BOClean .vs ? [resolved]

[Guest]

[Wheelie4]

How does BOClean differ from Cyberhawk?

 (L) CFP

[Someone]

CH is a behaviour blocker. BOClean is an Anti-Trojan, with signatures and Heuristics (i think).
CH does not use signatures. It analyses the behavior of applications to determine if they're malicious or not (behavior like changing the registry, hiding itself etc.)

[Wheelie4]

Ahhhhh, gotcha. Thx Pedro. Wish I had known of BOClean long before last week.

[wilpower]

 (L) Any knowledge on how BoClean compares to 'Trojan Hunter' from Mischel Internet Security?

[TonyKlein]

BOClean operates in a different way from all other AV/ATs

From here:

File scanners can only detect fixed patterns and if the malware has been compressed, encrypted or modified, it cannot be detected by pattern matches since it will no longer match the pattern and will thus elude detection. BOClean watches memory, registry, and the file system waiting for malware to load up and then shuts it down before they have a chance to operate.

That said,  it has one of the most extensive malware databases around,  and new submissions are added within hours more often than not.

It is almost totally hands off,  and it has a comparatively tiny footprint.

IMHO it is THE perfect complement to your current antivirus protection.

[JWill]

Heres something for thought.
AV-Comparatives did an AT test a while ago (March 2006) and from what I understand the developers of Trojan Hunter asked to be withdrawn from the test because of the results they received after the test was done.
You can read about it on the AV-Comparatives web site, just look for Anti Trojan Comparative 2006.

I would put my trust in BOClean since I have been using this program for a couple of years and the GREAT support people here will soon find out from Kevin is definitely tops.
If you had to pay for BC and TH was free I would still go with BC, thats how much I believe in Kevin and BOClean.

[Someone]

Some of Kevin McAleavey explanation right in this forum:
http://forums.comodo.com/index.php?PHPSESSID=95f74a7379296f6d240a6d016e418275&topic=7808.msg56754#new
Thank you also TonyKlein, hope to hear more from you.
  also

[wilpower]

Thanks for the input; really appreciate it.

[frazzled]

BOClean operates in a different way from all other AV/ATs

Whoa there, fanclub!

I'm pleased to learn that Comodo has gobbled up (erm, "acquired the assets of") the BOClean app,
and I'm aware that Mr. Kevin was one of the pioneers in "malware heuristics research"...

...but this is 2007 and BOClean no longer represents a singularly unique approach.

At the risk of sounding antagonistic, in fairness (considering the "misinformation" being posted to these forums by overly-enthusiastic fans) I'm compelled to ask:
Have y'all been living in a bubble?

year 2001
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=61982
^------------  incluees reference to www.entercept.com which has since been acquired by McAfee
as sell as www.recourse.com which has since been acquired by Symantec

(McAfee later also gobbled up the Inspirian product  www.ispirian.com )

year 2004
http://www.computerworld.com/securitytopics/security/story/0,10801,93701,00.html
^------ a quick read

year 2007
buzz phrases like "heuristics" and "proactive prevention" are commonplace
across many firewall / suite / antivirus applications.
It's reached the point (the market has matured to the point) that, in an attempt to gain brand recognition
and to claim "best-ess-ness", most vendors have their own cutesy l'il name
(TM, ®, Patent Pretending) for the "process" being hyped / marketed:


"Proactive Behavior Blocker"
(product = Kaspersky Anti-Virus 6.0)
usa.kaspersky.com

Norman antivirus / Firewall
www.norman.com

"Sophos Behavioural Genotype® Protection technology"
(product = Sophos Mobile Security )
www.sophos.com

"B-HAVE (Behavioral Heuristic Analyzer in Virtual Environments)"
(product = BitDefender Antivirus Plus)
www.bitdefender.com

"Realtime Spyware Monitor"
(OutpostPro firewall)
www.agnitum.com

Eset NOD32 Antivirus
www.eset.com

a-squared Anti-Malware
by Emsi Software GmbH
www.emsisoft.com

"Real-time Protection"
(product = CA Antispyware 2007)(formerly eTrust® PestPatrol® Anti-Spyware)
shop.ca.com/spyware/anti_spyware.aspx

"Active Defense Shield"
(product = Aluria Security Center)
www.aluriasoftware.com

"AVG Resident Shield"
(product = AVG Anti-Spyware)
www.grisoft.com

"DeepGuard  technology"
(product = F-Secure Internet Security 2007)
www.f-secure.com

"OSFirewall"
(product = Checkpoint ZoneAlrem)
www.zonealarm.com

"VIPRE™ anti-malware" and "Active Protection"
(product = CounterSpy v2)
www.sunbeltsoftware.com

"TruPrevent Technologies"
(product = Panda Antivirus)
www.pandasoftware.com


BOClean has had a fine, and long-running reputation, and Comodo should be applauded for recognizing the merit of its inclusion in their product line.  It's a shame to see well-intended (and uncorrected / unrebutted) "misinformation" here in the forums, because that will serve to undermine the collective credibility.

I can't guess who will be the loudest Comodo evangelists, but I expect that the most effective / influential evangelists will be those people who are respected by their peers (and IT managers, and friends, family, etc) as being "knowledgeable". Gaining market share with the "set and forget" masses will require publication of favorable results from product comparisons conducted by "knowledgeable" (erm, 'popular') reviewers. They sure aren't blind to the "competition" faced by Comodo and, unfortunately, many of them remain unimpressed by the v2.4+ Comodo firewall product. Hopefully Comodo's v3.0 firewall and the emergence of its BOClean-powered functionality will turn a few journalistic heads.

[CajunTek]

Whoa there, fanclub!

I'm pleased to learn that Comodo has gobbled up (erm, "acquired the assets of") the BOClean app,
and I'm aware that Mr. Kevin was one of the pioneers in "malware heuristics research"...

...but this is 2007 and BOClean no longer represents a singularly unique approach.

At the risk of sounding antagonistic, in fairness (considering the "misinformation" being posted to these forums by overly-enthusiastic fans) I'm compelled to ask:
Have y'all been living in a bubble?

year 2001
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=61982
^------------  incluees reference to www.entercept.com which has since been acquired by McAfee
as sell as www.recourse.com which has since been acquired by Symantec

(McAfee later also gobbled up the Inspirian product  www.ispirian.com )

Then why do those that help remove malware find so many infected McAfee customers.

year 2004
http://www.computerworld.com/securitytopics/security/story/0,10801,93701,00.html
^------ a quick read

year 2007
buzz phrases like "heuristics" and "proactive prevention" are commonplace
across many firewall / suite / antivirus applications.
It's reached the point (the market has matured to the point) that, in an attempt to gain brand recognition
and to claim "best-ess-ness", most vendors have their own cutesy l'il name
(TM, ®, Patent Pretending) for the "process" being hyped / marketed:


"Proactive Behavior Blocker"
(product = Kaspersky Anti-Virus 6.0)
usa.kaspersky.com
I am a KAV fan.. but what it does and what BOClean does are very different things..
Norman antivirus / Firewall
www.norman.com

Hmm.. not right at the top.. misses about 7% (and that is too many)
"Sophos Behavioural Genotype® Protection technology"
(product = Sophos Mobile Security )
www.sophos.com

"B-HAVE (Behavioral Heuristic Analyzer in Virtual Environments)"
(product = BitDefender Antivirus Plus)
www.bitdefender.com

"Realtime Spyware Monitor"
(OutpostPro firewall)
www.agnitum.com

Eset NOD32 Antivirus
www.eset.com

a-squared Anti-Malware
by Emsi Software GmbH
www.emsisoft.com
Too many false positives..
"Real-time Protection"
(product = CA Antispyware 2007)(formerly eTrust® PestPatrol® Anti-Spyware)
shop.ca.com/spyware/anti_spyware.aspx
Way too many false positives.

"Active Defense Shield"
(product = Aluria Security Center)
www.aluriasoftware.com

"AVG Resident Shield"
(product = AVG Anti-Spyware)
www.grisoft.com

"DeepGuard  technology"
(product = F-Secure Internet Security 2007)
www.f-secure.com

"OSFirewall"
(product = Checkpoint ZoneAlrem)
www.zonealarm.com

"VIPRE™ anti-malware" and "Active Protection"
(product = CounterSpy v2)
www.sunbeltsoftware.com

A system hog..

"TruPrevent Technologies"
(product = Panda Antivirus)
www.pandasoftware.com
Another system hog.. and I don't like spam

BOClean has had a fine, and long-running reputation, and Comodo should be applauded for recognizing the merit of its inclusion in their product line.  It's a shame to see well-intended (and uncorrected / unrebutted) "misinformation" here in the forums, because that will serve to undermine the collective credibility.

I can't guess who will be the loudest Comodo evangelists, but I expect that the most effective / influential evangelists will be those people who are respected by their peers (and IT managers, and friends, family, etc) as being "knowledgeable". Gaining market share with the "set and forget" masses will require publication of favorable results from product comparisons conducted by "knowledgeable" (erm, 'popular') reviewers. They sure aren't blind to the "competition" faced by Comodo and, unfortunately, many of them remain unimpressed by the v2.4+ Comodo firewall product. Hopefully Comodo's v3.0 firewall and the emergence of its BOClean-powered functionality will turn a few journalistic heads.

As a note here I only commented on some of your inputs.. and I am not exactly an Evangelist. I have not had BOclean before. But I do know that I haven't ever had to deal deal with a comprimised PCs when it's present.

[Lasse88]

Whoa there, fanclub!

I'm pleased to learn that Comodo has gobbled up (erm, "acquired the assets of") the BOClean app,
and I'm aware that Mr. Kevin was one of the pioneers in "malware heuristics research"...

...but this is 2007 and BOClean no longer represents a singularly unique approach.

At the risk of sounding antagonistic, in fairness (considering the "misinformation" being posted to these forums by overly-enthusiastic fans) I'm compelled to ask:
Have y'all been living in a bubble?

year 2001
http://www.computerworld.com/action/article.do?command=viewArticleBasic&articleId=61982
^------------  incluees reference to www.entercept.com which has since been acquired by McAfee
as sell as www.recourse.com which has since been acquired by Symantec

(McAfee later also gobbled up the Inspirian product  www.ispirian.com )

year 2004
http://www.computerworld.com/securitytopics/security/story/0,10801,93701,00.html
^------ a quick read

year 2007
buzz phrases like "heuristics" and "proactive prevention" are commonplace
across many firewall / suite / antivirus applications.
It's reached the point (the market has matured to the point) that, in an attempt to gain brand recognition
and to claim "best-ess-ness", most vendors have their own cutesy l'il name
(TM, ®, Patent Pretending) for the "process" being hyped / marketed:


"Proactive Behavior Blocker"
(product = Kaspersky Anti-Virus 6.0)
usa.kaspersky.com

Norman antivirus / Firewall
www.norman.com

"Sophos Behavioural Genotype® Protection technology"
(product = Sophos Mobile Security )
www.sophos.com

"B-HAVE (Behavioral Heuristic Analyzer in Virtual Environments)"
(product = BitDefender Antivirus Plus)
www.bitdefender.com

"Realtime Spyware Monitor"
(OutpostPro firewall)
www.agnitum.com

Eset NOD32 Antivirus
www.eset.com

a-squared Anti-Malware
by Emsi Software GmbH
www.emsisoft.com

"Real-time Protection"
(product = CA Antispyware 2007)(formerly eTrust® PestPatrol® Anti-Spyware)
shop.ca.com/spyware/anti_spyware.aspx

"Active Defense Shield"
(product = Aluria Security Center)
www.aluriasoftware.com

"AVG Resident Shield"
(product = AVG Anti-Spyware)
www.grisoft.com

"DeepGuard  technology"
(product = F-Secure Internet Security 2007)
www.f-secure.com

"OSFirewall"
(product = Checkpoint ZoneAlrem)
www.zonealarm.com

"VIPRE™ anti-malware" and "Active Protection"
(product = CounterSpy v2)
www.sunbeltsoftware.com

"TruPrevent Technologies"
(product = Panda Antivirus)
www.pandasoftware.com


BOClean has had a fine, and long-running reputation, and Comodo should be applauded for recognizing the merit of its inclusion in their product line.  It's a shame to see well-intended (and uncorrected / unrebutted) "misinformation" here in the forums, because that will serve to undermine the collective credibility.

I can't guess who will be the loudest Comodo evangelists, but I expect that the most effective / influential evangelists will be those people who are respected by their peers (and IT managers, and friends, family, etc) as being "knowledgeable". Gaining market share with the "set and forget" masses will require publication of favorable results from product comparisons conducted by "knowledgeable" (erm, 'popular') reviewers. They sure aren't blind to the "competition" faced by Comodo and, unfortunately, many of them remain unimpressed by the v2.4+ Comodo firewall product. Hopefully Comodo's v3.0 firewall and the emergence of its BOClean-powered functionality will turn a few journalistic heads.

NONE of thoose programs is as good at BOClean to protect your computer from trojans   (M)

[JWill]

I noticed names like NOD32, Kasperky, BitDefender, etc.
However it has been posted time and time again, Kevin has mentioned this plenty of times also....

BOClean is not meant to replace your AV but should be considered as a second line of defense within your internet security programs.

[CajunTek]

I noticed names like NOD32, Kasperky, BitDefender, etc.
However it has been posted time and time again, Kevin has mentioned this plenty of times also....

BOClean is not meant to replace your AV but should be considered as a second line of defense within your internet security programs.

Exactly... It is part of a strong arsenal of antimalware tools (I know the filter here is going to do somethin funny with a r s e n a l.....)

[Lasse88]

frazzled, you should read this

Most "antispyware" only detects useless "cookies" ... any decent "cookie manager" can deal with that by saving those you wanted, and delete the rest ... like our original NSClean and IEClean toys did. NEVEr could fathom why "cookies" becamse part of "antispyware" whilst "SPAMBOTS" and other nasties forever got a pass from those and were allowed to run.   

 Let's be clear here about what BOClean did and WILL do ... if you have an ACTIVE infection, BOClean will flip out, stop it, complain and ask permission to make it go away for good. If there's something that got downloaded and ISN'T running, then all you've got happening is wasted disk space storing a corpse somewhere. AV's, AT's and AS's can't tell the difference - if they FIND a file there, they can delete your old garbage files. If it's RUNNING, then they can't. BOClean *can*.

 So am I arrogant enough to say "BOClean is all you'll ever need" and "BOClean is the *ONLY* one that can detect X?" Nope ... BOClean is designed for a SPECIFIC set of situations. You're ALREADY infected with something you AV can't deal with but detected, or you've got a nasty running that nothing else can detect or stop. BOClean is about STOPPING it - whether it's been there and running all along, or someone slipped you a mickey NOW and it just STARTED to run. BOClean is and was always designed to STOP things, not DETECT things ... and seems after all these years, COMODO was the ONLY company that actually figured out WHAT we do. And WHY. 

 And NOT to worry about words ... TRY being as sleep-deprived as *I* am! Now TYPE! Boowahahaha!

[Tags:]