Review of Comodo BOClean 4.23 from Gizmo Ian Richards

When I read that Comodo had acquired the commercial security product BoClean and were making it available for free [1] I was excited. BOClean is a malware memory monitor with a good reputation and a strong following. The possibility of combining this with a good freeware scanner like AVG Anti-spyware sounded like an attractive possibility. The name BOClean derives from the fact that BOClean originated as a specialist cleaner for the original Back Orifice trojan. Over time its capabilities were extended to other trojans and then to malware more generally. This history is not irrelevant. BOClean is by design an anti-trojan monitor with some other capabilities added on. Despite my high expectations BOClean performed poorly on testing. Naturally I couldn’t run any of my normal scanning tests as BOClean is only a memory monitor and has no file scanner but on the other tests it performed terribly; arguably the worst performance of any product I have tested. You can read my lab notes here [1] but it suffices to say that BOClean missed too much and protected too little. Perhaps the worst aspect of its performance is its total lack of self protection. It can even be terminated by Windows Task Manger. If that’s not bad enough BOClean is on the hit list of many of the security software termination programs that form an integral part of modern malware. Its lack of protection and slow response make it a sitting duck. More accurately, a dead duck. I hate to disillusion BOClean’s many ardent fans but BOClean, like SpyBot Search and Destroy was a once great product whose time has passed. I simply can’t recommend it for general use against modern malware. Hopefully the new owners of BOClean will develop and enhance the product; it really needs it. Freeware, all Windows versions, 1.34MB.
[1] http://www.comodo.com/boclean/boclean.html
[2] http://techsupportalert.com/Security%20Tests/Security%20Tests%20-%20%20Comodo%20BoClean%204.23.htm

http://techsupportalert.com/issues/al_current.htm

looks like it failed mostly everything they threw at it tech…
glad after i did a complete os and drivers install a while back-i didn’t put it back on :wink:
thanks for the links :smiley:

Doesn’t the current version (post Comodo) have self protection now?

EDIT: The Comodo web site claims self protection but I just killed mine quite easily in task manager :frowning:

Well that was a right kicking Gizmo gave BOClean. I know BOClean didn’t last long on my system, I didn’t like it and the interface gave me the impression of something from an earlier era which seems to be confirmed.

hate to disillusion BOClean's many ardent fans but BOClean, like SpyBot Search and Destroy was a once great product whose time has passed. I simply can't recommend it for general use against modern malware.

I guess we will have to see if Comodo will develop it further.

I hope the same… actually, BOClean is fully disabled in my computer.