Welcome to the Comodo Forum
Welcome,
Guest
. Please
login
or
register
.
November 22, 2009, 06:33:51 PM
1 Hour
1 Day
1 Week
1 Month
Forever
Login with username, password and session length
336910
Posts
37285
Topics
84529
Members
Latest Member:
dninke
more news...
Search:
Advanced search
|
Tag Cloud
Welcome to the Comodo Forum
Archive Boards
Comodo BOClean Anti-Malware
Bad experience
« previous
next »
Pages:
[
1
]
Author
Topic: Bad experience (Read 3073 times)
Gravity
Newbie
Offline
Posts: 22
Bad experience
«
on:
April 23, 2007, 01:12:47 PM »
After installing BOClean last night, wish went smootly btw, this morning after turning on the pc, this happend :
Winsock damaged. Why? (The only thing I deed was testing BOClean with leaktest from grc.com)
Hosts file deleted. Why ? (This was a host file, with entry's made by my self)
And every item in C:\Windows\Downloaded Program Files, damaged. Why ?
BOClean reported nothing, and the system consist of XP SP2 / fully patch. NOD32 , spywareblaster, and Spybot immunization.
At this time everything is rolling again, but witout boclean.
Logged
TonyKlein
Comodo Family Member
Offline
Posts: 85
Re: Bad experience
«
Reply #1 on:
April 23, 2007, 02:06:17 PM »
BOClean configuration:
Quote
The third checkbox on the right is marked "Automatic cleanup of HOSTS file." By default this is also checked because once again, the majority of malware will write to the HOSTS file to block access to antivirus and antimalware updates and this file is also commonly used to redirect you from sites you intend to visit to rogue sites instead. Some people and some programs make use of the HOSTS file to block other sites however it is not possible to programmatically determine which sites are safe and which aren't and therefore in the event of malware detected by BOClean, we want to reset the HOSTS file to the Microsoft default of EMPTY in order to prevent reinfection. You should UNCHECK this item ONLY if you actually use a HOSTS file and are willing to check it manually yourself to ensure that all entries are what you intend. We recommend leaving this checked however.
The fourth checkbox is marked "Automatic cleanup of TEMP folder." Windows uses a TEMP folder for each user as a temporary storage location for files until they can be copied to their final location. As a result, the TEMP folder should be empty except during installation of movement of data from one place to another. Some programs fail to empty out the TEMP folder when they're finished copying data and this TEMP location is often used by malware to store a copy of malware so that it can be resurrected. It is strongly advised to allow BOClean to clean the TEMP folder when any malware is found and therefore this box should remain checked.
The fifth checkbox is marked "Automatic cleanup of ActiveX downloads." The ActiveX cache or "downloaded program files" area in Windows is a storage location for programs downloaded from the internet to be used in conjunction with your browser. Unfortunately, it is also a location where malware will be stored so that any time you open your browser, the malware can download another copy and restore itself. When this box is checked, BOClean will clean the entire ActiveX cache and any programs stored here can be readily downloaded again with adequate warning such as online scanners and other "features" which require a program on your end for the web page to function. We recommend that this box remain checked as well.
The sixth checkbox is marked "Automatic cleanup of winsock connectivity." This item is turned on by default as well. However, this checkbox controls a number of additional cleanups which reflect the latest tendencies to corrupt the winsock "Layered Service Provider" (or "LSP") stack as well as the winsock itself. When certain malware inserts itself into the winsock stack and is subsequently removed, you lose all internet connectivity as a result of the "missing piece." Leaving this checkbox checked will cause BOClean to examine the "winsock stack" and repair the sequence to prevent loss of connectivity. We strongly advise leaving this box checked.
Logged
Tony
CLSID List
-
Autostart Locations
Gravity
Newbie
Offline
Posts: 22
Re: Bad experience
«
Reply #2 on:
April 23, 2007, 02:44:22 PM »
Thank you. ...simple case of "RTFM"
Last night there were no problems with the same hosts file , so why was it reset to the deafult MS version this morning
If Boclean "examine the "winsock stack" and repair the sequence to prevent loss of connectivity", why deed I still lost my connectivity
Logged
~cat~
Global Moderator
Comodo's Hero
Offline
Posts: 969
CBO "...there is nothing better."
Re: Bad experience
«
Reply #3 on:
April 23, 2007, 02:55:05 PM »
Yep, we really need to get the support documentation up and include it with the download link.
http://nsclean.com/supboc.html
Logged
Parched dry and thirsty, knee deep in the river of life.
cheater87
Comodo Loves me
Offline
Posts: 133
Re: Bad experience
«
Reply #4 on:
April 23, 2007, 03:05:54 PM »
About the HOST file thing. What if you have Spyware Blaster installed?
Logged
TonyKlein
Comodo Family Member
Offline
Posts: 85
Re: Bad experience
«
Reply #5 on:
April 23, 2007, 03:18:24 PM »
Quote from: cheater87 on April 23, 2007, 03:05:54 PM
About the HOST file thing. What if you have Spyware Blaster installed?
You can certainly use SpywareBlaster to create an encrypted copy of the Hosts file in the SpywareBlaster directory. Always useful to have a backup in case it is hacked by malware (or deleted, be it by malware, by accident, or indeed by BOClean
...)
«
Last Edit: April 23, 2007, 03:20:07 PM by TonyKlein
»
Logged
Tony
CLSID List
-
Autostart Locations
Wingnut
Comodo Family Member
Offline
Posts: 71
Re: Bad experience
«
Reply #6 on:
April 23, 2007, 04:34:07 PM »
Quote from: Gravity on April 23, 2007, 01:12:47 PM
After installing BOClean last night, wish went smootly btw, this morning after turning on the pc, this happend :
Winsock damaged. Why? (The only thing I deed was testing BOClean with leaktest from grc.com)
Hosts file deleted. Why ? (This was a host file, with entry's made by my self)
And every item in C:\Windows\Downloaded Program Files, damaged. Why ?
BOClean reported nothing, and the system consist of XP SP2 / fully patch. NOD32 , spywareblaster, and Spybot immunization.
At this time everything is rolling again, but witout boclean.
See
http://forums.comodo.com/index.php/topic,8170.0.html
for my experiences with a corrupt winsock. And for the host file, i use a modified one and have a few self-added entries in there, but i always keep it read-only so when testing BOclean (with a really bad experience) my hosts file were still intact after that. So, make it read-only.....
Logged
Gravity
Newbie
Offline
Posts: 22
Re: Bad experience
«
Reply #7 on:
April 24, 2007, 10:05:04 AM »
Thank you all, gonna try again....
Logged
Tags:
Pages:
[
1
]
« previous
next »
Jump to:
Please select a destination:
-----------------------------
Want to help Comodo?
-----------------------------
=> Help Spread the Word - Official Comodo banners and logos
=> How can you help Comodo? (Please we do need you!)
===> Help spread the word! (Please read and help)
===> Comodo website issues for submitting website problems only
=> Please tell us your views and Vote here!
-----------------------------
General Category
-----------------------------
=> Melih's Corner - CEO Talk/Discussions/Blog
=> Comodo.TV - Our Internet Video Channel
===> Comodo.TV - News and Announcements
===> Comodo.TV - Program Lineup
===> Audience Feedback and Suggestions
=> Which Product do you want Comodo to develop next?
=> General Discussion (off topic) Anything and everything...
===> Member Confessions :-)
===> Funny Photos :-)
===> Cool Stuff
-----------------------------
Desktop Security Products
-----------------------------
=> Comodo Internet Security - CIS
===> Overview - CIS
===> Help - CIS
=====> Anti Virus Help
=====> Firewall Help
=====> Defense+ Help
=====> Install / Setup / Configuration Help
===> FAQ - CIS
=====> Anti Virus FAQ
=====> Firewall FAQ
=====> Defense+ FAQ
=====> Install / Setup / Configuration FAQ
===> Feedback/Comments/Announcements/News - CIS
===> Guides - CIS
=====> Anti Virus Guides
=====> Firewall Guides
=====> Defense+ Guides
=====> Install / Setup / Configuration Guides
===> Wishlist - CIS
=====> Anti Virus Wishlist
=====> Firewall Wishlist
=====> Defense+ Wishlist
=====> GUI -Graphical User Interface - Wishlist
===> Bug Report - CIS
=====> Anti Virus Bugs
=====> Firewall Bugs
=====> Defense+ Bugs
=====> Other - General - GUI etc Bugs
=====> False Positive/Negative reporting - (Is this a malware that CIS has/not detected?)
===> Virus/Malware Removal Assistance
===> Leak Testing/Attacks/Vulnerability Research
=> Comodo Time Machine - CTM
===> Frequent Asked Questions (FAQ)
=> Comodo Dragon - CD
=> Comodo Instant Malware Analysis Online - CIMA
=> Comodo Disk Encryption - CDE
===> Overview - CDE
===> Help - CDE
===> FAQ - CDE
===> Feedback/Comments/Announcements/News - CDE
===> Wishlist - CDE
===> Beta Corner - CDE
===> BUG Reports - CDE
=> Comodo Secure Email - CSE
===> Frequently Asked Questions (FAQ)
===> Feedback/Comments/Announcements/News about CSE
===> Bug Reports
===> Help for Comodo SecureEmail
=> Comodo TrustConnect - Securing the Wireless world!
=> Comodo EasyVPN - CEVPN
===> Frequently Asked Questions (FAQ)
===> Feedback/Comments/Announcements/News about Comodo EasyVPN
===> Bug reports
===> Help for Comodo EasyVPN
=> HopSurf (Bringing Internet to you)
=> Comodo Online Backup - COB
=> Comodo Backup - CB
===> Comodo Backup - FAQ
===> Comodo Backup - Help
=> Verification Engine - CVE
=> Comodo Vulnerability Analyzer - CVA
=> Comodo AntiSpam - CAS
-----------------------------
Desktop Utilities
-----------------------------
=> Comodo System Cleaner - File/Registry/Privacy Cleaner
=> Live PC Support (geeks ready to help 24/7/365)
-----------------------------
Enterprise Security
-----------------------------
=> Comodo Endpoint Security Manager
-----------------------------
Compliance
-----------------------------
=> PCI DSS Compliance
-----------------------------
Learn about Computer Security and Interact with Security Experts
-----------------------------
=> Computer Firewalls
=> Anti Virus/Malware Products/Other Security products
=> Free Virus/Spyware/Trojan/Malware Removal by Comodo Experts
=> HIPS (Host Intrusion Prevention Systems)
=> Anti Phishing solutions
=> Digital Certificates, Encryption and Digital Signing
=> General Security Questions and Comments (not product related)
-----------------------------
Free Services for End Users
-----------------------------
=> UserTrust - First Independent Website Rating - Empowering our users!
=> Hacker Guardian
=> Trustfax (free Trial) (online faxing)
-----------------------------
Free Products
-----------------------------
=> Link to Free Comodo Products
-----------------------------
International Comodo Forums
-----------------------------
=> International Comodo Forums
===> 汉语语言, 漢語語言 / Chinese Simplified, Traditional
===> Nederlands / Dutch
===> Francais / French
===> Deutsch / German
===> ελληνικά / Greek
===> Magyar / Hungarian
===> Italiano / Italian
===> Nihongo / Japanese
===> Norsk / Norwegian
===> Polski / Polish
===> Português/Portuguese
===> По-русски / Russian
===> Espanol / Spanish
===> Svenska / Swedish
===> Turkce / Turkish
===> Українська / Ukrainian
===> tiếng Việt / Vietnamese
===> Slovenský / Slovak
-----------------------------
Digital Certificates
-----------------------------
=> Code Signing Certificate
=> Content Verification Certificate
=> Email Certificate
=> SSL Certificate
-----------------------------
Web Server Products
-----------------------------
=> Two Factor Authentication for Web Applications
=> Trustlogo
-----------------------------
Other
-----------------------------
=> Forum Policy Violation Board
-----------------------------
Archive Boards
-----------------------------
=> Comodo Diskshield
=> Comodo Firewall
===> Feedback/Comments/Announcements/News
===> Help for v3
===> Help for v2
===> Frequently Asked Questions (FAQ) for Comodo firewall
===> Comodo Firewall Translations
===> Bug Reports
=> Comodo Anti-Viruspyware (CAVS)
===> Help for Comodo AntiVirus
===> FAQ for Comodo Anti-ViruSpyware
===> Feedback/Comments/Announcements/News about CAVS
=> Launch Pad (Discontinued)
=> Trusttoolbar (Discontinued)
=> Comodo Meet (Web Conferencing Product) (Discontinued)
=> User Anywhere (Remote Access product) (Discontinued)
=> Trustix Enterprise Firewall
=> ZTL
=> Comodo BOClean Anti-Malware
===> Announcements
===> Comodo BOClean Anti-Malware FAQ
=> Comodo Memory Firewall(Buffer Overflow Protection)
===> Comodo Memory Firewall Beta Corner
===> Help
===> Frequently Asked Questions (Comodo Memory Firewall)
===> Feedback/Comments/Announcements/News
=> i-Vault
=> Safesurf
Page created in 0.044 seconds with 19 queries.
Powered by SMF 1.1.10
|
SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by
7dana.com