Denfence+ and BOClean (revisited / new angle)

I know there has been written about BOClean appearing in Defense+ logs, and “marked” as x num blocked by Defense+… But not entirely from this angle…

My question is this:
If Defense+ can block BOClean can a well written malware do the same?
Or is Defense+ overstating it when it says it has blocked BOClean?
Or, third option, am I missunderstanding the way BOClean detects malware?

Closest old post (but only vaguely said Defense+ didn’t allow BOClean to scan memory):
https://forums.comodo.com/empty-t16405.0.html

PS: I don’t mind the alerts (can remove them as stated in the following posts (or the prev. one))

Old posts (hope I didn’t miss the one that explained my question):
https://forums.comodo.com/empty-t17617.0.html
https://forums.comodo.com/empty-t22788.0.html
https://forums.comodo.com/empty-t18877.0.html
https://forums.comodo.com/empty-t22238.0.html

(Sorry if it is a boring subject or I/it don’t make sense at all)

Hi Ah,

Probably the best person to answer this question is Kevin who designed BoClean.

The CPF Defense+ Logs are showing simply where BoClean has tried to access the memory of CPF. CPF’s Self Defense Module simply blocks these attempts. In fact, I discovered the other day that my ISP, AOL, when I rarely use it, tries to access the memory of CPF to Assertain it’s status.

I think malware would have to be fully installed or loaded for a malware program to have it’s self defense module activated. That’s where BoClean comes in.

As Soon as 1 of the malware program files attempts to load into memory, BoClean stops it and removes the malware before it can do any damage to your system.

Eric