Wilders Security Forums  

Go Back   Wilders Security Forums > Software, Hardware and General Services > other software & services
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old October 12th, 2002, 01:28 PM
Phazor Phazor is offline
Regular Poster
 
Join Date: Jun 2002
Posts: 111
Default bhocop / bhodemon

Does anyone use either of these two programs. Thoughts comments on one verses the other. Which do you like best?
  #2  
Old October 12th, 2002, 01:45 PM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:bhocop / bhodemon

No comparison from me, I just use BHODemon.
I have recommended it a lot of times, never learned of anyone that it didnīt work. Itīs easy to use, free, small, fast and does what itīs supposed to do.
So it gets a http://www.plauder-smilies.de/happy/xyxthumbs.gif from me.

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #3  
Old October 12th, 2002, 02:14 PM
MickeyTheMan's Avatar
MickeyTheMan MickeyTheMan is offline
Global Moderator
 
Join Date: Feb 2002
Posts: 1,016
Default Re:bhocop / bhodemon

I've tested all 3: Bho Captor, Bho Cop, Bho Demon
BHO Demon wins hands down.
  #4  
Old October 12th, 2002, 06:15 PM
JacK's Avatar
JacK JacK is offline
Frequent Poster
 
Join Date: Jun 2002
Location: Belgium -Ličge
Posts: 737
Default Re:bhocop / bhodemon

Quote:
quoting: MickeyTheMan link=board=9;threadid=4164;start=0#27283 date=1034446496]
I've tested all 3: Bho Captor, Bho Cop, Bho Demon
BHO Demon wins hands down.

Hi MTM

I can second that

Rgds
  #5  
Old October 12th, 2002, 06:45 PM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

Well, as regards which of the two is the better, both do detect all BHOs you may have, so there's no difference.
in 'detection'.

It's not like an antivirus where you need a huge database, and regular updates.

BHOs are invariaby installed in the same Registry Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects, so as far as detecting them goes, it's not much of a feat.

However, I agree with everyone that BHODemon is the most informative of the two.
__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #6  
Old October 17th, 2002, 02:19 PM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

As for the BHO's themselves, I've been "collecting" them for some time, and this is what I've dug up till now.

The list often comes in handy when trying to identify a BHO.

A thank you to Andrew Clover, whose site provided some of the definitions for these BHOs and to http://www.cexx.org/ , a great site about "Adware, Spyware and other unwanted "malware", and how to remove them".

Listed BHO's are tagged X for certified spyware/foistware, or other malware, L for legitimate items, O for 'open to debate' and ? for BHOs of unknown status.

It is updated on a weekly basis, usually on Saturday.


NOTE: The List has moved, and can now be viewed at the following location:

http://castlecops.com/CLSID.html
__________________
Tony < > CLSID List - A Collection of Autostart Locations

Last edited by Bubba : November 1st, 2004 at 06:58 AM. Reason: new BHO list address
  #7  
Old October 17th, 2002, 03:16 PM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,461
Default Re:bhocop / bhodemon

Awesome, Tony!

regards,

paul
__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #8  
Old October 17th, 2002, 03:30 PM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

Thanks, Paul!

As I said, I'm a sucker for lists...

Any possibility to make this post into a sticky?

If no joy, I won't mind bumping it every time I update it, then delete the 'bump' post.



__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #9  
Old October 17th, 2002, 03:47 PM
Paul Wilders's Avatar
Paul Wilders Paul Wilders is offline
Administrator
 
Join Date: Jul 2001
Location: The Netherlands
Posts: 12,461
Default Re:bhocop / bhodemon

Quote:
Any possibility to make this post into a sticky?

There is . Keep them coming!

regards.

paul
__________________
01110010 01100101 01100111 01100001 01110010 01100100 01110011 00100000 01110000 01100001 01110101 01101100
  #10  
Old October 18th, 2002, 10:47 AM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

Thanks Paul!. Appreciate it!

The list has been updated with a few items, and every entry is now tagged as either foistware, legitimate, open to debate, or unknown status, at least as far as I could determine.

Any further information anyone might have about any of them is appreciated.

And I'm always interested in trading duplicates for new ones!

Cheers,
__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #11  
Old October 18th, 2002, 11:06 AM
Ghost
 
Posts: n/a
Default Re:bhocop / bhodemon

I notice that the DefinitiveSolutions link ( http://www.definitivesolutions.com/bholist.htm ) is no longer working.

That's bad enough - does anyone know whether development of the program is stopped dead as well? IOW, it's not going to be updated anymore?
  #12  
Old October 18th, 2002, 11:19 AM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:bhocop / bhodemon

As Tony stated the program only needs to "read" one registry entry, so there isn't much to update.
I suppose they gave up making a list, because Tony's was longer
The download page: http://www.definitivesolutions.com/bhodemon.htm
is in working order.

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #13  
Old October 18th, 2002, 11:46 AM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

Quote:
quoting: Ghost link=board=9;threadid=4164;start=0#27882 date=1034953585]
I notice that the DefinitiveSolutions link ( http://www.definitivesolutions.com/bholist.htm ) is no longer working.

That's bad enough - does anyone know whether development of the program is stopped dead as well? IOW, it's not going to be updated anymore?

Well, the list only contained 5 or 6 entries to begin with, so it wasn't very useful anyway.

And as for "development" of the program, IMHO, there isn't anything much to 'develop'.

As Pieter already confirmed, the app detects all Browser Helper Objects, which is what counts.






__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #14  
Old October 21st, 2002, 06:03 AM
Mike_Healan's Avatar
Mike_Healan Mike_Healan is offline
Spyware Expert
 
Join Date: Mar 2002
Location: USA
Posts: 302
Default Re:bhocop / bhodemon

Quote:
quoting: Ghost link=board=9;threadid=4164;start=0#27882 date=1034953585]
I notice that the DefinitiveSolutions link ( http://www.definitivesolutions.com/bholist.htm ) is no longer working.

That's bad enough - does anyone know whether development of the program is stopped dead as well? IOW, it's not going to be updated anymore?

He's basically stopped with it. He even offered to sell the rights to me at one point, but I wouldn't know what to do with it.
If his download page ever disappears, I've been mirroring it for months now.
http://www.spywareinfoforum.com/downloads/bhod/
__________________
www.spywareinfo.com
  #15  
Old October 22nd, 2002, 08:45 PM
freeatlast
 
Posts: n/a
Default Re:bhocop / bhodemon

hm.. I must dissagree!
how do you re-enable disabled BHO's with BhoDemon?

I use it only as a back up to view active bho's but BhoCop is still my all time favorite! may not be informative as the other but easy to use and shows me all bho's list, enabled and disabled! also the option top create different profiles gives greater testing tools. and easy to re aneble any on the fly
  #16  
Old October 23rd, 2002, 02:42 AM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:bhocop / bhodemon

Re-enable BHO's is done by running BHODemon.exe wich should give you a list of your BHO's, select the one you want to re-enable, hit the details button. You should see a window wich a short description of the BHO and the option to put a radio button in front of "Enabled - Allow this BHO to be loaded by your browser"
Selecting that one should do the trick.

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #17  
Old October 23rd, 2002, 02:46 AM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

Well, any BHO detector lists every single BHO, so there's no difference there.

They only enumerate the contents of one single registry key, so there's not much 'detecting' involved there...

I prefer BHO demon, because it gives better information about each bho.

And as for how to re-enable a bho with BHO Demon?

Well, I admit that's incredibly complicated, but why not just recheck them?

I have lingering doubts whether you've actually tried the application.

Cheers,


Attached Images
 
__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #18  
Old October 23rd, 2002, 05:00 AM
freeatlast
 
Posts: n/a
Default Re:bhocop / bhodemon

oppss
I think i know what happened..at the moment i'm using both Bhodemon and Bhocop so the disabled ones by Bhocop do not appear to exist in the list of Bhodemon..since they were not disabled there to begin with..Bhocop runs as a process in startup and quits, while controling the bho's. maybe ill disable and swith to the other. i still like the different profiles options though!
Thanks for enlightening me
  #19  
Old October 23rd, 2002, 05:26 AM
freeatlast
 
Posts: n/a
Default Re:bhocop / bhodemon

guess what?
you can put your linguering doubts to rest now, it worked!!!
re enabled all bho's in Bhocop, unticked it from startup and recreated my prefered list in demon.
Surprisingly so, i now have enabled and disabled ones listed.
Hm..but i must confess i like bhocop's interface so much better..no need to click to view more details, all i need is listed on one line-bho, version, path and CLSID
  #20  
Old October 23rd, 2002, 06:08 AM
freeatlast
 
Posts: n/a
Default Re:bhocop / bhodemon

Well well, just run the famous hijack this and it listed my entire bho's , active and inactive alike, with a bhodemon_disabled extension at the end of the ones i disabled. Whereas when bhocop is active, hijack this shows only enabled ones, and disabled ones appear do be non existant.

Conclusion? bhodemon renames the bho's without altering any reg key, as opposed to bhocop that alters the reg key by removing disabled entries from registry, and keeping them as stored configuration keys in separate backups.

hm..not much of a brain-data process in either, but since i'm an old gashion gal i chose to revert to my favorite cop
  #21  
Old November 4th, 2002, 07:48 PM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

I've just added links to articles on most of the BHO's listed.

I think it makes the list somewhat more informative
__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #22  
Old November 5th, 2002, 02:47 AM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:bhocop / bhodemon

Thnx Tony,

It's becoming quite a library
I noticed you listed Stardownloader as Legit. It might be, but I encountered it only once and that time it was causing trouble for the user.
Could have been a conflict (he was using DAP as well) or just a crummy programm. Your views?

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #23  
Old November 5th, 2002, 02:57 PM
TonyKlein's Avatar
TonyKlein TonyKlein is offline
Security Expert
 
Join Date: Feb 2002
Location: The Netherlands
Posts: 3,949
Default Re:bhocop / bhodemon

Hi Pieter,

It may have been causing trouble for the user, but any IE plugin could, given the "right" circumstances.

Or it could of course have been due to sloppy programming.

However, as far as I know, (and some of this is admittedly third hand information), it doesn't phone home, or do anything else of an objectionable nature.

__________________
Tony < > CLSID List - A Collection of Autostart Locations
  #24  
Old November 5th, 2002, 03:27 PM
Pieter_Arntz's Avatar
Pieter_Arntz Pieter_Arntz is offline
Spyware Veteran
 
Join Date: Apr 2002
Location: Netherlands
Posts: 12,718
Default Re:bhocop / bhodemon

Ok Tony, thnxs for the info.
No need going around accusing something until proven guilty

Regards,

Pieter
__________________
Regards,

Pieter
Itīs nice to be important, but itīs more important to be nice.

It's human to make mistakes. It's even more so to blame the computer for it.
  #25  
Old November 6th, 2002, 09:26 AM
Ghost
 
Posts: n/a
Default Re:bhocop / bhodemon

My concern with the program not being updated/devved anymore referred to the fact that the information links about the various BHO's wasn't being updated - not about the program itself not being updated. (Sorry I didn't make that clearer).

Tony - Why don't you get together with the author of BHODemon, take over the program dev, then simply add all your info to it?
 

Wilders Security Forums > Software, Hardware and General Services > other software & services « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 01:08 PM.


Powered by vBulletinŪ Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright Đ2002 - 2013, Wilders Security Forums