojan and my Hijackthis log appeared to be clean, so I don't think I have to reformat my hard drive.

-{ Quote: " I hope some of what i posted can be useful in some way." }-
Yes it has, thanks. :)

-{ Quote: ":lurking: Always interested in the BOClean threads and postings...I'll watch for it... ;) " }-

I tested the infected file by dragging it into the Boclean window (as poirot suggested), Boclean reacted immediately, I was very pleased to see that. :)
I didn’t dare actually click on the file, should I do so?

[controler]

I would not advise anyone to actualy click on the file since there are many
nasties not detected buy security products everyday. The rule of thumb is that by the time most software detects a nasty, it has been undetected for a few days prior.
Just googling ZLOB give a lot of results. here is an interesting site for removing ZLOB, SPysherrif ect.

http://www.zlob-removal.com.removal-instructions.com/

I am guessing the Virus Total NOD-32 missed it because they are not using advanced features of the scanner, same with Mcafee.
Before I would turn off Process Guard to install software, I would set it to learn. I personaly like to see what drivers are trying to install because you can always accept or deny them.

controler

[pepim]

-{ Quote: "

http://www.zlob-removal.com.removal-instructions.com/" }-
Thanks for the link.

-{ Quote: "I am guessing the Virus Total NOD-32 missed it because they are not using advanced features of the scanner, same with Mcafee. " }-

With Jotti the same, Nod missed it too.

~removed un-necessary jotti scan~

-{ Quote: "Before I would turn off Process Guard to install software, I would set it to learn. I personaly like to see what drivers are trying to install because you can always accept or deny them.

controler" }-

Ok thanks for the tip, I will do that next time.

[mercurie]

Yes, I agree with controler do not click on it. Let BOClean do its work and don't take such a risk. ;)

[pepim]

Uhm or can I click on it, looking at your wink? Russian roulette?:lurking:
I did click on it actually and BOclean was there again!:)

[john2g]

-{ Quote: "Just googling ZLOB give a lot of results. " }-

BOClean detects 622 variants of Zlob, as of yesterday's update!

[pepim]

Still have some problems. (I did get contamineted before purchasing Boclean, let that be clear!)

Strange things occur, I suddenly have an infected file in a map, that I have probably one year or so?
So I scanned it online with http://virusscan.jotti.org/
http://www.virustotal.com/en/indexf.html and I get very different results. Kapersky thinks it's ok with Jotti, but in Virustotal it gives a trojan.small.BOE.

What should I do? I'm worried. :-\

[trjam]

Ny question is, with some of the AV products detecting over 99 percent of trojans, based on IBKs test results, why do you need this added protection. Sounds like extra money spent by the consumer, for just another unneeded product of protection. Of course, I could be wrong so please enlighten me.

[snowbound]

-{ Quote: "Still have some problems. (I did get contamineted before purchasing Boclean, let that be clear!)

Strange things occur, I suddenly have an infected file in a map, that I have probably one year or so?
So I scanned it online with http://virusscan.jotti.org/
http://www.virustotal.com/en/indexf.html and I get very different results. Kapersky thinks it's ok with Jotti, but in Virustotal it gives a trojan.small.BOE.

What should I do? I'm worried. :-\" }-
Where is the infected file located?

If there is suspicious behaviour occurring on your system u could post a Hijackthis log over at this site,

http://gladiator-antivirus.com/forum/index.php?showtopic=10517

for analysis by the malware experts there.



snowbound

[BlueZannetti]

-{ Quote: "Ny question is, with some of the AV products detecting over 99 percent of trojans, based on IBKs test results, why do you need this added protection. Sounds like extra money spent by the consumer, for just another unneeded product of protection. Of course, I could be wrong so please enlighten me." }-It really depends on how any protective measures that you've already implemented function.

BOClean is a process memory scanner. Malware executables can be repacked and/or encrypted so that the daughter file bears little resemblence to the original parent (which had presumably been used to develop a detection signature). This is a very facile way to avoid signature detection of the file and basically extend the effective lifetime of a piece of malware. However, the underlying program has not changed and it will be converted in that parent form when loaded into memory to run. As a convenient reference point, think of a standard program vs an archive version of this program, for example a zip file. The two files look distinct, but are the same, particularly when viewed from the running executable in RAM. BOClean focuses on this piece of the puzzle.

That's it in a rough nutshell.

Blue

[trjam]

Thanks Blue.

[trjam]

Even though Blue, I have no idea what you said, it sounded good enough for me, so I bought it. It is a light little bugger.;)

[pepim]

-{ Quote: "Where is the infected file located?" }-

It was just a file on my D disk and only Kapersky thought it was something bad. I didn't need it so i deleted it. After scanning my pc everything seems to be fine. Thanks for your link.

[BlueZannetti]

-{ Quote: "Even though Blue, I have no idea what you said, it sounded good enough for me, so I bought it. It is a light little bugger.;)" }-trjam,

It is fairly light, and I really don't know what to say except the BOClean's approach appears fairly robust against some schemes to obscure the identity of malware and that's why I believe it is of potential value.

Support is always excellent, very timely, and I've never noted conflicts with anything I've ever tried alongside it.

Blue

[snowbound]

-{ Quote: "It was just a file on my D disk and only Kapersky thought it was something bad. I didn't need it so i deleted it. After scanning my pc everything seems to be fine. Thanks for your link." }-
You are welcome and good to see everything is as it should be. :)



snowbound

[Rilla927]

Hi everyone,

I have a question for everyone that's running BOClean:

Do you all have a file in Application Data under All Users BOC422.XVU 323KB?

I have mine set to "Keep Copy of Evidence" and at first thought this might be something BOClean caught, but then someone mentioned it would have a extension of evidence.txt. Just wanted to make sure it something I should delete or not.

Thanks,

Rilla927

[BlueZannetti]

-{ Quote: "Do you all have a file in Application Data under All Users BOC422.XVU 323KB?" }-Yes, that is the signature database file.

Blue

[MaB69]

-{ Quote: "Hi everyone,

I have a question for everyone that's running BOClean:

Do you all have a file in Application Data under All Users BOC422.XVU 323KB?

I have mine set to "Keep Copy of Evidence" and at first thought this might be something BOClean caught, but then someone mentioned it would have a extension of evidence.txt. Just wanted to make sure it something I should delete or not.

Thanks,

Rilla927" }-

Hi Rilla,

Everytime you update BoClean, this file is updated ( signature database)

[Rilla927]

@Blue, MaB69

Thanks for clarifying that for me. I wasn't sure.

So far I have never seen BOClean catch anything. I guess that's a good thing.

[BlueZannetti]

-{ Quote: "Thanks for clarifying that for me. I wasn't sure." }-No problem, I realize that a more expected location might be the within the Programs folder.
-{ Quote: "So far I have never seen BOClean catch anything. I guess that's a good thing." }-Yes, that is a good thing. BOClean will not catch anything unless whatever is placed before it has failed. Even if you are running BOClean alone with no other realtime coverage, caught malware should be a rather infrequent event unless you are out actively and specifically searching for malware and courting continuous exposure.

Blue

[skibow]

where is boclean rewards for catch any thing

[BlueZannetti]

-{ Quote: "where is boclean rewards for catch any thing" }-If you mean to ask why BOClean never appears to be a part of testing protocols, it's basically related to the fact that it is primarily a process memory only scanner with only a single file demand scan capability. To adequately test it, one would have to actually execute the malware files, as opposed to performing a straightforward demand scan on a malware library. Even for a small and therefore statistically questionable test, that would be an enormous amount of work.

Blue

[skibow]

Sir still show the peoples some thing that BoClean has been say to catch or stop a virus

[BlueZannetti]

-{ Quote: "Sir still show the peoples some thing that BoClean has been say to catch or stop a virus" }-All I can provide is my personal experience.

BOClean has worked. My son's PC had a current and working installation of KAV and it needed a bit of backup. This happened once. I'm satisfied. You can believe or disregard that anecdotal story at your discretion. As for the basic design philosophy of the product, I can appreciate the motivation behind it.

Blue

[skibow]

why isnt BoClean free to try for 30 days pay first that not very good sir

[BlueZannetti]

-{ Quote: "why isnt BoClean free to try for 30 days pay first that not very good sir" }-You seem to believe I am somehow connected to the company that produces BOClean. I'm not, I'm simply a customer. They also made the decision on how to market the product, as does any vendor. If you disagree with the approach of a vendor, look elsewhere.

Blue

[mercurie]

They will give your money back if not satisfied. I never asked for mine back. That Anti-malware protection has cost me less then $10 a year and I needed some help with some things when I first got my copy. I got great email support and learned a lot in the process about all my software security programs including BOClean. :)

I have no complaints :-X none. ;)

[strangequark]

-{ Quote: "They will give your money back if not satisfied. I never asked for mine back. " }-
I cant imagine why anyone would ask for a refund.
Hey Blue at least your being called 'sir' ;-)