Comodo BOClean 4.26 out now

Discussion in 'other anti-trojan software' started by Rednose!, Apr 15, 2008.

Thread Status:
Not open for further replies.
  1. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    Yup of course!

    BOC426.exe -> 11-12 mb
    BOCore.exe -> 100-200 kb

    :)
     
  2. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    thanks!
     
  3. jrx10

    jrx10 Registered Member

    Joined:
    Jan 26, 2007
    Posts:
    85
    I don't know about BoClean. I've been using 4.25 for a while. I removed it & installed 4.26 a couple of days ago. BoClean 4.25 never caught one thing, which I guess is good. Yesterday the KAV file AV caught something called trojan downloader JS Remora. I don't know if KAV was just faster to detect it and if BoClean would've got it as well. However with as much CPU time as BoClean uses, I'm beginning to wonder if I should even be using BoClean with KAV on board. From everything I've read about BoClean it's supposedly a good real-time anti-malware.
    BTW, I don't know what the deal is with WSF. But for the last 2 or 3 days while visiting here, I get an outbound attempt to connect from FX.exe to Mozilla at 63.245.223.55 on 443. Just got another attempt PU allow/disallow. I suppose the next time I'll have to open up wireshark and then allow it, to see what the story with this outbound is. ​
     
    Last edited: May 1, 2008
  4. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    More important is if that file ever got executed. If it didn't, Boclean won't do anything even if it has the signature.
    More important still is how you got that file :p
     
  5. jrx10

    jrx10 Registered Member

    Joined:
    Jan 26, 2007
    Posts:
    85
    Oh, I don't know, KAV shows ""All threats have been effectively Neutralized, and show it deleted in the report, whatever that means. How can you tell? What other scans besides a KAV scan should you run when a trojan is detected? I suppose later tonight, I'll mount a clean OS image back just to "nuke 'em from orbit, it's the only way to be sure", or at least it'll make me feel better. I should've had KAV's Web-AV on as I was following links, but WEB-AV doesn't play well with my firewall (or firewalls depending on which OS/FW image is loaded), and I forget to turn it back on.
    Then what does BoClean do? Perhaps I don't understand what BoClean should be doing. Will BoClean neutralize any trojans or other malware threats before they ""execute? or does BoClean just let you know that you've got a problem---deal with it? thx.
     
    Last edited: May 1, 2008
  6. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    BOClean just waits until the trojan loads itself in the memory (in plain english, it waits that the trojan is executed). If it is in its database, it stops execution and asks if you want to delete the file.

    But if the trojan isn't executed, it does nothing.
     
  7. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    3,355
    Location:
    Location Unknown
    On my system uses nothing close to that. It is very heavy. I'm wondering if there's something wrong.
     

    Attached Files:

  8. jrx10

    jrx10 Registered Member

    Joined:
    Jan 26, 2007
    Posts:
    85
    Thx, I guess that KAV didn't let it execute then as BoClean probably has that (*&^%* trojan's signature in it's database as I had just DLed the BoClean 4.26's new defs the day before. I like BoClean just being there, as it's GUI is simple and it just runs in the background, as I read someone's post somewhere that he'd had BoClean on his computer for over a year without a peep, then all of a sudden it popped up with a nasty catch.
     
  9. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    Yeah. I had BOClean along with NOD32, and at least 3 times BOClean jumped with NOD don't even knowing that something happened. It's a nice little backup weapon.
     
  10. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    I don't think there's sth wrong, your system just deals with BOClean this way or there's some kind of miscalculation.

    I once would use AVG 7.5 which according to many is very light, but on my system it came nothing smaller of 100 mb at minimum!
     
  11. Gizzy

    Gizzy Registered Member

    Joined:
    Oct 5, 2007
    Posts:
    149
    Location:
    NJ, USA
    Actually here's the meaning to the colors

    http://forums.comodo.com/empty-t8426.0.html

     
  12. Edwin024

    Edwin024 Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    1,008
    BOC426.exe 16.300kB
    BOCore 744kB

    on Vista Ultimate 64
     
  13. bman412

    bman412 Registered Member

    Joined:
    Mar 4, 2008
    Posts:
    261
    How about the CPU time for BOclean?
     
  14. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    I've read somewhere in the Comodo forum, that CPU time for BOClean 4.26 has improved a lot from version 4.25.

    I don't know how to check it though.
     
  15. Edwin024

    Edwin024 Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    1,008
    I find it quite amusing where some people are looking at in this. CPU time. Not even sure how to test it and what is the worth of it? Just install it and see if you see any slowdowns at all. I doubt it very much though.
     
  16. Tony

    Tony Registered Member

    Joined:
    Feb 9, 2003
    Posts:
    725
    Location:
    Cumbria, England
    well i have had my system running for a little over 6 hours today, and bocleans cpu time is 4 minutes and 8 seconds.

    And i have not noticed perfomance impact at all since reinstalling boclean a few days ago.
     
  17. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    You guys are talking trojans and this is also a malware application I take to deal with others like spyware...

    How is this program compared to Spybot S&D?

    THANKS
     
  18. Edwin024

    Edwin024 Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    1,008
    Well, BoClean for instance has no scanning functions. It's a residenty which keeps nasties away from the PC before they can start. That is in any case the intention :)
     
  19. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Ahh ok I'll pass I don't like resident apps...

    I guess I'll have a go again with Malware Bytes Anti Malware, they gave me a key for it for helping out before.

    THANKS
     
  20. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    I don't like resident apps either, but you should at least try BOClean.

    It's like it doesn't even exist in the system. If you configure it to permanetly hide tray icon and alerts just by ticking a box, it won't even show in the system :p
     
  21. Neo Esterhazy

    Neo Esterhazy Former Poster

    Joined:
    May 7, 2008
    Posts:
    10

    I found than STOPping the service in Admin Options>services and then <disabling> is the best way to uninstall it.

    Neo
     
  22. Neo Esterhazy

    Neo Esterhazy Former Poster

    Joined:
    May 7, 2008
    Posts:
    10
    Hey , thanks:) I just noticed that.

    Neo
     
  23. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    Boclean polls every or so seconds memory and registry,it d'nt prevent malware entering your computer,but as soon as it start it would be intercepted by Boclean.

    Malware which lay dormant is harmless but if fired up it will be killed by Boclean.
     
  24. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    Glad I could convince you to at least trying it :)

    The reason I love it is its simplicity! "Stop malware when trying to execute"
     
  25. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Hi Fellows:

    Hows BoClean's compatibility with most popular HIPS like say ProSecurity, EQSecure, etc.

    I bit on Comodo D+ and like it so i think BC would equally show some usefulness too.

    EASTER
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.