[ August 15th, 2007 @ 6:00 pm ] ... [ C. S. Magor ] ... [ 5,617 views]

Nod 32 + Comodo Firewall and BOClean = A Great Security SuiteStumble This

For the latest info on the coolest gadgets, emerging technology and wired madness, subscribe to our full news feed or have it delivered to your inbox. Always free. Always unique. Thanks for visiting!

Malware

You can never be too careful about security and it has been a long time since a simple anti-virus program was enough. These days, a firewall is absolutely essential. This writer has personally had experience with Black Ice, Tiny Personal Firewall, Norton Firewall, Zone Alarm and now Comodo. I used Zone Alarm both when it was free and when it became a premium product. As for anti-virus programs, I have used most of the free ones, the new anti-virus from Zone Alarm that comes with the Zone Alarm Security Suite, Norton and Nod 32. I have always kept my firewall settings fairly high, I have checked most stuff that I have downloaded and I have run virus scans more frequently than most. Despite that, my PC has been infected, with at least one Trojan and a couple of viruses in the last six months.

About two weeks ago, I ran into serious PC problems. I deleted a suspicious program off my computer and then found that along with it, some system files went too. I restored what I could There were a few tense moments. My system rebooted to a black screen. I booted into safe mode, restored the registry, rebooted and things were working again, but my system was sluggish and something else felt wrong. Virus scans did not pick up anything, but I noticed that the problems occurred when I was multi-tasking, particularly with MS Word and Firefox. Firefox was down to a memory issues and while MS Word has had vulnerabilities in the past, I had always been extremely careful. Still, my PC security had already been breached. It was possible that there was another infection.

I changed my anti-virus program to Nod 32, and to do that I had to uninstall my security suite (Zone Alarm). Once I took off the security suite, my system started working quite a bit better. A scan revealed no infections. There was, however, no way that I was going to be spending any significant amount of time online without a firewall and I did not want to pay for a new one. I had heard about the Comodo Firewall and decided to give it a try. I got it set up and configured within days and things were more or less back to normal, but from time to time it got very sluggish. I noticed in the Comodo Firewall menu, there was an ad for an anti-malware solution. I am always looking for a good story, so I decided to give it a try. The program was called BOClean; I downloaded it, installed it and let it run in the background. I surfed around a little bit looking for a story, found something interesting, loaded MS Word and…

08/13/2007 16:34:55: MSSVR VARIANT STOPPED BY BOCLEAN!
Trojan horse was found in memory.
C:\PROGRAM FILES\MICROSOFT OFFICE\OFFICE11\WINWORD.EXE contained the trojan.
Active trojan horse WAS shut down. System safe.
Logged in user: xxx

I found my problem. BOClean’s solution was to delete the infected Winword executable. That was OK, I reinstalled my MS Office set and everything went back to normal function. I do not know how my system came to be penetrated; chances are it occurred during the time that I was using the Zone Alarm Suite. In all fairness, however, I did not have the On Demand Scanning option activated. It put too much of a strain on my system. BOClean functions the same way without causing the same amount of sluggishness, it uses about 14MB of RAM. The Comodo Firewall too has a very reasonable footprint running at just 2.2MB; Nod32 consumes about 4MB while it is running in the background, so my new suite requires just 20MB of RAM. Comodo have some great security software, the firewall is as good as any commercial software I have tried. It also has a great interface which makes it very easy to use. BOClean is something different entirely. It works in conjunction with an anti-virus, not instead of. It detects infected programs as they load, rather like an on-demand scanner. Except that the Trojan that I had been infected with had somehow manage to escape discovery by both of my scanners. BOClean picked it up and now has become an integral part of my security solution. As for my anti-virus, I will be sticking with Nod 32. The three programs function well together and as a makeshift security suite are second to none, that I have tried.

Comodo Firewall Price: FREE
Comodo Boclean Price: FREE
Eset Nod 32 Price: 1 Year for $39.00

Image Source: Biosmagazine

Tags: malware, Security

Related posts

3 responses

  • Thomas
    Aug 29, 2007 at 1:01 pm

    Well I agree that Comodo and Nod32 are top performers. Nod32 is one of the best overall and best with heuristics used, so as I understood, it can recognize viruses not in the database, but for some lines of code they may have Nod32 may recognize them as a possible virus. Comodo is the best firewall of all. Looking at some tests it’s clearly No1, better than paid firewalls! It’s only Boclean though, I’m not really convinced about this one?

  • C. S. Magor
    Aug 29, 2007 at 7:53 pm

    I was not convinced about BOClean either until I tried it. My PC had been shared with numerous users over its four years of service. The last install lasted approximately two years of constant use, it outlasted the power supply and one HDD failure.

    I had been using Symantec for much of the time, I had a subscription through my work, so it was free. I was infected through a browser hijack. It was frustrating because the infection occurred through a miss click.

    Anyway, to cut a long story short, I then had to contend with some serious problems. I got the browser patched up, but other programs were affected. I tried a range of security options but all to no avail, including NOD32. It was Comodo BOClean that caught it.

    The RAM requirement of BOClean is ridiculously low, but you will probably notice a slight slowing of your system as you load different programs. It kept my system running.

    Unfortunately, I had significant damage to some of my system files. The slow boot times were really frustrating and then my Windows XP started to black screen boot. I could mess with the settings and make it work, but eventually the same things always happened. I finally got around to performing a full reinstall and have not set BOClean up yet, but I will do in the future. It is not something that you really need starting from scratch. It is something that is more useful if you have had some problems.

    Many people get paranoid about PC security and run multiple Spyware programs, etc… I do not like to do that. I run one anti-virus, a hardware firewall, Comodo firewall, Spy Doctor and throw in BOClean for good measure. It is free and it works. Turn it on every few days rather than leave it on and turn it on if you have installed a lot of new freeware.

  • Bill Webb
    Oct 10, 2007 at 8:49 am

    I agree with the reviewer*, but not with C.S. Magor — at least, not the part about running BOClean only part time.

    One of the biggest advantages of software like BOClean is that it catches malware as it activates and zaps it before it becomes operable. Running it part-time is like closing the barn door after the horses have escaped. The whole point is to prevent the infection in the first place.

    *My comments: http://www.lockergnome.com/nexus/windows/2007/09/10/my-choices-for-computer-security

Leave a Comment