Crystal Security - Discussion

Using 3rd party software that you actually dont know would work is not the best solution. Why not simply inform the user about which antiviruses that detected the file/malware and provide a link to their homepage (maybe referral link) so you are sure that you get the right tools for the job? (if so it would be nice to be able to turn this function off)

 

Agree, offering a competitive upgrade of one of the AV's which detected it is better

 

Well Kardo. Any news regarding the release date and are the live scan been upgraded? The last built misses quite a few files on its live scan.

 

Hi,

@ Kees:

Thank you for your extensive marketing ideas, suggestions and help!

Great idea! Thank you Pedersen!

I am sorry about slow update. I am currently very busy at work but
I´ll do my best to bring up next beta version as soon as possible.

Real-time protection and other components will be improved with next Beta version.

There is no exact release date yet.

Regards,
Kardo

 

Tested the latest version. It reminded me of Comodo DACS.
Real XP SP3 32 Bits i.e no VM.
18 0-day Malware - All detected on VirusTotal.

Crystal Security, after install gave some .net error & closed. After 6-7 tries it ran fine. I opened VLC, PDFXhange, etc.. & it worked correctly i.e gave popup with details 0 detection on VT & CAMAS. But the popups were little late i.e 8-10 secs.

I downloaded & saved malware for test. During this Crystal detected 3/18 malware.

Remaining I tried to execute. I executed 4 malware & no detection for 2-3 mins. Then I executed a ransomware & it installed & full ransomware screen appeared. I restored the system to clean state.

Few things I would like to know.
How does the upload works? I mean does it works like VT uploader?
VT uploader only uploads files whose Hash is not found. I dont know, guess it checks hash with VT database.

Similarly, are all files uploaded to CAMAS or something like VT uploader?

Few things I would like to point out.
When safe file is detected, the popup is correct i.e selection is on Allow. But when malware file is detected then too on the popup the selection is on Allow, it should be on Quarantine.

On the popup for a malware file, I selected Quarantined & unchecked Remember, the file remained in the folder in unusable state. So, checking Remember is required to send the file to Quarantine? I didn't got the chance to try this as on testing ransomware infected the system.

I dont know why Crystal didn't detected malware?

 

Hi,

@ narenbisht:

Thank you for your feedback!

1. Check hash via VT (if result unknown then continue with step 2).
2. Upload unknown file to VirusTotal. (only executable files will be uploaded).

History of uploads will be added into next beta version.

Currently no, sorry. Only hash check via COMODO CAMAS service.

No. This kind of behavior will be fixed with next beta version.

Regards,
Kardo

 

Hi,

Here is Softpedia Editor's Review for Crystal Security:

http://www.softpedia.com/get/Antivirus/Crystal-Security.shtml

Editors's Rating: 4.0/5

Regards,
Kardo

 

Hello,

Here is a preview of new Alert (notification):



Regards,
Kardo

 

fantastic where is the download link?

 

I'm quite liking the new interface. However some emphasis on that classification (safe in this example) would be nice. Like SAFE

 

+1

 

Hi,

@ jmonge:

Next beta version is not yet available...almost ready but needs more testing.

@ phalanaxus:

Thank you for your suggestion (Safe will be changed to SAFE).

Regards,
Kardo

 

thank you

 

Hello,

Crystal Security 3.2.0.69 BETA Released

Changelog:

New

¤ Design (GUI)
¤ Protection Levels
¤ Protection Criteria

Improved

¤ Auto decision
¤ Protection
¤ Checkup
¤ Updater
¤ Notification

Fixed

¤ Several bugs

Download: http://www.crystalsecurity.eu/downloads/Crystal Security 3.2.0.69.zip

Other

English translation file is updated.

Download: http://crystalsecurity.eu/translation/Crystal Security [EN].zip

Screenshot of Main window (new design)



Screenshot of Checkup



Screenshot of General Settings



Screenshot of Auto Decision Settings



Screenshot of improved Notification



How-to-run

1. Download Crystal Security zipped file from download link.
2. Extract downloaded .zip file with some extraction tool (e.g. 7-zip or WinRAR)
3. Double-click (run) extracted executable file of Crystal Security (Crystal Security.exe)

Note

.NET Framework 4 is required.

Regards,
Kardo

 

Not able to see main window while running checkup. It just minimize and use a lot of resources and cant bring it up again. The older version had same error.

WmiPrvSE.exe keep using 15% of the CPU while Crystal is running. Exiting Crystal set it back to 0%

Edit: Well there it crashed while running checkup...

 

It's a great improvement compared with the last version.
I see some of the options are disable in this version, right?

Bug: when I click on checkup it goes to the tray icon and then disappear.

 

Hi,

Thank you for your feedback!

I´ll investigate it.
Checkup will be improved with next version.

Regards,
Kardo

 

Hi,

Thank you

Currently yes. Will be enabled with newer versions.

I´ll investigate it.

Regards,
Kardo

 

Livescan dont detect download or copy/move of file that is detected by over 30 AVs on virustotal. When right click analyze (shell), the file dont get analyzed, nothing other than a popup "wanna run this file?" appears

 

Thank you for your feedback!

You found very critical bug.

Re-produced successfully and problem source found. Will be fixed.

Quick update (new version) will be released soon.

Regards,
Kardo

 

Hi Kardo Kristal

When I perform the checkup he sends yes the files to VirusTotal should be recognized by an AV Herstelern virustotal but a file. Is this feature already in it

 

Hi,

Thank you for your interest.

Unknown file will be uploaded into VirusTotal.

Re-check (e.g. re-analyze unknown file after 10-15 minutes) for unknown files will be added into newer version.

Regards,
Kardo

 

No quite sure what API key you use for virustotal but dont it have maximum amount of upload per hour? If so, why not make an option for the user to insert his/her own ?

 

Hi,

Thank you for your interest!

VirusTotal API:

Please note that the request rate limits of the public API actually apply to the tuple (IP address, key), hence, software developers can make use of the key in their releases without any problem because each of their users will be subjected to an independent request rate counter.

and:

Remember also that it is restricted to 4 requests of any nature per minute.

There is also possibility to request higher limits from VirusTotal.

Regards,
Kardo

 

Hi

Thank you for your Informations