Crystal Security - Discussion

@Tarnak

Hi,

Just sent my answers (e-mail) to your feedback, please take a look.

Regards,
Kardo

 

Hi,

Two users recently made a review of Crystal Security latest BETA version 3.5.0.98.

First review is available here: https://www.youtube.com/watch?v=4h5k5rSbDRw

In this test Crystal Security performed quite well and got rating 4 out of 5.
Program tested against active malware (downloaded via browsers) and against passive malware (malware pack).

Statistics by the author of review:

URL : 100%
Old Malware : 98% (1.exe in memory)
0-day : 98% (Svchost.exe in memory)
Zemana 2 detects infection, Crystal Security has improved!
Unfortunately, HIPS Crystal Security is too limited (I suspect that malware could create startup keys).
Crystal Security should also automatically send undetected malware to its cloud server.

Stars : 4/5 => Very good

Second review is available here: https://www.youtube.com/watch?v=ObEop1B-Ufo

Also performed well but missed more malware..

My conclusion: Program is getting better with each new version but still needs improvement (bug fixes, better detection, removal and performance).



Regards,
Kardo

 

You have done great job so far.
Of course...no software is perfect so just keep maintaining it...

 

Hi Kardo Kristal

I mean that see my picture

With best Regards
Mops21

 

@siketa Thank you for the kind words.

@Mops21 Currently there is no point to add Crystal Security to VT or any other service.
If you mean what engine I use in program then simple answer is that cloud detection is powered by VT and internal database is currently powered by ThreatCenter and Malc0de.
Also some simple age-based heuristics to analyze recently appeared files.

Regards,
Kardo

 

Hi Kardo Kristal

Thank you very much for your answers

With Best Regards
Mops21

 

I may be a little while in replying, and you will probably have a new beta released in the meantime.

 

Hello,

Crystal Security 3.5.0.99 BETA released

Changelog

• Improved shell integration
• Improved self-protection
• Added double-protection for internal code
• Fixed several reported bugs
  
• Updated internal database

NB! Please note that thanks to new Double-protection for internal code,
other vendors may flag it as suspicious or malware, please ignore it.

Two different types of downloads

Download installer version of Crystal Security 3.5.0.99
Download portable version of Crystal Security 3.5.0.99

Looking forward to your feedback.

Regards,
Kardo

 

It is early days, but things have improved with the latest beta. Still have an issue where my system freezes, i.e. the system clock stops. After several minutes, it had resumed.

Spoiler: screenshots

 

@Tarnak
Thank you for the quick feedback about latest BETA version.

Can you please try Crystal Security without Self-protection? Go to Settings => Disable Self-protection => click Apply => Exit program (via tray menu) => Start again.
Curious to know what happens then. Thanks in advance.

Regards,
Kardo

 

Ok... I have done as requested.

Earlier, today I got this error in the log.

Spoiler: Error_log1414995305.txt

Code:

The handle is invalid at System.Diagnostics.NtProcessManager.GetModuleInfos(Int32 processId, Boolean firstModuleOnly)
at System.Diagnostics.ProcessManager.GetModuleInfos(Int32 processId)
at System.Diagnostics.Process.get_Modules()
at . (Object , EventArgs )
at System.Windows.Forms.Timer.OnTick(EventArgs e)
at System.Windows.Forms.Timer.TimerNativeWindow.WndProc(Message& m)
at System.Windows.Forms.NativeWindow.Callback(IntPtr hWnd, Int32 msg, IntPtr wparam, IntPtr lparam)

 

@Tarnak
Thank you for the information.

Okay.I have one idea.. then we can figure it out.
I'll make some changes in program and I'll send a private portable version link for testing via email.

Regards,
Kardo

 

@Tarnak
Hi, Please let me know if you received my message via email. You can find from message download link for portable/private version.

Regards,
Kardo

 

Hi Kardo,

I just sent you a reply. It may be a few hours or so, before I am able to try it. I will let you know, how it goes.

 

@Tarnak

Thank you for the quick feedback and information. I sent a reply to your email.

Regards,
Kardo

 

Noted... Thanks.

 

Hi Kardo Kristal

Here is another Review

Crystal Security 3.5 Review

https://www.youtube.com/watch?v=CHyto8Pqw9Q&list=UU9_5R6BB93gkUqHQcUvbR1A

With best Reards
Mops21

 

Hi,

Thank you for the information about new review video of Crystal Security.

Regards,
Kardo

 

Hello,

Crystal Security 3.5.0.102 BETA released

Changelog

• Improved internal code protection
• Improved notification performance
• Fixed bug in notification
• Fixed crashes caused by self-protection
  
• Fixed several other minor bugs
  
• Updated internal database

NB! Protection for internal code is significantly strengthened,
other vendors may flag it as suspicious or malware, please ignore it.

Two different types of downloads

Download installer version of Crystal Security 3.5.0.102
Download portable version of Crystal Security 3.5.0.102

Looking forward to your feedback.

Regards,
Kardo

 

What does unrecognized tab actually do? Never seen anything in it. Also a progress percentage and detailed info would be nice for uploads.

 

Hi @phalanaxus,

When unknown file is detected, then file will be uploaded to the VT server and file will be added to Unrecognized list - All "Unrecognized" files will be re-checked after some interval to get the latest results.

Detailed info for "Uploads" will be added in the near future. Thanks.

Regards,
Kardo

 

Just tried with a batch file i created, it works. Btw suspicious alert shouldn't advise to allow imo.

 

Thanks for the information.

Hmm.. then should advise Block? or both options should be greyed out (without any advise)?

Regards,
Kardo

 

I think it should default to block and say something like "This file is suspicious/unknown. Block/don't run it unless you are sure the file is safe."

 

Thanks for the suggestion. It seems good. PS. Thanks for following me.

Regards,
Kardo