[Jason_R0]

Kevin, just so that you are aware (incase it wasn't obvious last time I pointed it out), the way BOClean works isn't efficient. You shouldn't be calling ReadProcessMemory 1000's of times when you check for signatures in process memory.

Lots of security applications hook ReadProcessMemory and add a little processing time to these functions as you pointed out. The reason it is very obvious with BOClean is because you call these hooked functions too many times unnecessarily. Your method of checking for signatures is inefficient, regardless of the security programs installed. If you are interested in a better approach which is more efficient, you can email/pm me and I will give you a better alternative.

Using the word "ROOTKIT" to describe other commercial products is a bit harsh, as most people associate ROOTKITs with malicious behaviour. It would be like me calling BOClean a trojan or spyware because it does something similar to malware.