Ewido, BOClean: what does Ewido do that BOClean doesn't?

[brjoon1021]

I posted earlier asking which is the best AT program. That thread is still active... I still do not know which to pick, but judging by the fact that both have advocates, they must both be good.

One poster mentioned that Ewido does all that BOClean does plus other things. What other things? What does BOClean not have? This thread is in the same context as the other, I am looking for a real-time trojan scanner. I have BOClean on deman and A2 on demand at this point. My AV is Avast! and it might not be enough on its own; therefore, I am looking to supplement it.
Thanks,
B

[muf]

Ewido has a file scanner. In that you can perform a full scan of your hard drive for nasties. BOClean monitors your systems memory for active nasties. Ewido has this facility as well. The only thing you are getting with Ewido that BOClean doesn't have is the file scanner. BOClean will allow you to scan one file by dragging the file into the upper portion of the open BOClean menu. But BOClean is unable to perform a full system scan.

muf

[The Hammer]

-{ Quote: "I posted earlier asking which is the best AT program. That thread is still active... I still do not know which to pick, but judging by the fact that both have advocates, they must both be good.

One poster mentioned that Ewido does all that BOClean does plus other things. What other things? What does BOClean not have? This thread is in the same context as the other, I am looking for a real-time trojan scanner. I have BOClean on deman and A2 on demand at this point. My AV is Avast! and it might not be enough on its own; therefore, I am looking to supplement it.
Thanks,
B" }-Have you checked the BOClean web site main page? http://www.nsclean.com/boclean.html If yes, have you checked online support at the bottom of the main page. The main page explains the program and why they don't have a file scanner. The support page explains the program and philosophy behind it in greater detail including but not limited to installation. It uses less resources than Ewido. With BOClean fully installed you should be fine with Avast.

[5up3rn3wb]

I can tell you what Boclean can do that Ewido can't. Boclean will detect many different keyloggers that currently Ewido is still very poor at finding. See Fish25's comments in post #11 in this thread. http://www.wilderssecurity.com/showthread.php?t=95946
That's not to say Ewido is bad, but actually I like Ewido more than Boclean myself. Just make sure you have some good keylogger software if you use Ewido for the time being, until future versions of Ewido are realeased, and then the keylogger detection should be greatly improved from what Fish25 says.

[Don Pelotas]

-{ Quote: "I can tell you what Boclean can do that Ewido can't. Boclean will detect many different keyloggers that currently Ewido is still very poor at finding. See Fish25's comments in post #11 in this thread. http://www.wilderssecurity.com/showthread.php?t=95946
That's not to say Ewido is bad, but actually I like Ewido more than Boclean myself. Just make sure you have some good keylogger software if you use Ewido for the time being, until future versions of Ewido are realeased, and then the keylogger detection should be greatly improved from what Fish25 says." }-
Thats not what Fish25 is saying, he's saying the heuristics are more or less disabled regarding keyloggers, that does not mean they don't detect them via signatures, just like BOClean btw. :)

[-----]

-{ Quote: "Thats not what Fish25 is saying, he's saying the heuristics are more or less disabled regarding keyloggers, that does not mean they don't detect them via signatures, just like BOClean btw. :)" }-

True. But's Ewido's record for detecting commerical official keyloggers is also not exactly stellar.

[Don Pelotas]

-{ Quote: "True. But's Ewido's record for detecting commerical official keyloggers is also not exactly stellar." }-
I have no idea how it's detectionrate for keyloggers is, can you provide a link?

[controler]

Sometimes it gets tiring responding to the same old questions here at Wilders and at DSLReports.

Maybe what we need is a thread on all the old threads which talk about he same thing over and over again.

My advice to your current setup Avast-BoClean would be just add IceSword for now.



controler

[mercurie]

Fellow Creatures,
The question is valid. Why we started a new thread is unclear to me, but I got no problems with the question.

There are many good AVs but I was also looking for a good security program to plug the gaps that AVs traditionally missed. AVs have improved greatly in the Trojan area this to include keylogging.

However, after much research, several years ago I am speaking of now, I decided BoClean was a needed security App. to assist the AV and cover Trojans and keyloggers. I viewed these types of nasties as even worse then run of the mill Viri.

These evil programs that BoClean watches for steal data, ship in and ship out data and personals and passwords that can rob you of your wealth and destroy your family photos in truely destructive fashion. >:( BoClean's "father" is very quick to update against latest threats.

A security app. that gives me peace knowing it is real time scanning at all times. It has never let me down. It is worthy of your dollars. It is what I use it is all I need. what more can I say. ;)

[q1aqza]

and BOClean is the cheapest in total cost of ownership as there are no annual subscriptions to pay, and the license allows that it can be used on multiple home/family PCs.

You could always compliment BOClean with the free version of Ewido to do your full system scanning.

[Socio]

-{ Quote: "I have no idea how it's detectionrate for keyloggers is, can you provide a link?" }-

I am curious about that myself;

The Ewido site states is does provide protection from keyloggers:

Ewido (http://www.ewido.net/en/)

-{ Quote: "Trojans and Keyloggers:
No chance for thieves to steal your bank data and personal sensitive information by tapped Internet connections, remote controlled webcams or secret keyboard recordings.
" }-

With Ewido’s reputation I would assume it to be very powerful but would like to see something that shows how it stacks up against others like Boclean in this area.

[Acadia]

-{ Quote: "You could always compliment BOClean with the free version of Ewido to do your full system scanning." }-
Bingo. That says it all!

Acadia

[-----]

-{ Quote: "I have no idea how it's detectionrate for keyloggers is, can you provide a link?" }-

There were a few informal tests done here a few months ago. Add Hints by others including fish, And then there are my own internal tests which I do not care to share because they will be attacked by people not pleased with the results.

[mercurie]

-{ Quote: "and BOClean is the cheapest in total cost of ownership as there are no annual subscriptions to pay, and the license allows that it can be used on multiple home/family PCs.

You could always compliment BOClean with the free version of Ewido to do your full system scanning." }-Thank you for adding this very important forgotten (by me) point. Correct and it also was a decision factor in my selection also. ;)

[Paranoid2000]

-{ Quote: "You could always compliment BOClean with the free version of Ewido to do your full system scanning." }-BOClean gets enough compliments on this forum already... :)

[SimonCC]

Please forgive my ignorance, but for the life of me, I just cannot understand why anyone would pick BO Clean - which effectively only has a realtime scanner - over ewido which has both. I have read BO Cleans website and it does not really provide an adequate explanation as to why it does not provide a scanner; just seems like marketing talk. Ewido is not that much more expensive, its light, powerful and updates regularly (although I have has some update issues recently, which I am resolving).

I might be wrong here, but this hype over BO Clean does not seem warranted.

[Paranoid2000]

-{ Quote: "Please forgive my ignorance, but for the life of me, I just cannot understand why anyone would pick BO Clean - which effectively only has a realtime scanner - over ewido which has both." }-Memory scanners are better at malware detection than file scanners (which your anti-virus software should be doing anyway) and BOClean is a once-off purchase (Ewido requires annual renewal) which can be used on every computer in a household (Ewido requires multiple licences).

[SimonCC]

But Ewido has a memory scanner also, why not just have it all?

Ok, fair enough, it is a cheaper solution, bit im still not convinced its better.

S.

[Don Pelotas]

-{ Quote: "But Ewido has a memory scanner also, why not just have it all?

Ok, fair enough, it is a cheaper solution, bit im still not convinced its better.

S." }-
Because BOClean's developer detests filescanners and think they are useless, in some ways he is right, but nothing wrong with a little extra, i for example removed 4 trojans today with the scanner, the real-time monitor would of course have caught them when them when they would become active, but nice anyway.

BOClean will have a scanner in the next version btw, Kevin has bowed to user wishes.

Yes, Ewido does require annual fee's, but this could very well be why they will around a lot longer & stronger than some others, i think the days of a onetime payment is over if we want strong AT companies. :)

[The Hammer]

A2 has a file scanner and it's developer says it's pretty much a gimmic, and I'm not sure Kevin's opinion is much different and that's probably why he's been resisting.

[muf]

I've read many times that Kevin feels that file scanning is the job of an AV. Because many are very good at detecting trojans, any files you acquire can be scanned by your AV. But due to the way some trojan authors pack or password protect their trojans then it's sometimes impossible for the AV to see the trojan. Only when the trojan has been executed and is resident in memory can it be detected. This is where BOClean monitors. His take on it from what i read is that scanning should be left to the AV. That's why he's never seen the need for one. But from what i gather, the next version will have one. But only because of public demand. People have been going on at him to include a file scanner that he's finally given in and decided to provide one. Tbh, i agree that file scanning should be the job of an AV. But then that's my opinion. Others may feel the neccessity for having one on their AT of choice. Each to their own.

muf

[toploader]

-{ Quote: "
Yes, Ewido does require annual fee's, but this could very well be why they will around a lot longer & stronger than some others, i think the days of a onetime payment is over if we want strong AT companies. :)" }-

hi Don - speaking from the perspective of a single user - one of the factors in my purchasing decision is whether one has to constantly fork out filthy lucre on an annual basis. given the choice of two equally good scanners i would choose the cheapest (one time purchase) - if everyone else thought the same way the cheapest would survive and prosper as they would sell many more copies.

[tuatara]

As a licensed user of Boclean, i must say, that after using it together
with NOD32 and Kaspersky (1 AV at the time).
BOclean NEVER found a thing over the years, but NOD32 and Kaspersky always did.
BEFORE the file is executed it is already found by this AV's
so Boclean was very useless here.

When i start using Ewido and A2 Personal, it became clear that those really made a diffrence1
You can really use in addition to your AV!
And your (good) AV does not completely overlap those like they do with Boclean.
(it finds a lot more SORTS of malware, and have more and better ways
of finding those

But now i am testing with the Kaspersky Beta and i think this is really a step forward.

So for me personally, Boclean was a waste of money.
Another thing i must say, that it is a tool just like TDS was,
where the program itself did not change (at all/much?) over the years.
It is out-dated and don't buy it, because you could not try it!

Which i think is not a good sign, with the rapidly changing malware.

Conclusion:
I am very positive about 4: Nod32, Kaspersky,A2 Personal and Ewido
and very negative about 1: Boclean.

And important: i am a licensed user of all those products,
so i am not talking about a product that i have never used.
I've tested it for years!

[Blackcat]

-{ Quote: "Please forgive my ignorance, but for the life of me, I just cannot understand why anyone would pick BO Clean " }-
Take a look here (http://www.nsclean.com/trolist.html) at the "trojans" covered, particularly the number of CoolWebSearch variants it has in its database.

[tuatara]

Even the free AV's can detect those now...

[Don Pelotas]

-{ Quote: "hi Don - speaking from the perspective of a single user - one of the factors in my purchasing decision is whether one has to constantly fork out filthy lucre on an annual basis. given the choice of two equally good scanners i would choose the cheapest (one time purchase) - if everyone else thought the same way the cheapest would survive and prosper as they would sell many more copies." }-
Yes, i would prefer a onetime fee too, of course i would, i just don't think it's viable anymore with the amount of trojans having to be added daily, it's not like when BOClean, TDS & the Cleaner started the AT business with 30 something trojans a month (& thats probably a very high #), now 100-300 trojans & variants a day is not uncommon.

I honestly think that if we want effective AT companies capable of updating not only the signatures, but just as important in a fast moving environment, the program, then yearly fee's is probably going to be required. AT's costumerbase is a lot smaller than AV's (even the small AV companies).

So while i would of course prefer a onetime fee, i would much prefer a well maintained AT solution with a yearly fee. Just my 2 cents. :)

[Socio]

-{ Quote: "So while i would of course prefer a onetime fee, i would much prefer a well maintained AT solution with a yearly fee. Just my 2 cents. :)" }-

I agree,

Besides, if we were not paying a yearly fee for a lot of these products we would almost certainly be having to buy the new versions as they come out at probably a higher cost than the subscription anyway as we had to do in the post subscription era and still have to do with many software products.

[Gladd8tor]

Hi ... I am just a novice user but , I have been reading many post from this website , My question is who moderate the internet ( WWW ) ? Also why don't we have tough laws where there is jail time no matter what, if you are caught making any type of virus/trojan/malware or anything that causes harm to the internet or computers itself , I mean if you use a computer anywhere in the world which ever government/country it is , If they really want to locate your location they can find you , correct ? So why on earth are we not going into the right direction and set laws against this stuff ? And finding these people that do this sore of stuff , Make the laws so tough that you wouldn't consider to make any harmful stuff for computers/internet , Then we wouldn't have any needs for all these so call programs , It seem to me we are just allowing this bull to go on , where as we should be able to stop it at its track , I don't know but I have a strong feel the people that create this type garbage ( viruses/trojan/malware ) are probably the same people that create the programs to prevent them , I wouldn't be surprise to find out that the anit-virus comapnies are the ones that create also viruses ... Maybe its just me but , I would believe with the knowledge we have nowadays we would of stop this garbage at its track

Then again maybe its just me that doesn't understand how it all works but it sure sounds to stupid that we can find a better solution ....

BTW : This isn't to offend anyone , its just my thoughts