BOCLean Update to 4.12 [Archive] - Wilders Security Forums

BlueZannetti

January 18th, 2005, 07:00 AM

-{ Quote: "Is there any official statement regarding the changes? I would love to update our BOClean Report (http://scheinsicherheit.sc.funpic.de/boclean.htm) which Kevin dislikes so much. Hopefully, it won't be necessary to uphold (m)any of our reservations." }-There's a brief statement over at DSL Reports (http://www.dslreports.com/forum/remark,12413718~mode=flat) in which Nancy notes that -{ Quote: "... A major part of the reason for 4.12 was external interference from other "security programs" that made it difficult for 4.11 to "see" running services..." }-Since a couple of posts above have noted very quick turnaround in the update request, I'll mention that my inbox is still empty and I replied to their e-mail notice within an hour of receiving it. PSC did say to allow up to 24 hours for a response - I'll be at the halfway point to this sometime early this morning. So don't feel left out just yet, there's a reasonable spread in the response times.

Blue

Infinity

January 18th, 2005, 07:08 AM

I looked at their changelog however not that clear to me.

what I do like is the fact that you can honeypot the malware Boclean finds. that is very interesting new feature that I would like to have...is it still that light as before?Never used it but sure is impressive all the good feedback regarding the effectiveness, resource usage and support.

hope someone can say something more regarding the plusses to their 4.11 version.

Thanx in advance

Inf.

NAMOR

January 18th, 2005, 09:17 AM

-{ Quote: "hope someone can say something more regarding the plusses to their 4.11 version." }-

The two things I have noticed about the new 4.12 version... 1. Boclean seem to load faster at boot up (memeory scanning seems faster). 2. The new version loads new defintions faster after download.

Infinity

January 18th, 2005, 09:34 AM

Thanx Namor

p.s. good to see you here:D

john2g

January 18th, 2005, 09:53 AM

More information here:

http://www.nsclean.com/supboc.html

Infinity

January 18th, 2005, 10:09 AM

Thanx John

clear to me now, this is a nice upgrade if you ask me.

msanto

January 18th, 2005, 10:50 AM

-{ Quote: "Since a couple of posts above have noted very quick turnaround in the update request, I'll mention that my inbox is still empty and I replied to their e-mail notice within an hour of receiving it. PSC did say to allow up to 24 hours for a response - I'll be at the halfway point to this sometime early this morning. So don't feel left out just yet, there's a reasonable spread in the response times.

Blue" }-

Hmmm ... me, too. I replied to their email at 6:40 PST last night and still nothing.

Stan999

January 18th, 2005, 10:56 AM

-{ Quote: "Hmmm ... me, too. I replied to their email at 6:40 PST last night and still nothing." }-

I requested the upgrade at 10:07 PM CST last night and just now received the upgrade.

FanJ

January 18th, 2005, 11:06 AM

Hi,

My guess is that Kevin and Nancy are now extremely busy with all the upgrade requests.
I can fully understand that all who haven't yet received their upgrade, would like to have it too as soon as possible.
But please, please give them a little bit more time.
Going through many thousands emails isn't that easy ;)
And please follow this:
===
To upgrade your BOClean to version 4.12 (excluding BOClean EDS customers), please email us at upgrade@nsclean.com (or link on the appropriate box above). In your request, please include any or all of the following: Your order number, email address at the time of purchase, full name and on a separate line, the correct email address to send to. If there is no address specified in the email, the file will be sent to the sender's address. Please be sure this address can accept file attachments, and that your software is set to accept attachments as well. It may not be able to be received at many web-based email services (i.e. hotmail, yahoo or juno). We now send ZIP files as a default. If you cannot receive or handle a ZIP, please request an EXE or renamed EXE (a "zero-zero-one""001") if you cannot receive or handle a ZIP. This will help to expedite a reply and get you your software quicker.

Please allow 24 hours to receive a reply. We'll get your software to you as quickly as possible, but it's still possible there will be delays. Being sure the file attachment will get through first will be the biggest help in getting your file faster, and will prevent delays due to resend requests.
===

richrf

January 18th, 2005, 11:10 AM

It's been about 24 hours for me so far, and no upgrade. I believe it is because I purchased BOClean from CompUSA. At the time, I did not realize that I would not receive the same level of service by purchasing from CompUSA. It retrospect, the savings wasn't worth it. But waiting longer for upgrades is not a major issue with me anymore, since AT software is no longer critical to my security since I installed KAV 4,.5 and ProcessGuard 3.0.

Rich

VikingStorm

January 18th, 2005, 11:54 AM

-{ Quote: "It's been about 24 hours for me so far, and no upgrade. I believe it is because I purchased BOClean from CompUSA. At the time, I did not realize that I would not receive the same level of service by purchasing from CompUSA. It retrospect, the savings wasn't worth it. But waiting longer for upgrades is not a major issue with me anymore, since AT software is no longer critical to my security since I installed KAV 4,.5 and ProcessGuard 3.0.

Rich" }-
Well, I bought it from Newegg, and my service is fine (that is, after everything was all sorted out a while ago when I signed up for the updates notification). Got mine within 10 minutes (of course, I replied right after I got the e-mail).

Firefighter

January 18th, 2005, 03:53 PM

I bought my BOClean via digitalriver.com almost a year ago. But when I tried to follow their instructions.
----------------------------------------------------------------------
To download your software, please follow these instructions:
Step 1: Go to http://www.findmyorder.com. Enter you order number and password and click submit.
Step 2: Right click on the "Begin HTTP Download" button.
Step 3: Choose "Save Target As"
Step 4: Choose where you would like to save your download. We recommend saving it to your Desktop. Click "Save".
Your Software will begin downloading at this time.
Step 5: Once your download is complete, you must install it. To easily install your software, go to where you saved
the Dowload and double click on the software icon. This will begin your installation process.
-----------------------------------------------------------------------

there wasn't even that "Begin HTTP Download" button. Why so complicated? I tried that with Firefox and Internet Explorer too, but no success.

Best regards,
Firefighter!

Firefighter

January 18th, 2005, 11:23 PM

Now it's OK. I got my BOClean copy to my email box.

Best regards,
Firefighter!

mercurie

January 19th, 2005, 12:05 AM

Fellow Creatures if extended download service is past two years will it still work. I got to the order screen showed confirmation of order July of 2002 even showed upgrade to 4.12 was current product, but nowhere to click except a place to get to BO's Home site.

I think I will just do email and hope Comcast will allow EXE or ZIP attachment.

Can anyone confirm that it made it through Comcast Spam filters? And offer help Please... :-\ Thanks

jon_fl

January 19th, 2005, 01:19 AM

richrf, I got BOClean from CompUSA too. I'm still waiting for my upgrade after 18 hours or so. Let me know when you get yours or what steps you are taking to get it. Thanks.

BlueZannetti

January 19th, 2005, 07:49 AM

-{ Quote: "Can anyone confirm that it made it through Comcast Spam filters? And offer help Please... :-\ Thanks" }-mercurie,

All I can say is that I haven't seen my copy yet :(, but I do have my webmail client set up to retain the screened mail and it is not there.

-{ Quote: "richrf, I got BOClean from CompUSA too. I'm still waiting for my upgrade after 18 hours or so. Let me know when you get yours or what steps you are taking to get it. Thanks." }-jon_fl,

I'm also a CompUSA based customer and well outside 24 hours at this point. I realize that PSC is probably busy, but it's really not supposed to be working this way. In the earlier discussion on support for reseller supplied copies (see here (http://www.dslreports.com/forum/remark,11626244~mode=flat)), Nancy did point out that it would take a minimum of couple of months to get into the PSC database (such is the cost of the lower reseller price). I'd hope that I'm beyond that issue since it's been a little more than 5 months at this point.

I will resend my request and point to this thread requesting comment.

Blue

Stan999

January 19th, 2005, 07:56 AM

-{ Quote: "richrf, I got BOClean from CompUSA too. I'm still waiting for my upgrade after 18 hours or so. Let me know when you get yours or what steps you are taking to get it. Thanks." }-

I also purchased BOCLean from CompUSA on July 28th. I forwarded the e-mail I had received from CompUSA, at the time of purchase, to upgrade@nsclean.com with the request for the upgrade and received the 4.12 zip file in about 12 hours.

msanto

January 19th, 2005, 09:02 AM

I still haven't gotten my copy via email yet, despite responding within an hour of their email to me. Also despite some people saying they got it within an hour of replying.

jon_fl

January 19th, 2005, 10:18 AM

I fowarded my CompUSA receipt to BOClean at the time of purchase in October. I received an email in reference to this upgrade, so I have to assume I'm in their database. I'm right at 24 hours.

controler

January 19th, 2005, 03:21 PM

Hello

I don't know about you but on my XP system, using the WIndows ZIP program, I have to right click on the
ZIP file and selectproperties, then unlock or my new folder will ot contain all the files ;)

Bruce

msanto

January 19th, 2005, 04:59 PM

-{ Quote: "I still haven't gotten my copy via email yet, despite responding within an hour of their email to me. Also despite some people saying they got it within an hour of replying." }-

Well, I emailed Kevin and got the update. I must admit, every time I've had to email them, Kevin and Nancy have given first rate customer service. Hope you guys see this! Thanks again!

BTW, it was @#$@#$ gmail blocking the EXE attachment ... and email.

BlueZannetti

January 19th, 2005, 05:07 PM

My copy arrived a little before 2:00 PM local time today, so things are getting through. Not sure if this was due to the second e-mail sent this morning or not. Guess they're busy today. Well, off to install.

Blue

FanJ

January 19th, 2005, 07:53 PM

It was already said before in this thread, but may I too advice all users of BOClean to read the Online Support page:
http://www.nsclean.com/supboc.html

The Configuration has been changed with this new version, so read it ! ;)

For example there are now two new options:
- Automatic cleanup of download folders
- Automatic cleanup of winsock connectivity

Cheers, Jan.

mercurie

January 19th, 2005, 08:12 PM

And a very interesting read it was last night. I know ::) lol it doesn't take much to excite me does it. IMHO it just shows how much effort Kevin really puts into his protection product. I have a relative who use to write tech manuals for Motorola :P really tough to read...not Kevin he speaks straight. Security configuration is important. I second your suggestion certainly worth reminding the membership here at the Wilders. ;)

Just got my Upgrade too. Followed Kevin's instructions loaded, installed zero problems. Several hours after emailing them for it.

BoClean 4.12=Trojan Defense :-*

richrf

January 20th, 2005, 12:45 AM

Hi all,

I sent a second email to NSClean and received my copy of 4.12 a couple of hours ago. It took 1/2 day to get the update after the second email. Total, a little under 3 days. Not good - not bad. Just a bit of a hassle.

Thanks for the link to the support url.

Rich

jon_fl

January 20th, 2005, 01:04 AM

I sent an email to Kevin and got mine in about 15 min. As it turned out, they sent it 3 times, but Outlook wasn't letting it go through as an exe file. I would have gotten it a lot sooner. So, I can't blame this on the BOClean crew. I'm very happy with their response. ;)

Blackcat

January 20th, 2005, 04:25 AM

-{ Quote: "The two things I have noticed about the new 4.12 version... 1. Boclean seem to load faster at boot up (memeory scanning seems faster). 2. The new version loads new defintions faster after download." }-
It's not a problem but I have found that the memory scan on bootup is more intensive than in the previous version, so startup times are slightly slower. Better protection I suppose.

I just had to become accustomed to the tray icon now changing red when you bring up the configuration screen. I thought there was a problem/trojan infection when I originally saw this new change.

FanJ

January 20th, 2005, 04:50 AM

-{ Quote: "
I just had to become accustomed to the tray icon now changing red when you bring up the configuration screen. I thought there was a problem/trojan infection when I originally saw this new change." }-

Hi Blackcat,

Yes, when you double left click the BOClean icon to open the button bar for example because you manually want to click the Update button or want to open the Configuration screen, then the icon goes red.

From the Help page, quotes:
As of BOClean 4.12, you will ONLY see the icon turn "blood red" IF a trojan has been caught and an alert is being triggered OR if you open the configuration screen or button bar, during which time BOClean goes "quiet" and you're unprotected. It will REMAIN red until all cleanup has completed, or when you close the button bar, whereupon BOClean will start its examination cycle again with the icon being blue until it has REscanned ALL memory and recalibrated itself.
---end quotes---

Blackcat

January 20th, 2005, 05:26 AM

Hi FanJ,

Yes I read the Help Page after I installed the new version.

In future I must remember to do it the other way round ;)

GHXU

January 21st, 2005, 01:43 AM

Does anybody know if using the built-in updater is the only way to ge BOClean updates now?

Tried (and failed) to do it my normal way yesterday (d/l'ing from their site) but only got an old 4.11 update.

Could be temporary because they're busy. Can't find any info one way or another on their site.

sick0

January 21st, 2005, 02:38 PM

for manual updates, go here.......

ftp://ftp.nsclean.com/pub/boc412.xvu

GHXU

January 21st, 2005, 04:05 PM

Thanks sick0... obliged!

Paranoid2000

January 23rd, 2005, 03:26 PM

-{ Quote: "It was already said before in this thread, but may I too advice all users of BOClean to read the Online Support page:
http://www.nsclean.com/supboc.html" }-The following section is well worth noting:

"When the "Automatic cleanup of winsock connectivity" checkbox is checked, upon a detection of a nasty, BOClean will completely delete the HOSTS file from its location in order to circumvent corruption of the data present. The HOSTS file if used, will have to be replaced with a good copy. For anyone using a HOSTS file, it is therefore recommended that a backup copy be kept in order to replace the original if "file not found." This function ALSO removes any settings that are placed into the "ZONES" registry keys for "Domains," "Ranges" and "Protocol Defaults settings since these are often populated with redirects to bad places or worse."

quexx88

January 23rd, 2005, 06:20 PM

So, it will do that even upon detection of something like the TrojanHunter Trojan Simulator? Or LeakTest? That could be quite a headache.

muf

January 23rd, 2005, 06:43 PM

Headache? Haha, you are right about that!

I was wondering what had happened!!! I suddenly found my trusted and restricted sites emptied. I wasn't sure if something had attacked me or some corruption had occured. But now i remember that once i install BOClean 4.12 i downloaded the leaktest file and ran it as a test to make sure BOClean was working ok. So now i know it was BOClean that deleted them. That was a major pain in the ass i'll tell you. Fortunately i had a HijackThis log which contained all my trusted sites. My restricted sites were generated from SpywareBlaster and Spybots immunize feature. I just re-enabled them. But it wasn't funny. No, not at all...

muf

quexx88

January 23rd, 2005, 06:48 PM

:o . Oops.

FanJ

January 23rd, 2005, 09:45 PM

That was one of the reasons I adviced to read the Online Support page ;)

(BTW: Hostess will also allow you quickly to get your HOSTS file back, in case you use Hostess to manage your HOSTS file).

You SHOULD have a close look at your system in case BOClean, or whatever scanner, gives you an alert ;)

And hmmm, OK it's only me again ;), you should have some kind of file integrity checker, that includes your HOSTS file in its database, to give you some kind of alert when you run it.

Cheers, Jan.

Paranoid2000

January 24th, 2005, 02:11 AM

Deleting the Hosts file and security zone data in the event of any malware detection seems a questionable action that would cause more problems for those security-conscious users that use these features heavily - a better option would surely be for BOClean to make a "known good" backup copy of both (with user verification of the contents) and to restore these copies instead.

This feature will be more of a problem for corporate and company users so maybe there will be a better approach in 4.13 - or 4.12.003.

Visiting

January 24th, 2005, 07:42 AM

for manual updates, go here.......

ftp://ftp.nsclean.com/pub/boc412.xvu

---------------------

Does this update the program to ver 02 or is this the defs update you're speaking of. If it's the program update, do you rename this file after downloading it to a .exe file?

Confused???

msanto

January 24th, 2005, 09:17 AM

-{ Quote: "for manual updates, go here.......

ftp://ftp.nsclean.com/pub/boc412.xvu

---------------------

Does this update the program to ver 02 or is this the defs update you're speaking of. If it's the program update, do you rename this file after downloading it to a .exe file?

Confused???" }-

That's the definitions file.

msanto

January 24th, 2005, 09:19 AM

Hmmm ... reading NSClean's email this morning I see that BOClean was updated to 4.12.02 on Friday 1/21. Unfortunately for me I got my copy on 1/19 (4.12.01). I don't recall seeing a notification to update my copy again, so I emailed Kevin and support.

Nancy_McAleavey

January 26th, 2005, 04:04 PM

-{ Quote: "Deleting the Hosts file and security zone data in the event of any malware detection seems a questionable action that would cause more problems for those security-conscious users that use these features heavily - a better option would surely be for BOClean to make a "known good" backup copy of both (with user verification of the contents) and to restore these copies instead.

This feature will be more of a problem for corporate and company users so maybe there will be a better approach in 4.13 - or 4.12.003." }-

These options were added to this version owing to experience with the latest in malware corrupting the winsock "Layered Service Provider" (or "LSP") stack as well as the winsock itself. In addition, numerous malware tampers with security permissions and profiles, and populates a HOSTS file with redirects which prevent users from getting to their antivirus or other important locations. If you find it's a problem, either turn them off or make a known good backup to restore the HOSTS file if you use it.

As to settings that are placed into the "ZONES" registry keys for "Domains," "Ranges" and "Protocol Defaults" we clean these as well since these are often populated with redirects to bad places or worse, and are not places the *average* user would (or should) venture into. That's why we handle those as well. They are intended to prevent malware hijacks from "reappearing".

Please read the support pages and decide if you wish to use these features.