Comodo BOClean Wishlist 1

[Guest]

[paraver]

Automatic updates (or prompt the user informing the availability of an update)

[malva00]

Maybe it's already been posted, but when I open up the menu then cover it with another window, I'd like to be able to right click the BOClean tray icon so it appears again over the window you placed over it.

You can do alt-tab but not everyone prefers doing that.

[TonyKlein]

Maybe it's already been posted, but when I open up the menu then cover it with another window, I'd like to be able to right click the BOClean tray icon so it appears again over the window you placed over it.

You can do alt-tab but not everyone prefers doing that.

I second that.  The previous version did stay on top,  and I do prefer it that way as well.

[Jbob]

In addition the the "Excluder" update that TonyKlein mentioned, as a result of FPs, if possible, I'd like to see CBOC delay it's cleanup until after the user can give it a Yes or No.  By that I mean once CBOC detects possible malware and pops up an alert there needs to be a setting for the user to make a decision about CBOCs cleanup process.  For instance with this latest FP I knew it was false however once CBOC stopped it in memory the checked configuration options are still processed.  That means that even though it is a known FP you'll still have to go back and reset any configurations that were changed by CBOC.  For instance I run a Host file.  Every time I have a FP I have to go back and reupdate my Host file.   Not that big of a deal but I shouldn't have to if I know the alert to be false.  I realize I can turn that option off but there are others as well.  Luckily for me I don't use anything other than default settings so a CBOC cleanup is not that big of an issue.

I guess until that happens I'm gonna have to turn off the setting for automatic Host cleanup and just check it myself.

[Kevin McAleavey]

What I'd like to see in a future build is

1)  a 'rollback'  feature allowing the user to revert to the previous database update

2)  the possibility to add sysfiles to BOClean's Program Excluder (as well as any other filetypes presently targeted but not allowed)

... this motivated by this topic

 A rather embarassing situation indeed - I can't say much other than what happened was the result of genuine "technical difficulties" in which our folks KNEW that the definition was bad but it got saved, sent out and then the signals went away. Couldn't be fixed owing to those technical difficulties and while I was *aware* of the problem, I didn't have the database info in order to fix and reconstruct it. Bottom line is that all of the failure modes here were detected and solved so that something like this either will NEVER happen again or more people in other places on the planet will now have whatever is needed to fix it as fast as Nancy and I were able to do now. Suffice it to say that a bad update made it to the server and then couldn't be repaired because it was not possible to get the information TO the server to fix it before it was a problem. FP's happen far more often lately to everyone simply because there is SO much malware, resources to deal with them are more than stretched to the limit and I'll also add that there are people "poisoning the waters" in this industry by sending CRAP supposedly "proven to be malware" and owing to the overload, sometimes we BELIEVE "trusted sources" only to get burned because NOBODY has the time to evaluate malware to the degree that we once had the luxuries of time to really PLAY with. Nowadays, no time to write up "book reports" or go very deeply into malware beyond grabbing a fast signature and sometimes owing to the nefarious encryption schemes many malwares use nowadays, ain't all that much to grab onto as it was a year ago. Sometimes those signatures can only match what code is in a lot of other things.   

 As I've said publicly elsewhere not inside COMODOland, I've learned WITHIN COMODOland ... there's a lot of coders nowaways that have no idea of how to write in assembly - many can't even write in ANSI C - they write in "DooFi" (Delphi) or Microsoft Visual Studio (using MFC) and haven't a phucking CLUE as to how to write portable, compatible code simply because they STEAL their code from trojan programmers and then use trojan tools to obfuscate their qwap. Some talk about "heuristics" being a requirement - "heuristics" are the reason for the FP which was complained about. Sadly, "heuristics" no matter HOW sophisticated, are responsible for more FP's than useful detections. And sadly, once we knew it was an FP we were powerless (literally) to solve the problem until our guys overseas who covered that update could get connected back again to fix it.   

 POINT of this message though is that this lesson has had MANY impacts (for the better!) on how COMODO is handling things. It's also caused a one-week delay in the release of BOClean 4.24 (which actually WORKS!) owing to your recommended changes ... BOClean 4.24 will have the following changes:

1. Automatic backup AND RESTORE of boclean databases - BEFORE BOClean grabs a new database, it will save the earlier one to BOC424.OLD and then go grab a fresh database. If somehow the download is corrupted, it will be automatically replaced with the earlier good one. BOClean will close on a corrupted database, but you can restart BOClean again with the old one.

2. ROLLBACK button added to the BOClean configuration screen - if you run config, it'll be there in the lower right ... click it and it will restore the previous update and lock out any updates until there is a new BOClean update that is *different* from the one replaced.

3. BOClean EXCLUDER now accepts *.SYS and *.OCX files to the excluder and will ignore those YOU drag and drop there - same protections against unauthorized external modifications remains.

4. Lack of focus (not "on top") was caused by use of MFC components in the COMODO licensing stuff what was added to the 4.22 cum 4.23 version as a result of incompatibilities between MICROSOFT C versus the Borland C in which BOClean was written. All of that has been converted to Borland C with external COMODO licensing DLL which is now compatible with ALL versions from Windows form Win95 to Vista.

5. BOClean defaults now changed to *NOT* replace HOSTS file or cleanup winsock stack UNLESS selected in the BOClean configuration screen.

6. Permissions issues which caused anomolies in XP and Vista now solved.

UPDATING problems remain open because those are most likely firewall/COMODO server problems as BOC422 former customers didn't suffer any of these and the code hasn't changed aside from these changes since 4.22 BOClean. Testing is underway with 4.24 and so far, ALL issues have been resolved.

 Finally, I would like to hear from ANYBODY whose "connectivity was lost" or "winsock corrupted" to contact me so we can have you run a PSC-EXAM so we can find out what weirdness some other "security software" has done in the winsock stack that caused BOClean to corrupt the winsock as a result. I'd *really* like to get to the bottom of this one remaining issue as BOClean itself will NOT corrupt the winsock - there's definitely some OTHER 'bad actor" which is splashing on our shoes and I'd like to identify and work around whatever it is ... for NOW, send me an IM (it might take a few days for a response) with a title of "winsock corruption HERE" so I know I should deal with it now rather than later ... once I have a collection of THAT, BOClean 4.24 will be released and be QUITE the improvement ... and it will run on EVERYTHING as well.   

[Rednose]

Hi Kevin

With all these improvements we sure can wait for another week

Greetz, Red.

[TonyKlein]

Thanks so much,  Kevin!

[~cat~]

I love it when he talks "dirty". 

[Bjarne Andersen]

Hi Kevin

I have notes that you seek information from ANYBODY whose "connectivity was lost.”

After haven collect the day's update, I lost the connection to the internet – at restart.

Using break off "Automatic cleanup of Winsock connectivity" all vent back to normal.

I have installed:

Win XP Pro
BULLGUARD Virus and Firewall
SUPERANTISPYWARE
SPYWAREBLASTER
IE – Spyad
and
BOCLEAN

[~cat~]

Bjarne Andersen,
Thank you and welcome to the forum.
Did you send him an IM?

for NOW, send me an IM (it might take a few days for a response) with a title of "winsock corruption HERE" so I know I should deal with it now rather than later ... once I have a collection of THAT, BOClean 4.24 will be released and be QUITE the improvement ... and it will run on EVERYTHING as well.   

[strange quark]

G'donya Kevin, 4.24 sounds like a winner.

Glad all the Vista stuff has been phixed 

[gismo999]

I didn't read all of these posts.....but....my only wish and hope is.....


Boclean doesn't turn into bloatware!!!


am I asking too much?

[Rotty]

Kevin:  In all fairness hardware programming and dis-assembling programs is the only need to learn Assembly.  Hence i have not had the phucking patients or need to learn it (-: . Visual C++ WITHOUT MFC can't be that bad???

I suspect that you are starting to get into the "Real Programmer" term, this is subjective.

I gather you mean Borland c++ vs Microsoft C++??

[Kevin McAleavey]

Kevin:  In all fairness hardware programming and dis-assembling programs is the only need to learn Assembly.  Hence i have not had the phucking patients or need to learn it (-: . Visual C++ WITHOUT MFC can't be that bad???

I suspect that you are starting to get into the "Real Programmer" term, this is subjective.

I gather you mean Borland c++ vs Microsoft C++??

C++ under ANY flavour is for pussies who have friends, join union{}'s and believe in OnMouseHover. Nope - I'm your worst nightmare ... ASM and ANSI C (no plusses, decrements WORK in C! heh) I'm a throwback to the MITS Altair and the SWTPC 6800 which were only good for controlling light shows and little else. Heh. I did PL/1 (*not PL/10) SDOS, BDOS, XDOS, DRDOS and Lantastic and Novell for lunch. Today's "l33t coders" only give me gas for the poor excuses for code.

MFC however is a winner! That is *PRECISELY* why COMODO BOClean 4.23 was a stillbirth.   

Haiku Error Messages

Three things are certain:
Death, taxes, and lost data.
Guess which has occurred.
 - - - - - - - - - - - - -
A file that big?
It might be very useful.
But now it is gone.
 - - - - - - - - - - - - -
Windows XP crashed.
I am the Blue Screen of Death.
No one hears your screams.
 - - - - - - - - - - - - -
Errors have occurred.
We won't tell you where or why.
Lazy programmers.
 - - - - - - - - - - - - -
Seeing my great fault
Through darkening blue windows
I begin again
 - - - - - - - - - - - - -
The code was willing,
It considered your request,
But the chips were weak.
 - - - - - - - - - - - - -
Printer not ready.
Could be a fatal error.
Have a pen handy?
 - - - - - - - - - - - - -
Server's poor response
Not quick enough for browser.
Timed out, plum blossom.
 - - - - - - - - - - - - -
Chaos reigns within.
Reflect, repent, and reboot.
Order shall return.
 - - - - - - - - - - - - -
Login incorrect.
Only perfect spellers may
enter this system.
 - - - - - - - - - - - - -
wind catches lily
scatt'ring petals to the wind:
segmentation fault
 - - - - - - - - - - - - -
First snow, then silence.
This thousand dollar screen dies
so beautifully.
- - - - - - - - - - - - - -
With searching comes loss
and the presence of absence:
"My Novel" not found.
 - - - - - - - - - - - - -
The Tao that is seen
Is not the true Tao, until
You bring fresh toner.
 - - - - - - - - - - - - -
The Web site you seek
cannot be located but
endless more exist
 - - - - - - - - - - - - -
Stay the patient course
Of little worth is your ire
The network is down
 - - - - - - - - - - - - -
A crash reduces
your expensive computer
to a simple stone.
 - - - - - - - - - - - - -
There is a chasm
of carbon and silicon
the software can't bridge
 - - - - - - - - - - - - -
Yesterday it worked
Today it is not working
Windows is like that
 - - - - - - - - - - - - -
To have no errors
Would be life without meaning
No struggle, no joy
 - - - - - - - - - - - - -
You step in the stream,
but the water has moved on.
This page is not here.
 - - - - - - - - - - - - -
No keyboard present
Hit F1 to continue
Zen engineering?
 - - - - - - - - - - - - -
Out of memory.
We wish to hold the whole sky,
But we never will.
 - - - - - - - - - - - - -
Having been erased,
The document you're seeking
Must now be retyped.
 - - - - - - - - - - - - -
The ten thousand things
How long do any persist?
Netscape, too, has gone.
 - - - - - - - - - - - - -
Rather than a beep
Or a rude error message,
These words: "File not found.

*OLD* stuff ... yet crashes under Vista ... Teh Steve wins! 

[panic]

LOL! Loved the haiku error messages - have you been sniffing nosewool?

Real men code in ADS on a CTOS B-25! Ah for the good old days!

Ewen :-)

[Tags:]