BOClean and other AT effectiveness?

Discussion in 'other anti-trojan software' started by pojispear, Jan 30, 2006.

Thread Status:
Not open for further replies.
  1. pojispear

    pojispear Registered Member

    Joined:
    Jan 12, 2006
    Posts:
    90
    Does anyone know how effective BOClean really is? Their website claims it can stop anything under the sun that is malware. Are there any tests of AT software like there is for AV software?
     
  2. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    No, there are not any *objective tests* of ATs -- only subjective opinions. Besides, BOC is strictly a real-time-monitor at present so it's not very easy to test it except by rather *dangerous* methods.:eek:

    By the way, a Mod might come along & move this thread to THIS Wilder's forum, which is for ATs. If it doesn't get moved pretty soon, maybe you should ask your question again over there -- you'll probably get more replies.
     
  3. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    No need but Thanks for the concern ;) It was moved to that Forum while you were typing all that and even tho some of us are old and grey....we get to it eventually :D

    15:02, 30th Jan 2006 Bubba Thread moved with redirect to 'other anti-trojan software'.
     
  4. pojispear

    pojispear Registered Member

    Joined:
    Jan 12, 2006
    Posts:
    90
    ok, thanks.

    i was just wondering after reading the HIPS Crazy thread.
    like what can we do if we mistakenly allow a worm/trojan to install in a trusted app (explorer, firefox, etc) by Permit in a HIPS app like Kerio 4.20?

    ie, how effective is BOClean, ewido, and also KAV, NOD32 etc to detect these mistakes after the fact?
    that would be a great comparison test for sure
     
    Last edited: Feb 1, 2006
  5. BlueZannetti

    BlueZannetti Administrator

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    While it might be a great comparison, operationally it would be very hard and extremely time consuming to do.

    As to the basic question of this thread..., I have had BOClean protect systems under my control. Over the years it has handled malware samples missed, at the time, by KAV and NOD32 (different instances). For my purposes, it is effective.

    Blue
     
  6. pojispear

    pojispear Registered Member

    Joined:
    Jan 12, 2006
    Posts:
    90
    thanks Blue, that helps my confidence in BOClean

    i guess it would take too long to run on those comprehensive AV test, but maybe someone could assemble a master list of trojans, worms, rootkits (but not viruses since those should be taken care of by AV) then take a random 40 or more and test the ATs alone.

    or install ATs on the machines and see if they can detect/remove the % that are missed in the AV tests. like a follow-up to a comprehensive AV test :doubt:
     
    Last edited: Feb 1, 2006
Thread Status:
Not open for further replies.