Crystal Security - Discussion

Discussion in 'other anti-malware software' started by kardokristal, Jan 29, 2012.

  1. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Yes, exactly ;)

    Will follow your recommendation.

    All unknown files will be uploaded to VirusTotal (if 'Upload unknown' setting enabled).

    Crystal Security uses 2 main public services-engines for real-time protection:

    Engine A is by VirusTotal (results/upload) and engine B by Comodo File Intelligence (only results/no upload).

    Regards,
    Kardo
     
    Last edited: Jul 10, 2013
  2. @kardokristal

    And what up with the translation? Did you downloaded it?
     
  3. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Yes, just downloaded. Thanks :thumb:

    Regards,
    Kardo
     
  4. guest

    guest Guest

    So what the cloud connected icon means?
    There is only a local engine on real time (home made) which determines what is suspicious and what not?

    When I do a checkup I get a popup like this every few seconds https://www.symantec.com/business/support/library/BUSINESS/ATLAS/images_v1/293452/rpc2.jpg can this be avoided?
     
    Last edited by a moderator: Jul 10, 2013
  5. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Without internet connection there is not possible to analyze file currently but in future if possible i will add internal database or build some functions to analyze files without connection etc...

    Connected icons means that Crystal Security is connected to services successfully.

    Additionally is implemented heuristic analysis (age based, location based and other information).

    Regards,
    Kardo
     
  6. guest

    guest Guest

    When I do a checkup I get a popup like this every few seconds https://www.symantec.com/business/su...93452/rpc2.jpg can this be avoided?

    A couple of suggestions
    Check the box remember this action by default.
    How the auto-decision works? would be nice to be able to configure it manually, for example auto-allow above 80%,85% or 95%.... it's annoying to get a popup for every single executable running in my system, what is the purpose of the local engine if I get popups for all the running processes?.
    Also the popups should remain on top of everything. It could be because I set the protection in High?
     
    Last edited by a moderator: Jul 10, 2013
  7. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Thank you for your feedback and suggestions! :thumb:

    Crystal Security by default warns about every file (safe, suspicious, unsafe and unknown). You may uncheck 'Safe objects' setting under Settings.

    Settings -> Notifications (group) - uncheck 'safe objects'.

    Will be changed in next version. Thanks.

    If auto decision enabled then files will be added into groups automatically (based on result) without user interaction.

    Configuration will be added into newer version.

    Okay.

    If protection level is High then all areas will be under control, if low then only critical areas will be analyzed by real-time monitor.

    Regards,
    Kardo
     
  8. Mops21

    Mops21 Registered Member

    Joined:
    Oct 5, 2010
    Posts:
    2,758
    Location:
    Germany
    Hi Kristal Kardo

    Crystal X is still being developed
     
  9. guest

    guest Guest

    Shouldn't be unsafe objects disable by default? what is the purpose of having a popup to allow a file that is "safe" and send it to the whitelist. Also the whitelist ends up full of safe processes so at the end you don't even know what is on the whitelist.

    I have unchecked the option for Safe Objects, "auto decision" is also unchecked and I have delete all the exe's in the whitelist, now Crystal Security is automatically adding apps to the whitelist, and I don't get any popup when an app is uploaded and the result is unknown. Seems to me that the implementation is not consistent or there is a bug

    And although this is not that important right now the interface is a little bit confusing, would be better to have tabs for the different sections.

    A feature: auto delete on boot the items in the white-list that no longer exist.
     
    Last edited by a moderator: Jul 10, 2013
  10. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    See my previous answer:

    Answer: No. I will focus on the development of Crystal Security program.

    Regards,
    Kardo
     
  11. Mops21

    Mops21 Registered Member

    Joined:
    Oct 5, 2010
    Posts:
    2,758
    Location:
    Germany
    Hi Kardo Kristal

    Thank you very much for your answer
     
  12. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Thank you for you feedback & suggestions! :thumb:

    Unsafe will be disabled by default in next version (unchangeable setting).

    I´ll look into it. Seems like bug (if "auto decision" disabled and still program adds files into whitelist).

    If engine A result is Unknown then you should get popup.

    Hmm, okay.

    Good suggestion! Will be added. ;)

    Regards,
    Kardo
     
  13. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Got it. Thanks.

    Regards,
    Kardo
     
  14. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hello,

    Crystal Security 3.0.0.64 Release Candidate Released

    Thank you to all BETA testers who helped me with suggestions, testing and translations!

    Changelog:

    New

    ¤ Whitelist check
    ¤ Polish language (translation by ReviewsAntivirus)
    ¤ Croatian language (translation by siketa)

    Improved

    ¤ Navigation (Whitelist/Blacklist)
    ¤ Updater
    ¤ Remember this action (checked by default)
    ¤ Notification (top of other window)

    Fixed

    ¤ Unknown notification
    ¤ Several other minor bugs

    Download: -http://crystalsecurity.uk.to/downloads/Crystal%20Security%203.0.0.64.zip

    How-to-run

    1. Download Crystal Security zipped file from download link.
    2. Extract downloaded .zip file with some extraction tool (e.g. 7-zip or WinRAR)
    3. Double-click (run) extracted executable file of Crystal Security (Crystal Security.exe)

    Note

    .NET Framework 4 is required.

    Regards,
    Kardo
     
  15. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hello,

    Website is updated and also is added Review of Crystal Security 3.0.0.64 RC.

    Video: -http://www.youtube.com/watch?v=R8TvWnThJiQ

    Regards,
    Kardo
     
  16. KelvinW4

    KelvinW4 Registered Member

    Joined:
    Oct 11, 2011
    Posts:
    1,199
    Location:
    Los Angeles, California
    Great work, thanks!
     
  17. guest

    guest Guest

    @Kardocrystal

    What is the meaning of the classification? [A] o_O?
    Why some files remain unknown? shouldn't the program automatically upload them to VT?
    By the way would be nice to have an additional section for the files uploaded with a progress bar in order to have a clear view of what is being uploaded and what not. Also I think the classification column should be self explanatory.

    I see that the safe files are added to the whitelist, but maybe there could be some differentiation (like a new column to tag them) between files added to the whitelist manually and the ones added automatically
     
  18. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Thank you for your suggestions!



    ['A'] = 'VirusTotal' result for file
    ['B'] = 'Comodo File Intelligence' result for file

    Comodo File Intelligence remains unknown in 3.0.0.64 because of database connection problems. Comodo File Intelligence service seems to work fine again and results from B will be re-enabled with next version.

    Currently unknown files (detected by [A] = VirusTotal) will be uploaded automatically to VirusTotal service (4 files per minute/per user) and results will be re-checked later to get new result.

    Okay, will be added in near future. Good suggestion :thumb:

    You mean new column into Whitelist/Blacklist?

    Regards,
    Kardo
     
  19. guest

    guest Guest

    Yes, a new column where [A] means automatically added and [M] Manually added. And maybe a check box to hide the ones automatically added. A concern that I have is the huge list that will be created in the whitelist since all the safe objects will end up there which means that potentially most of the files of the computer will appear there. This is why I think the whitelist for the automatically added files should be hidden and manage internally (local database file) and only see in the whitelist the files added manually via popup.

    I understood that you will add a real time view of the running process with their result on VT and Comodo, it's right?

    Instead of use A and B for classification maybe it could be better use [VT] and [CFI] and for VT instead of showing the range in % where the file is, it would be better to show the real % that the file has. 100%, 98,4%....

    Also the whitelist should store and show in a column the results from VT and CFI and the date of them. The last day the file was scanned in VT and CFI.

    I have seen that the PDF's are uploaded by default, this is a total attack to the user's privacy, pdf or any document format (doc, xls...) should be disable in the low level and high level modes. And the custom mode does not allow to edit anything.
     
    Last edited by a moderator: Jul 17, 2013
  20. some mistakes in translation or not translated (Polish):

    Blacklist - Czarna lista
    Whitelist - Biała lista
    Custom - Niestandardowy
    Main - Menu główne

    and the text in the main means now:
    Crystal Security uses classification system in cloud to detect, kill and remove programs from the computer.

    need to add "szkodliwe" (dangerous) before programy:

    -http://i.imgur.com/elzQnnu.png

    edit:
    It's not the Serbian flag:

    -http://i.imgur.com/n6mPNHF.png

    Correct flag:
    -http://i.imgur.com/I4zoyrk.png
     
    Last edited by a moderator: Jul 19, 2013
  21. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Thank you for your feedback & suggestions! :thumb:

    Okay, good suggestions.

    Yes, will be implemented.

    Will be changed. ;)

    This behavior will be changed. Only executables will be uploaded (configurable).

    PS. Website will be upgraded to top level domain (domain registered already and will be available soon).

    Regards,
    Kardo
     
    Last edited: Jul 19, 2013
  22. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Thank you for your feedback.

    Will be fixed.

    It is French flag

    If you change language in program then click 'Apply' and after that flag should change to selected language (if not then it is bug).

    Edit: Bug with Serbian flag change is confirmed and will be fixed.

    Regards,
    Kardo
     
    Last edited: Jul 19, 2013
  23. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    Fixes for Croatian translation:

    Main window:
    Blacklist - Crna lista
    Whitelist - Bijela lista
    Custom - Prilagodi
    Main - Početak
    "Ukloni" should be "Informacija" (*info in Tooltip)

    "Crystal Security will start in a Checkup mode" is not translated...should be "Crystal Security će se pokrenuti u modu Provjera"
    Stop-Zaustavi (*available actions during Checkup)
    Pause-Pauziraj (*available actions during Checkup)

    Protect-Štiti (*tray icon)
     
  24. kardokristal

    kardokristal Developer

    Joined:
    Jan 6, 2012
    Posts:
    1,091
    Location:
    Estonia
    Hi,

    Thank you for your report.

    Will be fixed ;)

    Regards,
    Kardo
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.