Comodo BOClean 4.26 out now

Discussion in 'other anti-trojan software' started by Rednose!, Apr 15, 2008.

Thread Status:
Not open for further replies.
  1. Rednose!

    Rednose! Registered Member

    Joined:
    Apr 7, 2008
    Posts:
    80
    Location:
    Netherlands
    Hi guys :)

    Comodo BOClean 4.26 is out :)


    Changes in Version 4.26

    General:
    Changes to code for Vista SP1 and XP SP3 compatibility

    Fixes and enhancements to Excluder:
    Fixed incorrect saving/disappearing of icons for excluded programs
    Fixed "always on top" problem which sometimes obscured display screen
    Quicker access to excluder upon warning of changed or missing excluded item
    Better explanation of why excluded item may have changed and instructions
    Now remembers display mode and any sorting of display in excluder
    Restart of BOClean no longer required after changes in excluder

    Fixes and enhancements in manual and automatic updater:
    Fixed memory leak which caused BOClean hang after a few weeks continuous use
    WEB downloading instead of FTP to resolve firewall connectivity problems
    Removed "rollback" button with automatic re-download if download is corrupted
    Added new tray bar icon status indications (downloading/success/problem)
    Added detailed messages to manual updater notifying of problems and solutions
    Downloads automatically checked upon downloading rather than at load time

    Fixes and enhancements to BOClean itself:
    Faster access to excluder and manual update checking
    Clearer, more specific alert messages and recommended actions
    Detected items must be either deleted or excluded or BOClean will re-detect
    Status icons for updater now visible on traybar when automatic updates occur
    Spread scanning to reduce CPU spiking with NAV/KAV/NOD32 antiviruses

    Fixes and enhancements to BOClean installer:
    Clarified first screen to indicate need for "clean install" and instructions
    Automatically sets requirements for administrator mode and installs or complains
    Permissions for databases, reports and configuration automatically established
    Uninstall now configured to require administrator permission to remove all


    Download : http://www.comodo.com/boclean/CBO_download.html


    Greetz, Red.

    EC edit: Changed direct file link to download page.
     
    Last edited by a moderator: Apr 15, 2008
  2. Drew99GT

    Drew99GT Registered Member

    Joined:
    Jun 27, 2006
    Posts:
    338
    Location:
    Colorado Springs
    Just downloaded it and now the auto-update doesn't work. Lovely.
     
  3. Threedog

    Threedog Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    1,125
    Location:
    Nova Scotia, Canada
    Thanks Red. It seems to be working fine here so far.
     
  4. strangequark

    strangequark Registered Member

    Joined:
    Jun 22, 2005
    Posts:
    296
    Location:
    OZ
    Working fine here. Remember to uninstall old one first and check the Boclean folder in your program files as it appears to still be leaving the BOCore.exe file behind, or at least it did on 2 boxes here.
     
  5. Rednose!

    Rednose! Registered Member

    Joined:
    Apr 7, 2008
    Posts:
    80
    Location:
    Netherlands
    - Drew99GT

    I already answered you at Comodo forums :)


    - strangequark

    Did you shut down BOClean before you uninstalled it ?


    Greetz, Red.
     
  6. strangequark

    strangequark Registered Member

    Joined:
    Jun 22, 2005
    Posts:
    296
    Location:
    OZ
    yes as I always have, did you check to see if you had BOCore.exe in the Bolclean folder.
     
  7. Rednose!

    Rednose! Registered Member

    Joined:
    Apr 7, 2008
    Posts:
    80
    Location:
    Netherlands
    Lol, I didn't notice your post on Comodo forums :)

    But yes, I always check such things and on both my machines the BOClean folder was completely deleted.

    Greetz, Red.
     
  8. strangequark

    strangequark Registered Member

    Joined:
    Jun 22, 2005
    Posts:
    296
    Location:
    OZ
    Red we'll have to stop meeting like this ;)

    had this happen when I went from 4.24 > 4.25, so just check out of habit. Interesting yours was completely gone, I have to go and update a couple of computers around the area today, so it will be interesting to see what happens.
    No problem, all is working fine, actually I'll do a check in a couple of virtual machines right now and post the outcome.

    update: 2 virtual machines > XP no BOCore.exe left over, Vista the file was still there.
     
    Last edited: Apr 15, 2008
  9. FanJ

    FanJ Updates Team

    Joined:
    Feb 9, 2002
    Posts:
    2,564
    A few additional notes:

    1.
    Official announcement here at the Comodo forum:
    http://forums.comodo.com/announcements/boc_426_released-t21896.0.html

    2.
    This version is called: 4.26.001

    3.
    The download site is:
    http://www.comodo.com/boclean/CBO_download.html

    Please follow the instructions there for upgrading/installing.

    MD5 and SHA1 HASHES are posted there for the installation file.
    File Name: CBO_Setup_4.26.exe
    MD5: 129c280dac67c4f4113c1c79e9e5bfa1
    SHA1: 7d7326a95d33b4b989c51ab070a3272a5722c5da

    4.
    Some interesting threads at the Comodo forum where Kevin posted about the new version:

    4-a.

    http://forums.comodo.com/comodo_boclean_antimalware/any_date_for_a_new_version_yet-t21368.0.html

    4-b.

    http://forums.comodo.com/comodo_boclean_antimalware/automatic_updates_error_with_426-t21877.0.html

    (in that thread Kevin posted some error messages and their meaning)

    4-c.
    http://forums.comodo.com/comodo_boc...s_file_wo_connecting_to_the_net-t21821.0.html

    5.
    An important change has been made with respect on how definition updates are acquired now:
    In the past it has always been through (passive) FTP.
    With this new version it is now through HTTP.

    This might mean that you have to look at your software firewall rules !!!

    6.
    For those interested:
    RejZor has given new tray icons for version 4.26.
    See here:
    http://forums.comodo.com/comodo_boclean_antimalware/new_tray_icons_for_version_426-t21887.0.html

    7.
    For the NOD32 users:

    In the past we used to exclude the BOClean files in AMON.
    At the moment I am still at NOD32 version 2.70.39 so I don't know how things are in NOD32 version 3.

    Anyway, if you had the BOClean files excluded in AMON, don't forget to make a few changes; in particular these ones:
    C:\Program Files\Comodo\CBOClean\BOC426.EXE
    C:\PROGRA~1\Comodo\CBOClean\BOC426.EXE
     
  10. Huwge

    Huwge Registered Member

    Joined:
    Oct 21, 2004
    Posts:
    405
    Location:
    UK
    Unable to reach the download link. I guess everyones busy downloading
     
  11. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    Same here,it stalls on clicking the download link.
     
  12. Rednose!

    Rednose! Registered Member

    Joined:
    Apr 7, 2008
    Posts:
    80
    Location:
    Netherlands
  13. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    5,632
    Location:
    U.S.A. (South)
    Question Plz:

    What can BoClean do exactly to improve security for a system that uses a combination of at least no more than 3 of the apps you find below in my signature which could be of real benefit?

    Is it neccessary or another layer of protection and how responsive is it to memory intrusions of a malicious nature that a HIPS couldn't handle.

    Thanks EASTER
     
  14. colinp

    colinp Registered Member

    Joined:
    Feb 9, 2008
    Posts:
    41
    Most people think that the more "stuff" you have running, the better the security, but I think that sooner or later, it just gets "silly". I had been using BOC since version 4.08 and I can only remember it tagging one trojan, interestingly just before Avast flagged it.
    I had abandoned BOC after Comodo took over, not because of that, but I felt that it really wasn't necessary (I am on dial up, don't ask, damn country living) and I found having another updating program was a PITA.
    Interestingly, you and I have stumbled onto much more interesting security ideas, such as, SuRun and SRP for example.
    I think that dedicated AT software is just not needed anymore, especially with all the "stuff" we all tend to have running nowadays.

    YMMV Colin
     
  15. Edwin024

    Edwin024 Registered Member

    Joined:
    Nov 14, 2004
    Posts:
    1,000
    But BoClean isn't only about trojans anymore. read the information that is available at the Comodo website. It's anti-malware.
     
  16. Huupi

    Huupi Registered Member

    Joined:
    Sep 2, 2006
    Posts:
    2,024
    Yes Boclean is residential and a poller admit that, but its so small on resources . IMO is has the right philosophy in that malicious stuff that lay dormant and inactive is harmless,the moment it shows its true colors in registry or/and memory it will be killed flat by Boclean.
    As you know many malware sits on disks,repacked,compresses,rehexed etc. to evade detection by scanners and their sucsess rate is disputable,but once they start they have to show up in memory and show their real intentions,at that moment Boclean will interupt their behavior and kills them on the spot.

    You can say this is just theory but 3 weeks ago after my weekly manual scans with SAS and Cureit they found nothing,right thereafter Boclean fired up and detected an very legetimate Trojan in memory and killed it.
     
  17. lucas1985

    lucas1985 Retired Moderator

    Joined:
    Nov 9, 2006
    Posts:
    4,047
    Location:
    France, May 1968
    Your AV is anti-malware too :)
    I'm more than skeptical on BOClean's suposed abilities at dealing with obfuscated code (i.e. being a true memory scanner).
    Did you investigate any further?
     
  18. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    Does BoClean show in Vista Security Center?
     
  19. Threedog

    Threedog Registered Member

    Joined:
    Mar 20, 2005
    Posts:
    1,125
    Location:
    Nova Scotia, Canada
    All I am using for security right now is Boclean, Defensewall and Returnil. I have taken Boclean for several test runs thru the dark side and it has lived up to its hype.
     
  20. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    What is BOClean's memory usage nowadays?
     
  21. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    5,632
    Location:
    U.S.A. (South)
    Ok Thanks colinp

    Good to read your feedback and i must admire the honesty in your opinions, and i also have to agree the Limited User approach in the form of SuRun/SRP are already more interesting and readily available methods to help tighten matters up for that extra quality safe protection.

    EASTER
     
  22. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    Anyone can explain me what the colours on the icon means?
    It can get black, green, red and blue!

    Red is when I open the menu.
    Blue is when it updates I think.
    Black and green? (most of the time it's black, it just flashes green)
     
  23. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    I guess it's just an "activity reminder", like the spinning icon from avast. You can disable it in the menu, and then it stays black all the time (at least on version 4.25)
     
  24. PiCo

    PiCo Registered Member

    Joined:
    Apr 9, 2008
    Posts:
    352
    Location:
    Athens, Greece
    Thank you!

    Ok this seems a very nice product, it occupies 0.7 mb in Program Files folder and it doesn't bother me a bit while I am surfing.

    :thumb:
     
  25. HURST

    HURST Registered Member

    Joined:
    Jul 20, 2007
    Posts:
    1,419
    Can you open task manager and see how much memory it uses?
    in 4.25 there were 2 processes boc425.exe and bocore.exe
     
Thread Status:
Not open for further replies.